level=info msg="Memory available for map entries (0.003% of 67421634560B): 168554086B" subsys=config level=info msg="option bpf-ct-global-tcp-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-ct-global-any-max set by dynamic sizing to 295708" subsys=config level=info msg="option bpf-nat-global-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-neigh-global-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-sock-rev-map-max set by dynamic sizing to 295708" subsys=config level=info msg=" --agent-health-port='9879'" subsys=daemon level=info msg=" --agent-labels=''" subsys=daemon level=info msg=" --agent-liveness-update-interval='1s'" subsys=daemon level=info msg=" --agent-not-ready-taint-key='node.cilium.io/agent-not-ready'" subsys=daemon level=info msg=" --allocator-list-timeout='3m0s'" subsys=daemon level=info msg=" --allow-icmp-frag-needed='true'" subsys=daemon level=info msg=" --allow-localhost='auto'" subsys=daemon level=info msg=" --annotate-k8s-node='false'" subsys=daemon level=info msg=" --api-rate-limit=''" subsys=daemon level=info msg=" --arping-refresh-period='30s'" subsys=daemon level=info msg=" --auto-create-cilium-node-resource='true'" subsys=daemon level=info msg=" --auto-direct-node-routes='false'" subsys=daemon level=info msg=" --bgp-announce-lb-ip='false'" subsys=daemon level=info msg=" --bgp-announce-pod-cidr='false'" subsys=daemon level=info msg=" --bgp-config-path='/var/lib/cilium/bgp/config.yaml'" subsys=daemon level=info msg=" --bpf-auth-map-max='524288'" subsys=daemon level=info msg=" --bpf-ct-global-any-max='262144'" subsys=daemon level=info msg=" --bpf-ct-global-tcp-max='524288'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-any='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp='6h0m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp-fin='10s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp-syn='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-any='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-tcp='6h0m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-tcp-grace='1m0s'" subsys=daemon level=info msg=" --bpf-filter-priority='1'" subsys=daemon level=info msg=" --bpf-fragments-map-max='8192'" subsys=daemon level=info msg=" --bpf-lb-acceleration='disabled'" subsys=daemon level=info msg=" --bpf-lb-affinity-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-algorithm='random'" subsys=daemon level=info msg=" --bpf-lb-dev-ip-addr-inherit=''" subsys=daemon level=info msg=" --bpf-lb-dsr-dispatch='opt'" subsys=daemon level=info msg=" --bpf-lb-dsr-l4-xlate='frontend'" subsys=daemon level=info msg=" --bpf-lb-external-clusterip='false'" subsys=daemon level=info msg=" --bpf-lb-maglev-hash-seed='JLfvgnHc2kaSUFaI'" subsys=daemon level=info msg=" --bpf-lb-maglev-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-maglev-table-size='16381'" subsys=daemon level=info msg=" --bpf-lb-map-max='65536'" subsys=daemon level=info msg=" --bpf-lb-mode='snat'" subsys=daemon level=info msg=" --bpf-lb-rev-nat-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-rss-ipv4-src-cidr=''" subsys=daemon level=info msg=" --bpf-lb-rss-ipv6-src-cidr=''" subsys=daemon level=info msg=" --bpf-lb-service-backend-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-service-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-sock='false'" subsys=daemon level=info msg=" --bpf-lb-sock-hostns-only='false'" subsys=daemon level=info msg=" --bpf-lb-source-range-map-max='0'" subsys=daemon level=info msg=" --bpf-map-dynamic-size-ratio='0.0025'" subsys=daemon level=info msg=" --bpf-map-event-buffers=''" subsys=daemon level=info msg=" --bpf-nat-global-max='524288'" subsys=daemon level=info msg=" --bpf-neigh-global-max='524288'" subsys=daemon level=info msg=" --bpf-policy-map-full-reconciliation-interval='15m0s'" subsys=daemon level=info msg=" --bpf-policy-map-max='16384'" subsys=daemon level=info msg=" --bpf-root='/sys/fs/bpf'" subsys=daemon level=info msg=" --bpf-sock-rev-map-max='262144'" subsys=daemon level=info msg=" --bypass-ip-availability-upon-restore='false'" subsys=daemon level=info msg=" --certificates-directory='/var/run/cilium/certs'" subsys=daemon level=info msg=" --cflags=''" subsys=daemon level=info msg=" --cgroup-root='/run/cilium/cgroupv2'" subsys=daemon level=info msg=" --cilium-endpoint-gc-interval='5m0s'" subsys=daemon level=info msg=" --cluster-health-port='4240'" subsys=daemon level=info msg=" --cluster-id='0'" subsys=daemon level=info msg=" --cluster-name='default'" subsys=daemon level=info msg=" --cluster-pool-ipv4-cidr='10.0.0.0/8'" subsys=daemon level=info msg=" --cluster-pool-ipv4-mask-size='24'" subsys=daemon level=info msg=" --clustermesh-config='/var/lib/cilium/clustermesh/'" subsys=daemon level=info msg=" --clustermesh-ip-identities-sync-timeout='1m0s'" subsys=daemon level=info msg=" --cmdref=''" subsys=daemon level=info msg=" --cni-chaining-mode='none'" subsys=daemon level=info msg=" --cni-chaining-target=''" subsys=daemon level=info msg=" --cni-exclusive='true'" subsys=daemon level=info msg=" --cni-external-routing='false'" subsys=daemon level=info msg=" --cni-log-file='/var/run/cilium/cilium-cni.log'" subsys=daemon level=info msg=" --cnp-node-status-gc-interval='0s'" subsys=daemon level=info msg=" --config=''" subsys=daemon level=info msg=" --config-dir='/tmp/cilium/config-map'" subsys=daemon level=info msg=" --config-sources='config-map:kube-system/cilium-config'" subsys=daemon level=info msg=" --conntrack-gc-interval='0s'" subsys=daemon level=info msg=" --conntrack-gc-max-interval='0s'" subsys=daemon level=info msg=" --crd-wait-timeout='5m0s'" subsys=daemon level=info msg=" --custom-cni-conf='false'" subsys=daemon level=info msg=" --datapath-mode='veth'" subsys=daemon level=info msg=" --debug='false'" subsys=daemon level=info msg=" --debug-verbose=''" subsys=daemon level=info msg=" --derive-masquerade-ip-addr-from-device=''" subsys=daemon level=info msg=" --devices=''" subsys=daemon level=info msg=" --direct-routing-device=''" subsys=daemon level=info msg=" --disable-cnp-status-updates='true'" subsys=daemon level=info msg=" --disable-endpoint-crd='false'" subsys=daemon level=info msg=" --disable-envoy-version-check='false'" subsys=daemon level=info msg=" --disable-iptables-feeder-rules=''" subsys=daemon level=info msg=" --dns-max-ips-per-restored-rule='1000'" subsys=daemon level=info msg=" --dns-policy-unload-on-shutdown='false'" subsys=daemon level=info msg=" --dnsproxy-concurrency-limit='0'" subsys=daemon level=info msg=" --dnsproxy-concurrency-processing-grace-period='0s'" subsys=daemon level=info msg=" --dnsproxy-enable-transparent-mode='true'" subsys=daemon level=info msg=" --dnsproxy-lock-count='128'" subsys=daemon level=info msg=" --dnsproxy-lock-timeout='500ms'" subsys=daemon level=info msg=" --egress-gateway-policy-map-max='16384'" subsys=daemon level=info msg=" --egress-gateway-reconciliation-trigger-interval='1s'" subsys=daemon level=info msg=" --egress-masquerade-interfaces=''" subsys=daemon level=info msg=" --egress-multi-home-ip-rule-compat='false'" subsys=daemon level=info msg=" --enable-auto-protect-node-port-range='true'" subsys=daemon level=info msg=" --enable-bandwidth-manager='false'" subsys=daemon level=info msg=" --enable-bbr='false'" subsys=daemon level=info msg=" --enable-bgp-control-plane='false'" subsys=daemon level=info msg=" --enable-bpf-clock-probe='false'" subsys=daemon level=info msg=" --enable-bpf-masquerade='false'" subsys=daemon level=info msg=" --enable-bpf-tproxy='false'" subsys=daemon level=info msg=" --enable-cilium-api-server-access='*'" subsys=daemon level=info msg=" --enable-cilium-endpoint-slice='false'" subsys=daemon level=info msg=" --enable-cilium-health-api-server-access='*'" subsys=daemon level=info msg=" --enable-custom-calls='false'" subsys=daemon level=info msg=" --enable-endpoint-health-checking='true'" subsys=daemon level=info msg=" --enable-endpoint-routes='false'" subsys=daemon level=info msg=" --enable-envoy-config='false'" subsys=daemon level=info msg=" --enable-external-ips='false'" subsys=daemon level=info msg=" --enable-health-check-nodeport='true'" subsys=daemon level=info msg=" --enable-health-checking='true'" subsys=daemon level=info msg=" --enable-high-scale-ipcache='false'" subsys=daemon level=info msg=" --enable-host-firewall='false'" subsys=daemon level=info msg=" --enable-host-legacy-routing='false'" subsys=daemon level=info msg=" --enable-host-port='false'" subsys=daemon level=info msg=" --enable-hubble='false'" subsys=daemon level=info msg=" --enable-hubble-recorder-api='true'" subsys=daemon level=info msg=" --enable-icmp-rules='true'" subsys=daemon level=info msg=" --enable-identity-mark='true'" subsys=daemon level=info msg=" --enable-ip-masq-agent='false'" subsys=daemon level=info msg=" --enable-ipsec='false'" subsys=daemon level=info msg=" --enable-ipsec-key-watcher='true'" subsys=daemon level=info msg=" --enable-ipv4='true'" subsys=daemon level=info msg=" --enable-ipv4-big-tcp='false'" subsys=daemon level=info msg=" --enable-ipv4-egress-gateway='false'" subsys=daemon level=info msg=" --enable-ipv4-fragment-tracking='true'" subsys=daemon level=info msg=" --enable-ipv4-masquerade='true'" subsys=daemon level=info msg=" --enable-ipv6='false'" subsys=daemon level=info msg=" --enable-ipv6-big-tcp='false'" subsys=daemon level=info msg=" --enable-ipv6-masquerade='true'" subsys=daemon level=info msg=" --enable-ipv6-ndp='false'" subsys=daemon level=info msg=" --enable-k8s='true'" subsys=daemon level=info msg=" --enable-k8s-api-discovery='false'" subsys=daemon level=info msg=" --enable-k8s-endpoint-slice='true'" subsys=daemon level=info msg=" --enable-k8s-event-handover='false'" subsys=daemon level=info msg=" --enable-k8s-networkpolicy='true'" subsys=daemon level=info msg=" --enable-k8s-terminating-endpoint='true'" subsys=daemon level=info msg=" --enable-l2-announcements='false'" subsys=daemon level=info msg=" --enable-l2-neigh-discovery='true'" subsys=daemon level=info msg=" --enable-l2-pod-announcements='false'" subsys=daemon level=info msg=" --enable-l7-proxy='true'" subsys=daemon level=info msg=" --enable-local-node-route='true'" subsys=daemon level=info msg=" --enable-local-redirect-policy='false'" subsys=daemon level=info msg=" --enable-mke='false'" subsys=daemon level=info msg=" --enable-monitor='true'" subsys=daemon level=info msg=" --enable-nat46x64-gateway='false'" subsys=daemon level=info msg=" --enable-node-port='false'" subsys=daemon level=info msg=" --enable-pmtu-discovery='false'" subsys=daemon level=info msg=" --enable-policy='default'" subsys=daemon level=info msg=" --enable-recorder='false'" subsys=daemon level=info msg=" --enable-remote-node-identity='true'" subsys=daemon level=info msg=" --enable-runtime-device-detection='false'" subsys=daemon level=info msg=" --enable-sctp='false'" subsys=daemon level=info msg=" --enable-service-topology='false'" subsys=daemon level=info msg=" --enable-session-affinity='false'" subsys=daemon level=info msg=" --enable-srv6='false'" subsys=daemon level=info msg=" --enable-stale-cilium-endpoint-cleanup='true'" subsys=daemon level=info msg=" --enable-svc-source-range-check='true'" subsys=daemon level=info msg=" --enable-tracing='false'" subsys=daemon level=info msg=" --enable-unreachable-routes='false'" subsys=daemon level=info msg=" --enable-vtep='false'" subsys=daemon level=info msg=" --enable-well-known-identities='false'" subsys=daemon level=info msg=" --enable-wireguard='false'" subsys=daemon level=info msg=" --enable-wireguard-userspace-fallback='false'" subsys=daemon level=info msg=" --enable-xdp-prefilter='false'" subsys=daemon level=info msg=" --enable-xt-socket-fallback='true'" subsys=daemon level=info msg=" --encrypt-interface=''" subsys=daemon level=info msg=" --encrypt-node='false'" subsys=daemon level=info msg=" --endpoint-gc-interval='5m0s'" subsys=daemon level=info msg=" --endpoint-queue-size='25'" subsys=daemon level=info msg=" --endpoint-status=''" subsys=daemon level=info msg=" --envoy-config-timeout='2m0s'" subsys=daemon level=info msg=" --envoy-log=''" subsys=daemon level=info msg=" --exclude-local-address=''" subsys=daemon level=info msg=" --external-envoy-proxy='false'" subsys=daemon level=info msg=" --fixed-identity-mapping=''" subsys=daemon level=info msg=" --fqdn-regex-compile-lru-size='1024'" subsys=daemon level=info msg=" --gops-port='9890'" subsys=daemon level=info msg=" --http-403-msg=''" subsys=daemon level=info msg=" --http-idle-timeout='0'" subsys=daemon level=info msg=" --http-max-grpc-timeout='0'" subsys=daemon level=info msg=" --http-normalize-path='true'" subsys=daemon level=info msg=" --http-request-timeout='3600'" subsys=daemon level=info msg=" --http-retry-count='3'" subsys=daemon level=info msg=" --http-retry-timeout='0'" subsys=daemon level=info msg=" --hubble-disable-tls='false'" subsys=daemon level=info msg=" --hubble-event-buffer-capacity='4095'" subsys=daemon level=info msg=" --hubble-event-queue-size='0'" subsys=daemon level=info msg=" --hubble-export-file-compress='false'" subsys=daemon level=info msg=" --hubble-export-file-max-backups='5'" subsys=daemon level=info msg=" --hubble-export-file-max-size-mb='10'" subsys=daemon level=info msg=" --hubble-export-file-path=''" subsys=daemon level=info msg=" --hubble-listen-address=''" subsys=daemon level=info msg=" --hubble-metrics=''" subsys=daemon level=info msg=" --hubble-metrics-server=''" subsys=daemon level=info msg=" --hubble-monitor-events=''" subsys=daemon level=info msg=" --hubble-prefer-ipv6='false'" subsys=daemon level=info msg=" --hubble-recorder-sink-queue-size='1024'" subsys=daemon level=info msg=" --hubble-recorder-storage-path='/var/run/cilium/pcaps'" subsys=daemon level=info msg=" --hubble-skip-unknown-cgroup-ids='true'" subsys=daemon level=info msg=" --hubble-socket-path='/var/run/cilium/hubble.sock'" subsys=daemon level=info msg=" --hubble-tls-cert-file=''" subsys=daemon level=info msg=" --hubble-tls-client-ca-files=''" subsys=daemon level=info msg=" --hubble-tls-key-file=''" subsys=daemon level=info msg=" --identity-allocation-mode='crd'" subsys=daemon level=info msg=" --identity-change-grace-period='5s'" subsys=daemon level=info msg=" --identity-gc-interval='15m0s'" subsys=daemon level=info msg=" --identity-heartbeat-timeout='30m0s'" subsys=daemon level=info msg=" --identity-restore-grace-period='10m0s'" subsys=daemon level=info msg=" --install-egress-gateway-routes='false'" subsys=daemon level=info msg=" --install-iptables-rules='true'" subsys=daemon level=info msg=" --install-no-conntrack-iptables-rules='false'" subsys=daemon level=info msg=" --ip-allocation-timeout='2m0s'" subsys=daemon level=info msg=" --ip-masq-agent-config-path='/etc/config/ip-masq-agent'" subsys=daemon level=info msg=" --ipam='cluster-pool'" subsys=daemon level=info msg=" --ipam-cilium-node-update-rate='15s'" subsys=daemon level=info msg=" --ipam-multi-pool-pre-allocation='default=8'" subsys=daemon level=info msg=" --ipsec-key-file=''" subsys=daemon level=info msg=" --ipsec-key-rotation-duration='5m0s'" subsys=daemon level=info msg=" --iptables-lock-timeout='5s'" subsys=daemon level=info msg=" --iptables-random-fully='false'" subsys=daemon level=info msg=" --ipv4-native-routing-cidr=''" subsys=daemon level=info msg=" --ipv4-node='auto'" subsys=daemon level=info msg=" --ipv4-pod-subnets=''" subsys=daemon level=info msg=" --ipv4-range='auto'" subsys=daemon level=info msg=" --ipv4-service-loopback-address='169.254.42.1'" subsys=daemon level=info msg=" --ipv4-service-range='auto'" subsys=daemon level=info msg=" --ipv6-cluster-alloc-cidr='f00d::/64'" subsys=daemon level=info msg=" --ipv6-mcast-device=''" subsys=daemon level=info msg=" --ipv6-native-routing-cidr=''" subsys=daemon level=info msg=" --ipv6-node='auto'" subsys=daemon level=info msg=" --ipv6-pod-subnets=''" subsys=daemon level=info msg=" --ipv6-range='auto'" subsys=daemon level=info msg=" --ipv6-service-range='auto'" subsys=daemon level=info msg=" --join-cluster='false'" subsys=daemon level=info msg=" --k8s-api-server=''" subsys=daemon level=info msg=" --k8s-client-burst='10'" subsys=daemon level=info msg=" --k8s-client-qps='5'" subsys=daemon level=info msg=" --k8s-heartbeat-timeout='30s'" subsys=daemon level=info msg=" --k8s-kubeconfig-path=''" subsys=daemon level=info msg=" --k8s-namespace='kube-system'" subsys=daemon level=info msg=" --k8s-require-ipv4-pod-cidr='false'" subsys=daemon level=info msg=" --k8s-require-ipv6-pod-cidr='false'" subsys=daemon level=info msg=" --k8s-service-cache-size='128'" subsys=daemon level=info msg=" --k8s-service-proxy-name=''" subsys=daemon level=info msg=" --k8s-sync-timeout='3m0s'" subsys=daemon level=info msg=" --k8s-watcher-endpoint-selector='metadata.name!=kube-scheduler,metadata.name!=kube-controller-manager,metadata.name!=etcd-operator,metadata.name!=gcp-controller-manager'" subsys=daemon level=info msg=" --keep-config='false'" subsys=daemon level=info msg=" --kube-proxy-replacement='disabled'" subsys=daemon level=info msg=" --kube-proxy-replacement-healthz-bind-address=''" subsys=daemon level=info msg=" --kvstore=''" subsys=daemon level=info msg=" --kvstore-connectivity-timeout='2m0s'" subsys=daemon level=info msg=" --kvstore-lease-ttl='15m0s'" subsys=daemon level=info msg=" --kvstore-max-consecutive-quorum-errors='2'" subsys=daemon level=info msg=" --kvstore-opt=''" subsys=daemon level=info msg=" --kvstore-periodic-sync='5m0s'" subsys=daemon level=info msg=" --l2-announcements-lease-duration='15s'" subsys=daemon level=info msg=" --l2-announcements-renew-deadline='5s'" subsys=daemon level=info msg=" --l2-announcements-retry-period='2s'" subsys=daemon level=info msg=" --l2-pod-announcements-interface=''" subsys=daemon level=info msg=" --label-prefix-file=''" subsys=daemon level=info msg=" --labels=''" subsys=daemon level=info msg=" --lib-dir='/var/lib/cilium'" subsys=daemon level=info msg=" --local-max-addr-scope='252'" subsys=daemon level=info msg=" --local-router-ipv4=''" subsys=daemon level=info msg=" --local-router-ipv6=''" subsys=daemon level=info msg=" --log-driver=''" subsys=daemon level=info msg=" --log-opt=''" subsys=daemon level=info msg=" --log-system-load='false'" subsys=daemon level=info msg=" --max-controller-interval='0'" subsys=daemon level=info msg=" --mesh-auth-enabled='true'" subsys=daemon level=info msg=" --mesh-auth-gc-interval='5m0s'" subsys=daemon level=info msg=" --mesh-auth-mutual-listener-port='0'" subsys=daemon level=info msg=" --mesh-auth-queue-size='1024'" subsys=daemon level=info msg=" --mesh-auth-rotated-identities-queue-size='1024'" subsys=daemon level=info msg=" --mesh-auth-signal-backoff-duration='1s'" subsys=daemon level=info msg=" --mesh-auth-spiffe-trust-domain='spiffe.cilium'" subsys=daemon level=info msg=" --mesh-auth-spire-admin-socket=''" subsys=daemon level=info msg=" --metrics=''" subsys=daemon level=info msg=" --mke-cgroup-mount=''" subsys=daemon level=info msg=" --monitor-aggregation='medium'" subsys=daemon level=info msg=" --monitor-aggregation-flags='all'" subsys=daemon level=info msg=" --monitor-aggregation-interval='5s'" subsys=daemon level=info msg=" --monitor-queue-size='0'" subsys=daemon level=info msg=" --mtu='0'" subsys=daemon level=info msg=" --node-encryption-opt-out-labels='node-role.kubernetes.io/control-plane'" subsys=daemon level=info msg=" --node-port-acceleration='disabled'" subsys=daemon level=info msg=" --node-port-algorithm='random'" subsys=daemon level=info msg=" --node-port-bind-protection='true'" subsys=daemon level=info msg=" --node-port-mode='snat'" subsys=daemon level=info msg=" --node-port-range='30000,32767'" subsys=daemon level=info msg=" --nodes-gc-interval='5m0s'" subsys=daemon level=info msg=" --operator-api-serve-addr='127.0.0.1:9234'" subsys=daemon level=info msg=" --policy-audit-mode='false'" subsys=daemon level=info msg=" --policy-queue-size='100'" subsys=daemon level=info msg=" --policy-trigger-interval='1s'" subsys=daemon level=info msg=" --pprof='false'" subsys=daemon level=info msg=" --pprof-address='localhost'" subsys=daemon level=info msg=" --pprof-port='6060'" subsys=daemon level=info msg=" --preallocate-bpf-maps='false'" subsys=daemon level=info msg=" --prepend-iptables-chains='true'" subsys=daemon level=info msg=" --procfs='/host/proc'" subsys=daemon level=info msg=" --prometheus-serve-addr=':9962'" subsys=daemon level=info msg=" --proxy-connect-timeout='2'" subsys=daemon level=info msg=" --proxy-gid='1337'" subsys=daemon level=info msg=" --proxy-idle-timeout-seconds='60'" subsys=daemon level=info msg=" --proxy-max-connection-duration-seconds='0'" subsys=daemon level=info msg=" --proxy-max-requests-per-connection='0'" subsys=daemon level=info msg=" --proxy-prometheus-port='9964'" subsys=daemon level=info msg=" --read-cni-conf=''" subsys=daemon level=info msg=" --remove-cilium-node-taints='true'" subsys=daemon level=info msg=" --restore='true'" subsys=daemon level=info msg=" --route-metric='0'" subsys=daemon level=info msg=" --routing-mode='tunnel'" subsys=daemon level=info msg=" --set-cilium-is-up-condition='true'" subsys=daemon level=info msg=" --set-cilium-node-taints='true'" subsys=daemon level=info msg=" --sidecar-istio-proxy-image='cilium/istio_proxy'" subsys=daemon level=info msg=" --single-cluster-route='false'" subsys=daemon level=info msg=" --skip-cnp-status-startup-clean='false'" subsys=daemon level=info msg=" --socket-path='/var/run/cilium/cilium.sock'" subsys=daemon level=info msg=" --srv6-encap-mode='reduced'" subsys=daemon level=info msg=" --state-dir='/var/run/cilium'" subsys=daemon level=info msg=" --synchronize-k8s-nodes='true'" subsys=daemon level=info msg=" --tofqdns-dns-reject-response-code='refused'" subsys=daemon level=info msg=" --tofqdns-enable-dns-compression='true'" subsys=daemon level=info msg=" --tofqdns-endpoint-max-ip-per-hostname='50'" subsys=daemon level=info msg=" --tofqdns-idle-connection-grace-period='0s'" subsys=daemon level=info msg=" --tofqdns-max-deferred-connection-deletes='10000'" subsys=daemon level=info msg=" --tofqdns-min-ttl='0'" subsys=daemon level=info msg=" --tofqdns-pre-cache=''" subsys=daemon level=info msg=" --tofqdns-proxy-port='0'" subsys=daemon level=info msg=" --tofqdns-proxy-response-max-delay='100ms'" subsys=daemon level=info msg=" --trace-payloadlen='128'" subsys=daemon level=info msg=" --trace-sock='true'" subsys=daemon level=info msg=" --tunnel=''" subsys=daemon level=info msg=" --tunnel-port='6082'" subsys=daemon level=info msg=" --tunnel-protocol='geneve'" subsys=daemon level=info msg=" --unmanaged-pod-watcher-interval='15'" subsys=daemon level=info msg=" --use-cilium-internal-ip-for-ipsec='false'" subsys=daemon level=info msg=" --version='false'" subsys=daemon level=info msg=" --vlan-bpf-bypass=''" subsys=daemon level=info msg=" --vtep-cidr=''" subsys=daemon level=info msg=" --vtep-endpoint=''" subsys=daemon level=info msg=" --vtep-mac=''" subsys=daemon level=info msg=" --vtep-mask=''" subsys=daemon level=info msg=" --wireguard-encapsulate='false'" subsys=daemon level=info msg=" --write-cni-conf-when-ready='/host/etc/cni/net.d/05-cilium.conflist'" subsys=daemon level=info msg=" _ _ _" subsys=daemon level=info msg=" ___|_| |_|_ _ _____" subsys=daemon level=info msg="| _| | | | | | |" subsys=daemon level=info msg="|___|_|_|_|___|_|_|_|" subsys=daemon level=info msg="Cilium 1.14.8 cf6e022e 2024-03-13T12:23:35-04:00 go version go1.21.8 linux/amd64" subsys=daemon level=info msg="clang (10.0.0) and kernel (5.15.0) versions: OK!" subsys=linux-datapath level=info msg="linking environment: OK!" subsys=linux-datapath level=info msg="Kernel config file not found: if the agent fails to start, check the system requirements at https://docs.cilium.io/en/stable/operations/system_requirements" subsys=probes level=info msg="Detected mounted BPF filesystem at /sys/fs/bpf" subsys=bpf level=info msg="Mounted cgroupv2 filesystem at /run/cilium/cgroupv2" subsys=cgroups level=info msg="Parsing base label prefixes from default label list" subsys=labels-filter level=info msg="Parsing additional label prefixes from user inputs: []" subsys=labels-filter level=info msg="Final label prefixes to be used for identity evaluation:" subsys=labels-filter level=info msg=" - reserved:.*" subsys=labels-filter level=info msg=" - :io\\.kubernetes\\.pod\\.namespace" subsys=labels-filter level=info msg=" - :io\\.cilium\\.k8s\\.namespace\\.labels" subsys=labels-filter level=info msg=" - :app\\.kubernetes\\.io" subsys=labels-filter level=info msg=" - !:io\\.kubernetes" subsys=labels-filter level=info msg=" - !:kubernetes\\.io" subsys=labels-filter level=info msg=" - !:.*beta\\.kubernetes\\.io" subsys=labels-filter level=info msg=" - !:k8s\\.io" subsys=labels-filter level=info msg=" - !:pod-template-generation" subsys=labels-filter level=info msg=" - !:pod-template-hash" subsys=labels-filter level=info msg=" - !:controller-revision-hash" subsys=labels-filter level=info msg=" - !:annotation.*" subsys=labels-filter level=info msg=" - !:etcd_node" subsys=labels-filter level=info msg=Invoked duration=1.192536ms function="pprof.glob..func1 (cell.go:50)" subsys=hive level=info msg=Invoked duration="49.422µs" function="gops.registerGopsHooks (cell.go:38)" subsys=hive level=info msg=Invoked duration="992.867µs" function="metrics.NewRegistry (registry.go:65)" subsys=hive level=info msg=Invoked duration="10.51µs" function="metrics.glob..func1 (cell.go:12)" subsys=hive level=info msg="Spire Delegate API Client is disabled as no socket path is configured" subsys=spire-delegate level=info msg="Mutual authentication handler is disabled as no port is configured" subsys=auth level=info msg=Invoked duration=112.30843ms function="cmd.glob..func4 (daemon_main.go:1607)" subsys=hive level=info msg=Invoked duration="13.941µs" function="gc.registerSignalHandler (cell.go:47)" subsys=hive level=info msg=Invoked duration="19.971µs" function="utime.initUtimeSync (cell.go:29)" subsys=hive level=info msg=Invoked duration="67.933µs" function="agentliveness.newAgentLivenessUpdater (agent_liveness.go:43)" subsys=hive level=info msg=Invoked duration="73.923µs" function="l2responder.NewL2ResponderReconciler (l2responder.go:63)" subsys=hive level=info msg=Invoked duration="80.693µs" function="garp.newGARPProcessor (processor.go:27)" subsys=hive level=info msg=Starting subsys=hive level=info msg="Started gops server" address="127.0.0.1:9890" subsys=gops level=info msg="Start hook executed" duration="514.599µs" function="gops.registerGopsHooks.func1 (cell.go:43)" subsys=hive level=info msg="Start hook executed" duration="2.33µs" function="metrics.NewRegistry.func1 (registry.go:86)" subsys=hive level=info msg="Establishing connection to apiserver" host="https://10.96.0.1:443" subsys=k8s-client level=info msg="Serving prometheus metrics on :9962" subsys=metrics level=info msg="Connected to apiserver" subsys=k8s-client level=info msg="Start hook executed" duration=9.242308ms function="client.(*compositeClientset).onStart" subsys=hive level=info msg="Start hook executed" duration=6.716622ms function="authmap.newAuthMap.func1 (cell.go:27)" subsys=hive level=info msg="Start hook executed" duration="32.072µs" function="configmap.newMap.func1 (cell.go:23)" subsys=hive level=info msg="Start hook executed" duration="36.402µs" function="signalmap.newMap.func1 (cell.go:44)" subsys=hive level=info msg="Start hook executed" duration="250.98µs" function="nodemap.newNodeMap.func1 (cell.go:23)" subsys=hive level=info msg="Start hook executed" duration="88.434µs" function="eventsmap.newEventsMap.func1 (cell.go:35)" subsys=hive level=info msg="Start hook executed" duration="71.182µs" function="*cni.cniConfigManager.Start" subsys=hive level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Wrote CNI configuration file to /host/etc/cni/net.d/05-cilium.conflist" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Start hook executed" duration=58.055072ms function="datapath.newDatapath.func1 (cells.go:113)" subsys=hive level=info msg="Restored 0 node IDs from the BPF map" subsys=linux-datapath level=info msg="Start hook executed" duration="180.097µs" function="datapath.newDatapath.func2 (cells.go:126)" subsys=hive level=info msg="Start hook executed" duration="14.66µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Node].Start" subsys=hive level=info msg="Start hook executed" duration="2.39µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumNode].Start" subsys=hive level=info msg="Using autogenerated IPv4 allocation range" subsys=node v4Prefix=10.242.0.0/16 level=info msg="no local ciliumnode found, will not restore cilium internal ips from k8s" subsys=daemon level=info msg="Start hook executed" duration=104.152764ms function="node.NewLocalNodeStore.func1 (local_node_store.go:76)" subsys=hive level=info msg="Start hook executed" duration="17.011µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Start" subsys=hive level=info msg="Start hook executed" duration=200.35837ms function="*manager.diffStore[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Start" subsys=hive level=info msg="Start hook executed" duration="5.08µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s.Endpoints].Start" subsys=hive level=info msg="Using discoveryv1.EndpointSlice" subsys=k8s level=info msg="Start hook executed" duration=100.811409ms function="*manager.diffStore[*github.com/cilium/cilium/pkg/k8s.Endpoints].Start" subsys=hive level=info msg="Start hook executed" duration="14.201µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Pod].Start" subsys=hive level=info msg="Start hook executed" duration="22.811µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Namespace].Start" subsys=hive level=info msg="Start hook executed" duration="4.63µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumNetworkPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="5.39µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumClusterwideNetworkPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="2.21µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumCIDRGroup].Start" subsys=hive level=info msg="Start hook executed" duration="30.661µs" function="endpointmanager.newDefaultEndpointManager.func1 (cell.go:203)" subsys=hive level=info msg="Start hook executed" duration="23.441µs" function="cmd.newPolicyTrifecta.func1 (policy.go:135)" subsys=hive level=info msg="Start hook executed" duration="62.553µs" function="*manager.manager.Start" subsys=hive level=info msg="Serving cilium node monitor v1.2 API at unix:///var/run/cilium/monitor1_2.sock" subsys=monitor-agent level=info msg="Start hook executed" duration="395.024µs" function="agent.newMonitorAgent.func1 (cell.go:61)" subsys=hive level=info msg="Start hook executed" duration="3.611µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumL2AnnouncementPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="10.171µs" function="*job.group.Start" subsys=hive level=info msg="Start hook executed" duration="257.869µs" function="proxy.newProxy.func1 (cell.go:55)" subsys=hive level=info msg="Envoy: Starting xDS gRPC server listening on /var/run/cilium/envoy/sockets/xds.sock" subsys=envoy-manager level=info msg="Start hook executed" duration="829.311µs" function="signal.provideSignalManager.func1 (cell.go:25)" subsys=hive level=info msg="Datapath signal listener running" subsys=signal level=info msg="Start hook executed" duration=1.398532ms function="auth.registerAuthManager.func1 (cell.go:109)" subsys=hive level=info msg="Start hook executed" duration="4.77µs" function="auth.registerGCJobs.func1 (cell.go:158)" subsys=hive level=info msg="Start hook executed" duration="12.671µs" function="*job.group.Start" subsys=hive level=warning msg="Deprecated value for --kube-proxy-replacement: disabled (use either \"true\", or \"false\")" subsys=daemon level=info msg="Auto-disabling \"enable-node-port\", \"enable-external-ips\", \"bpf-lb-sock\", \"enable-host-port\" features and falling back to \"enable-host-legacy-routing\"" subsys=daemon level=info msg="Inheriting MTU from external network interface" device=ens3 ipAddr=199.204.45.242 mtu=1500 subsys=mtu level=info msg="Removed map pin at /sys/fs/bpf/tc/globals/cilium_ipcache, recreating and re-pinning map cilium_ipcache" file-path=/sys/fs/bpf/tc/globals/cilium_ipcache name=cilium_ipcache subsys=bpf level=info msg="Removed map pin at /sys/fs/bpf/tc/globals/cilium_tunnel_map, recreating and re-pinning map cilium_tunnel_map" file-path=/sys/fs/bpf/tc/globals/cilium_tunnel_map name=cilium_tunnel_map subsys=bpf level=info msg="Restored services from maps" failedServices=0 restoredServices=0 subsys=service level=info msg="Restored backends from maps" failedBackends=0 restoredBackends=0 skippedBackends=0 subsys=service level=info msg="Reading old endpoints..." subsys=daemon level=info msg="No old endpoints found." subsys=daemon level=info msg="Waiting until all Cilium CRDs are available" subsys=k8s level=info msg="All Cilium CRDs have been found and are available" subsys=k8s level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=warning msg="Unable to get node resource" error="ciliumnodes.cilium.io \"instance\" not found" subsys=nodediscovery level=warning msg="Unable to get node resource" error="ciliumnodes.cilium.io \"instance\" not found" subsys=nodediscovery level=info msg="Successfully created CiliumNode resource" subsys=nodediscovery level=info msg="Retrieved node information from cilium node" nodeName=instance subsys=k8s level=warning msg="Waiting for k8s node information" error="required IPv4 PodCIDR not available" subsys=k8s level=warning msg="Unable to create CiliumNode resource, will retry" error="ciliumnodes.cilium.io \"instance\" already exists" subsys=nodediscovery level=info msg="Retrieved node information from cilium node" nodeName=instance subsys=k8s level=warning msg="Waiting for k8s node information" error="required IPv4 PodCIDR not available" subsys=k8s level=info msg="Retrieved node information from cilium node" nodeName=instance subsys=k8s level=info msg="Received own node information from API server" ipAddr.ipv4=199.204.45.242 ipAddr.ipv6="" k8sNodeIP=199.204.45.242 labels="map[beta.kubernetes.io/arch:amd64 beta.kubernetes.io/os:linux kubernetes.io/arch:amd64 kubernetes.io/hostname:instance kubernetes.io/os:linux node-role.kubernetes.io/control-plane: node.kubernetes.io/exclude-from-external-load-balancers:]" nodeName=instance subsys=k8s v4Prefix=10.0.0.0/24 v6Prefix="" level=info msg="k8s mode: Allowing localhost to reach local endpoints" subsys=daemon level=info msg="Detected devices" devices="[]" subsys=linux-datapath level=info msg="Enabling k8s event listener" subsys=k8s-watcher level=info msg="Removing stale endpoint interfaces" subsys=daemon level=info msg="Skipping kvstore configuration" subsys=daemon level=info msg="Waiting until local node addressing before starting watchers depending on it" subsys=k8s-watcher level=info msg="Initializing node addressing" subsys=daemon level=info msg="Initializing cluster-pool IPAM" subsys=ipam v4Prefix=10.0.0.0/24 v6Prefix="" level=info msg="Restoring endpoints..." subsys=daemon level=info msg="Endpoints restored" failed=0 restored=0 subsys=daemon level=info msg="Addressing information:" subsys=daemon level=info msg=" Cluster-Name: default" subsys=daemon level=info msg=" Cluster-ID: 0" subsys=daemon level=info msg=" Local node-name: instance" subsys=daemon level=info msg=" Node-IPv6: " subsys=daemon level=info msg=" External-Node IPv4: 199.204.45.242" subsys=daemon level=info msg=" Internal-Node IPv4: 10.0.0.107" subsys=daemon level=info msg=" IPv4 allocation prefix: 10.0.0.0/24" subsys=daemon level=info msg=" Loopback IPv4: 169.254.42.1" subsys=daemon level=info msg=" Local IPv4 addresses:" subsys=daemon level=info msg=" - 199.204.45.242" subsys=daemon level=info msg=" - 172.17.0.100" subsys=daemon level=info msg=" - 10.96.240.200" subsys=daemon level=info msg="Node updated" clusterName=default nodeName=instance subsys=nodemanager level=info msg="Adding local node to cluster" node="{instance default [{InternalIP 199.204.45.242} {CiliumInternalIP 10.0.0.107}] 10.0.0.0/24 [] [] 10.0.0.63 0 local 0 map[beta.kubernetes.io/arch:amd64 beta.kubernetes.io/os:linux kubernetes.io/arch:amd64 kubernetes.io/hostname:instance kubernetes.io/os:linux node-role.kubernetes.io/control-plane: node.kubernetes.io/exclude-from-external-load-balancers:] map[] 1 }" subsys=nodediscovery level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Waiting until all pre-existing resources have been received" subsys=k8s-watcher level=info msg="Initializing identity allocator" subsys=identity-cache level=info msg="Allocating identities between range" cluster-id=0 max=65535 min=256 subsys=identity-cache level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.forwarding sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.accept_local sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.send_redirects sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.forwarding sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.accept_local sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.send_redirects sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.core.bpf_jit_enable sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.all.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.fib_multipath_use_neigh sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=kernel.unprivileged_bpf_disabled sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=kernel.timer_migration sysParamValue=0 level=info msg="Setting up BPF datapath" bpfClockSource=ktime bpfInsnSet="" subsys=datapath-loader level=info msg="Iptables rules installed" subsys=iptables level=info msg="Adding new proxy port rules for cilium-dns-egress:38539" id=cilium-dns-egress subsys=proxy level=info msg="Iptables proxy rules installed" subsys=iptables level=info msg="Start hook executed" duration=3.084642482s function="cmd.newDaemonPromise.func1 (daemon_main.go:1663)" subsys=hive level=info msg="Starting IP identity watcher" subsys=ipcache level=info msg="Start hook executed" duration="17.531µs" function="utime.initUtimeSync.func1 (cell.go:33)" subsys=hive level=info msg="Initializing daemon" subsys=daemon level=info msg="Validating configured node address ranges" subsys=daemon level=info msg="Starting connection tracking garbage collector" subsys=daemon level=info msg="Start hook executed" duration="8.061µs" function="*job.group.Start" subsys=hive level=info msg="Start hook executed" duration="101.003µs" function="l2respondermap.newMap.func1 (l2_responder_map4.go:44)" subsys=hive level=info msg="Start hook executed" duration="56.932µs" function="*job.group.Start" subsys=hive level=info msg="Initial scan of connection tracking completed" subsys=ct-gc level=info msg="Regenerating restored endpoints" numRestored=0 subsys=daemon level=info msg="Creating host endpoint" subsys=daemon level=info msg="Finished regenerating restored endpoints" regenerated=0 subsys=daemon total=0 level=info msg="New endpoint" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3398 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Deleted orphan backends" orphanBackends=0 subsys=service level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3398 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Identity of endpoint changed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3398 identity=1 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,reserved:host" ipv4= ipv6= k8sPodName=/ oldIdentity="no identity" subsys=endpoint level=info msg="Launching Cilium health daemon" subsys=daemon level=info msg="Launching Cilium health endpoint" subsys=daemon level=info msg="Started healthz status API server" address="127.0.0.1:9879" subsys=daemon level=info msg="Processing queued endpoint deletion requests from /var/run/cilium/deleteQueue" subsys=daemon level=info msg="processing 0 queued deletion requests" subsys=daemon level=info msg="Initializing Cilium API" subsys=daemon level=info msg="Daemon initialization completed" bootstrapTime=4.167960104s subsys=daemon level=info msg="Hubble server is disabled" subsys=hubble level=info msg="Serving cilium API at unix:///var/run/cilium/cilium.sock" subsys=daemon level=info msg="Compiled new BPF template" BPFCompilationTime=302.775528ms file-path=/var/run/cilium/state/templates/1af3fbd0828af7e3f210350aabfedd24919ad26365093b2cfc0d78e6d26f59cb/bpf_host.o subsys=datapath-loader level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3398 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.91 3a9a4210-9101-4b3b-8533-cbc9c42e5fe2 default }" containerID=da4d35c46914ae5d472ad139603017713c04ead907d4f5456a386dd59c4d8bf6 datapathConfiguration="&{false false false false false }" interface=lxca70074fa96bb k8sPodName=kube-system/coredns-7c96b6546b-6ln2h labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=da4d35c469 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1330 ipv4=10.0.0.91 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-6ln2h subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=da4d35c469 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1330 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.91 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-6ln2h subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:kube-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=coredns;k8s:io.kubernetes.pod.namespace=kube-system;k8s:k8s-app=kube-dns;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=da4d35c469 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1330 identity=17005 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.91 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-6ln2h oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=da4d35c469 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1330 identity=17005 ipv4=10.0.0.91 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-6ln2h subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.191 559dd37a-e9a8-4729-87bc-7bc27c46134d default }" containerID=e881215c84655d24abb9d0997c0c6f182af577e1d91ebd6ba5559377d1852e0e datapathConfiguration="&{false false false false false }" interface=lxc4d0319957ed7 k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-zdbwn labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e881215c84 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1577 ipv4=10.0.0.191 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-zdbwn subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e881215c84 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1577 identityLabels="k8s:app=certgen,k8s:batch.kubernetes.io/controller-uid=5448063c-6ed2-476c-a1c0-b26f5465ad54,k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen,k8s:controller-uid=5448063c-6ed2-476c-a1c0-b26f5465ad54,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen,k8s:io.kubernetes.pod.namespace=envoy-gateway-system,k8s:job-name=envoy-gateway-gateway-helm-certgen" ipv4=10.0.0.191 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-zdbwn subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name:envoy-gateway-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=certgen;k8s:batch.kubernetes.io/controller-uid=5448063c-6ed2-476c-a1c0-b26f5465ad54;k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen;k8s:controller-uid=5448063c-6ed2-476c-a1c0-b26f5465ad54;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system;k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen;k8s:io.kubernetes.pod.namespace=envoy-gateway-system;k8s:job-name=envoy-gateway-gateway-helm-certgen;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e881215c84 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1577 identity=11230 identityLabels="k8s:app=certgen,k8s:batch.kubernetes.io/controller-uid=5448063c-6ed2-476c-a1c0-b26f5465ad54,k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen,k8s:controller-uid=5448063c-6ed2-476c-a1c0-b26f5465ad54,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen,k8s:io.kubernetes.pod.namespace=envoy-gateway-system,k8s:job-name=envoy-gateway-gateway-helm-certgen" ipv4=10.0.0.191 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-zdbwn oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e881215c84 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1577 identity=11230 ipv4=10.0.0.191 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-zdbwn subsys=endpoint level=info msg="New endpoint" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=23 ipv4=10.0.0.63 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=23 identityLabels="reserved:health" ipv4=10.0.0.63 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Identity of endpoint changed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=23 identity=4 identityLabels="reserved:health" ipv4=10.0.0.63 ipv6= k8sPodName=/ oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Compiled new BPF template" BPFCompilationTime=1.067463546s file-path=/var/run/cilium/state/templates/d10eb648ee03715d1ac7ff531a46db33ad94a4c1d45d393758e4490aeaaba276/bpf_lxc.o subsys=datapath-loader level=info msg="Rewrote endpoint BPF program" containerID=da4d35c469 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1330 identity=17005 ipv4=10.0.0.91 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-6ln2h subsys=endpoint level=info msg="Successful endpoint creation" containerID=da4d35c469 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1330 identity=17005 ipv4=10.0.0.91 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-6ln2h subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=23 identity=4 ipv4=10.0.0.63 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e881215c84 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1577 identity=11230 ipv4=10.0.0.191 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-zdbwn subsys=endpoint level=info msg="Successful endpoint creation" containerID=e881215c84 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1577 identity=11230 ipv4=10.0.0.191 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-zdbwn subsys=daemon level=info msg="Serving cilium health API at unix:///var/run/cilium/health.sock" subsys=health-server level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=e881215c84 endpointID=1577 k8sNamespace=envoy-gateway-system k8sPodName=envoy-gateway-gateway-helm-certgen-zdbwn subsys=daemon level=info msg="Releasing key" key="[k8s:app=certgen k8s:batch.kubernetes.io/controller-uid=5448063c-6ed2-476c-a1c0-b26f5465ad54 k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen k8s:controller-uid=5448063c-6ed2-476c-a1c0-b26f5465ad54 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen k8s:io.kubernetes.pod.namespace=envoy-gateway-system k8s:job-name=envoy-gateway-gateway-helm-certgen]" subsys=allocator level=info msg="Removed endpoint" containerID=e881215c84 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1577 identity=11230 ipv4=10.0.0.191 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-zdbwn subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.219 d6aa52fb-5ccc-44b1-9ffe-d9fe38ef12f3 default }" containerID=cb096f6e6aea10259fe449b38b7dc8cd83e6fc15b9e649b9c8939c18cfdbc913 datapathConfiguration="&{false false false false false }" interface=lxc07e76d1c28cc k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-4cddw labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=cb096f6e6a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1375 ipv4=10.0.0.219 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-4cddw subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=cb096f6e6a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1375 identityLabels="k8s:app.kubernetes.io/instance=envoy-gateway,k8s:app.kubernetes.io/name=gateway-helm,k8s:control-plane=envoy-gateway,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway,k8s:io.kubernetes.pod.namespace=envoy-gateway-system" ipv4=10.0.0.219 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-4cddw subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name:envoy-gateway-system]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=envoy-gateway;k8s:app.kubernetes.io/name=gateway-helm;k8s:control-plane=envoy-gateway;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system;k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway;k8s:io.kubernetes.pod.namespace=envoy-gateway-system;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=cb096f6e6a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1375 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.219 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-4cddw line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=cb096f6e6a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1375 identity=34729 identityLabels="k8s:app.kubernetes.io/instance=envoy-gateway,k8s:app.kubernetes.io/name=gateway-helm,k8s:control-plane=envoy-gateway,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway,k8s:io.kubernetes.pod.namespace=envoy-gateway-system" ipv4=10.0.0.219 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-4cddw oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=cb096f6e6a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1375 identity=34729 ipv4=10.0.0.219 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-4cddw subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=cb096f6e6a datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1375 identity=34729 ipv4=10.0.0.219 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-4cddw subsys=endpoint level=info msg="Successful endpoint creation" containerID=cb096f6e6a datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1375 identity=34729 ipv4=10.0.0.219 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-4cddw subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3398 identity=1 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,k8s:openstack-compute-node=enabled,k8s:openstack-control-plane=enabled,k8s:openvswitch=enabled,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_hostns_03398 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_hostns_03398 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_hostns_03398 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_hostns_03398:pending" subsys=bpf level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_netdev_00005 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_netdev_00005 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005:pending" subsys=bpf level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3398 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.159 597c27fe-daee-4442-b77a-b2806411fde7 default }" containerID=da0b84f5309bab6baa93a22ab8705e998add5eab011a76b6297c41d993735dd5 datapathConfiguration="&{false false false false false }" interface=lxc2da8d273d871 k8sPodName=kube-system/coredns-67659f764b-5s2fv labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=da0b84f530 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=96 ipv4=10.0.0.159 ipv6= k8sPodName=kube-system/coredns-67659f764b-5s2fv subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=da0b84f530 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=96 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.159 ipv6= k8sPodName=kube-system/coredns-67659f764b-5s2fv subsys=endpoint level=info msg="Identity of endpoint changed" containerID=da0b84f530 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=96 identity=17005 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.159 ipv6= k8sPodName=kube-system/coredns-67659f764b-5s2fv oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=da0b84f530 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=96 identity=17005 ipv4=10.0.0.159 ipv6= k8sPodName=kube-system/coredns-67659f764b-5s2fv subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.27 289732cc-0cd0-41c1-9cbd-0b79e97a75c2 default }" containerID=e5321fff388dba595a9a96e1a34f92b47730402082d1a66a15dacc832765fe28 datapathConfiguration="&{false false false false false }" interface=lxc3399788d28c4 k8sPodName=kube-system/coredns-67659f764b-j9kqb labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e5321fff38 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1886 ipv4=10.0.0.27 ipv6= k8sPodName=kube-system/coredns-67659f764b-j9kqb subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e5321fff38 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1886 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.27 ipv6= k8sPodName=kube-system/coredns-67659f764b-j9kqb subsys=endpoint level=info msg="Identity of endpoint changed" containerID=e5321fff38 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1886 identity=17005 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.27 ipv6= k8sPodName=kube-system/coredns-67659f764b-j9kqb oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e5321fff38 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1886 identity=17005 ipv4=10.0.0.27 ipv6= k8sPodName=kube-system/coredns-67659f764b-j9kqb subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=da0b84f530 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=96 identity=17005 ipv4=10.0.0.159 ipv6= k8sPodName=kube-system/coredns-67659f764b-5s2fv subsys=endpoint level=info msg="Successful endpoint creation" containerID=da0b84f530 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=96 identity=17005 ipv4=10.0.0.159 ipv6= k8sPodName=kube-system/coredns-67659f764b-5s2fv subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=e5321fff38 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1886 identity=17005 ipv4=10.0.0.27 ipv6= k8sPodName=kube-system/coredns-67659f764b-j9kqb subsys=endpoint level=info msg="Successful endpoint creation" containerID=e5321fff38 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1886 identity=17005 ipv4=10.0.0.27 ipv6= k8sPodName=kube-system/coredns-67659f764b-j9kqb subsys=daemon level=info msg="Delete endpoint request" containerID=da4d35c469 endpointID=1330 k8sNamespace=kube-system k8sPodName=coredns-7c96b6546b-6ln2h subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=coredns k8s:io.kubernetes.pod.namespace=kube-system k8s:k8s-app=kube-dns]" subsys=allocator level=info msg="Removed endpoint" containerID=da4d35c469 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1330 identity=17005 ipv4=10.0.0.91 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-6ln2h subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.238 40cde6e6-e4c1-49e3-938b-cbdb73dea26e default }" containerID=a3d1cd9dcf9ffdb239e3214652b650c7f18b54db9ba1d6c493691c15d6bbd18e datapathConfiguration="&{false false false false false }" interface=lxcb36af0e9cab1 k8sPodName=openstack/memcached-memcached-cf56b6468-6ssgp labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a3d1cd9dcf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=770 ipv4=10.0.0.238 ipv6= k8sPodName=openstack/memcached-memcached-cf56b6468-6ssgp subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a3d1cd9dcf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=770 identityLabels="k8s:application=memcached,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=memcached" ipv4=10.0.0.238 ipv6= k8sPodName=openstack/memcached-memcached-cf56b6468-6ssgp subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=memcached;k8s:component=server;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=memcached;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a3d1cd9dcf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=770 identity=6531 identityLabels="k8s:application=memcached,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=memcached" ipv4=10.0.0.238 ipv6= k8sPodName=openstack/memcached-memcached-cf56b6468-6ssgp oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a3d1cd9dcf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=770 identity=6531 ipv4=10.0.0.238 ipv6= k8sPodName=openstack/memcached-memcached-cf56b6468-6ssgp subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=a3d1cd9dcf datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=770 identity=6531 ipv4=10.0.0.238 ipv6= k8sPodName=openstack/memcached-memcached-cf56b6468-6ssgp subsys=endpoint level=info msg="Successful endpoint creation" containerID=a3d1cd9dcf datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=770 identity=6531 ipv4=10.0.0.238 ipv6= k8sPodName=openstack/memcached-memcached-cf56b6468-6ssgp subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.84 54a15f5d-c247-45b5-b782-6bb9272983b9 default }" containerID=32bce88ffb7b148dbba01af501eb7f1fd0e0d6087ba9046d21f950c045c505f8 datapathConfiguration="&{false false false false false }" interface=lxc4fd0d021b187 k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-7p6sg labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=32bce88ffb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3018 ipv4=10.0.0.84 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-7p6sg subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=32bce88ffb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3018 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=gc" ipv4=10.0.0.84 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-7p6sg subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=gc;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=32bce88ffb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3018 identity=44149 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=gc" ipv4=10.0.0.84 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-7p6sg oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=32bce88ffb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3018 identity=44149 ipv4=10.0.0.84 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-7p6sg subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=32bce88ffb datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3018 identity=44149 ipv4=10.0.0.84 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-7p6sg subsys=endpoint level=info msg="Successful endpoint creation" containerID=32bce88ffb datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3018 identity=44149 ipv4=10.0.0.84 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-7p6sg subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.25 1bd52328-52aa-45fc-810a-576d9f7478a4 default }" containerID=1ac98cd3d2fa2cb1c234116620145eecfbb57c3c4522c579acd98232c09ecdeb datapathConfiguration="&{false false false false false }" interface=lxc177040bc0935 k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-n2xg8 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1ac98cd3d2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2227 ipv4=10.0.0.25 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-n2xg8 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.124 2579f12d-0aca-417e-8bf9-8c97cbc6f4aa default }" containerID=122ac282e1677d8878fd1d18e0133699cac8b16a09c110d3b23e94ef9e4920de datapathConfiguration="&{false false false false false }" interface=lxcac63fafa5cef k8sPodName=monitoring/node-feature-discovery-worker-f6x69 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=122ac282e1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=418 ipv4=10.0.0.124 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-f6x69 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1ac98cd3d2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2227 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=master" ipv4=10.0.0.25 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-n2xg8 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=122ac282e1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=418 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=worker" ipv4=10.0.0.124 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-f6x69 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=master;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1ac98cd3d2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2227 identity=15843 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=master" ipv4=10.0.0.25 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-n2xg8 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1ac98cd3d2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2227 identity=15843 ipv4=10.0.0.25 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-n2xg8 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=worker;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=122ac282e1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=418 identity=9935 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=worker" ipv4=10.0.0.124 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-f6x69 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=122ac282e1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=418 identity=9935 ipv4=10.0.0.124 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-f6x69 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=1ac98cd3d2 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2227 identity=15843 ipv4=10.0.0.25 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-n2xg8 subsys=endpoint level=info msg="Successful endpoint creation" containerID=1ac98cd3d2 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2227 identity=15843 ipv4=10.0.0.25 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-n2xg8 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=122ac282e1 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=418 identity=9935 ipv4=10.0.0.124 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-f6x69 subsys=endpoint level=info msg="Successful endpoint creation" containerID=122ac282e1 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=418 identity=9935 ipv4=10.0.0.124 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-f6x69 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.220 4ec1ff12-7fbd-4c2c-b94f-cb551b1abbe4 default }" containerID=84760f9709fc31a1229ce0eee2870f2a9595a33467ea0023f9503add6a81f703 datapathConfiguration="&{false false false false false }" interface=lxc522d8fcdb407 k8sPodName=ingress-nginx/ingress-nginx-admission-create-cbcpb labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=84760f9709 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=686 ipv4=10.0.0.220 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-cbcpb subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=84760f9709 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=686 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=f3df14b3-278a-4f8c-a222-3ee89c87d478,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create,k8s:controller-uid=f3df14b3-278a-4f8c-a222-3ee89c87d478,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-create" ipv4=10.0.0.220 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-cbcpb subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=admission-webhook;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:batch.kubernetes.io/controller-uid=f3df14b3-278a-4f8c-a222-3ee89c87d478;k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create;k8s:controller-uid=f3df14b3-278a-4f8c-a222-3ee89c87d478;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission;k8s:io.kubernetes.pod.namespace=ingress-nginx;k8s:job-name=ingress-nginx-admission-create;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=84760f9709 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=686 identity=33039 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=f3df14b3-278a-4f8c-a222-3ee89c87d478,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create,k8s:controller-uid=f3df14b3-278a-4f8c-a222-3ee89c87d478,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-create" ipv4=10.0.0.220 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-cbcpb oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=84760f9709 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=686 identity=33039 ipv4=10.0.0.220 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-cbcpb subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.95 e9abf070-3c13-412d-b6dd-8efcf04bef08 default }" containerID=6ad118f0d0e22ad516dcb2e882b1d5f74a55f7d7916b2349fde38ffcba4b68b9 datapathConfiguration="&{false false false false false }" interface=lxca08798e515e0 k8sPodName=cert-manager/cert-manager-webhook-548949fc64-z88rz labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6ad118f0d0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=53 ipv4=10.0.0.95 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-z88rz subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6ad118f0d0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=53 identityLabels="k8s:app.kubernetes.io/component=webhook,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=webhook,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=webhook,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.95 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-z88rz subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=6ad118f0d0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=53 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.95 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-z88rz line=611 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=84760f9709 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=686 identity=33039 ipv4=10.0.0.220 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-cbcpb subsys=endpoint level=info msg="Successful endpoint creation" containerID=84760f9709 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=686 identity=33039 ipv4=10.0.0.220 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-cbcpb subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.146 ca776b12-53ec-4614-9ab9-f748c87d3dde default }" containerID=f44859dbae77726c2b4f290096cb61f4976c5684bd2fcdd1092b3d2478c7c8df datapathConfiguration="&{false false false false false }" interface=lxcb1d914e93708 k8sPodName=cert-manager/cert-manager-75c4c745bc-fs5h4 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f44859dbae datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1119 ipv4=10.0.0.146 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-fs5h4 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f44859dbae datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1119 identityLabels="k8s:app.kubernetes.io/component=controller,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cert-manager,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cert-manager,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.146 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-fs5h4 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.245 b0a3490b-a75f-4304-86a8-25445bc44e8d default }" containerID=9a7f6153a08433dbc9b2acc6954eee89fa1d852faff0de4ae44b6b910005fc8a datapathConfiguration="&{false false false false false }" interface=lxc5a588fa300ef k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-cssvn labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9a7f6153a0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=616 ipv4=10.0.0.245 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-cssvn subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9a7f6153a0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=616 identityLabels="k8s:app.kubernetes.io/component=cainjector,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cainjector,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cainjector,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.245 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-cssvn subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=webhook;k8s:app.kubernetes.io/component=webhook;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=webhook;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6ad118f0d0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=53 identity=45724 identityLabels="k8s:app.kubernetes.io/component=webhook,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=webhook,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=webhook,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.95 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-z88rz oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6ad118f0d0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=53 identity=45724 ipv4=10.0.0.95 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-z88rz subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Rewrote endpoint BPF program" containerID=6ad118f0d0 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=53 identity=45724 ipv4=10.0.0.95 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-z88rz subsys=endpoint level=info msg="Successful endpoint creation" containerID=6ad118f0d0 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=53 identity=45724 ipv4=10.0.0.95 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-z88rz subsys=daemon level=info msg="Allocated new global key" key="k8s:app=cert-manager;k8s:app.kubernetes.io/component=controller;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=cert-manager;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f44859dbae datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1119 identity=15880 identityLabels="k8s:app.kubernetes.io/component=controller,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cert-manager,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cert-manager,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.146 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-fs5h4 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f44859dbae datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1119 identity=15880 ipv4=10.0.0.146 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-fs5h4 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Create endpoint request" addressing="&{10.0.0.160 b5e1da17-db99-4761-aa39-d0d961a20528 default }" containerID=4ca12492e4414f7cfcd917317202061a0d78f59388006d22e7978a61a6d4f328 datapathConfiguration="&{false false false false false }" interface=lxc542d3e1c59ff k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-685tl labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4ca12492e4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1931 ipv4=10.0.0.160 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-685tl subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4ca12492e4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1931 identityLabels="k8s:app=rook-ceph-operator,k8s:helm.sh/chart=rook-ceph-v1.15.9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph,k8s:io.cilium.k8s.namespace.labels.name=rook-ceph,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system,k8s:io.kubernetes.pod.namespace=rook-ceph" ipv4=10.0.0.160 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-685tl subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f44859dbae datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1119 identity=15880 ipv4=10.0.0.146 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-fs5h4 subsys=endpoint level=info msg="Successful endpoint creation" containerID=f44859dbae datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1119 identity=15880 ipv4=10.0.0.146 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-fs5h4 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.28 12f34ec8-d788-4b0f-a1b3-3c43a7afcbca default }" containerID=49d55b9b41a7e89bac667961faf4899f8827b855e3dfcaf43725776b8504c718 datapathConfiguration="&{false false false false false }" interface=lxc45ac13f34835 k8sPodName=cert-manager/cert-manager-startupapicheck-brzx8 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=49d55b9b41 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2148 ipv4=10.0.0.28 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-brzx8 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=49d55b9b41 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2148 identityLabels="k8s:app.kubernetes.io/component=startupapicheck,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=startupapicheck,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=startupapicheck,k8s:batch.kubernetes.io/controller-uid=ea3c3c3d-d84c-4e78-8c2b-f61284753619,k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck,k8s:controller-uid=ea3c3c3d-d84c-4e78-8c2b-f61284753619,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck,k8s:io.kubernetes.pod.namespace=cert-manager,k8s:job-name=cert-manager-startupapicheck" ipv4=10.0.0.28 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-brzx8 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=cainjector;k8s:app.kubernetes.io/component=cainjector;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=cainjector;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9a7f6153a0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=616 identity=33519 identityLabels="k8s:app.kubernetes.io/component=cainjector,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cainjector,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cainjector,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.245 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-cssvn oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9a7f6153a0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=616 identity=33519 ipv4=10.0.0.245 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-cssvn subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:rook-ceph k8s:io.cilium.k8s.namespace.labels.name:rook-ceph]" subsys=crd-allocator level=info msg="Rewrote endpoint BPF program" containerID=9a7f6153a0 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=616 identity=33519 ipv4=10.0.0.245 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-cssvn subsys=endpoint level=info msg="Successful endpoint creation" containerID=9a7f6153a0 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=616 identity=33519 ipv4=10.0.0.245 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-cssvn subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=4ca12492e4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1931 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.160 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-685tl line=611 subsys=endpoint level=info msg="Invalid state transition skipped" containerID=49d55b9b41 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2148 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.28 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-brzx8 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=rook-ceph-operator;k8s:helm.sh/chart=rook-ceph-v1.15.9;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph;k8s:io.cilium.k8s.namespace.labels.name=rook-ceph;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system;k8s:io.kubernetes.pod.namespace=rook-ceph;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4ca12492e4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1931 identity=13891 identityLabels="k8s:app=rook-ceph-operator,k8s:helm.sh/chart=rook-ceph-v1.15.9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph,k8s:io.cilium.k8s.namespace.labels.name=rook-ceph,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system,k8s:io.kubernetes.pod.namespace=rook-ceph" ipv4=10.0.0.160 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-685tl oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4ca12492e4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1931 identity=13891 ipv4=10.0.0.160 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-685tl subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Rewrote endpoint BPF program" containerID=4ca12492e4 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1931 identity=13891 ipv4=10.0.0.160 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-685tl subsys=endpoint level=info msg="Successful endpoint creation" containerID=4ca12492e4 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1931 identity=13891 ipv4=10.0.0.160 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-685tl subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=49d55b9b41 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2148 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.28 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-brzx8 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=startupapicheck;k8s:app.kubernetes.io/component=startupapicheck;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=startupapicheck;k8s:app.kubernetes.io/version=v1.11.5;k8s:batch.kubernetes.io/controller-uid=ea3c3c3d-d84c-4e78-8c2b-f61284753619;k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck;k8s:controller-uid=ea3c3c3d-d84c-4e78-8c2b-f61284753619;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck;k8s:io.kubernetes.pod.namespace=cert-manager;k8s:job-name=cert-manager-startupapicheck;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=49d55b9b41 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2148 identity=422 identityLabels="k8s:app.kubernetes.io/component=startupapicheck,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=startupapicheck,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=startupapicheck,k8s:batch.kubernetes.io/controller-uid=ea3c3c3d-d84c-4e78-8c2b-f61284753619,k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck,k8s:controller-uid=ea3c3c3d-d84c-4e78-8c2b-f61284753619,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck,k8s:io.kubernetes.pod.namespace=cert-manager,k8s:job-name=cert-manager-startupapicheck" ipv4=10.0.0.28 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-brzx8 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=49d55b9b41 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2148 identity=422 ipv4=10.0.0.28 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-brzx8 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=49d55b9b41 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2148 identity=422 ipv4=10.0.0.28 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-brzx8 subsys=endpoint level=info msg="Successful endpoint creation" containerID=49d55b9b41 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2148 identity=422 ipv4=10.0.0.28 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-brzx8 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3398 identity=1 identityLabels="k8s:feature.node.kubernetes.io/cpu-cpuid.ADX=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AESNI=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AVX2=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AVX=true,k8s:feature.node.kubernetes.io/cpu-cpuid.CLZERO=true,k8s:feature.node.kubernetes.io/cpu-cpuid.CMPXCHG8=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FMA3=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FXSR=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FXSROPT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.HYPERVISOR=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IA32_ARCH_CAP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IBPB=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IBRS=true,k8s:feature.node.kubernetes.io/cpu-cpuid.LAHF=true,k8s:feature.node.kubernetes.io/cpu-cpuid.MOVBE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.NRIPS=true,k8s:feature.node.kubernetes.io/cpu-cpuid.OSXSAVE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SHA=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SPEC_CTRL_SSBD=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SSE4A=true,k8s:feature.node.kubernetes.io/cpu-cpuid.STIBP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SVM=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SVMNP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SYSCALL=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SYSEE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.TOPEXT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.WBNOINVD=true,k8s:feature.node.kubernetes.io/cpu-cpuid.X87=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XGETBV1=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVEC=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVEOPT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVES=true,k8s:feature.node.kubernetes.io/cpu-hardware_multithreading=false,k8s:feature.node.kubernetes.io/cpu-model.family=23,k8s:feature.node.kubernetes.io/cpu-model.id=49,k8s:feature.node.kubernetes.io/cpu-model.vendor_id=AMD,k8s:feature.node.kubernetes.io/kernel-config.NO_HZ=true,k8s:feature.node.kubernetes.io/kernel-config.NO_HZ_IDLE=true,k8s:feature.node.kubernetes.io/kernel-version.full=5.15.0-176-generic,k8s:feature.node.kubernetes.io/kernel-version.major=5,k8s:feature.node.kubernetes.io/kernel-version.minor=15,k8s:feature.node.kubernetes.io/kernel-version.revision=0,k8s:feature.node.kubernetes.io/pci-0300_1af4.present=true,k8s:feature.node.kubernetes.io/system-os_release.ID=ubuntu,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID.major=22,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID.minor=04,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID=22.04,k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,k8s:openstack-compute-node=enabled,k8s:openstack-control-plane=enabled,k8s:openvswitch=enabled,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_hostns_03398 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_hostns_03398 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_hostns_03398 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_hostns_03398:pending" subsys=bpf level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_netdev_00005 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_netdev_00005 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005:pending" subsys=bpf level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3398 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Delete endpoint request" containerID=84760f9709 endpointID=686 k8sNamespace=ingress-nginx k8sPodName=ingress-nginx-admission-create-cbcpb subsys=daemon level=info msg="Releasing key" key="[k8s:app.kubernetes.io/component=admission-webhook k8s:app.kubernetes.io/instance=ingress-nginx k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=ingress-nginx k8s:app.kubernetes.io/part-of=ingress-nginx k8s:app.kubernetes.io/version=1.12.1 k8s:batch.kubernetes.io/controller-uid=f3df14b3-278a-4f8c-a222-3ee89c87d478 k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create k8s:controller-uid=f3df14b3-278a-4f8c-a222-3ee89c87d478 k8s:helm.sh/chart=ingress-nginx-4.12.1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission k8s:io.kubernetes.pod.namespace=ingress-nginx k8s:job-name=ingress-nginx-admission-create]" subsys=allocator level=info msg="Removed endpoint" containerID=84760f9709 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=686 identity=33039 ipv4=10.0.0.220 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-cbcpb subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.41 81b3d453-d1f0-40f1-ad16-6f995b4cafd0 default }" containerID=6a94876ae202989463bfb76f09abe4dcc669019de789e44d076a1d6ab7e73578 datapathConfiguration="&{false false false false false }" interface=lxc0e18b9d918e6 k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-5h477 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6a94876ae2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1627 ipv4=10.0.0.41 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-5h477 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6a94876ae2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1627 identityLabels="k8s:app.kubernetes.io/component=default-backend,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend,k8s:io.kubernetes.pod.namespace=ingress-nginx" ipv4=10.0.0.41 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-5h477 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=default-backend;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend;k8s:io.kubernetes.pod.namespace=ingress-nginx;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6a94876ae2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1627 identity=18726 identityLabels="k8s:app.kubernetes.io/component=default-backend,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend,k8s:io.kubernetes.pod.namespace=ingress-nginx" ipv4=10.0.0.41 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-5h477 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6a94876ae2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1627 identity=18726 ipv4=10.0.0.41 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-5h477 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=6a94876ae2 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1627 identity=18726 ipv4=10.0.0.41 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-5h477 subsys=endpoint level=info msg="Successful endpoint creation" containerID=6a94876ae2 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1627 identity=18726 ipv4=10.0.0.41 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-5h477 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.226 c98a6b32-6be4-47b6-a05e-bbfa3db6db48 default }" containerID=2226d0a8570569ab7627e85fc1c4af5171c4347f248bd2ce842c888a5f3c47ab datapathConfiguration="&{false false false false false }" interface=lxc68df8c703a7b k8sPodName=ingress-nginx/ingress-nginx-admission-patch-82sst labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2226d0a857 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2511 ipv4=10.0.0.226 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-82sst subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2226d0a857 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2511 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=344f52d7-5579-423d-af97-63ff0f0738aa,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch,k8s:controller-uid=344f52d7-5579-423d-af97-63ff0f0738aa,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-patch" ipv4=10.0.0.226 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-82sst subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=admission-webhook;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:batch.kubernetes.io/controller-uid=344f52d7-5579-423d-af97-63ff0f0738aa;k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch;k8s:controller-uid=344f52d7-5579-423d-af97-63ff0f0738aa;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission;k8s:io.kubernetes.pod.namespace=ingress-nginx;k8s:job-name=ingress-nginx-admission-patch;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2226d0a857 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2511 identity=41560 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=344f52d7-5579-423d-af97-63ff0f0738aa,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch,k8s:controller-uid=344f52d7-5579-423d-af97-63ff0f0738aa,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-patch" ipv4=10.0.0.226 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-82sst oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2226d0a857 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2511 identity=41560 ipv4=10.0.0.226 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-82sst subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=2226d0a857 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2511 identity=41560 ipv4=10.0.0.226 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-82sst subsys=endpoint level=info msg="Successful endpoint creation" containerID=2226d0a857 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2511 identity=41560 ipv4=10.0.0.226 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-82sst subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=2226d0a857 endpointID=2511 k8sNamespace=ingress-nginx k8sPodName=ingress-nginx-admission-patch-82sst subsys=daemon level=info msg="Releasing key" key="[k8s:app.kubernetes.io/component=admission-webhook k8s:app.kubernetes.io/instance=ingress-nginx k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=ingress-nginx k8s:app.kubernetes.io/part-of=ingress-nginx k8s:app.kubernetes.io/version=1.12.1 k8s:batch.kubernetes.io/controller-uid=344f52d7-5579-423d-af97-63ff0f0738aa k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch k8s:controller-uid=344f52d7-5579-423d-af97-63ff0f0738aa k8s:helm.sh/chart=ingress-nginx-4.12.1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission k8s:io.kubernetes.pod.namespace=ingress-nginx k8s:job-name=ingress-nginx-admission-patch]" subsys=allocator level=info msg="Removed endpoint" containerID=2226d0a857 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2511 identity=41560 ipv4=10.0.0.226 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-82sst subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.201 da74d073-821a-43ee-8d90-8624510d5bde default }" containerID=79a12f4530725d93043ab90c868758adb37281efd4dedc95ba33d3e1bcdc082c datapathConfiguration="&{false false false false false }" interface=lxce62f3306df73 k8sPodName=openstack/ovn-northd-7659bd74f8-j5km6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=79a12f4530 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2582 ipv4=10.0.0.201 ipv6= k8sPodName=openstack/ovn-northd-7659bd74f8-j5km6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=79a12f4530 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2582 identityLabels="k8s:application=ovn,k8s:component=ovn-northd,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ovn-northd,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=ovn" ipv4=10.0.0.201 ipv6= k8sPodName=openstack/ovn-northd-7659bd74f8-j5km6 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=ovn;k8s:component=ovn-northd;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ovn-northd;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=ovn;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=79a12f4530 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2582 identity=18466 identityLabels="k8s:application=ovn,k8s:component=ovn-northd,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ovn-northd,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=ovn" ipv4=10.0.0.201 ipv6= k8sPodName=openstack/ovn-northd-7659bd74f8-j5km6 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=79a12f4530 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2582 identity=18466 ipv4=10.0.0.201 ipv6= k8sPodName=openstack/ovn-northd-7659bd74f8-j5km6 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=79a12f4530 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2582 identity=18466 ipv4=10.0.0.201 ipv6= k8sPodName=openstack/ovn-northd-7659bd74f8-j5km6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=79a12f4530 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2582 identity=18466 ipv4=10.0.0.201 ipv6= k8sPodName=openstack/ovn-northd-7659bd74f8-j5km6 subsys=daemon level=info msg="Delete endpoint request" containerID=49d55b9b41 endpointID=2148 k8sNamespace=cert-manager k8sPodName=cert-manager-startupapicheck-brzx8 subsys=daemon level=info msg="Releasing key" key="[k8s:app=startupapicheck k8s:app.kubernetes.io/component=startupapicheck k8s:app.kubernetes.io/instance=cert-manager k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=startupapicheck k8s:app.kubernetes.io/version=v1.11.5 k8s:batch.kubernetes.io/controller-uid=ea3c3c3d-d84c-4e78-8c2b-f61284753619 k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck k8s:controller-uid=ea3c3c3d-d84c-4e78-8c2b-f61284753619 k8s:helm.sh/chart=cert-manager-v1.11.5 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager k8s:io.cilium.k8s.namespace.labels.name=cert-manager k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck k8s:io.kubernetes.pod.namespace=cert-manager k8s:job-name=cert-manager-startupapicheck]" subsys=allocator level=info msg="Removed endpoint" containerID=49d55b9b41 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2148 identity=422 ipv4=10.0.0.28 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-brzx8 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.54 2a74e6e6-c829-4950-a8d3-b7f9b60f63aa default }" containerID=ccea5a5276cbe06e5df2ffd04ef8f8462a644337c95382666769d994b7f237f3 datapathConfiguration="&{false false false false false }" interface=lxc69684ba0e05f k8sPodName=openstack/pxc-operator-69cb5bbdb9-t7tpc labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ccea5a5276 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=296 ipv4=10.0.0.54 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-t7tpc subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ccea5a5276 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=296 identityLabels="k8s:app.kubernetes.io/component=operator,k8s:app.kubernetes.io/instance=pxc-operator,k8s:app.kubernetes.io/name=pxc-operator,k8s:app.kubernetes.io/part-of=pxc-operator,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.54 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-t7tpc subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=operator;k8s:app.kubernetes.io/instance=pxc-operator;k8s:app.kubernetes.io/name=pxc-operator;k8s:app.kubernetes.io/part-of=pxc-operator;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ccea5a5276 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=296 identity=9394 identityLabels="k8s:app.kubernetes.io/component=operator,k8s:app.kubernetes.io/instance=pxc-operator,k8s:app.kubernetes.io/name=pxc-operator,k8s:app.kubernetes.io/part-of=pxc-operator,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.54 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-t7tpc oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ccea5a5276 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=296 identity=9394 ipv4=10.0.0.54 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-t7tpc subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ccea5a5276 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=296 identity=9394 ipv4=10.0.0.54 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-t7tpc subsys=endpoint level=info msg="Successful endpoint creation" containerID=ccea5a5276 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=296 identity=9394 ipv4=10.0.0.54 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-t7tpc subsys=daemon level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"rabbitmq-operator\",\"k8s:app.kubernetes.io/instance\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/name\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/part-of\":\"rabbitmq\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=rabbitmq-cluster-operator k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=7745cac4-cc8a-4d46-980c-864f3679c9f7] Description:}]" policyAddRequest=08844603-2de5-48dd-b2ce-8bdbde4097b7 subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=08844603-2de5-48dd-b2ce-8bdbde4097b7 policyRevision=2 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=rabbitmq-cluster-operator subsys=k8s-watcher level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"messaging-topology-operator\",\"k8s:app.kubernetes.io/instance\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/name\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/part-of\":\"rabbitmq\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:9443 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=rabbitmq-messaging-topology-operator k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=47e7c9d4-d7f5-4c67-bc61-64cde9127acd] Description:}]" policyAddRequest=80c75ee2-e33c-4c5b-bb0d-97fa383895d5 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=rabbitmq-messaging-topology-operator subsys=k8s-watcher level=info msg="Policy imported via API, recalculating..." policyAddRequest=80c75ee2-e33c-4c5b-bb0d-97fa383895d5 policyRevision=3 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.225 70220d5e-c55b-4330-a083-ac9d22ece90c default }" containerID=20b818be764bbaa018e8afd2f9289686607d71800eda3e35d4108e88033da89c datapathConfiguration="&{false false false false false }" interface=lxcdfc4cbf49225 k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-hc4tf labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=20b818be76 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1206 ipv4=10.0.0.225 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-hc4tf subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=20b818be76 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1206 identityLabels="k8s:app.kubernetes.io/component=rabbitmq-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=2.16.1,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.225 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-hc4tf subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=20b818be76 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1206 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.225 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-hc4tf line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq-operator;k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=rabbitmq-cluster-operator;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:app.kubernetes.io/version=2.16.1;k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=20b818be76 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1206 identity=32249 identityLabels="k8s:app.kubernetes.io/component=rabbitmq-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=2.16.1,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.225 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-hc4tf oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=20b818be76 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1206 identity=32249 ipv4=10.0.0.225 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-hc4tf subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=20b818be76 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=1206 identity=32249 ipv4=10.0.0.225 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-hc4tf subsys=endpoint level=info msg="Successful endpoint creation" containerID=20b818be76 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=1206 identity=32249 ipv4=10.0.0.225 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-hc4tf subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.184 4ec50e29-d060-4344-9bc5-c03756c9e11a default }" containerID=319a77436b587e8c0c4ce63f43e73db197405bcab4f3bf64dd21950b50053661 datapathConfiguration="&{false false false false false }" interface=lxc7eca91606940 k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-6dq2l labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=319a77436b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=251 ipv4=10.0.0.184 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-6dq2l subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=319a77436b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=251 identityLabels="k8s:app.kubernetes.io/component=messaging-topology-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=1.17.4,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.184 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-6dq2l subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=messaging-topology-operator;k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=rabbitmq-cluster-operator;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:app.kubernetes.io/version=1.17.4;k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=319a77436b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=251 identity=31429 identityLabels="k8s:app.kubernetes.io/component=messaging-topology-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=1.17.4,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.184 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-6dq2l oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=319a77436b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=251 identity=31429 ipv4=10.0.0.184 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-6dq2l subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=319a77436b datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=251 identity=31429 ipv4=10.0.0.184 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-6dq2l subsys=endpoint level=info msg="Successful endpoint creation" containerID=319a77436b datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=251 identity=31429 ipv4=10.0.0.184 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-6dq2l subsys=daemon level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.32 b83212f7-94bd-4868-9e9f-0e5473083c73 default }" containerID=ebfb098988a4c418e9c6e0a1c85139f830c3031baff6ba360f062772957233ce datapathConfiguration="&{false false false false false }" interface=lxccbdab8803c89 k8sPodName=local-path-storage/local-path-provisioner-679c578f5-vgjw2 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ebfb098988 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2282 ipv4=10.0.0.32 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-vgjw2 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ebfb098988 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2282 identityLabels="k8s:app.kubernetes.io/instance=local-path-provisioner,k8s:app.kubernetes.io/name=local-path-provisioner,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.32 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-vgjw2 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:local-path-storage k8s:io.cilium.k8s.namespace.labels.name:local-path-storage]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=local-path-provisioner;k8s:app.kubernetes.io/name=local-path-provisioner;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ebfb098988 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2282 identity=19587 identityLabels="k8s:app.kubernetes.io/instance=local-path-provisioner,k8s:app.kubernetes.io/name=local-path-provisioner,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.32 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-vgjw2 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ebfb098988 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2282 identity=19587 ipv4=10.0.0.32 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-vgjw2 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=ebfb098988 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=2282 identity=19587 ipv4=10.0.0.32 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-vgjw2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=ebfb098988 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=2282 identity=19587 ipv4=10.0.0.32 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-vgjw2 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.37 233ce495-1dfc-431b-8ae0-872a53987fd3 default }" containerID=90e9d6cfa2f85bcaf3cbfadd538594cb7e122caad7a4ff8c2f0fc2f866a5e6bc datapathConfiguration="&{false false false false false }" interface=lxc232894de68d6 k8sPodName=local-path-storage/helper-pod-create-pvc-036e75cc-49ed-47dc-9268-a6e732fe67ed labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=90e9d6cfa2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1410 ipv4=10.0.0.37 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-036e75cc-49ed-47dc-9268-a6e732fe67ed subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=90e9d6cfa2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1410 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.37 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-036e75cc-49ed-47dc-9268-a6e732fe67ed subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:local-path-storage k8s:io.cilium.k8s.namespace.labels.name:local-path-storage]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=90e9d6cfa2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1410 identity=1361 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.37 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-036e75cc-49ed-47dc-9268-a6e732fe67ed oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=90e9d6cfa2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1410 identity=1361 ipv4=10.0.0.37 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-036e75cc-49ed-47dc-9268-a6e732fe67ed subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.24 f6bd04b2-023c-49db-8813-42228a35f8ec default }" containerID=a83b5993840242bcce18b957f7eb27fa0adabacb48574c5ce53655a78d34a067 datapathConfiguration="&{false false false false false }" interface=lxce3acdb3590e7 k8sPodName=local-path-storage/helper-pod-create-pvc-a85c726e-69a4-4238-8111-6c015b177e51 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a83b599384 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1117 ipv4=10.0.0.24 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a85c726e-69a4-4238-8111-6c015b177e51 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a83b599384 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1117 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.24 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a85c726e-69a4-4238-8111-6c015b177e51 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=a83b599384 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1117 identity=1361 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.24 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a85c726e-69a4-4238-8111-6c015b177e51 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a83b599384 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1117 identity=1361 ipv4=10.0.0.24 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a85c726e-69a4-4238-8111-6c015b177e51 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=90e9d6cfa2 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=1410 identity=1361 ipv4=10.0.0.37 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-036e75cc-49ed-47dc-9268-a6e732fe67ed subsys=endpoint level=info msg="Successful endpoint creation" containerID=90e9d6cfa2 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=1410 identity=1361 ipv4=10.0.0.37 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-036e75cc-49ed-47dc-9268-a6e732fe67ed subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=a83b599384 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=1117 identity=1361 ipv4=10.0.0.24 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a85c726e-69a4-4238-8111-6c015b177e51 subsys=endpoint level=info msg="Successful endpoint creation" containerID=a83b599384 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=1117 identity=1361 ipv4=10.0.0.24 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a85c726e-69a4-4238-8111-6c015b177e51 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=a83b599384 endpointID=1117 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-a85c726e-69a4-4238-8111-6c015b177e51 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=a83b599384 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=1117 identity=1361 ipv4=10.0.0.24 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a85c726e-69a4-4238-8111-6c015b177e51 subsys=endpoint level=info msg="Delete endpoint request" containerID=90e9d6cfa2 endpointID=1410 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-036e75cc-49ed-47dc-9268-a6e732fe67ed subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=90e9d6cfa2 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=1410 identity=1361 ipv4=10.0.0.37 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-036e75cc-49ed-47dc-9268-a6e732fe67ed subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.62 4d65b1d8-d3a3-4c28-8de3-06b4f2b9eab5 default }" containerID=0f594680e99edd06ff7b286713e4409a16393bf681faa4edc85780e240ae7a55 datapathConfiguration="&{false false false false false }" interface=lxc1003e147014a k8sPodName=openstack/ovn-ovsdb-nb-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0f594680e9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1181 ipv4=10.0.0.62 ipv6= k8sPodName=openstack/ovn-ovsdb-nb-0 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.215 e632cf36-09ae-41b1-9fc0-26b8aee418a5 default }" containerID=1988b3fd52deb6775391dc8ae5f76db74b22ea7a5b9c928d508792b76d1a1aab datapathConfiguration="&{false false false false false }" interface=lxc7375ae51ed62 k8sPodName=openstack/ovn-ovsdb-sb-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1988b3fd52 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=715 ipv4=10.0.0.215 ipv6= k8sPodName=openstack/ovn-ovsdb-sb-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0f594680e9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1181 identityLabels="k8s:application=ovn,k8s:apps.kubernetes.io/pod-index=0,k8s:component=ovn-ovsdb-nb,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ovn-ovsdb-nb,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=ovn,k8s:statefulset.kubernetes.io/pod-name=ovn-ovsdb-nb-0" ipv4=10.0.0.62 ipv6= k8sPodName=openstack/ovn-ovsdb-nb-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack]" subsys=crd-allocator level=info msg="Resolving identity labels (blocking)" containerID=1988b3fd52 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=715 identityLabels="k8s:application=ovn,k8s:apps.kubernetes.io/pod-index=0,k8s:component=ovn-ovsdb-sb,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ovn-ovsdb-sb,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=ovn,k8s:statefulset.kubernetes.io/pod-name=ovn-ovsdb-sb-0" ipv4=10.0.0.215 ipv6= k8sPodName=openstack/ovn-ovsdb-sb-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=0f594680e9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1181 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.62 ipv6= k8sPodName=openstack/ovn-ovsdb-nb-0 line=611 subsys=endpoint level=info msg="Invalid state transition skipped" containerID=1988b3fd52 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=715 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.215 ipv6= k8sPodName=openstack/ovn-ovsdb-sb-0 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=ovn;k8s:apps.kubernetes.io/pod-index=0;k8s:component=ovn-ovsdb-nb;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ovn-ovsdb-nb;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=ovn;k8s:statefulset.kubernetes.io/pod-name=ovn-ovsdb-nb-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0f594680e9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1181 identity=4011 identityLabels="k8s:application=ovn,k8s:apps.kubernetes.io/pod-index=0,k8s:component=ovn-ovsdb-nb,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ovn-ovsdb-nb,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=ovn,k8s:statefulset.kubernetes.io/pod-name=ovn-ovsdb-nb-0" ipv4=10.0.0.62 ipv6= k8sPodName=openstack/ovn-ovsdb-nb-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0f594680e9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1181 identity=4011 ipv4=10.0.0.62 ipv6= k8sPodName=openstack/ovn-ovsdb-nb-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=ovn;k8s:apps.kubernetes.io/pod-index=0;k8s:component=ovn-ovsdb-sb;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ovn-ovsdb-sb;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=ovn;k8s:statefulset.kubernetes.io/pod-name=ovn-ovsdb-sb-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1988b3fd52 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=715 identity=8148 identityLabels="k8s:application=ovn,k8s:apps.kubernetes.io/pod-index=0,k8s:component=ovn-ovsdb-sb,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ovn-ovsdb-sb,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=ovn,k8s:statefulset.kubernetes.io/pod-name=ovn-ovsdb-sb-0" ipv4=10.0.0.215 ipv6= k8sPodName=openstack/ovn-ovsdb-sb-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1988b3fd52 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=715 identity=8148 ipv4=10.0.0.215 ipv6= k8sPodName=openstack/ovn-ovsdb-sb-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=1988b3fd52 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=715 identity=8148 ipv4=10.0.0.215 ipv6= k8sPodName=openstack/ovn-ovsdb-sb-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=1988b3fd52 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=715 identity=8148 ipv4=10.0.0.215 ipv6= k8sPodName=openstack/ovn-ovsdb-sb-0 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=0f594680e9 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=1181 identity=4011 ipv4=10.0.0.62 ipv6= k8sPodName=openstack/ovn-ovsdb-nb-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=0f594680e9 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=1181 identity=4011 ipv4=10.0.0.62 ipv6= k8sPodName=openstack/ovn-ovsdb-nb-0 subsys=daemon level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/instance\":\"valkey\",\"k8s:app.kubernetes.io/name\":\"valkey\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:6379 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:} {Ports:[{Port:26379 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:} {IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:9121 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=valkey k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=6611d1f5-dffd-46dd-ab4e-9aab93a8e9fd] Description:}]" policyAddRequest=9aa5136d-3401-4f14-8686-3e7722d80571 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=valkey subsys=k8s-watcher level=info msg="Policy imported via API, recalculating..." policyAddRequest=9aa5136d-3401-4f14-8686-3e7722d80571 policyRevision=4 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.85 6f872bda-2220-4788-8e87-c69af78cfe4f default }" containerID=1aadf496c1755870bb86b71089f7c145d467bd527d61d22bfaee7a6b46f80268 datapathConfiguration="&{false false false false false }" interface=lxc0ef475e6595c k8sPodName=local-path-storage/helper-pod-create-pvc-d0cd53dc-5338-43f6-a9fd-5db87e67f033 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1aadf496c1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=870 ipv4=10.0.0.85 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-d0cd53dc-5338-43f6-a9fd-5db87e67f033 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1aadf496c1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=870 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.85 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-d0cd53dc-5338-43f6-a9fd-5db87e67f033 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1aadf496c1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=870 identity=1361 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.85 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-d0cd53dc-5338-43f6-a9fd-5db87e67f033 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1aadf496c1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=870 identity=1361 ipv4=10.0.0.85 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-d0cd53dc-5338-43f6-a9fd-5db87e67f033 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=1aadf496c1 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=870 identity=1361 ipv4=10.0.0.85 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-d0cd53dc-5338-43f6-a9fd-5db87e67f033 subsys=endpoint level=info msg="Successful endpoint creation" containerID=1aadf496c1 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=870 identity=1361 ipv4=10.0.0.85 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-d0cd53dc-5338-43f6-a9fd-5db87e67f033 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.86 e14044e5-ec11-424e-bfe4-f9e4189134c5 default }" containerID=c07888b3001ff7fec338fc605ca42ef30665c03f76a9e607506a18b8ff11a61d datapathConfiguration="&{false false false false false }" interface=lxcd34817ee6f56 k8sPodName=monitoring/loki-gateway-cf54cb88c-9lvsg labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c07888b300 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2058 ipv4=10.0.0.86 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-9lvsg subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c07888b300 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2058 identityLabels="k8s:app.kubernetes.io/component=gateway,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.86 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-9lvsg subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=gateway;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c07888b300 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2058 identity=38611 identityLabels="k8s:app.kubernetes.io/component=gateway,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.86 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-9lvsg oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c07888b300 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2058 identity=38611 ipv4=10.0.0.86 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-9lvsg subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.77 df5e3afe-416b-462b-8428-cdb5844f6fd8 default }" containerID=0abc5766cce3e057b6535592ad878d75e15fe109fb3908f0b05aeaaa83a3cd2e datapathConfiguration="&{false false false false false }" interface=lxc2e01858da631 k8sPodName=monitoring/loki-results-cache-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0abc5766cc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=501 ipv4=10.0.0.77 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0abc5766cc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=501 identityLabels="k8s:app.kubernetes.io/component=memcached-results-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-results-cache,k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0" ipv4=10.0.0.77 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=memcached-results-cache;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:name=memcached-results-cache;k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0abc5766cc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=501 identity=42894 identityLabels="k8s:app.kubernetes.io/component=memcached-results-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-results-cache,k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0" ipv4=10.0.0.77 ipv6= k8sPodName=monitoring/loki-results-cache-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0abc5766cc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=501 identity=42894 ipv4=10.0.0.77 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c07888b300 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2058 identity=38611 ipv4=10.0.0.86 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-9lvsg subsys=endpoint level=info msg="Successful endpoint creation" containerID=c07888b300 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2058 identity=38611 ipv4=10.0.0.86 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-9lvsg subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=0abc5766cc datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=501 identity=42894 ipv4=10.0.0.77 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=0abc5766cc datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=501 identity=42894 ipv4=10.0.0.77 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.116 adae54c0-69e1-45fc-83b6-396dd46630a5 default }" containerID=681f66471366b283c2c050c9f24978d2582046c4d55e2835c8217a048b512d30 datapathConfiguration="&{false false false false false }" interface=lxc34ced6b64f6f k8sPodName=local-path-storage/helper-pod-create-pvc-c8b7cc65-858f-4bcc-9ceb-14910e0ad601 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=681f664713 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=411 ipv4=10.0.0.116 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-c8b7cc65-858f-4bcc-9ceb-14910e0ad601 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=681f664713 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=411 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.116 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-c8b7cc65-858f-4bcc-9ceb-14910e0ad601 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=681f664713 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=411 identity=1361 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.116 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-c8b7cc65-858f-4bcc-9ceb-14910e0ad601 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=681f664713 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=411 identity=1361 ipv4=10.0.0.116 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-c8b7cc65-858f-4bcc-9ceb-14910e0ad601 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.55 30a15a8b-97c8-4d51-a634-fae4eea4ac1c default }" containerID=ea4a10ff2b13e280119cc435bc15123408cad10cf6d565601937e1baf0798a72 datapathConfiguration="&{false false false false false }" interface=lxcaf47b1c062c4 k8sPodName=openstack/percona-xtradb-haproxy-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ea4a10ff2b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1334 ipv4=10.0.0.55 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ea4a10ff2b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1334 identityLabels="k8s:app.kubernetes.io/component=haproxy,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0" ipv4=10.0.0.55 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=haproxy;k8s:app.kubernetes.io/instance=percona-xtradb;k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator;k8s:app.kubernetes.io/name=percona-xtradb-cluster;k8s:app.kubernetes.io/part-of=percona-xtradb-cluster;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ea4a10ff2b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1334 identity=5295 identityLabels="k8s:app.kubernetes.io/component=haproxy,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0" ipv4=10.0.0.55 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ea4a10ff2b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1334 identity=5295 ipv4=10.0.0.55 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=681f664713 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=411 identity=1361 ipv4=10.0.0.116 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-c8b7cc65-858f-4bcc-9ceb-14910e0ad601 subsys=endpoint level=info msg="Successful endpoint creation" containerID=681f664713 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=411 identity=1361 ipv4=10.0.0.116 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-c8b7cc65-858f-4bcc-9ceb-14910e0ad601 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=ea4a10ff2b datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1334 identity=5295 ipv4=10.0.0.55 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=ea4a10ff2b datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1334 identity=5295 ipv4=10.0.0.55 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.226 0bad5335-2e48-4d89-aec9-636f884931f2 default }" containerID=0d1eb615a2e051c69c514599ed66b1e95762a6616c9a9a23f720ffb23649cc9f datapathConfiguration="&{false false false false false }" interface=lxc56e4176291af k8sPodName=monitoring/loki-chunks-cache-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0d1eb615a2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=765 ipv4=10.0.0.226 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0d1eb615a2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=765 identityLabels="k8s:app.kubernetes.io/component=memcached-chunks-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-chunks-cache,k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0" ipv4=10.0.0.226 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Create endpoint request" addressing="&{10.0.0.167 5434a5ab-b183-40a5-a1cf-5005e1e40ecb default }" containerID=7ad238cd62a952c6812766b930a99810a8ff277edc8440de1ee3c06199a88d89 datapathConfiguration="&{false false false false false }" interface=lxc857c188d17b7 k8sPodName=local-path-storage/helper-pod-create-pvc-8fa1a632-9d87-4616-9cd9-dabc3cf85426 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7ad238cd62 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=670 ipv4=10.0.0.167 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-8fa1a632-9d87-4616-9cd9-dabc3cf85426 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7ad238cd62 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=670 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.167 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-8fa1a632-9d87-4616-9cd9-dabc3cf85426 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=7ad238cd62 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=670 identity=1361 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.167 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-8fa1a632-9d87-4616-9cd9-dabc3cf85426 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7ad238cd62 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=670 identity=1361 ipv4=10.0.0.167 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-8fa1a632-9d87-4616-9cd9-dabc3cf85426 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=7ad238cd62 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=670 identity=1361 ipv4=10.0.0.167 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-8fa1a632-9d87-4616-9cd9-dabc3cf85426 subsys=endpoint level=info msg="Successful endpoint creation" containerID=7ad238cd62 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=670 identity=1361 ipv4=10.0.0.167 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-8fa1a632-9d87-4616-9cd9-dabc3cf85426 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=0d1eb615a2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=765 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.226 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=memcached-chunks-cache;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:name=memcached-chunks-cache;k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0d1eb615a2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=765 identity=20332 identityLabels="k8s:app.kubernetes.io/component=memcached-chunks-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-chunks-cache,k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0" ipv4=10.0.0.226 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0d1eb615a2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=765 identity=20332 ipv4=10.0.0.226 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=0d1eb615a2 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=765 identity=20332 ipv4=10.0.0.226 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=0d1eb615a2 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=765 identity=20332 ipv4=10.0.0.226 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=681f664713 endpointID=411 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-c8b7cc65-858f-4bcc-9ceb-14910e0ad601 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=681f664713 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=411 identity=1361 ipv4=10.0.0.116 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-c8b7cc65-858f-4bcc-9ceb-14910e0ad601 subsys=endpoint level=info msg="Delete endpoint request" containerID=1aadf496c1 endpointID=870 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-d0cd53dc-5338-43f6-a9fd-5db87e67f033 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=1aadf496c1 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=870 identity=1361 ipv4=10.0.0.85 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-d0cd53dc-5338-43f6-a9fd-5db87e67f033 subsys=endpoint level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=7ad238cd62 endpointID=670 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-8fa1a632-9d87-4616-9cd9-dabc3cf85426 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=7ad238cd62 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=670 identity=1361 ipv4=10.0.0.167 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-8fa1a632-9d87-4616-9cd9-dabc3cf85426 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.56 2e01b8b0-ab7e-4284-87b3-5d66f8a61bf9 default }" containerID=6f0bbf9219cd04dcf43c507cce0c1e58edb9b0ad7e5b4e0e069b8cfac45cd14d datapathConfiguration="&{false false false false false }" interface=lxc8d414b20cbf1 k8sPodName=openstack/valkey-node-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6f0bbf9219 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1841 ipv4=10.0.0.56 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6f0bbf9219 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1841 identityLabels="k8s:app.kubernetes.io/component=node,k8s:app.kubernetes.io/instance=valkey,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=valkey,k8s:app.kubernetes.io/version=8.0.2,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=valkey-2.4.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=valkey,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=valkey-node-0" ipv4=10.0.0.56 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=node;k8s:app.kubernetes.io/instance=valkey;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=valkey;k8s:app.kubernetes.io/version=8.0.2;k8s:apps.kubernetes.io/pod-index=0;k8s:helm.sh/chart=valkey-2.4.6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=valkey;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=valkey-node-0;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=6f0bbf9219 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1841 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.56 ipv6= k8sPodName=openstack/valkey-node-0 line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=6f0bbf9219 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1841 identity=62039 identityLabels="k8s:app.kubernetes.io/component=node,k8s:app.kubernetes.io/instance=valkey,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=valkey,k8s:app.kubernetes.io/version=8.0.2,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=valkey-2.4.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=valkey,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=valkey-node-0" ipv4=10.0.0.56 ipv6= k8sPodName=openstack/valkey-node-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6f0bbf9219 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1841 identity=62039 ipv4=10.0.0.56 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=6f0bbf9219 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1841 identity=62039 ipv4=10.0.0.56 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=6f0bbf9219 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1841 identity=62039 ipv4=10.0.0.56 ipv6= k8sPodName=openstack/valkey-node-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.92 4faf58a6-873d-48b4-b0dd-5908b2973665 default }" containerID=128268991e9c73d9a42f6743ba5cb5a563460846cc62937a22fc3e2b66fb9113 datapathConfiguration="&{false false false false false }" interface=lxcb320f982e7ee k8sPodName=monitoring/vector-tvp2k labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=128268991e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=923 ipv4=10.0.0.92 ipv6= k8sPodName=monitoring/vector-tvp2k subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=128268991e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=923 identityLabels="k8s:app.kubernetes.io/component=Agent,k8s:app.kubernetes.io/instance=vector,k8s:app.kubernetes.io/name=vector,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=vector,k8s:io.kubernetes.pod.namespace=monitoring,k8s:vector.dev/exclude=true" ipv4=10.0.0.92 ipv6= k8sPodName=monitoring/vector-tvp2k subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=Agent;k8s:app.kubernetes.io/instance=vector;k8s:app.kubernetes.io/name=vector;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=vector;k8s:io.kubernetes.pod.namespace=monitoring;k8s:vector.dev/exclude=true;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=128268991e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=923 identity=14926 identityLabels="k8s:app.kubernetes.io/component=Agent,k8s:app.kubernetes.io/instance=vector,k8s:app.kubernetes.io/name=vector,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=vector,k8s:io.kubernetes.pod.namespace=monitoring,k8s:vector.dev/exclude=true" ipv4=10.0.0.92 ipv6= k8sPodName=monitoring/vector-tvp2k oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=128268991e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=923 identity=14926 ipv4=10.0.0.92 ipv6= k8sPodName=monitoring/vector-tvp2k subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.182 dd7ef735-a3f8-45d4-a835-d13629bb2c1f default }" containerID=dc9dfd0d6f8b3f37646f9dc2ec5e3268a0ba81ee41a686c9af6305bdd4914da2 datapathConfiguration="&{false false false false false }" interface=lxcaf0c57eb3530 k8sPodName=monitoring/loki-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=dc9dfd0d6f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=915 ipv4=10.0.0.182 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=dc9dfd0d6f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=915 identityLabels="k8s:app.kubernetes.io/component=single-binary,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:app.kubernetes.io/part-of=memberlist,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=loki-0" ipv4=10.0.0.182 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=single-binary;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:app.kubernetes.io/part-of=memberlist;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:statefulset.kubernetes.io/pod-name=loki-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=dc9dfd0d6f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=915 identity=19947 identityLabels="k8s:app.kubernetes.io/component=single-binary,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:app.kubernetes.io/part-of=memberlist,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=loki-0" ipv4=10.0.0.182 ipv6= k8sPodName=monitoring/loki-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=dc9dfd0d6f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=915 identity=19947 ipv4=10.0.0.182 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=128268991e datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=923 identity=14926 ipv4=10.0.0.92 ipv6= k8sPodName=monitoring/vector-tvp2k subsys=endpoint level=info msg="Successful endpoint creation" containerID=128268991e datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=923 identity=14926 ipv4=10.0.0.92 ipv6= k8sPodName=monitoring/vector-tvp2k subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=dc9dfd0d6f datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=915 identity=19947 ipv4=10.0.0.182 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=dc9dfd0d6f datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=915 identity=19947 ipv4=10.0.0.182 ipv6= k8sPodName=monitoring/loki-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.93 ae182478-851d-4094-abcd-ffebaf2e2f7a default }" containerID=7c66346702b9df41bddd26044ad88e05ef26b0afba6b521e7f09da80758b9093 datapathConfiguration="&{false false false false false }" interface=lxc27ee48e7147d k8sPodName=openstack/percona-xtradb-pxc-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7c66346702 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=896 ipv4=10.0.0.93 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7c66346702 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=896 identityLabels="k8s:app.kubernetes.io/component=pxc,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0" ipv4=10.0.0.93 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=pxc;k8s:app.kubernetes.io/instance=percona-xtradb;k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator;k8s:app.kubernetes.io/name=percona-xtradb-cluster;k8s:app.kubernetes.io/part-of=percona-xtradb-cluster;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7c66346702 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=896 identity=3470 identityLabels="k8s:app.kubernetes.io/component=pxc,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0" ipv4=10.0.0.93 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7c66346702 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=896 identity=3470 ipv4=10.0.0.93 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=7c66346702 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=896 identity=3470 ipv4=10.0.0.93 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=7c66346702 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=896 identity=3470 ipv4=10.0.0.93 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Conntrack garbage collector interval recalculated" deleteRatio=0.0006154709790215702 newInterval=7m30s subsys=map-ct level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"keycloak\",\"k8s:app.kubernetes.io/instance\":\"keycloak\",\"k8s:app.kubernetes.io/name\":\"keycloak\",\"k8s:io.kubernetes.pod.namespace\":\"auth-system\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:7800 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:} {Ports:[{Port:8080 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=keycloak k8s:io.cilium.k8s.policy.namespace=auth-system k8s:io.cilium.k8s.policy.uid=92e8164e-ea35-468f-9e37-2cffae72238d] Description:}]" policyAddRequest=8d2fa7ea-941c-478b-a848-441c8e7865c2 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=keycloak subsys=k8s-watcher level=info msg="Policy imported via API, recalculating..." policyAddRequest=8d2fa7ea-941c-478b-a848-441c8e7865c2 policyRevision=5 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.242 3455025d-0f3a-4036-b5a9-53cc00a9cd64 default }" containerID=84099caf148a78c86e91756f6fe99411b169c0477e411ee9150594589a88edec datapathConfiguration="&{false false false false false }" interface=lxcbfff2cb53943 k8sPodName=auth-system/keycloak-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=84099caf14 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=522 ipv4=10.0.0.242 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=84099caf14 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=522 identityLabels="k8s:app.kubernetes.io/component=keycloak,k8s:app.kubernetes.io/instance=keycloak,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=keycloak,k8s:app.kubernetes.io/version=24.0.5,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=keycloak-21.4.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system,k8s:io.cilium.k8s.namespace.labels.name=auth-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keycloak,k8s:io.kubernetes.pod.namespace=auth-system,k8s:statefulset.kubernetes.io/pod-name=keycloak-0" ipv4=10.0.0.242 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:auth-system k8s:io.cilium.k8s.namespace.labels.name:auth-system]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=keycloak;k8s:app.kubernetes.io/instance=keycloak;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=keycloak;k8s:app.kubernetes.io/version=24.0.5;k8s:apps.kubernetes.io/pod-index=0;k8s:helm.sh/chart=keycloak-21.4.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system;k8s:io.cilium.k8s.namespace.labels.name=auth-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keycloak;k8s:io.kubernetes.pod.namespace=auth-system;k8s:statefulset.kubernetes.io/pod-name=keycloak-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=84099caf14 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=522 identity=29145 identityLabels="k8s:app.kubernetes.io/component=keycloak,k8s:app.kubernetes.io/instance=keycloak,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=keycloak,k8s:app.kubernetes.io/version=24.0.5,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=keycloak-21.4.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system,k8s:io.cilium.k8s.namespace.labels.name=auth-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keycloak,k8s:io.kubernetes.pod.namespace=auth-system,k8s:statefulset.kubernetes.io/pod-name=keycloak-0" ipv4=10.0.0.242 ipv6= k8sPodName=auth-system/keycloak-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=84099caf14 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=522 identity=29145 ipv4=10.0.0.242 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=84099caf14 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=522 identity=29145 ipv4=10.0.0.242 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=84099caf14 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=522 identity=29145 ipv4=10.0.0.242 ipv6= k8sPodName=auth-system/keycloak-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.243 aecfcbcb-fde6-4a80-9289-bc3511b57ba1 default }" containerID=6ecbf42b18632d235248c54199e64a0a66e3301005bdff8b9dd89c575350b49d datapathConfiguration="&{false false false false false }" interface=lxc21b3ed2f4469 k8sPodName=local-path-storage/helper-pod-create-pvc-c197884c-b6c6-48d3-b275-f2319ffda363 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6ecbf42b18 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1974 ipv4=10.0.0.243 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-c197884c-b6c6-48d3-b275-f2319ffda363 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6ecbf42b18 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1974 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.243 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-c197884c-b6c6-48d3-b275-f2319ffda363 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6ecbf42b18 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1974 identity=1361 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.243 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-c197884c-b6c6-48d3-b275-f2319ffda363 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6ecbf42b18 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1974 identity=1361 ipv4=10.0.0.243 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-c197884c-b6c6-48d3-b275-f2319ffda363 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=6ecbf42b18 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1974 identity=1361 ipv4=10.0.0.243 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-c197884c-b6c6-48d3-b275-f2319ffda363 subsys=endpoint level=info msg="Successful endpoint creation" containerID=6ecbf42b18 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1974 identity=1361 ipv4=10.0.0.243 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-c197884c-b6c6-48d3-b275-f2319ffda363 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=6ecbf42b18 endpointID=1974 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-c197884c-b6c6-48d3-b275-f2319ffda363 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=6ecbf42b18 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1974 identity=1361 ipv4=10.0.0.243 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-c197884c-b6c6-48d3-b275-f2319ffda363 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.147 763a5f01-8216-4f35-bad6-ef9ec4f1c22e default }" containerID=8e82232826b12abaeddf62c02731d514f0a3bc83130e7b7141e86415757bc62b datapathConfiguration="&{false false false false false }" interface=lxcee3ea57b594c k8sPodName=openstack/rabbitmq-keystone-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8e82232826 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=354 ipv4=10.0.0.147 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8e82232826 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=354 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-keystone,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0" ipv4=10.0.0.147 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-keystone;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8e82232826 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=354 identity=13539 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-keystone,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0" ipv4=10.0.0.147 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8e82232826 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=354 identity=13539 ipv4=10.0.0.147 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=8e82232826 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=354 identity=13539 ipv4=10.0.0.147 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=8e82232826 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=354 identity=13539 ipv4=10.0.0.147 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.240 7ba773cf-90fc-43e3-bc9b-2651ec52dee1 default }" containerID=b4319f0d8f412e0b481101dff8e52575b2b460318904a253f93c516a14f4982b datapathConfiguration="&{false false false false false }" interface=lxc15c1ac82ef65 k8sPodName=openstack/keystone-credential-setup-5kfzm labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b4319f0d8f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1937 ipv4=10.0.0.240 ipv6= k8sPodName=openstack/keystone-credential-setup-5kfzm subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b4319f0d8f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1937 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=6331b85e-61d4-42d5-9487-9f4e96cd7a1e,k8s:batch.kubernetes.io/job-name=keystone-credential-setup,k8s:component=credential-setup,k8s:controller-uid=6331b85e-61d4-42d5-9487-9f4e96cd7a1e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-credential-setup,k8s:release_group=keystone" ipv4=10.0.0.240 ipv6= k8sPodName=openstack/keystone-credential-setup-5kfzm subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=6331b85e-61d4-42d5-9487-9f4e96cd7a1e;k8s:batch.kubernetes.io/job-name=keystone-credential-setup;k8s:component=credential-setup;k8s:controller-uid=6331b85e-61d4-42d5-9487-9f4e96cd7a1e;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-credential-setup;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b4319f0d8f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1937 identity=16146 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=6331b85e-61d4-42d5-9487-9f4e96cd7a1e,k8s:batch.kubernetes.io/job-name=keystone-credential-setup,k8s:component=credential-setup,k8s:controller-uid=6331b85e-61d4-42d5-9487-9f4e96cd7a1e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-credential-setup,k8s:release_group=keystone" ipv4=10.0.0.240 ipv6= k8sPodName=openstack/keystone-credential-setup-5kfzm oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b4319f0d8f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1937 identity=16146 ipv4=10.0.0.240 ipv6= k8sPodName=openstack/keystone-credential-setup-5kfzm subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=b4319f0d8f datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1937 identity=16146 ipv4=10.0.0.240 ipv6= k8sPodName=openstack/keystone-credential-setup-5kfzm subsys=endpoint level=info msg="Successful endpoint creation" containerID=b4319f0d8f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1937 identity=16146 ipv4=10.0.0.240 ipv6= k8sPodName=openstack/keystone-credential-setup-5kfzm subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=b4319f0d8f endpointID=1937 k8sNamespace=openstack k8sPodName=keystone-credential-setup-5kfzm subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=6331b85e-61d4-42d5-9487-9f4e96cd7a1e k8s:batch.kubernetes.io/job-name=keystone-credential-setup k8s:component=credential-setup k8s:controller-uid=6331b85e-61d4-42d5-9487-9f4e96cd7a1e k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-credential-setup k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=b4319f0d8f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1937 identity=16146 ipv4=10.0.0.240 ipv6= k8sPodName=openstack/keystone-credential-setup-5kfzm subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.154 673608eb-2a97-42b4-99b6-7e9a659fbe50 default }" containerID=1d4330057d4077ccf39bff9491830c74cdf840a9a668052fadaa2bc1410a764d datapathConfiguration="&{false false false false false }" interface=lxc3d4a719de10f k8sPodName=openstack/keystone-db-init-wnbxr labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1d4330057d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=960 ipv4=10.0.0.154 ipv6= k8sPodName=openstack/keystone-db-init-wnbxr subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1d4330057d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=960 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=a953274c-d581-4f04-95dc-f49e21b55d29,k8s:batch.kubernetes.io/job-name=keystone-db-init,k8s:component=db-init,k8s:controller-uid=a953274c-d581-4f04-95dc-f49e21b55d29,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-init,k8s:release_group=keystone" ipv4=10.0.0.154 ipv6= k8sPodName=openstack/keystone-db-init-wnbxr subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=a953274c-d581-4f04-95dc-f49e21b55d29;k8s:batch.kubernetes.io/job-name=keystone-db-init;k8s:component=db-init;k8s:controller-uid=a953274c-d581-4f04-95dc-f49e21b55d29;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-db-init;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1d4330057d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=960 identity=43383 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=a953274c-d581-4f04-95dc-f49e21b55d29,k8s:batch.kubernetes.io/job-name=keystone-db-init,k8s:component=db-init,k8s:controller-uid=a953274c-d581-4f04-95dc-f49e21b55d29,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-init,k8s:release_group=keystone" ipv4=10.0.0.154 ipv6= k8sPodName=openstack/keystone-db-init-wnbxr oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1d4330057d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=960 identity=43383 ipv4=10.0.0.154 ipv6= k8sPodName=openstack/keystone-db-init-wnbxr subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=1d4330057d datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=960 identity=43383 ipv4=10.0.0.154 ipv6= k8sPodName=openstack/keystone-db-init-wnbxr subsys=endpoint level=info msg="Successful endpoint creation" containerID=1d4330057d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=960 identity=43383 ipv4=10.0.0.154 ipv6= k8sPodName=openstack/keystone-db-init-wnbxr subsys=daemon level=info msg="Delete endpoint request" containerID=1d4330057d endpointID=960 k8sNamespace=openstack k8sPodName=keystone-db-init-wnbxr subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=a953274c-d581-4f04-95dc-f49e21b55d29 k8s:batch.kubernetes.io/job-name=keystone-db-init k8s:component=db-init k8s:controller-uid=a953274c-d581-4f04-95dc-f49e21b55d29 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-db-init k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=1d4330057d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=960 identity=43383 ipv4=10.0.0.154 ipv6= k8sPodName=openstack/keystone-db-init-wnbxr subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.158 00b3c0b8-df92-4da0-85e9-343c06c40b3e default }" containerID=3cec19cca528f1121343e31ffaa9f3b71ccbe9cf89dd984f13bccc16d0f4b353 datapathConfiguration="&{false false false false false }" interface=lxc8e78f99f3c81 k8sPodName=openstack/keystone-fernet-setup-q8tkb labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3cec19cca5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=126 ipv4=10.0.0.158 ipv6= k8sPodName=openstack/keystone-fernet-setup-q8tkb subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3cec19cca5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=126 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=5f6ba2f6-02ec-436c-9ced-e6a4d35a9e19,k8s:batch.kubernetes.io/job-name=keystone-fernet-setup,k8s:component=fernet-setup,k8s:controller-uid=5f6ba2f6-02ec-436c-9ced-e6a4d35a9e19,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-setup,k8s:release_group=keystone" ipv4=10.0.0.158 ipv6= k8sPodName=openstack/keystone-fernet-setup-q8tkb subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=5f6ba2f6-02ec-436c-9ced-e6a4d35a9e19;k8s:batch.kubernetes.io/job-name=keystone-fernet-setup;k8s:component=fernet-setup;k8s:controller-uid=5f6ba2f6-02ec-436c-9ced-e6a4d35a9e19;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-fernet-setup;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3cec19cca5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=126 identity=6452 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=5f6ba2f6-02ec-436c-9ced-e6a4d35a9e19,k8s:batch.kubernetes.io/job-name=keystone-fernet-setup,k8s:component=fernet-setup,k8s:controller-uid=5f6ba2f6-02ec-436c-9ced-e6a4d35a9e19,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-setup,k8s:release_group=keystone" ipv4=10.0.0.158 ipv6= k8sPodName=openstack/keystone-fernet-setup-q8tkb oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=3cec19cca5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=126 identity=6452 ipv4=10.0.0.158 ipv6= k8sPodName=openstack/keystone-fernet-setup-q8tkb subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=3cec19cca5 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=126 identity=6452 ipv4=10.0.0.158 ipv6= k8sPodName=openstack/keystone-fernet-setup-q8tkb subsys=endpoint level=info msg="Successful endpoint creation" containerID=3cec19cca5 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=126 identity=6452 ipv4=10.0.0.158 ipv6= k8sPodName=openstack/keystone-fernet-setup-q8tkb subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=3cec19cca5 endpointID=126 k8sNamespace=openstack k8sPodName=keystone-fernet-setup-q8tkb subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=5f6ba2f6-02ec-436c-9ced-e6a4d35a9e19 k8s:batch.kubernetes.io/job-name=keystone-fernet-setup k8s:component=fernet-setup k8s:controller-uid=5f6ba2f6-02ec-436c-9ced-e6a4d35a9e19 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-fernet-setup k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=3cec19cca5 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=126 identity=6452 ipv4=10.0.0.158 ipv6= k8sPodName=openstack/keystone-fernet-setup-q8tkb subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.243 08ecb0ef-4116-4e63-a9fb-62e0175a203f default }" containerID=93f6d28147e126076ef3a4d9d3d5c254418ce3f8445290b0ca0c25553e3971e7 datapathConfiguration="&{false false false false false }" interface=lxcfa6353fd7c3e k8sPodName=openstack/keystone-db-sync-xjhcz labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=93f6d28147 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3834 ipv4=10.0.0.243 ipv6= k8sPodName=openstack/keystone-db-sync-xjhcz subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=93f6d28147 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3834 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=f5a23f8e-c135-49be-bb9a-063f3d34ccec,k8s:batch.kubernetes.io/job-name=keystone-db-sync,k8s:component=db-sync,k8s:controller-uid=f5a23f8e-c135-49be-bb9a-063f3d34ccec,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-sync,k8s:release_group=keystone" ipv4=10.0.0.243 ipv6= k8sPodName=openstack/keystone-db-sync-xjhcz subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=f5a23f8e-c135-49be-bb9a-063f3d34ccec;k8s:batch.kubernetes.io/job-name=keystone-db-sync;k8s:component=db-sync;k8s:controller-uid=f5a23f8e-c135-49be-bb9a-063f3d34ccec;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-db-sync;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=93f6d28147 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3834 identity=39637 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=f5a23f8e-c135-49be-bb9a-063f3d34ccec,k8s:batch.kubernetes.io/job-name=keystone-db-sync,k8s:component=db-sync,k8s:controller-uid=f5a23f8e-c135-49be-bb9a-063f3d34ccec,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-sync,k8s:release_group=keystone" ipv4=10.0.0.243 ipv6= k8sPodName=openstack/keystone-db-sync-xjhcz oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=93f6d28147 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3834 identity=39637 ipv4=10.0.0.243 ipv6= k8sPodName=openstack/keystone-db-sync-xjhcz subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=93f6d28147 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3834 identity=39637 ipv4=10.0.0.243 ipv6= k8sPodName=openstack/keystone-db-sync-xjhcz subsys=endpoint level=info msg="Successful endpoint creation" containerID=93f6d28147 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3834 identity=39637 ipv4=10.0.0.243 ipv6= k8sPodName=openstack/keystone-db-sync-xjhcz subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=93f6d28147 endpointID=3834 k8sNamespace=openstack k8sPodName=keystone-db-sync-xjhcz subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=f5a23f8e-c135-49be-bb9a-063f3d34ccec k8s:batch.kubernetes.io/job-name=keystone-db-sync k8s:component=db-sync k8s:controller-uid=f5a23f8e-c135-49be-bb9a-063f3d34ccec k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-db-sync k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=93f6d28147 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3834 identity=39637 ipv4=10.0.0.243 ipv6= k8sPodName=openstack/keystone-db-sync-xjhcz subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.186 e2845d5a-78bf-4c45-9492-720117bd44d7 default }" containerID=7410571dd6b3dc74300a149af319142b011a6f775983a0f73ec6ff3db3865055 datapathConfiguration="&{false false false false false }" interface=lxc31f07b64c99b k8sPodName=openstack/keystone-rabbit-init-g2rq8 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7410571dd6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=198 ipv4=10.0.0.186 ipv6= k8sPodName=openstack/keystone-rabbit-init-g2rq8 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7410571dd6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=198 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=b45a3607-01d6-40a1-a332-c62d6afca717,k8s:batch.kubernetes.io/job-name=keystone-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=b45a3607-01d6-40a1-a332-c62d6afca717,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-rabbit-init,k8s:release_group=keystone" ipv4=10.0.0.186 ipv6= k8sPodName=openstack/keystone-rabbit-init-g2rq8 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=b45a3607-01d6-40a1-a332-c62d6afca717;k8s:batch.kubernetes.io/job-name=keystone-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=b45a3607-01d6-40a1-a332-c62d6afca717;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-rabbit-init;k8s:release_group=keystone;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=7410571dd6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=198 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.186 ipv6= k8sPodName=openstack/keystone-rabbit-init-g2rq8 line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=7410571dd6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=198 identity=11223 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=b45a3607-01d6-40a1-a332-c62d6afca717,k8s:batch.kubernetes.io/job-name=keystone-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=b45a3607-01d6-40a1-a332-c62d6afca717,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-rabbit-init,k8s:release_group=keystone" ipv4=10.0.0.186 ipv6= k8sPodName=openstack/keystone-rabbit-init-g2rq8 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7410571dd6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=198 identity=11223 ipv4=10.0.0.186 ipv6= k8sPodName=openstack/keystone-rabbit-init-g2rq8 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=7410571dd6 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=198 identity=11223 ipv4=10.0.0.186 ipv6= k8sPodName=openstack/keystone-rabbit-init-g2rq8 subsys=endpoint level=info msg="Successful endpoint creation" containerID=7410571dd6 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=198 identity=11223 ipv4=10.0.0.186 ipv6= k8sPodName=openstack/keystone-rabbit-init-g2rq8 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=7410571dd6 endpointID=198 k8sNamespace=openstack k8sPodName=keystone-rabbit-init-g2rq8 subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=b45a3607-01d6-40a1-a332-c62d6afca717 k8s:batch.kubernetes.io/job-name=keystone-rabbit-init k8s:component=rabbit-init k8s:controller-uid=b45a3607-01d6-40a1-a332-c62d6afca717 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-rabbit-init k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=7410571dd6 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=198 identity=11223 ipv4=10.0.0.186 ipv6= k8sPodName=openstack/keystone-rabbit-init-g2rq8 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.129 07bb75bc-0de1-423a-8ba8-ff8da70b9443 default }" containerID=3eda09a1cc1d76f7ca1a08cc1e77aa6b7a456b2a6d09bcb4c912efccd2132c02 datapathConfiguration="&{false false false false false }" interface=lxc413f1b127f91 k8sPodName=openstack/keystone-domain-manage-g56gl labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3eda09a1cc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2047 ipv4=10.0.0.129 ipv6= k8sPodName=openstack/keystone-domain-manage-g56gl subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3eda09a1cc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2047 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=eed4ab83-d82d-4145-a920-2177f5a91944,k8s:batch.kubernetes.io/job-name=keystone-domain-manage,k8s:component=domain-manage,k8s:controller-uid=eed4ab83-d82d-4145-a920-2177f5a91944,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-domain-manage,k8s:release_group=keystone" ipv4=10.0.0.129 ipv6= k8sPodName=openstack/keystone-domain-manage-g56gl subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=eed4ab83-d82d-4145-a920-2177f5a91944;k8s:batch.kubernetes.io/job-name=keystone-domain-manage;k8s:component=domain-manage;k8s:controller-uid=eed4ab83-d82d-4145-a920-2177f5a91944;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-domain-manage;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3eda09a1cc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2047 identity=26649 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=eed4ab83-d82d-4145-a920-2177f5a91944,k8s:batch.kubernetes.io/job-name=keystone-domain-manage,k8s:component=domain-manage,k8s:controller-uid=eed4ab83-d82d-4145-a920-2177f5a91944,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-domain-manage,k8s:release_group=keystone" ipv4=10.0.0.129 ipv6= k8sPodName=openstack/keystone-domain-manage-g56gl oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=3eda09a1cc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2047 identity=26649 ipv4=10.0.0.129 ipv6= k8sPodName=openstack/keystone-domain-manage-g56gl subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=3eda09a1cc datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2047 identity=26649 ipv4=10.0.0.129 ipv6= k8sPodName=openstack/keystone-domain-manage-g56gl subsys=endpoint level=info msg="Successful endpoint creation" containerID=3eda09a1cc datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2047 identity=26649 ipv4=10.0.0.129 ipv6= k8sPodName=openstack/keystone-domain-manage-g56gl subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.75 5ddbb54f-c8a2-482d-9e51-eaaef606b966 default }" containerID=6b88775b8da02b8e3c0e3e91e1a5e00c2bde5fca9eeb6523ab511686815694d4 datapathConfiguration="&{false false false false false }" interface=lxc4373437e21d0 k8sPodName=openstack/keystone-api-7f65999467-hf2kt labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6b88775b8d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3858 ipv4=10.0.0.75 ipv6= k8sPodName=openstack/keystone-api-7f65999467-hf2kt subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6b88775b8d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3858 identityLabels="k8s:application=keystone,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=keystone" ipv4=10.0.0.75 ipv6= k8sPodName=openstack/keystone-api-7f65999467-hf2kt subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=keystone;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=6b88775b8d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3858 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.75 ipv6= k8sPodName=openstack/keystone-api-7f65999467-hf2kt line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=6b88775b8d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3858 identity=19762 identityLabels="k8s:application=keystone,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=keystone" ipv4=10.0.0.75 ipv6= k8sPodName=openstack/keystone-api-7f65999467-hf2kt oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6b88775b8d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3858 identity=19762 ipv4=10.0.0.75 ipv6= k8sPodName=openstack/keystone-api-7f65999467-hf2kt subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=6b88775b8d datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3858 identity=19762 ipv4=10.0.0.75 ipv6= k8sPodName=openstack/keystone-api-7f65999467-hf2kt subsys=endpoint level=info msg="Successful endpoint creation" containerID=6b88775b8d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3858 identity=19762 ipv4=10.0.0.75 ipv6= k8sPodName=openstack/keystone-api-7f65999467-hf2kt subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=3eda09a1cc endpointID=2047 k8sNamespace=openstack k8sPodName=keystone-domain-manage-g56gl subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=eed4ab83-d82d-4145-a920-2177f5a91944 k8s:batch.kubernetes.io/job-name=keystone-domain-manage k8s:component=domain-manage k8s:controller-uid=eed4ab83-d82d-4145-a920-2177f5a91944 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-domain-manage k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=3eda09a1cc datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2047 identity=26649 ipv4=10.0.0.129 ipv6= k8sPodName=openstack/keystone-domain-manage-g56gl subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.74 16b4ff26-c62d-492e-9ede-608e11f5e70a default }" containerID=8f44a1fc8961a12a41ef8226a0d01202692c6a0148d75a5e70c497b79be4588f datapathConfiguration="&{false false false false false }" interface=lxcf45dc5905409 k8sPodName=openstack/keystone-bootstrap-b28dg labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8f44a1fc89 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2754 ipv4=10.0.0.74 ipv6= k8sPodName=openstack/keystone-bootstrap-b28dg subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8f44a1fc89 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2754 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=d7a3c532-b22f-4a72-b3ed-c23be55fc717,k8s:batch.kubernetes.io/job-name=keystone-bootstrap,k8s:component=bootstrap,k8s:controller-uid=d7a3c532-b22f-4a72-b3ed-c23be55fc717,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-bootstrap,k8s:release_group=keystone" ipv4=10.0.0.74 ipv6= k8sPodName=openstack/keystone-bootstrap-b28dg subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=d7a3c532-b22f-4a72-b3ed-c23be55fc717;k8s:batch.kubernetes.io/job-name=keystone-bootstrap;k8s:component=bootstrap;k8s:controller-uid=d7a3c532-b22f-4a72-b3ed-c23be55fc717;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-bootstrap;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8f44a1fc89 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2754 identity=33389 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=d7a3c532-b22f-4a72-b3ed-c23be55fc717,k8s:batch.kubernetes.io/job-name=keystone-bootstrap,k8s:component=bootstrap,k8s:controller-uid=d7a3c532-b22f-4a72-b3ed-c23be55fc717,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-bootstrap,k8s:release_group=keystone" ipv4=10.0.0.74 ipv6= k8sPodName=openstack/keystone-bootstrap-b28dg oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8f44a1fc89 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2754 identity=33389 ipv4=10.0.0.74 ipv6= k8sPodName=openstack/keystone-bootstrap-b28dg subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=8f44a1fc89 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2754 identity=33389 ipv4=10.0.0.74 ipv6= k8sPodName=openstack/keystone-bootstrap-b28dg subsys=endpoint level=info msg="Successful endpoint creation" containerID=8f44a1fc89 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2754 identity=33389 ipv4=10.0.0.74 ipv6= k8sPodName=openstack/keystone-bootstrap-b28dg subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=8f44a1fc89 endpointID=2754 k8sNamespace=openstack k8sPodName=keystone-bootstrap-b28dg subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=d7a3c532-b22f-4a72-b3ed-c23be55fc717 k8s:batch.kubernetes.io/job-name=keystone-bootstrap k8s:component=bootstrap k8s:controller-uid=d7a3c532-b22f-4a72-b3ed-c23be55fc717 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-bootstrap k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=8f44a1fc89 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2754 identity=33389 ipv4=10.0.0.74 ipv6= k8sPodName=openstack/keystone-bootstrap-b28dg subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.94 ad36365d-2cd5-4c92-ab94-af9c2afc6e29 default }" containerID=9ca12fde90a5ea34ecca2a6b0dd60ab0c45929fa8f5a45e03084e8ca48ce3911 datapathConfiguration="&{false false false false false }" interface=lxc658aed98bfa7 k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-6ktv4 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9ca12fde90 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2884 ipv4=10.0.0.94 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-6ktv4 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9ca12fde90 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2884 identityLabels="k8s:app=secretgen-controller,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa,k8s:io.kubernetes.pod.namespace=secretgen-controller" ipv4=10.0.0.94 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-6ktv4 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:secretgen-controller]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app=secretgen-controller;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa;k8s:io.kubernetes.pod.namespace=secretgen-controller;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9ca12fde90 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2884 identity=50406 identityLabels="k8s:app=secretgen-controller,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa,k8s:io.kubernetes.pod.namespace=secretgen-controller" ipv4=10.0.0.94 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-6ktv4 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9ca12fde90 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2884 identity=50406 ipv4=10.0.0.94 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-6ktv4 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=9ca12fde90 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2884 identity=50406 ipv4=10.0.0.94 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-6ktv4 subsys=endpoint level=info msg="Successful endpoint creation" containerID=9ca12fde90 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2884 identity=50406 ipv4=10.0.0.94 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-6ktv4 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.224 90d0e033-b133-4cc4-9215-bf1eb87c99da default }" containerID=062517ae1eba9cc6cb023e883374085bd14acb6ee748f61e815e7842aaa44884 datapathConfiguration="&{false false false false false }" interface=lxc5f32b03259d3 k8sPodName=local-path-storage/helper-pod-create-pvc-3332d1f2-19e2-4037-9f45-58c8eca65d81 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=062517ae1e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2201 ipv4=10.0.0.224 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-3332d1f2-19e2-4037-9f45-58c8eca65d81 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=062517ae1e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2201 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.224 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-3332d1f2-19e2-4037-9f45-58c8eca65d81 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=062517ae1e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2201 identity=1361 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.224 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-3332d1f2-19e2-4037-9f45-58c8eca65d81 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=062517ae1e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2201 identity=1361 ipv4=10.0.0.224 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-3332d1f2-19e2-4037-9f45-58c8eca65d81 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=062517ae1e datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2201 identity=1361 ipv4=10.0.0.224 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-3332d1f2-19e2-4037-9f45-58c8eca65d81 subsys=endpoint level=info msg="Successful endpoint creation" containerID=062517ae1e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2201 identity=1361 ipv4=10.0.0.224 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-3332d1f2-19e2-4037-9f45-58c8eca65d81 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.78 4ed7052b-b770-4d25-a103-178c6fe95535 default }" containerID=7526761b5d818b9b1fb76db098959adcdda5488ad15aa8585bdbe7a167482964 datapathConfiguration="&{false false false false false }" interface=lxc44530edc213c k8sPodName=local-path-storage/helper-pod-create-pvc-27c2a7c5-e1c5-4659-893a-7d1a1fac6c20 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7526761b5d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2334 ipv4=10.0.0.78 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-27c2a7c5-e1c5-4659-893a-7d1a1fac6c20 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7526761b5d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2334 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.78 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-27c2a7c5-e1c5-4659-893a-7d1a1fac6c20 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=7526761b5d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2334 identity=1361 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.78 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-27c2a7c5-e1c5-4659-893a-7d1a1fac6c20 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7526761b5d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2334 identity=1361 ipv4=10.0.0.78 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-27c2a7c5-e1c5-4659-893a-7d1a1fac6c20 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=7526761b5d datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2334 identity=1361 ipv4=10.0.0.78 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-27c2a7c5-e1c5-4659-893a-7d1a1fac6c20 subsys=endpoint level=info msg="Successful endpoint creation" containerID=7526761b5d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2334 identity=1361 ipv4=10.0.0.78 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-27c2a7c5-e1c5-4659-893a-7d1a1fac6c20 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=062517ae1e endpointID=2201 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-3332d1f2-19e2-4037-9f45-58c8eca65d81 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=062517ae1e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2201 identity=1361 ipv4=10.0.0.224 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-3332d1f2-19e2-4037-9f45-58c8eca65d81 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.66 cd820310-58e0-4e46-8044-c0e9092741f0 default }" containerID=ed9a86ce6aceed09e430cadfbc58808df320dafa094f940383f28510bc2d823c datapathConfiguration="&{false false false false false }" interface=lxcefae4e99db0f k8sPodName=local-path-storage/helper-pod-create-pvc-75e9a5f2-47d8-4687-928a-f89731a81f03 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ed9a86ce6a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1146 ipv4=10.0.0.66 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-75e9a5f2-47d8-4687-928a-f89731a81f03 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ed9a86ce6a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1146 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.66 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-75e9a5f2-47d8-4687-928a-f89731a81f03 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=ed9a86ce6a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1146 identity=1361 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.66 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-75e9a5f2-47d8-4687-928a-f89731a81f03 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ed9a86ce6a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1146 identity=1361 ipv4=10.0.0.66 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-75e9a5f2-47d8-4687-928a-f89731a81f03 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ed9a86ce6a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1146 identity=1361 ipv4=10.0.0.66 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-75e9a5f2-47d8-4687-928a-f89731a81f03 subsys=endpoint level=info msg="Successful endpoint creation" containerID=ed9a86ce6a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1146 identity=1361 ipv4=10.0.0.66 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-75e9a5f2-47d8-4687-928a-f89731a81f03 subsys=daemon level=info msg="Delete endpoint request" containerID=7526761b5d endpointID=2334 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-27c2a7c5-e1c5-4659-893a-7d1a1fac6c20 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=7526761b5d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2334 identity=1361 ipv4=10.0.0.78 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-27c2a7c5-e1c5-4659-893a-7d1a1fac6c20 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.240 b1ed7ca1-56a2-4785-ba9d-60f7faf7173a default }" containerID=728b8997927e12e0b2d6c43289f4a3d7a019dcffb19d2e31dce81effa6ddd70e datapathConfiguration="&{false false false false false }" interface=lxc9e16551eaca3 k8sPodName=openstack/horizon-55ff54b676-cwqrj labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=728b899792 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=103 ipv4=10.0.0.240 ipv6= k8sPodName=openstack/horizon-55ff54b676-cwqrj subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=728b899792 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=103 identityLabels="k8s:application=horizon,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=horizon,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=horizon" ipv4=10.0.0.240 ipv6= k8sPodName=openstack/horizon-55ff54b676-cwqrj subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=728b899792 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=103 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.240 ipv6= k8sPodName=openstack/horizon-55ff54b676-cwqrj line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=horizon;k8s:component=server;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=horizon;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=horizon;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=728b899792 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=103 identity=31582 identityLabels="k8s:application=horizon,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=horizon,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=horizon" ipv4=10.0.0.240 ipv6= k8sPodName=openstack/horizon-55ff54b676-cwqrj oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=728b899792 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=103 identity=31582 ipv4=10.0.0.240 ipv6= k8sPodName=openstack/horizon-55ff54b676-cwqrj subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.224 afa2756e-ebe3-4699-ad9e-1b24ef9d956b default }" containerID=0d69a53af5667767e6c0f629927595f4f564e737484727be5cf862a7e5ec5008 datapathConfiguration="&{false false false false false }" interface=lxcda49a73c73e4 k8sPodName=openstack/placement-db-init-z9tw4 labels="[]" subsys=daemon sync-build=true level=info msg="Create endpoint request" addressing="&{10.0.0.148 7e36238e-52d7-47f1-b3fe-881da9cac7aa default }" containerID=7f9fc6867681b9bc6da8e2ca2d73691a5f95c7076943cef67e7627cfb23174d9 datapathConfiguration="&{false false false false false }" interface=lxcd25a1d04c232 k8sPodName=openstack/placement-api-6995b64d69-zqkfc labels="[]" subsys=daemon sync-build=true level=info msg="Create endpoint request" addressing="&{10.0.0.85 26d647c7-69ec-448d-8341-7dc108945607 default }" containerID=896e9f71778c0953f2c007148616aa615f3aaa7f35f0d503f8c65ab584b60e9f datapathConfiguration="&{false false false false false }" interface=lxc2e212e939d0a k8sPodName=openstack/horizon-db-init-vj76f labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0d69a53af5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1099 ipv4=10.0.0.224 ipv6= k8sPodName=openstack/placement-db-init-z9tw4 subsys=endpoint level=info msg="New endpoint" containerID=7f9fc68676 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=82 ipv4=10.0.0.148 ipv6= k8sPodName=openstack/placement-api-6995b64d69-zqkfc subsys=endpoint level=info msg="New endpoint" containerID=896e9f7177 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3295 ipv4=10.0.0.85 ipv6= k8sPodName=openstack/horizon-db-init-vj76f subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0d69a53af5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1099 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=1268b9ee-67aa-459a-a30d-2610123d80af,k8s:batch.kubernetes.io/job-name=placement-db-init,k8s:component=db-init,k8s:controller-uid=1268b9ee-67aa-459a-a30d-2610123d80af,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-db-init,k8s:release_group=placement" ipv4=10.0.0.224 ipv6= k8sPodName=openstack/placement-db-init-z9tw4 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack]" subsys=crd-allocator level=info msg="Resolving identity labels (blocking)" containerID=7f9fc68676 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=82 identityLabels="k8s:application=placement,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=placement" ipv4=10.0.0.148 ipv6= k8sPodName=openstack/placement-api-6995b64d69-zqkfc subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=896e9f7177 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3295 identityLabels="k8s:application=horizon,k8s:batch.kubernetes.io/controller-uid=aeacb25d-a46c-4adb-9a0c-b25d840b8db9,k8s:batch.kubernetes.io/job-name=horizon-db-init,k8s:component=db-init,k8s:controller-uid=aeacb25d-a46c-4adb-9a0c-b25d840b8db9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=horizon-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=horizon-db-init,k8s:release_group=horizon" ipv4=10.0.0.85 ipv6= k8sPodName=openstack/horizon-db-init-vj76f subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=placement;k8s:batch.kubernetes.io/controller-uid=1268b9ee-67aa-459a-a30d-2610123d80af;k8s:batch.kubernetes.io/job-name=placement-db-init;k8s:component=db-init;k8s:controller-uid=1268b9ee-67aa-459a-a30d-2610123d80af;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=placement-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=placement-db-init;k8s:release_group=placement;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0d69a53af5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1099 identity=4516 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=1268b9ee-67aa-459a-a30d-2610123d80af,k8s:batch.kubernetes.io/job-name=placement-db-init,k8s:component=db-init,k8s:controller-uid=1268b9ee-67aa-459a-a30d-2610123d80af,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-db-init,k8s:release_group=placement" ipv4=10.0.0.224 ipv6= k8sPodName=openstack/placement-db-init-z9tw4 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0d69a53af5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1099 identity=4516 ipv4=10.0.0.224 ipv6= k8sPodName=openstack/placement-db-init-z9tw4 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=placement;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=placement-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=placement;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7f9fc68676 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=82 identity=19693 identityLabels="k8s:application=placement,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=placement" ipv4=10.0.0.148 ipv6= k8sPodName=openstack/placement-api-6995b64d69-zqkfc oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7f9fc68676 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=82 identity=19693 ipv4=10.0.0.148 ipv6= k8sPodName=openstack/placement-api-6995b64d69-zqkfc subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=horizon;k8s:batch.kubernetes.io/controller-uid=aeacb25d-a46c-4adb-9a0c-b25d840b8db9;k8s:batch.kubernetes.io/job-name=horizon-db-init;k8s:component=db-init;k8s:controller-uid=aeacb25d-a46c-4adb-9a0c-b25d840b8db9;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=horizon-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=horizon-db-init;k8s:release_group=horizon;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=896e9f7177 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3295 identity=7427 identityLabels="k8s:application=horizon,k8s:batch.kubernetes.io/controller-uid=aeacb25d-a46c-4adb-9a0c-b25d840b8db9,k8s:batch.kubernetes.io/job-name=horizon-db-init,k8s:component=db-init,k8s:controller-uid=aeacb25d-a46c-4adb-9a0c-b25d840b8db9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=horizon-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=horizon-db-init,k8s:release_group=horizon" ipv4=10.0.0.85 ipv6= k8sPodName=openstack/horizon-db-init-vj76f oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=896e9f7177 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3295 identity=7427 ipv4=10.0.0.85 ipv6= k8sPodName=openstack/horizon-db-init-vj76f subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=728b899792 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=103 identity=31582 ipv4=10.0.0.240 ipv6= k8sPodName=openstack/horizon-55ff54b676-cwqrj subsys=endpoint level=info msg="Successful endpoint creation" containerID=728b899792 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=103 identity=31582 ipv4=10.0.0.240 ipv6= k8sPodName=openstack/horizon-55ff54b676-cwqrj subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=0d69a53af5 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1099 identity=4516 ipv4=10.0.0.224 ipv6= k8sPodName=openstack/placement-db-init-z9tw4 subsys=endpoint level=info msg="Successful endpoint creation" containerID=0d69a53af5 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1099 identity=4516 ipv4=10.0.0.224 ipv6= k8sPodName=openstack/placement-db-init-z9tw4 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=896e9f7177 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3295 identity=7427 ipv4=10.0.0.85 ipv6= k8sPodName=openstack/horizon-db-init-vj76f subsys=endpoint level=info msg="Successful endpoint creation" containerID=896e9f7177 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3295 identity=7427 ipv4=10.0.0.85 ipv6= k8sPodName=openstack/horizon-db-init-vj76f subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=7f9fc68676 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=82 identity=19693 ipv4=10.0.0.148 ipv6= k8sPodName=openstack/placement-api-6995b64d69-zqkfc subsys=endpoint level=info msg="Successful endpoint creation" containerID=7f9fc68676 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=82 identity=19693 ipv4=10.0.0.148 ipv6= k8sPodName=openstack/placement-api-6995b64d69-zqkfc subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.145 d1772e89-41cb-4595-aab7-6fa7cb509360 default }" containerID=fb76edcfd7e284231b0f23952daa9c601d713758f39bcfe6d568e6c8a9049b5f datapathConfiguration="&{false false false false false }" interface=lxcfe14e8a7de7b k8sPodName=openstack/rabbitmq-heat-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=fb76edcfd7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2168 ipv4=10.0.0.145 ipv6= k8sPodName=openstack/rabbitmq-heat-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=fb76edcfd7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2168 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-heat,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-heat-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-heat-server-0" ipv4=10.0.0.145 ipv6= k8sPodName=openstack/rabbitmq-heat-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-heat;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-heat-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-heat-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=fb76edcfd7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2168 identity=35654 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-heat,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-heat-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-heat-server-0" ipv4=10.0.0.145 ipv6= k8sPodName=openstack/rabbitmq-heat-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=fb76edcfd7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2168 identity=35654 ipv4=10.0.0.145 ipv6= k8sPodName=openstack/rabbitmq-heat-server-0 subsys=endpoint level=info msg="Delete endpoint request" containerID=ed9a86ce6a endpointID=1146 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-75e9a5f2-47d8-4687-928a-f89731a81f03 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Removed endpoint" containerID=ed9a86ce6a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1146 identity=1361 ipv4=10.0.0.66 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-75e9a5f2-47d8-4687-928a-f89731a81f03 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=fb76edcfd7 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2168 identity=35654 ipv4=10.0.0.145 ipv6= k8sPodName=openstack/rabbitmq-heat-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=fb76edcfd7 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2168 identity=35654 ipv4=10.0.0.145 ipv6= k8sPodName=openstack/rabbitmq-heat-server-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.87 7fee9606-26f3-4ca5-8562-057aed379192 default }" containerID=fe65bc5d279664cc389c31bbe05e399423f4b5340674ffe4590fd617281ecdfa datapathConfiguration="&{false false false false false }" interface=lxcf682e2f8506a k8sPodName=openstack/rabbitmq-cinder-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=fe65bc5d27 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1983 ipv4=10.0.0.87 ipv6= k8sPodName=openstack/rabbitmq-cinder-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=fe65bc5d27 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1983 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-cinder,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cinder-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-cinder-server-0" ipv4=10.0.0.87 ipv6= k8sPodName=openstack/rabbitmq-cinder-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-cinder;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cinder-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-cinder-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=fe65bc5d27 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1983 identity=7156 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-cinder,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cinder-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-cinder-server-0" ipv4=10.0.0.87 ipv6= k8sPodName=openstack/rabbitmq-cinder-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=fe65bc5d27 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1983 identity=7156 ipv4=10.0.0.87 ipv6= k8sPodName=openstack/rabbitmq-cinder-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=fe65bc5d27 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1983 identity=7156 ipv4=10.0.0.87 ipv6= k8sPodName=openstack/rabbitmq-cinder-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=fe65bc5d27 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1983 identity=7156 ipv4=10.0.0.87 ipv6= k8sPodName=openstack/rabbitmq-cinder-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.204 1bae5635-8c35-4749-9022-445cdc5e8643 default }" containerID=f0f0f6af6005e06e076163595cbdc2685740e8616356cc733b67706c01e34fb9 datapathConfiguration="&{false false false false false }" interface=lxcc73bd712a382 k8sPodName=openstack/rabbitmq-glance-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f0f0f6af60 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1300 ipv4=10.0.0.204 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f0f0f6af60 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1300 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-glance,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0" ipv4=10.0.0.204 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-glance;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f0f0f6af60 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1300 identity=49126 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-glance,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0" ipv4=10.0.0.204 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f0f0f6af60 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1300 identity=49126 ipv4=10.0.0.204 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f0f0f6af60 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1300 identity=49126 ipv4=10.0.0.204 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=f0f0f6af60 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1300 identity=49126 ipv4=10.0.0.204 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=0d69a53af5 endpointID=1099 k8sNamespace=openstack k8sPodName=placement-db-init-z9tw4 subsys=daemon level=info msg="Releasing key" key="[k8s:application=placement k8s:batch.kubernetes.io/controller-uid=1268b9ee-67aa-459a-a30d-2610123d80af k8s:batch.kubernetes.io/job-name=placement-db-init k8s:component=db-init k8s:controller-uid=1268b9ee-67aa-459a-a30d-2610123d80af k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=placement-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=placement-db-init k8s:release_group=placement]" subsys=allocator level=info msg="Delete endpoint request" containerID=896e9f7177 endpointID=3295 k8sNamespace=openstack k8sPodName=horizon-db-init-vj76f subsys=daemon level=info msg="Releasing key" key="[k8s:application=horizon k8s:batch.kubernetes.io/controller-uid=aeacb25d-a46c-4adb-9a0c-b25d840b8db9 k8s:batch.kubernetes.io/job-name=horizon-db-init k8s:component=db-init k8s:controller-uid=aeacb25d-a46c-4adb-9a0c-b25d840b8db9 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=horizon-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=horizon-db-init k8s:release_group=horizon]" subsys=allocator level=info msg="Removed endpoint" containerID=0d69a53af5 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1099 identity=4516 ipv4=10.0.0.224 ipv6= k8sPodName=openstack/placement-db-init-z9tw4 subsys=endpoint level=info msg="Removed endpoint" containerID=896e9f7177 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3295 identity=7427 ipv4=10.0.0.85 ipv6= k8sPodName=openstack/horizon-db-init-vj76f subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.161 c8e407db-fdcb-4b46-baf2-216d35ecd06c default }" containerID=a4b9ba1c3dcd974a860890f2183ebe3b26aa1a63c12ab279058b5694bf97d15d datapathConfiguration="&{false false false false false }" interface=lxcecd95b6edb8e k8sPodName=openstack/placement-db-sync-gzvbk labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a4b9ba1c3d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=468 ipv4=10.0.0.161 ipv6= k8sPodName=openstack/placement-db-sync-gzvbk subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a4b9ba1c3d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=468 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=ec4482d5-7fb2-4b5f-bd2a-78f2cb4cd149,k8s:batch.kubernetes.io/job-name=placement-db-sync,k8s:component=db-sync,k8s:controller-uid=ec4482d5-7fb2-4b5f-bd2a-78f2cb4cd149,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-db-sync,k8s:release_group=placement" ipv4=10.0.0.161 ipv6= k8sPodName=openstack/placement-db-sync-gzvbk subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=a4b9ba1c3d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=468 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.161 ipv6= k8sPodName=openstack/placement-db-sync-gzvbk line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=placement;k8s:batch.kubernetes.io/controller-uid=ec4482d5-7fb2-4b5f-bd2a-78f2cb4cd149;k8s:batch.kubernetes.io/job-name=placement-db-sync;k8s:component=db-sync;k8s:controller-uid=ec4482d5-7fb2-4b5f-bd2a-78f2cb4cd149;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=placement-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=placement-db-sync;k8s:release_group=placement;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a4b9ba1c3d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=468 identity=3311 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=ec4482d5-7fb2-4b5f-bd2a-78f2cb4cd149,k8s:batch.kubernetes.io/job-name=placement-db-sync,k8s:component=db-sync,k8s:controller-uid=ec4482d5-7fb2-4b5f-bd2a-78f2cb4cd149,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-db-sync,k8s:release_group=placement" ipv4=10.0.0.161 ipv6= k8sPodName=openstack/placement-db-sync-gzvbk oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a4b9ba1c3d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=468 identity=3311 ipv4=10.0.0.161 ipv6= k8sPodName=openstack/placement-db-sync-gzvbk subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a4b9ba1c3d datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=468 identity=3311 ipv4=10.0.0.161 ipv6= k8sPodName=openstack/placement-db-sync-gzvbk subsys=endpoint level=info msg="Successful endpoint creation" containerID=a4b9ba1c3d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=468 identity=3311 ipv4=10.0.0.161 ipv6= k8sPodName=openstack/placement-db-sync-gzvbk subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.203 45b8e806-aecb-438e-bc2f-82d8b2b54057 default }" containerID=4107f92a6d3bd514f7f848cc06003347bfc62bb5fe6a2759e7c4c8dd999c6ac8 datapathConfiguration="&{false false false false false }" interface=lxc530128ed0205 k8sPodName=openstack/horizon-db-sync-rpvbm labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4107f92a6d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1077 ipv4=10.0.0.203 ipv6= k8sPodName=openstack/horizon-db-sync-rpvbm subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4107f92a6d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1077 identityLabels="k8s:application=horizon,k8s:batch.kubernetes.io/controller-uid=23db2f5e-78f6-4a67-b15f-bba0e044c550,k8s:batch.kubernetes.io/job-name=horizon-db-sync,k8s:component=db-sync,k8s:controller-uid=23db2f5e-78f6-4a67-b15f-bba0e044c550,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=horizon-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=horizon-db-sync,k8s:release_group=horizon" ipv4=10.0.0.203 ipv6= k8sPodName=openstack/horizon-db-sync-rpvbm subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=horizon;k8s:batch.kubernetes.io/controller-uid=23db2f5e-78f6-4a67-b15f-bba0e044c550;k8s:batch.kubernetes.io/job-name=horizon-db-sync;k8s:component=db-sync;k8s:controller-uid=23db2f5e-78f6-4a67-b15f-bba0e044c550;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=horizon-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=horizon-db-sync;k8s:release_group=horizon;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4107f92a6d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1077 identity=16305 identityLabels="k8s:application=horizon,k8s:batch.kubernetes.io/controller-uid=23db2f5e-78f6-4a67-b15f-bba0e044c550,k8s:batch.kubernetes.io/job-name=horizon-db-sync,k8s:component=db-sync,k8s:controller-uid=23db2f5e-78f6-4a67-b15f-bba0e044c550,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=horizon-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=horizon-db-sync,k8s:release_group=horizon" ipv4=10.0.0.203 ipv6= k8sPodName=openstack/horizon-db-sync-rpvbm oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4107f92a6d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1077 identity=16305 ipv4=10.0.0.203 ipv6= k8sPodName=openstack/horizon-db-sync-rpvbm subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=4107f92a6d datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1077 identity=16305 ipv4=10.0.0.203 ipv6= k8sPodName=openstack/horizon-db-sync-rpvbm subsys=endpoint level=info msg="Successful endpoint creation" containerID=4107f92a6d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1077 identity=16305 ipv4=10.0.0.203 ipv6= k8sPodName=openstack/horizon-db-sync-rpvbm subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.102 7986a17d-daa5-4c06-a166-d96921672eec default }" containerID=1760aee48f6cb366fa5a58b4618d6854da93e8778ad3261ef8150198ea4f7b4d datapathConfiguration="&{false false false false false }" interface=lxc88071f6ad951 k8sPodName=local-path-storage/helper-pod-create-pvc-70f10cf0-8949-4cc8-9990-a80371ac2ee5 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1760aee48f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2391 ipv4=10.0.0.102 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-70f10cf0-8949-4cc8-9990-a80371ac2ee5 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1760aee48f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2391 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.102 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-70f10cf0-8949-4cc8-9990-a80371ac2ee5 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1760aee48f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2391 identity=1361 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.102 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-70f10cf0-8949-4cc8-9990-a80371ac2ee5 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1760aee48f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2391 identity=1361 ipv4=10.0.0.102 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-70f10cf0-8949-4cc8-9990-a80371ac2ee5 subsys=endpoint level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=1760aee48f datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2391 identity=1361 ipv4=10.0.0.102 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-70f10cf0-8949-4cc8-9990-a80371ac2ee5 subsys=endpoint level=info msg="Successful endpoint creation" containerID=1760aee48f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2391 identity=1361 ipv4=10.0.0.102 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-70f10cf0-8949-4cc8-9990-a80371ac2ee5 subsys=daemon level=info msg="Delete endpoint request" containerID=1760aee48f endpointID=2391 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-70f10cf0-8949-4cc8-9990-a80371ac2ee5 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=1760aee48f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2391 identity=1361 ipv4=10.0.0.102 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-70f10cf0-8949-4cc8-9990-a80371ac2ee5 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.119 bc7df9ff-d3b4-4d0b-b605-c93c43a507b3 default }" containerID=565e64cec4a5f63239eccecb3bb74618b8eb03ed8596f95d39d7e89bf96004fd datapathConfiguration="&{false false false false false }" interface=lxc023266a5a665 k8sPodName=openstack/rabbitmq-octavia-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=565e64cec4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2127 ipv4=10.0.0.119 ipv6= k8sPodName=openstack/rabbitmq-octavia-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=565e64cec4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2127 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-octavia,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-octavia-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-octavia-server-0" ipv4=10.0.0.119 ipv6= k8sPodName=openstack/rabbitmq-octavia-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-octavia;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-octavia-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-octavia-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=565e64cec4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2127 identity=4930 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-octavia,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-octavia-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-octavia-server-0" ipv4=10.0.0.119 ipv6= k8sPodName=openstack/rabbitmq-octavia-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=565e64cec4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2127 identity=4930 ipv4=10.0.0.119 ipv6= k8sPodName=openstack/rabbitmq-octavia-server-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=565e64cec4 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2127 identity=4930 ipv4=10.0.0.119 ipv6= k8sPodName=openstack/rabbitmq-octavia-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=565e64cec4 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2127 identity=4930 ipv4=10.0.0.119 ipv6= k8sPodName=openstack/rabbitmq-octavia-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=a4b9ba1c3d endpointID=468 k8sNamespace=openstack k8sPodName=placement-db-sync-gzvbk subsys=daemon level=info msg="Releasing key" key="[k8s:application=placement k8s:batch.kubernetes.io/controller-uid=ec4482d5-7fb2-4b5f-bd2a-78f2cb4cd149 k8s:batch.kubernetes.io/job-name=placement-db-sync k8s:component=db-sync k8s:controller-uid=ec4482d5-7fb2-4b5f-bd2a-78f2cb4cd149 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=placement-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=placement-db-sync k8s:release_group=placement]" subsys=allocator level=info msg="Delete endpoint request" containerID=4107f92a6d endpointID=1077 k8sNamespace=openstack k8sPodName=horizon-db-sync-rpvbm subsys=daemon level=info msg="Releasing key" key="[k8s:application=horizon k8s:batch.kubernetes.io/controller-uid=23db2f5e-78f6-4a67-b15f-bba0e044c550 k8s:batch.kubernetes.io/job-name=horizon-db-sync k8s:component=db-sync k8s:controller-uid=23db2f5e-78f6-4a67-b15f-bba0e044c550 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=horizon-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=horizon-db-sync k8s:release_group=horizon]" subsys=allocator level=info msg="Removed endpoint" containerID=a4b9ba1c3d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=468 identity=3311 ipv4=10.0.0.161 ipv6= k8sPodName=openstack/placement-db-sync-gzvbk subsys=endpoint level=info msg="Removed endpoint" containerID=4107f92a6d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1077 identity=16305 ipv4=10.0.0.203 ipv6= k8sPodName=openstack/horizon-db-sync-rpvbm subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.26 c9682e4f-d238-4242-a544-d5b53ca11906 default }" containerID=451a13fdeb7e073227c8e5b6531ef74f0ff7ae48f494fbfd67798cd50d483436 datapathConfiguration="&{false false false false false }" interface=lxc8ba659c25748 k8sPodName=openstack/heat-engine-77bcf6d8f5-b8sg2 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=451a13fdeb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3813 ipv4=10.0.0.26 ipv6= k8sPodName=openstack/heat-engine-77bcf6d8f5-b8sg2 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=451a13fdeb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3813 identityLabels="k8s:application=heat,k8s:component=engine,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=heat-engine,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=heat" ipv4=10.0.0.26 ipv6= k8sPodName=openstack/heat-engine-77bcf6d8f5-b8sg2 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=heat;k8s:component=engine;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=heat-engine;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=heat;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=451a13fdeb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3813 identity=12814 identityLabels="k8s:application=heat,k8s:component=engine,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=heat-engine,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=heat" ipv4=10.0.0.26 ipv6= k8sPodName=openstack/heat-engine-77bcf6d8f5-b8sg2 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=451a13fdeb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3813 identity=12814 ipv4=10.0.0.26 ipv6= k8sPodName=openstack/heat-engine-77bcf6d8f5-b8sg2 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.36 7993339f-bd95-49f5-84f2-731867c26f94 default }" containerID=d235ef8244296ef07b00182d4b3127c3b10e4a6735016391e6cf1e34769abdeb datapathConfiguration="&{false false false false false }" interface=lxc6f7e2a179f63 k8sPodName=openstack/heat-api-5cd6c94798-fqh8c labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d235ef8244 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2999 ipv4=10.0.0.36 ipv6= k8sPodName=openstack/heat-api-5cd6c94798-fqh8c subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d235ef8244 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2999 identityLabels="k8s:application=heat,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=heat-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=heat" ipv4=10.0.0.36 ipv6= k8sPodName=openstack/heat-api-5cd6c94798-fqh8c subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=heat;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=heat-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=heat;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d235ef8244 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2999 identity=12395 identityLabels="k8s:application=heat,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=heat-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=heat" ipv4=10.0.0.36 ipv6= k8sPodName=openstack/heat-api-5cd6c94798-fqh8c oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d235ef8244 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2999 identity=12395 ipv4=10.0.0.36 ipv6= k8sPodName=openstack/heat-api-5cd6c94798-fqh8c subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.163 8199f721-988f-41ac-a546-0b8d5c73a68c default }" containerID=c007372ca0e7cb30f9568eb79f4970a757149cdc01a76daae67d414aae5a8ed6 datapathConfiguration="&{false false false false false }" interface=lxc45a72dd5fa67 k8sPodName=openstack/heat-cfn-7f55d5d4b4-f6ngh labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c007372ca0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3964 ipv4=10.0.0.163 ipv6= k8sPodName=openstack/heat-cfn-7f55d5d4b4-f6ngh subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c007372ca0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3964 identityLabels="k8s:application=heat,k8s:component=cfn,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=heat-cfn,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=heat" ipv4=10.0.0.163 ipv6= k8sPodName=openstack/heat-cfn-7f55d5d4b4-f6ngh subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=heat;k8s:component=cfn;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=heat-cfn;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=heat;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c007372ca0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3964 identity=16644 identityLabels="k8s:application=heat,k8s:component=cfn,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=heat-cfn,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=heat" ipv4=10.0.0.163 ipv6= k8sPodName=openstack/heat-cfn-7f55d5d4b4-f6ngh oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c007372ca0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3964 identity=16644 ipv4=10.0.0.163 ipv6= k8sPodName=openstack/heat-cfn-7f55d5d4b4-f6ngh subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.110 9edbc1e3-1b23-4ad3-b64d-901089d39b89 default }" containerID=efe9b60598b8d3fa17c5e7a7b0693f8798d7c8876dc3eda5e8c1f541371e7d3d datapathConfiguration="&{false false false false false }" interface=lxcb32b0e8912df k8sPodName=openstack/heat-db-init-grz9s labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=efe9b60598 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2545 ipv4=10.0.0.110 ipv6= k8sPodName=openstack/heat-db-init-grz9s subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=efe9b60598 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2545 identityLabels="k8s:application=heat,k8s:batch.kubernetes.io/controller-uid=6f34a57a-10ad-4dfb-b172-f2beef4c260f,k8s:batch.kubernetes.io/job-name=heat-db-init,k8s:component=db-init,k8s:controller-uid=6f34a57a-10ad-4dfb-b172-f2beef4c260f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=heat-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=heat-db-init,k8s:release_group=heat" ipv4=10.0.0.110 ipv6= k8sPodName=openstack/heat-db-init-grz9s subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=heat;k8s:batch.kubernetes.io/controller-uid=6f34a57a-10ad-4dfb-b172-f2beef4c260f;k8s:batch.kubernetes.io/job-name=heat-db-init;k8s:component=db-init;k8s:controller-uid=6f34a57a-10ad-4dfb-b172-f2beef4c260f;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=heat-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=heat-db-init;k8s:release_group=heat;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=efe9b60598 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2545 identity=25010 identityLabels="k8s:application=heat,k8s:batch.kubernetes.io/controller-uid=6f34a57a-10ad-4dfb-b172-f2beef4c260f,k8s:batch.kubernetes.io/job-name=heat-db-init,k8s:component=db-init,k8s:controller-uid=6f34a57a-10ad-4dfb-b172-f2beef4c260f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=heat-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=heat-db-init,k8s:release_group=heat" ipv4=10.0.0.110 ipv6= k8sPodName=openstack/heat-db-init-grz9s oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=efe9b60598 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2545 identity=25010 ipv4=10.0.0.110 ipv6= k8sPodName=openstack/heat-db-init-grz9s subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=451a13fdeb datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3813 identity=12814 ipv4=10.0.0.26 ipv6= k8sPodName=openstack/heat-engine-77bcf6d8f5-b8sg2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=451a13fdeb datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3813 identity=12814 ipv4=10.0.0.26 ipv6= k8sPodName=openstack/heat-engine-77bcf6d8f5-b8sg2 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=d235ef8244 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2999 identity=12395 ipv4=10.0.0.36 ipv6= k8sPodName=openstack/heat-api-5cd6c94798-fqh8c subsys=endpoint level=info msg="Successful endpoint creation" containerID=d235ef8244 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2999 identity=12395 ipv4=10.0.0.36 ipv6= k8sPodName=openstack/heat-api-5cd6c94798-fqh8c subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=c007372ca0 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3964 identity=16644 ipv4=10.0.0.163 ipv6= k8sPodName=openstack/heat-cfn-7f55d5d4b4-f6ngh subsys=endpoint level=info msg="Successful endpoint creation" containerID=c007372ca0 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3964 identity=16644 ipv4=10.0.0.163 ipv6= k8sPodName=openstack/heat-cfn-7f55d5d4b4-f6ngh subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.57 36c787bd-3bf8-4f7a-b213-fcdb50b30f6e default }" containerID=0295f6b05a7f69a0512f1b610ae1c6ccd332bbab0dfc56977fa70adbd23e9226 datapathConfiguration="&{false false false false false }" interface=lxce20a1433f966 k8sPodName=openstack/cinder-scheduler-5875c9b6c-rj5rv labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0295f6b05a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2464 ipv4=10.0.0.57 ipv6= k8sPodName=openstack/cinder-scheduler-5875c9b6c-rj5rv subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0295f6b05a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2464 identityLabels="k8s:application=cinder,k8s:component=scheduler,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-scheduler,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=cinder" ipv4=10.0.0.57 ipv6= k8sPodName=openstack/cinder-scheduler-5875c9b6c-rj5rv subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack]" subsys=crd-allocator level=info msg="Rewrote endpoint BPF program" containerID=efe9b60598 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2545 identity=25010 ipv4=10.0.0.110 ipv6= k8sPodName=openstack/heat-db-init-grz9s subsys=endpoint level=info msg="Successful endpoint creation" containerID=efe9b60598 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2545 identity=25010 ipv4=10.0.0.110 ipv6= k8sPodName=openstack/heat-db-init-grz9s subsys=daemon level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:component=scheduler;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-scheduler;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0295f6b05a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2464 identity=46992 identityLabels="k8s:application=cinder,k8s:component=scheduler,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-scheduler,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=cinder" ipv4=10.0.0.57 ipv6= k8sPodName=openstack/cinder-scheduler-5875c9b6c-rj5rv oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0295f6b05a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2464 identity=46992 ipv4=10.0.0.57 ipv6= k8sPodName=openstack/cinder-scheduler-5875c9b6c-rj5rv subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.252 a9ec061a-dac7-4c51-99e7-cd455e6147a6 default }" containerID=fc1cb1d6c5e7bd9d2b2081c919d20e716035fcf88a832a4738865ebd3080398b datapathConfiguration="&{false false false false false }" interface=lxc082fa5ffe94e k8sPodName=openstack/cinder-api-6f75769fd5-9dsd7 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=fc1cb1d6c5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1640 ipv4=10.0.0.252 ipv6= k8sPodName=openstack/cinder-api-6f75769fd5-9dsd7 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=fc1cb1d6c5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1640 identityLabels="k8s:application=cinder,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=cinder" ipv4=10.0.0.252 ipv6= k8sPodName=openstack/cinder-api-6f75769fd5-9dsd7 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack]" subsys=crd-allocator level=info msg="Create endpoint request" addressing="&{10.0.0.253 dba2219e-8f59-4403-988a-d0cc9da18972 default }" containerID=23016447e5abec23dd9a3172783d685200149b79b6800bf5c0c12d4c1907983b datapathConfiguration="&{false false false false false }" interface=lxc09cf4f17ea02 k8sPodName=openstack/cinder-db-init-cgk9q labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=23016447e5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=119 ipv4=10.0.0.253 ipv6= k8sPodName=openstack/cinder-db-init-cgk9q subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=23016447e5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=119 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=df6c0035-e5cb-45cf-96d9-ed3fdf0d281b,k8s:batch.kubernetes.io/job-name=cinder-db-init,k8s:component=db-init,k8s:controller-uid=df6c0035-e5cb-45cf-96d9-ed3fdf0d281b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-db-init,k8s:release_group=cinder" ipv4=10.0.0.253 ipv6= k8sPodName=openstack/cinder-db-init-cgk9q subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=0295f6b05a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2464 identity=46992 ipv4=10.0.0.57 ipv6= k8sPodName=openstack/cinder-scheduler-5875c9b6c-rj5rv subsys=endpoint level=info msg="Successful endpoint creation" containerID=0295f6b05a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2464 identity=46992 ipv4=10.0.0.57 ipv6= k8sPodName=openstack/cinder-scheduler-5875c9b6c-rj5rv subsys=daemon level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=fc1cb1d6c5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1640 identity=8526 identityLabels="k8s:application=cinder,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=cinder" ipv4=10.0.0.252 ipv6= k8sPodName=openstack/cinder-api-6f75769fd5-9dsd7 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=23016447e5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=119 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.253 ipv6= k8sPodName=openstack/cinder-db-init-cgk9q line=611 subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=fc1cb1d6c5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1640 identity=8526 ipv4=10.0.0.252 ipv6= k8sPodName=openstack/cinder-api-6f75769fd5-9dsd7 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack]" subsys=crd-allocator level=info msg="Rewrote endpoint BPF program" containerID=fc1cb1d6c5 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1640 identity=8526 ipv4=10.0.0.252 ipv6= k8sPodName=openstack/cinder-api-6f75769fd5-9dsd7 subsys=endpoint level=info msg="Successful endpoint creation" containerID=fc1cb1d6c5 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1640 identity=8526 ipv4=10.0.0.252 ipv6= k8sPodName=openstack/cinder-api-6f75769fd5-9dsd7 subsys=daemon level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=df6c0035-e5cb-45cf-96d9-ed3fdf0d281b;k8s:batch.kubernetes.io/job-name=cinder-db-init;k8s:component=db-init;k8s:controller-uid=df6c0035-e5cb-45cf-96d9-ed3fdf0d281b;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-db-init;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=23016447e5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=119 identity=35951 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=df6c0035-e5cb-45cf-96d9-ed3fdf0d281b,k8s:batch.kubernetes.io/job-name=cinder-db-init,k8s:component=db-init,k8s:controller-uid=df6c0035-e5cb-45cf-96d9-ed3fdf0d281b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-db-init,k8s:release_group=cinder" ipv4=10.0.0.253 ipv6= k8sPodName=openstack/cinder-db-init-cgk9q oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=23016447e5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=119 identity=35951 ipv4=10.0.0.253 ipv6= k8sPodName=openstack/cinder-db-init-cgk9q subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=23016447e5 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=119 identity=35951 ipv4=10.0.0.253 ipv6= k8sPodName=openstack/cinder-db-init-cgk9q subsys=endpoint level=info msg="Successful endpoint creation" containerID=23016447e5 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=119 identity=35951 ipv4=10.0.0.253 ipv6= k8sPodName=openstack/cinder-db-init-cgk9q subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.74 76c91d36-e42d-4ef9-9a62-91fc07e8de82 default }" containerID=fee80957d8d85f962dafec2e4c54654a9ddad1c9c74a1406376411aa8cabe9d3 datapathConfiguration="&{false false false false false }" interface=lxc7f60f8b78b5c k8sPodName=openstack/placement-ks-service-75cm8 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=fee80957d8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=454 ipv4=10.0.0.74 ipv6= k8sPodName=openstack/placement-ks-service-75cm8 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=fee80957d8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=454 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=bb6c82f4-5ffa-450b-8b14-f4a98a89c664,k8s:batch.kubernetes.io/job-name=placement-ks-service,k8s:component=ks-service,k8s:controller-uid=bb6c82f4-5ffa-450b-8b14-f4a98a89c664,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-ks-service,k8s:release_group=placement" ipv4=10.0.0.74 ipv6= k8sPodName=openstack/placement-ks-service-75cm8 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=fee80957d8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=454 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.74 ipv6= k8sPodName=openstack/placement-ks-service-75cm8 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=placement;k8s:batch.kubernetes.io/controller-uid=bb6c82f4-5ffa-450b-8b14-f4a98a89c664;k8s:batch.kubernetes.io/job-name=placement-ks-service;k8s:component=ks-service;k8s:controller-uid=bb6c82f4-5ffa-450b-8b14-f4a98a89c664;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=placement-ks-service;k8s:release_group=placement;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=fee80957d8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=454 identity=35337 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=bb6c82f4-5ffa-450b-8b14-f4a98a89c664,k8s:batch.kubernetes.io/job-name=placement-ks-service,k8s:component=ks-service,k8s:controller-uid=bb6c82f4-5ffa-450b-8b14-f4a98a89c664,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-ks-service,k8s:release_group=placement" ipv4=10.0.0.74 ipv6= k8sPodName=openstack/placement-ks-service-75cm8 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=fee80957d8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=454 identity=35337 ipv4=10.0.0.74 ipv6= k8sPodName=openstack/placement-ks-service-75cm8 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=fee80957d8 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=454 identity=35337 ipv4=10.0.0.74 ipv6= k8sPodName=openstack/placement-ks-service-75cm8 subsys=endpoint level=info msg="Successful endpoint creation" containerID=fee80957d8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=454 identity=35337 ipv4=10.0.0.74 ipv6= k8sPodName=openstack/placement-ks-service-75cm8 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.70 8c067792-4185-410e-8cf5-a5ae83a5ef3d default }" containerID=3eb26bce93ac3279c78e190748411ab0f4d16ba78dfcc44443590336054b57cb datapathConfiguration="&{false false false false false }" interface=lxc9c360ea018b5 k8sPodName=openstack/glance-db-init-9r82g labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3eb26bce93 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=328 ipv4=10.0.0.70 ipv6= k8sPodName=openstack/glance-db-init-9r82g subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3eb26bce93 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=328 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=88d591c6-1c69-4240-8147-adf9c6039cc3,k8s:batch.kubernetes.io/job-name=glance-db-init,k8s:component=db-init,k8s:controller-uid=88d591c6-1c69-4240-8147-adf9c6039cc3,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-init,k8s:release_group=glance" ipv4=10.0.0.70 ipv6= k8sPodName=openstack/glance-db-init-9r82g subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=88d591c6-1c69-4240-8147-adf9c6039cc3;k8s:batch.kubernetes.io/job-name=glance-db-init;k8s:component=db-init;k8s:controller-uid=88d591c6-1c69-4240-8147-adf9c6039cc3;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-db-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3eb26bce93 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=328 identity=1775 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=88d591c6-1c69-4240-8147-adf9c6039cc3,k8s:batch.kubernetes.io/job-name=glance-db-init,k8s:component=db-init,k8s:controller-uid=88d591c6-1c69-4240-8147-adf9c6039cc3,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-init,k8s:release_group=glance" ipv4=10.0.0.70 ipv6= k8sPodName=openstack/glance-db-init-9r82g oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3eb26bce93 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=328 identity=1775 ipv4=10.0.0.70 ipv6= k8sPodName=openstack/glance-db-init-9r82g subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=3eb26bce93 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=328 identity=1775 ipv4=10.0.0.70 ipv6= k8sPodName=openstack/glance-db-init-9r82g subsys=endpoint level=info msg="Successful endpoint creation" containerID=3eb26bce93 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=328 identity=1775 ipv4=10.0.0.70 ipv6= k8sPodName=openstack/glance-db-init-9r82g subsys=daemon level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.24 3cbda502-8750-4aee-8ffb-0da1756f322e default }" containerID=15a484323cee24662e32661c7a432e25a86706fd124de1afe2d93f94bb642603 datapathConfiguration="&{false false false false false }" interface=lxc47eaeb11b2a8 k8sPodName=openstack/rook-ceph-detect-version-sr5ph labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=15a484323c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=785 ipv4=10.0.0.24 ipv6= k8sPodName=openstack/rook-ceph-detect-version-sr5ph subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=15a484323c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=785 identityLabels="k8s:app=rook-ceph-detect-version,k8s:batch.kubernetes.io/controller-uid=81d3eac7-adea-49f5-acb8-76812ce29186,k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version,k8s:controller-uid=81d3eac7-adea-49f5-acb8-76812ce29186,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=rook-ceph-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.24 ipv6= k8sPodName=openstack/rook-ceph-detect-version-sr5ph subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-detect-version;k8s:batch.kubernetes.io/controller-uid=81d3eac7-adea-49f5-acb8-76812ce29186;k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version;k8s:controller-uid=81d3eac7-adea-49f5-acb8-76812ce29186;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=rook-ceph-detect-version;k8s:rook-version=v1.15.9;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=15a484323c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=785 identity=49561 identityLabels="k8s:app=rook-ceph-detect-version,k8s:batch.kubernetes.io/controller-uid=81d3eac7-adea-49f5-acb8-76812ce29186,k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version,k8s:controller-uid=81d3eac7-adea-49f5-acb8-76812ce29186,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=rook-ceph-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.24 ipv6= k8sPodName=openstack/rook-ceph-detect-version-sr5ph oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=15a484323c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=785 identity=49561 ipv4=10.0.0.24 ipv6= k8sPodName=openstack/rook-ceph-detect-version-sr5ph subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=15a484323c datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=785 identity=49561 ipv4=10.0.0.24 ipv6= k8sPodName=openstack/rook-ceph-detect-version-sr5ph subsys=endpoint level=info msg="Successful endpoint creation" containerID=15a484323c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=785 identity=49561 ipv4=10.0.0.24 ipv6= k8sPodName=openstack/rook-ceph-detect-version-sr5ph subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=efe9b60598 endpointID=2545 k8sNamespace=openstack k8sPodName=heat-db-init-grz9s subsys=daemon level=info msg="Releasing key" key="[k8s:application=heat k8s:batch.kubernetes.io/controller-uid=6f34a57a-10ad-4dfb-b172-f2beef4c260f k8s:batch.kubernetes.io/job-name=heat-db-init k8s:component=db-init k8s:controller-uid=6f34a57a-10ad-4dfb-b172-f2beef4c260f k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=heat-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=heat-db-init k8s:release_group=heat]" subsys=allocator level=info msg="Removed endpoint" containerID=efe9b60598 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2545 identity=25010 ipv4=10.0.0.110 ipv6= k8sPodName=openstack/heat-db-init-grz9s subsys=endpoint level=info msg="Delete endpoint request" containerID=23016447e5 endpointID=119 k8sNamespace=openstack k8sPodName=cinder-db-init-cgk9q subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=df6c0035-e5cb-45cf-96d9-ed3fdf0d281b k8s:batch.kubernetes.io/job-name=cinder-db-init k8s:component=db-init k8s:controller-uid=df6c0035-e5cb-45cf-96d9-ed3fdf0d281b k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-db-init k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=23016447e5 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=119 identity=35951 ipv4=10.0.0.253 ipv6= k8sPodName=openstack/cinder-db-init-cgk9q subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.89 3ec22dd6-9721-450a-abb9-849f9fed36d3 default }" containerID=830da66773b309901ed35ba40099b4fbac6af22be3045de37d9f9a0574006ebe datapathConfiguration="&{false false false false false }" interface=lxcea755e31ba51 k8sPodName=openstack/heat-db-sync-gdt49 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=830da66773 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1330 ipv4=10.0.0.89 ipv6= k8sPodName=openstack/heat-db-sync-gdt49 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=830da66773 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1330 identityLabels="k8s:application=heat,k8s:batch.kubernetes.io/controller-uid=7f26fa54-fb54-4bae-a633-04150fc1da8c,k8s:batch.kubernetes.io/job-name=heat-db-sync,k8s:component=db-sync,k8s:controller-uid=7f26fa54-fb54-4bae-a633-04150fc1da8c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=heat-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=heat-db-sync,k8s:release_group=heat" ipv4=10.0.0.89 ipv6= k8sPodName=openstack/heat-db-sync-gdt49 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=heat;k8s:batch.kubernetes.io/controller-uid=7f26fa54-fb54-4bae-a633-04150fc1da8c;k8s:batch.kubernetes.io/job-name=heat-db-sync;k8s:component=db-sync;k8s:controller-uid=7f26fa54-fb54-4bae-a633-04150fc1da8c;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=heat-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=heat-db-sync;k8s:release_group=heat;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=830da66773 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1330 identity=16916 identityLabels="k8s:application=heat,k8s:batch.kubernetes.io/controller-uid=7f26fa54-fb54-4bae-a633-04150fc1da8c,k8s:batch.kubernetes.io/job-name=heat-db-sync,k8s:component=db-sync,k8s:controller-uid=7f26fa54-fb54-4bae-a633-04150fc1da8c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=heat-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=heat-db-sync,k8s:release_group=heat" ipv4=10.0.0.89 ipv6= k8sPodName=openstack/heat-db-sync-gdt49 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=830da66773 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1330 identity=16916 ipv4=10.0.0.89 ipv6= k8sPodName=openstack/heat-db-sync-gdt49 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=830da66773 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1330 identity=16916 ipv4=10.0.0.89 ipv6= k8sPodName=openstack/heat-db-sync-gdt49 subsys=endpoint level=info msg="Successful endpoint creation" containerID=830da66773 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1330 identity=16916 ipv4=10.0.0.89 ipv6= k8sPodName=openstack/heat-db-sync-gdt49 subsys=daemon level=info msg="Delete endpoint request" containerID=3eb26bce93 endpointID=328 k8sNamespace=openstack k8sPodName=glance-db-init-9r82g subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=88d591c6-1c69-4240-8147-adf9c6039cc3 k8s:batch.kubernetes.io/job-name=glance-db-init k8s:component=db-init k8s:controller-uid=88d591c6-1c69-4240-8147-adf9c6039cc3 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-db-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=3eb26bce93 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=328 identity=1775 ipv4=10.0.0.70 ipv6= k8sPodName=openstack/glance-db-init-9r82g subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.70 d87e955e-a56c-4470-a413-b2bc28b175e8 default }" containerID=7dfdd27d07457a85062bb32f11263cd2182a4c2c63c03abdf7151db0b507a63e datapathConfiguration="&{false false false false false }" interface=lxcbb6410720f28 k8sPodName=openstack/cinder-db-sync-dcttp labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7dfdd27d07 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2430 ipv4=10.0.0.70 ipv6= k8sPodName=openstack/cinder-db-sync-dcttp subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7dfdd27d07 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2430 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=de37d5d0-c8e9-4c55-b0db-187882cf10d3,k8s:batch.kubernetes.io/job-name=cinder-db-sync,k8s:component=db-sync,k8s:controller-uid=de37d5d0-c8e9-4c55-b0db-187882cf10d3,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-db-sync,k8s:release_group=cinder" ipv4=10.0.0.70 ipv6= k8sPodName=openstack/cinder-db-sync-dcttp subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=7dfdd27d07 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2430 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.70 ipv6= k8sPodName=openstack/cinder-db-sync-dcttp line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=de37d5d0-c8e9-4c55-b0db-187882cf10d3;k8s:batch.kubernetes.io/job-name=cinder-db-sync;k8s:component=db-sync;k8s:controller-uid=de37d5d0-c8e9-4c55-b0db-187882cf10d3;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-db-sync;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7dfdd27d07 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2430 identity=57787 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=de37d5d0-c8e9-4c55-b0db-187882cf10d3,k8s:batch.kubernetes.io/job-name=cinder-db-sync,k8s:component=db-sync,k8s:controller-uid=de37d5d0-c8e9-4c55-b0db-187882cf10d3,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-db-sync,k8s:release_group=cinder" ipv4=10.0.0.70 ipv6= k8sPodName=openstack/cinder-db-sync-dcttp oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7dfdd27d07 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2430 identity=57787 ipv4=10.0.0.70 ipv6= k8sPodName=openstack/cinder-db-sync-dcttp subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=7dfdd27d07 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2430 identity=57787 ipv4=10.0.0.70 ipv6= k8sPodName=openstack/cinder-db-sync-dcttp subsys=endpoint level=info msg="Successful endpoint creation" containerID=7dfdd27d07 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2430 identity=57787 ipv4=10.0.0.70 ipv6= k8sPodName=openstack/cinder-db-sync-dcttp subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.134 d582f456-3510-4199-b1e5-9bb6772983a5 default }" containerID=65d0330c8c53f13bd42e56e0b58a2c3ea52f419341f2567ba3c4fbf2e9edf51d datapathConfiguration="&{false false false false false }" interface=lxc90c9ab5bd9d1 k8sPodName=openstack/glance-db-sync-h2t6k labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=65d0330c8c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3047 ipv4=10.0.0.134 ipv6= k8sPodName=openstack/glance-db-sync-h2t6k subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=65d0330c8c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3047 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=ff397fa7-49eb-4bc4-b026-1fc00b4d9eac,k8s:batch.kubernetes.io/job-name=glance-db-sync,k8s:component=db-sync,k8s:controller-uid=ff397fa7-49eb-4bc4-b026-1fc00b4d9eac,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-sync,k8s:release_group=glance" ipv4=10.0.0.134 ipv6= k8sPodName=openstack/glance-db-sync-h2t6k subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=ff397fa7-49eb-4bc4-b026-1fc00b4d9eac;k8s:batch.kubernetes.io/job-name=glance-db-sync;k8s:component=db-sync;k8s:controller-uid=ff397fa7-49eb-4bc4-b026-1fc00b4d9eac;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-db-sync;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=65d0330c8c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3047 identity=17879 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=ff397fa7-49eb-4bc4-b026-1fc00b4d9eac,k8s:batch.kubernetes.io/job-name=glance-db-sync,k8s:component=db-sync,k8s:controller-uid=ff397fa7-49eb-4bc4-b026-1fc00b4d9eac,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-sync,k8s:release_group=glance" ipv4=10.0.0.134 ipv6= k8sPodName=openstack/glance-db-sync-h2t6k oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=65d0330c8c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3047 identity=17879 ipv4=10.0.0.134 ipv6= k8sPodName=openstack/glance-db-sync-h2t6k subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=65d0330c8c datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3047 identity=17879 ipv4=10.0.0.134 ipv6= k8sPodName=openstack/glance-db-sync-h2t6k subsys=endpoint level=info msg="Successful endpoint creation" containerID=65d0330c8c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3047 identity=17879 ipv4=10.0.0.134 ipv6= k8sPodName=openstack/glance-db-sync-h2t6k subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=830da66773 endpointID=1330 k8sNamespace=openstack k8sPodName=heat-db-sync-gdt49 subsys=daemon level=info msg="Releasing key" key="[k8s:application=heat k8s:batch.kubernetes.io/controller-uid=7f26fa54-fb54-4bae-a633-04150fc1da8c k8s:batch.kubernetes.io/job-name=heat-db-sync k8s:component=db-sync k8s:controller-uid=7f26fa54-fb54-4bae-a633-04150fc1da8c k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=heat-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=heat-db-sync k8s:release_group=heat]" subsys=allocator level=info msg="Removed endpoint" containerID=830da66773 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1330 identity=16916 ipv4=10.0.0.89 ipv6= k8sPodName=openstack/heat-db-sync-gdt49 subsys=endpoint level=info msg="Delete endpoint request" containerID=15a484323c endpointID=785 k8sNamespace=openstack k8sPodName=rook-ceph-detect-version-sr5ph subsys=daemon level=info msg="Releasing key" key="[k8s:app=rook-ceph-detect-version k8s:batch.kubernetes.io/controller-uid=81d3eac7-adea-49f5-acb8-76812ce29186 k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version k8s:controller-uid=81d3eac7-adea-49f5-acb8-76812ce29186 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=rook-ceph-detect-version k8s:rook-version=v1.15.9]" subsys=allocator level=info msg="Removed endpoint" containerID=15a484323c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=785 identity=49561 ipv4=10.0.0.24 ipv6= k8sPodName=openstack/rook-ceph-detect-version-sr5ph subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.114 ec760e47-fd5e-4786-84ce-5d9459dc9847 default }" containerID=04ea69f26781f2da093f4f1deda19ae19f9cbd45bf9bed46dc5465bf76837714 datapathConfiguration="&{false false false false false }" interface=lxca5a3db866a48 k8sPodName=openstack/heat-rabbit-init-pxf6s labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=04ea69f267 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=209 ipv4=10.0.0.114 ipv6= k8sPodName=openstack/heat-rabbit-init-pxf6s subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=04ea69f267 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=209 identityLabels="k8s:application=heat,k8s:batch.kubernetes.io/controller-uid=3b041a10-9408-41b7-9ef2-f271ec81dcca,k8s:batch.kubernetes.io/job-name=heat-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=3b041a10-9408-41b7-9ef2-f271ec81dcca,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=heat-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=heat-rabbit-init,k8s:release_group=heat" ipv4=10.0.0.114 ipv6= k8sPodName=openstack/heat-rabbit-init-pxf6s subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=04ea69f267 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=209 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.114 ipv6= k8sPodName=openstack/heat-rabbit-init-pxf6s line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=heat;k8s:batch.kubernetes.io/controller-uid=3b041a10-9408-41b7-9ef2-f271ec81dcca;k8s:batch.kubernetes.io/job-name=heat-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=3b041a10-9408-41b7-9ef2-f271ec81dcca;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=heat-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=heat-rabbit-init;k8s:release_group=heat;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=04ea69f267 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=209 identity=65379 identityLabels="k8s:application=heat,k8s:batch.kubernetes.io/controller-uid=3b041a10-9408-41b7-9ef2-f271ec81dcca,k8s:batch.kubernetes.io/job-name=heat-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=3b041a10-9408-41b7-9ef2-f271ec81dcca,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=heat-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=heat-rabbit-init,k8s:release_group=heat" ipv4=10.0.0.114 ipv6= k8sPodName=openstack/heat-rabbit-init-pxf6s oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=04ea69f267 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=209 identity=65379 ipv4=10.0.0.114 ipv6= k8sPodName=openstack/heat-rabbit-init-pxf6s subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=04ea69f267 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=209 identity=65379 ipv4=10.0.0.114 ipv6= k8sPodName=openstack/heat-rabbit-init-pxf6s subsys=endpoint level=info msg="Successful endpoint creation" containerID=04ea69f267 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=209 identity=65379 ipv4=10.0.0.114 ipv6= k8sPodName=openstack/heat-rabbit-init-pxf6s subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=fee80957d8 endpointID=454 k8sNamespace=openstack k8sPodName=placement-ks-service-75cm8 subsys=daemon level=info msg="Releasing key" key="[k8s:application=placement k8s:batch.kubernetes.io/controller-uid=bb6c82f4-5ffa-450b-8b14-f4a98a89c664 k8s:batch.kubernetes.io/job-name=placement-ks-service k8s:component=ks-service k8s:controller-uid=bb6c82f4-5ffa-450b-8b14-f4a98a89c664 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=placement-ks-service k8s:release_group=placement]" subsys=allocator level=info msg="Removed endpoint" containerID=fee80957d8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=454 identity=35337 ipv4=10.0.0.74 ipv6= k8sPodName=openstack/placement-ks-service-75cm8 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.20 8800ac53-2fb8-4e0f-b041-bb3019278df3 default }" containerID=4edd4e79137b9226d019dd4353211be49ee5930d3f61b92d2c9858a24151a787 datapathConfiguration="&{false false false false false }" interface=lxc637fd19e7b18 k8sPodName=openstack/placement-ks-user-9x9dg labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4edd4e7913 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1501 ipv4=10.0.0.20 ipv6= k8sPodName=openstack/placement-ks-user-9x9dg subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4edd4e7913 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1501 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=2e6ba697-7af3-48fe-aabe-4e1eeeaccb11,k8s:batch.kubernetes.io/job-name=placement-ks-user,k8s:component=ks-user,k8s:controller-uid=2e6ba697-7af3-48fe-aabe-4e1eeeaccb11,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-ks-user,k8s:release_group=placement" ipv4=10.0.0.20 ipv6= k8sPodName=openstack/placement-ks-user-9x9dg subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=placement;k8s:batch.kubernetes.io/controller-uid=2e6ba697-7af3-48fe-aabe-4e1eeeaccb11;k8s:batch.kubernetes.io/job-name=placement-ks-user;k8s:component=ks-user;k8s:controller-uid=2e6ba697-7af3-48fe-aabe-4e1eeeaccb11;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=placement-ks-user;k8s:release_group=placement;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4edd4e7913 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1501 identity=11103 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=2e6ba697-7af3-48fe-aabe-4e1eeeaccb11,k8s:batch.kubernetes.io/job-name=placement-ks-user,k8s:component=ks-user,k8s:controller-uid=2e6ba697-7af3-48fe-aabe-4e1eeeaccb11,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-ks-user,k8s:release_group=placement" ipv4=10.0.0.20 ipv6= k8sPodName=openstack/placement-ks-user-9x9dg oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4edd4e7913 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1501 identity=11103 ipv4=10.0.0.20 ipv6= k8sPodName=openstack/placement-ks-user-9x9dg subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=4edd4e7913 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1501 identity=11103 ipv4=10.0.0.20 ipv6= k8sPodName=openstack/placement-ks-user-9x9dg subsys=endpoint level=info msg="Successful endpoint creation" containerID=4edd4e7913 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1501 identity=11103 ipv4=10.0.0.20 ipv6= k8sPodName=openstack/placement-ks-user-9x9dg subsys=daemon level=info msg="Delete endpoint request" containerID=04ea69f267 endpointID=209 k8sNamespace=openstack k8sPodName=heat-rabbit-init-pxf6s subsys=daemon level=info msg="Releasing key" key="[k8s:application=heat k8s:batch.kubernetes.io/controller-uid=3b041a10-9408-41b7-9ef2-f271ec81dcca k8s:batch.kubernetes.io/job-name=heat-rabbit-init k8s:component=rabbit-init k8s:controller-uid=3b041a10-9408-41b7-9ef2-f271ec81dcca k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=heat-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=heat-rabbit-init k8s:release_group=heat]" subsys=allocator level=info msg="Removed endpoint" containerID=04ea69f267 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=209 identity=65379 ipv4=10.0.0.114 ipv6= k8sPodName=openstack/heat-rabbit-init-pxf6s subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.156 1e6ac15c-6d5a-48bc-ab0e-74223d4b2012 default }" containerID=57d972dc0b129b0d18d7148e9f5ca4520c97bfafa3e52e309b8ee67757f9441e datapathConfiguration="&{false false false false false }" interface=lxc31696d3d6c61 k8sPodName=openstack/heat-ks-service-f6xsb labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=57d972dc0b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1412 ipv4=10.0.0.156 ipv6= k8sPodName=openstack/heat-ks-service-f6xsb subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=57d972dc0b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1412 identityLabels="k8s:application=heat,k8s:batch.kubernetes.io/controller-uid=f4e24781-5ea1-4a31-a921-d7557a7fbee8,k8s:batch.kubernetes.io/job-name=heat-ks-service,k8s:component=ks-service,k8s:controller-uid=f4e24781-5ea1-4a31-a921-d7557a7fbee8,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=heat-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=heat-ks-service,k8s:release_group=heat" ipv4=10.0.0.156 ipv6= k8sPodName=openstack/heat-ks-service-f6xsb subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=heat;k8s:batch.kubernetes.io/controller-uid=f4e24781-5ea1-4a31-a921-d7557a7fbee8;k8s:batch.kubernetes.io/job-name=heat-ks-service;k8s:component=ks-service;k8s:controller-uid=f4e24781-5ea1-4a31-a921-d7557a7fbee8;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=heat-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=heat-ks-service;k8s:release_group=heat;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=57d972dc0b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1412 identity=20548 identityLabels="k8s:application=heat,k8s:batch.kubernetes.io/controller-uid=f4e24781-5ea1-4a31-a921-d7557a7fbee8,k8s:batch.kubernetes.io/job-name=heat-ks-service,k8s:component=ks-service,k8s:controller-uid=f4e24781-5ea1-4a31-a921-d7557a7fbee8,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=heat-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=heat-ks-service,k8s:release_group=heat" ipv4=10.0.0.156 ipv6= k8sPodName=openstack/heat-ks-service-f6xsb oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=57d972dc0b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1412 identity=20548 ipv4=10.0.0.156 ipv6= k8sPodName=openstack/heat-ks-service-f6xsb subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=57d972dc0b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1412 identity=20548 ipv4=10.0.0.156 ipv6= k8sPodName=openstack/heat-ks-service-f6xsb subsys=endpoint level=info msg="Successful endpoint creation" containerID=57d972dc0b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1412 identity=20548 ipv4=10.0.0.156 ipv6= k8sPodName=openstack/heat-ks-service-f6xsb subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.246 3a1100ed-937c-4f96-b7b4-91e837ed5e8f default }" containerID=5675431d539a59bd7d68aff1225d4d78170e4615948bd4e1b1bf131aa1fdcd7a datapathConfiguration="&{false false false false false }" interface=lxc68ced653063e k8sPodName=openstack/ceph-object-controller-detect-version-lwbl5 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5675431d53 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1613 ipv4=10.0.0.246 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-lwbl5 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5675431d53 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1613 identityLabels="k8s:app=ceph-object-controller-detect-version,k8s:batch.kubernetes.io/controller-uid=11cc51b5-44d7-408a-b866-32ef8b87d695,k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version,k8s:controller-uid=11cc51b5-44d7-408a-b866-32ef8b87d695,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=ceph-object-controller-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.246 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-lwbl5 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app=ceph-object-controller-detect-version;k8s:batch.kubernetes.io/controller-uid=11cc51b5-44d7-408a-b866-32ef8b87d695;k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version;k8s:controller-uid=11cc51b5-44d7-408a-b866-32ef8b87d695;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=ceph-object-controller-detect-version;k8s:rook-version=v1.15.9;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5675431d53 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1613 identity=7915 identityLabels="k8s:app=ceph-object-controller-detect-version,k8s:batch.kubernetes.io/controller-uid=11cc51b5-44d7-408a-b866-32ef8b87d695,k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version,k8s:controller-uid=11cc51b5-44d7-408a-b866-32ef8b87d695,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=ceph-object-controller-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.246 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-lwbl5 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5675431d53 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1613 identity=7915 ipv4=10.0.0.246 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-lwbl5 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=5675431d53 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1613 identity=7915 ipv4=10.0.0.246 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-lwbl5 subsys=endpoint level=info msg="Successful endpoint creation" containerID=5675431d53 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1613 identity=7915 ipv4=10.0.0.246 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-lwbl5 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=5675431d53 endpointID=1613 k8sNamespace=openstack k8sPodName=ceph-object-controller-detect-version-lwbl5 subsys=daemon level=info msg="Releasing key" key="[k8s:app=ceph-object-controller-detect-version k8s:batch.kubernetes.io/controller-uid=11cc51b5-44d7-408a-b866-32ef8b87d695 k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version k8s:controller-uid=11cc51b5-44d7-408a-b866-32ef8b87d695 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=ceph-object-controller-detect-version k8s:rook-version=v1.15.9]" subsys=allocator level=info msg="Removed endpoint" containerID=5675431d53 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1613 identity=7915 ipv4=10.0.0.246 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-lwbl5 subsys=endpoint level=info msg="Delete endpoint request" containerID=7dfdd27d07 endpointID=2430 k8sNamespace=openstack k8sPodName=cinder-db-sync-dcttp subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=de37d5d0-c8e9-4c55-b0db-187882cf10d3 k8s:batch.kubernetes.io/job-name=cinder-db-sync k8s:component=db-sync k8s:controller-uid=de37d5d0-c8e9-4c55-b0db-187882cf10d3 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-db-sync k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=7dfdd27d07 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2430 identity=57787 ipv4=10.0.0.70 ipv6= k8sPodName=openstack/cinder-db-sync-dcttp subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.52 79102cfa-ce16-47ca-b10b-9deb3e3dc335 default }" containerID=02c3fa4f5f26a7950a450cf0fb519c961273673eb17ac798b39cfb71c4a26687 datapathConfiguration="&{false false false false false }" interface=lxc274b4f4324cf k8sPodName=openstack/cinder-rabbit-init-9s79l labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=02c3fa4f5f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2726 ipv4=10.0.0.52 ipv6= k8sPodName=openstack/cinder-rabbit-init-9s79l subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=02c3fa4f5f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2726 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=9c807b4b-c23d-4ad1-ab12-90b5ba368d04,k8s:batch.kubernetes.io/job-name=cinder-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=9c807b4b-c23d-4ad1-ab12-90b5ba368d04,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-rabbit-init,k8s:release_group=cinder" ipv4=10.0.0.52 ipv6= k8sPodName=openstack/cinder-rabbit-init-9s79l subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=9c807b4b-c23d-4ad1-ab12-90b5ba368d04;k8s:batch.kubernetes.io/job-name=cinder-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=9c807b4b-c23d-4ad1-ab12-90b5ba368d04;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-rabbit-init;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=02c3fa4f5f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2726 identity=53637 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=9c807b4b-c23d-4ad1-ab12-90b5ba368d04,k8s:batch.kubernetes.io/job-name=cinder-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=9c807b4b-c23d-4ad1-ab12-90b5ba368d04,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-rabbit-init,k8s:release_group=cinder" ipv4=10.0.0.52 ipv6= k8sPodName=openstack/cinder-rabbit-init-9s79l oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=02c3fa4f5f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2726 identity=53637 ipv4=10.0.0.52 ipv6= k8sPodName=openstack/cinder-rabbit-init-9s79l subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=02c3fa4f5f datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2726 identity=53637 ipv4=10.0.0.52 ipv6= k8sPodName=openstack/cinder-rabbit-init-9s79l subsys=endpoint level=info msg="Successful endpoint creation" containerID=02c3fa4f5f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2726 identity=53637 ipv4=10.0.0.52 ipv6= k8sPodName=openstack/cinder-rabbit-init-9s79l subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=65d0330c8c endpointID=3047 k8sNamespace=openstack k8sPodName=glance-db-sync-h2t6k subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=ff397fa7-49eb-4bc4-b026-1fc00b4d9eac k8s:batch.kubernetes.io/job-name=glance-db-sync k8s:component=db-sync k8s:controller-uid=ff397fa7-49eb-4bc4-b026-1fc00b4d9eac k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-db-sync k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=65d0330c8c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3047 identity=17879 ipv4=10.0.0.134 ipv6= k8sPodName=openstack/glance-db-sync-h2t6k subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.116 8323bb30-5e74-4bf4-bbdf-39d72e47db55 default }" containerID=96eae3ea0e3d33babfef5b705021b82768da132c2f91f2d017a605dd1f3fe08f datapathConfiguration="&{false false false false false }" interface=lxc5176052bccd5 k8sPodName=openstack/glance-rabbit-init-xctm8 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=96eae3ea0e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3259 ipv4=10.0.0.116 ipv6= k8sPodName=openstack/glance-rabbit-init-xctm8 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=96eae3ea0e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3259 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=9294e30b-39dd-482f-9adb-3647f4a0896a,k8s:batch.kubernetes.io/job-name=glance-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=9294e30b-39dd-482f-9adb-3647f4a0896a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-rabbit-init,k8s:release_group=glance" ipv4=10.0.0.116 ipv6= k8sPodName=openstack/glance-rabbit-init-xctm8 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=96eae3ea0e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3259 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.116 ipv6= k8sPodName=openstack/glance-rabbit-init-xctm8 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=9294e30b-39dd-482f-9adb-3647f4a0896a;k8s:batch.kubernetes.io/job-name=glance-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=9294e30b-39dd-482f-9adb-3647f4a0896a;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-rabbit-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=96eae3ea0e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3259 identity=14485 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=9294e30b-39dd-482f-9adb-3647f4a0896a,k8s:batch.kubernetes.io/job-name=glance-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=9294e30b-39dd-482f-9adb-3647f4a0896a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-rabbit-init,k8s:release_group=glance" ipv4=10.0.0.116 ipv6= k8sPodName=openstack/glance-rabbit-init-xctm8 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=96eae3ea0e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3259 identity=14485 ipv4=10.0.0.116 ipv6= k8sPodName=openstack/glance-rabbit-init-xctm8 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=96eae3ea0e datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3259 identity=14485 ipv4=10.0.0.116 ipv6= k8sPodName=openstack/glance-rabbit-init-xctm8 subsys=endpoint level=info msg="Successful endpoint creation" containerID=96eae3ea0e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3259 identity=14485 ipv4=10.0.0.116 ipv6= k8sPodName=openstack/glance-rabbit-init-xctm8 subsys=daemon level=info msg="Delete endpoint request" containerID=4edd4e7913 endpointID=1501 k8sNamespace=openstack k8sPodName=placement-ks-user-9x9dg subsys=daemon level=info msg="Releasing key" key="[k8s:application=placement k8s:batch.kubernetes.io/controller-uid=2e6ba697-7af3-48fe-aabe-4e1eeeaccb11 k8s:batch.kubernetes.io/job-name=placement-ks-user k8s:component=ks-user k8s:controller-uid=2e6ba697-7af3-48fe-aabe-4e1eeeaccb11 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=placement-ks-user k8s:release_group=placement]" subsys=allocator level=info msg="Removed endpoint" containerID=4edd4e7913 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1501 identity=11103 ipv4=10.0.0.20 ipv6= k8sPodName=openstack/placement-ks-user-9x9dg subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=57d972dc0b endpointID=1412 k8sNamespace=openstack k8sPodName=heat-ks-service-f6xsb subsys=daemon level=info msg="Releasing key" key="[k8s:application=heat k8s:batch.kubernetes.io/controller-uid=f4e24781-5ea1-4a31-a921-d7557a7fbee8 k8s:batch.kubernetes.io/job-name=heat-ks-service k8s:component=ks-service k8s:controller-uid=f4e24781-5ea1-4a31-a921-d7557a7fbee8 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=heat-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=heat-ks-service k8s:release_group=heat]" subsys=allocator level=info msg="Delete endpoint request" containerID=02c3fa4f5f endpointID=2726 k8sNamespace=openstack k8sPodName=cinder-rabbit-init-9s79l subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=9c807b4b-c23d-4ad1-ab12-90b5ba368d04 k8s:batch.kubernetes.io/job-name=cinder-rabbit-init k8s:component=rabbit-init k8s:controller-uid=9c807b4b-c23d-4ad1-ab12-90b5ba368d04 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-rabbit-init k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=57d972dc0b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1412 identity=20548 ipv4=10.0.0.156 ipv6= k8sPodName=openstack/heat-ks-service-f6xsb subsys=endpoint level=info msg="Removed endpoint" containerID=02c3fa4f5f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2726 identity=53637 ipv4=10.0.0.52 ipv6= k8sPodName=openstack/cinder-rabbit-init-9s79l subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.188 6391b5df-7fff-4876-a096-97b97b9eebdc default }" containerID=ab8d9263d39e26304d1c78ae419e31adecbcac87d3046c2f1c474a4b18bda8a1 datapathConfiguration="&{false false false false false }" interface=lxc5ec07d8661bf k8sPodName=openstack/placement-ks-endpoints-ddgzb labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ab8d9263d3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2652 ipv4=10.0.0.188 ipv6= k8sPodName=openstack/placement-ks-endpoints-ddgzb subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ab8d9263d3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2652 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=df260a30-9707-463e-9217-6d5ea0e0e2af,k8s:batch.kubernetes.io/job-name=placement-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=df260a30-9707-463e-9217-6d5ea0e0e2af,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-ks-endpoints,k8s:release_group=placement" ipv4=10.0.0.188 ipv6= k8sPodName=openstack/placement-ks-endpoints-ddgzb subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=placement;k8s:batch.kubernetes.io/controller-uid=df260a30-9707-463e-9217-6d5ea0e0e2af;k8s:batch.kubernetes.io/job-name=placement-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=df260a30-9707-463e-9217-6d5ea0e0e2af;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=placement-ks-endpoints;k8s:release_group=placement;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ab8d9263d3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2652 identity=47436 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=df260a30-9707-463e-9217-6d5ea0e0e2af,k8s:batch.kubernetes.io/job-name=placement-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=df260a30-9707-463e-9217-6d5ea0e0e2af,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-ks-endpoints,k8s:release_group=placement" ipv4=10.0.0.188 ipv6= k8sPodName=openstack/placement-ks-endpoints-ddgzb oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ab8d9263d3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2652 identity=47436 ipv4=10.0.0.188 ipv6= k8sPodName=openstack/placement-ks-endpoints-ddgzb subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=ab8d9263d3 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2652 identity=47436 ipv4=10.0.0.188 ipv6= k8sPodName=openstack/placement-ks-endpoints-ddgzb subsys=endpoint level=info msg="Successful endpoint creation" containerID=ab8d9263d3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2652 identity=47436 ipv4=10.0.0.188 ipv6= k8sPodName=openstack/placement-ks-endpoints-ddgzb subsys=daemon level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.207 823db819-f26c-48c5-82d1-cb5e32a98f8a default }" containerID=f838fb7a4464f3f84f9520940b3e51e5f2c21ad302e8ad1e691b701a823165fd datapathConfiguration="&{false false false false false }" interface=lxc9bbc93ecc945 k8sPodName=openstack/cinder-ks-service-fz2cn labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f838fb7a44 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3289 ipv4=10.0.0.207 ipv6= k8sPodName=openstack/cinder-ks-service-fz2cn subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f838fb7a44 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3289 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=cf82c6cc-8116-475b-81b0-21fc12202568,k8s:batch.kubernetes.io/job-name=cinder-ks-service,k8s:component=ks-service,k8s:controller-uid=cf82c6cc-8116-475b-81b0-21fc12202568,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-ks-service,k8s:release_group=cinder" ipv4=10.0.0.207 ipv6= k8sPodName=openstack/cinder-ks-service-fz2cn subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=f838fb7a44 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3289 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.207 ipv6= k8sPodName=openstack/cinder-ks-service-fz2cn line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=cf82c6cc-8116-475b-81b0-21fc12202568;k8s:batch.kubernetes.io/job-name=cinder-ks-service;k8s:component=ks-service;k8s:controller-uid=cf82c6cc-8116-475b-81b0-21fc12202568;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-ks-service;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f838fb7a44 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3289 identity=17287 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=cf82c6cc-8116-475b-81b0-21fc12202568,k8s:batch.kubernetes.io/job-name=cinder-ks-service,k8s:component=ks-service,k8s:controller-uid=cf82c6cc-8116-475b-81b0-21fc12202568,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-ks-service,k8s:release_group=cinder" ipv4=10.0.0.207 ipv6= k8sPodName=openstack/cinder-ks-service-fz2cn oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f838fb7a44 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3289 identity=17287 ipv4=10.0.0.207 ipv6= k8sPodName=openstack/cinder-ks-service-fz2cn subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.142 e9fd5f83-c728-4d73-a01c-ab9425d70cc9 default }" containerID=871135e1899311a5c4d6b15873a312c86a4cc897975a47ec4486cdb246c4f20b datapathConfiguration="&{false false false false false }" interface=lxc85a496222763 k8sPodName=openstack/heat-ks-endpoints-6vzr6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=871135e189 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=164 ipv4=10.0.0.142 ipv6= k8sPodName=openstack/heat-ks-endpoints-6vzr6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=871135e189 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=164 identityLabels="k8s:application=heat,k8s:batch.kubernetes.io/controller-uid=046f54e6-ab08-4fd2-8bd7-611d3f91b67e,k8s:batch.kubernetes.io/job-name=heat-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=046f54e6-ab08-4fd2-8bd7-611d3f91b67e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=heat-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=heat-ks-endpoints,k8s:release_group=heat" ipv4=10.0.0.142 ipv6= k8sPodName=openstack/heat-ks-endpoints-6vzr6 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=heat;k8s:batch.kubernetes.io/controller-uid=046f54e6-ab08-4fd2-8bd7-611d3f91b67e;k8s:batch.kubernetes.io/job-name=heat-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=046f54e6-ab08-4fd2-8bd7-611d3f91b67e;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=heat-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=heat-ks-endpoints;k8s:release_group=heat;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=871135e189 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=164 identity=27508 identityLabels="k8s:application=heat,k8s:batch.kubernetes.io/controller-uid=046f54e6-ab08-4fd2-8bd7-611d3f91b67e,k8s:batch.kubernetes.io/job-name=heat-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=046f54e6-ab08-4fd2-8bd7-611d3f91b67e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=heat-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=heat-ks-endpoints,k8s:release_group=heat" ipv4=10.0.0.142 ipv6= k8sPodName=openstack/heat-ks-endpoints-6vzr6 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=871135e189 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=164 identity=27508 ipv4=10.0.0.142 ipv6= k8sPodName=openstack/heat-ks-endpoints-6vzr6 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f838fb7a44 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3289 identity=17287 ipv4=10.0.0.207 ipv6= k8sPodName=openstack/cinder-ks-service-fz2cn subsys=endpoint level=info msg="Successful endpoint creation" containerID=f838fb7a44 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3289 identity=17287 ipv4=10.0.0.207 ipv6= k8sPodName=openstack/cinder-ks-service-fz2cn subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=871135e189 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=164 identity=27508 ipv4=10.0.0.142 ipv6= k8sPodName=openstack/heat-ks-endpoints-6vzr6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=871135e189 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=164 identity=27508 ipv4=10.0.0.142 ipv6= k8sPodName=openstack/heat-ks-endpoints-6vzr6 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=96eae3ea0e endpointID=3259 k8sNamespace=openstack k8sPodName=glance-rabbit-init-xctm8 subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=9294e30b-39dd-482f-9adb-3647f4a0896a k8s:batch.kubernetes.io/job-name=glance-rabbit-init k8s:component=rabbit-init k8s:controller-uid=9294e30b-39dd-482f-9adb-3647f4a0896a k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-rabbit-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=96eae3ea0e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3259 identity=14485 ipv4=10.0.0.116 ipv6= k8sPodName=openstack/glance-rabbit-init-xctm8 subsys=endpoint level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.90 4cc67e1b-9f0f-424b-a25a-fe57290e84c5 default }" containerID=dd41e7762979b198a48f1e8e8a41a989171cec775784d8211ee4354a5d526b29 datapathConfiguration="&{false false false false false }" interface=lxc07aafc78ac15 k8sPodName=openstack/glance-ks-service-862b2 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=dd41e77629 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2473 ipv4=10.0.0.90 ipv6= k8sPodName=openstack/glance-ks-service-862b2 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=dd41e77629 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2473 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=3493731f-7d10-4f07-a81d-780eb92791f3,k8s:batch.kubernetes.io/job-name=glance-ks-service,k8s:component=ks-service,k8s:controller-uid=3493731f-7d10-4f07-a81d-780eb92791f3,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-service,k8s:release_group=glance" ipv4=10.0.0.90 ipv6= k8sPodName=openstack/glance-ks-service-862b2 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=3493731f-7d10-4f07-a81d-780eb92791f3;k8s:batch.kubernetes.io/job-name=glance-ks-service;k8s:component=ks-service;k8s:controller-uid=3493731f-7d10-4f07-a81d-780eb92791f3;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-service;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=dd41e77629 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2473 identity=2548 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=3493731f-7d10-4f07-a81d-780eb92791f3,k8s:batch.kubernetes.io/job-name=glance-ks-service,k8s:component=ks-service,k8s:controller-uid=3493731f-7d10-4f07-a81d-780eb92791f3,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-service,k8s:release_group=glance" ipv4=10.0.0.90 ipv6= k8sPodName=openstack/glance-ks-service-862b2 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=dd41e77629 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2473 identity=2548 ipv4=10.0.0.90 ipv6= k8sPodName=openstack/glance-ks-service-862b2 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=dd41e77629 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2473 identity=2548 ipv4=10.0.0.90 ipv6= k8sPodName=openstack/glance-ks-service-862b2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=dd41e77629 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2473 identity=2548 ipv4=10.0.0.90 ipv6= k8sPodName=openstack/glance-ks-service-862b2 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=ab8d9263d3 endpointID=2652 k8sNamespace=openstack k8sPodName=placement-ks-endpoints-ddgzb subsys=daemon level=info msg="Releasing key" key="[k8s:application=placement k8s:batch.kubernetes.io/controller-uid=df260a30-9707-463e-9217-6d5ea0e0e2af k8s:batch.kubernetes.io/job-name=placement-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=df260a30-9707-463e-9217-6d5ea0e0e2af k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=placement-ks-endpoints k8s:release_group=placement]" subsys=allocator level=info msg="Removed endpoint" containerID=ab8d9263d3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2652 identity=47436 ipv4=10.0.0.188 ipv6= k8sPodName=openstack/placement-ks-endpoints-ddgzb subsys=endpoint level=info msg="Delete endpoint request" containerID=871135e189 endpointID=164 k8sNamespace=openstack k8sPodName=heat-ks-endpoints-6vzr6 subsys=daemon level=info msg="Releasing key" key="[k8s:application=heat k8s:batch.kubernetes.io/controller-uid=046f54e6-ab08-4fd2-8bd7-611d3f91b67e k8s:batch.kubernetes.io/job-name=heat-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=046f54e6-ab08-4fd2-8bd7-611d3f91b67e k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=heat-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=heat-ks-endpoints k8s:release_group=heat]" subsys=allocator level=info msg="Removed endpoint" containerID=871135e189 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=164 identity=27508 ipv4=10.0.0.142 ipv6= k8sPodName=openstack/heat-ks-endpoints-6vzr6 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.99 5f262afc-ca7e-4745-a5be-3d80116ab479 default }" containerID=4cc6afd710d0ee6ef40343a2154efd1b63ce22fbd89ef823d1eb87606ec227f0 datapathConfiguration="&{false false false false false }" interface=lxc30e175e098bb k8sPodName=openstack/heat-ks-user-29nwc labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4cc6afd710 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3722 ipv4=10.0.0.99 ipv6= k8sPodName=openstack/heat-ks-user-29nwc subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4cc6afd710 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3722 identityLabels="k8s:application=heat,k8s:batch.kubernetes.io/controller-uid=dafc3b25-081e-46f7-a525-0b9516dae26e,k8s:batch.kubernetes.io/job-name=heat-ks-user,k8s:component=ks-user,k8s:controller-uid=dafc3b25-081e-46f7-a525-0b9516dae26e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=heat-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=heat-ks-user,k8s:release_group=heat" ipv4=10.0.0.99 ipv6= k8sPodName=openstack/heat-ks-user-29nwc subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=4cc6afd710 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3722 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.99 ipv6= k8sPodName=openstack/heat-ks-user-29nwc line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=heat;k8s:batch.kubernetes.io/controller-uid=dafc3b25-081e-46f7-a525-0b9516dae26e;k8s:batch.kubernetes.io/job-name=heat-ks-user;k8s:component=ks-user;k8s:controller-uid=dafc3b25-081e-46f7-a525-0b9516dae26e;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=heat-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=heat-ks-user;k8s:release_group=heat;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4cc6afd710 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3722 identity=20121 identityLabels="k8s:application=heat,k8s:batch.kubernetes.io/controller-uid=dafc3b25-081e-46f7-a525-0b9516dae26e,k8s:batch.kubernetes.io/job-name=heat-ks-user,k8s:component=ks-user,k8s:controller-uid=dafc3b25-081e-46f7-a525-0b9516dae26e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=heat-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=heat-ks-user,k8s:release_group=heat" ipv4=10.0.0.99 ipv6= k8sPodName=openstack/heat-ks-user-29nwc oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4cc6afd710 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3722 identity=20121 ipv4=10.0.0.99 ipv6= k8sPodName=openstack/heat-ks-user-29nwc subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=4cc6afd710 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3722 identity=20121 ipv4=10.0.0.99 ipv6= k8sPodName=openstack/heat-ks-user-29nwc subsys=endpoint level=info msg="Successful endpoint creation" containerID=4cc6afd710 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3722 identity=20121 ipv4=10.0.0.99 ipv6= k8sPodName=openstack/heat-ks-user-29nwc subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=f838fb7a44 endpointID=3289 k8sNamespace=openstack k8sPodName=cinder-ks-service-fz2cn subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=cf82c6cc-8116-475b-81b0-21fc12202568 k8s:batch.kubernetes.io/job-name=cinder-ks-service k8s:component=ks-service k8s:controller-uid=cf82c6cc-8116-475b-81b0-21fc12202568 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-ks-service k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=f838fb7a44 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3289 identity=17287 ipv4=10.0.0.207 ipv6= k8sPodName=openstack/cinder-ks-service-fz2cn subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.162 e09cd588-c3c2-45ce-a3b4-9b28483a26bc default }" containerID=5666613e37850566aaab5a4d97e96ed1be72f7a03614062a9ccb5cf54ea99272 datapathConfiguration="&{false false false false false }" interface=lxc0756364bd232 k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-rtqmt labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5666613e37 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3879 ipv4=10.0.0.162 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-rtqmt subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5666613e37 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3879 identityLabels="k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io,k8s:app.kubernetes.io/created-by=rook-ceph-operator,k8s:app.kubernetes.io/instance=ceph,k8s:app.kubernetes.io/managed-by=rook-ceph-operator,k8s:app.kubernetes.io/name=ceph-rgw,k8s:app.kubernetes.io/part-of=ceph,k8s:app=rook-ceph-rgw,k8s:ceph_daemon_id=ceph,k8s:ceph_daemon_type=rgw,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw,k8s:io.kubernetes.pod.namespace=openstack,k8s:rgw=ceph,k8s:rook.io/operator-namespace=rook-ceph,k8s:rook_cluster=openstack,k8s:rook_object_store=ceph" ipv4=10.0.0.162 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-rtqmt subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app=rook-ceph-rgw;k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io;k8s:app.kubernetes.io/created-by=rook-ceph-operator;k8s:app.kubernetes.io/instance=ceph;k8s:app.kubernetes.io/managed-by=rook-ceph-operator;k8s:app.kubernetes.io/name=ceph-rgw;k8s:app.kubernetes.io/part-of=ceph;k8s:ceph_daemon_id=ceph;k8s:ceph_daemon_type=rgw;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw;k8s:io.kubernetes.pod.namespace=openstack;k8s:rgw=ceph;k8s:rook.io/operator-namespace=rook-ceph;k8s:rook_cluster=openstack;k8s:rook_object_store=ceph;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5666613e37 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3879 identity=13980 identityLabels="k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io,k8s:app.kubernetes.io/created-by=rook-ceph-operator,k8s:app.kubernetes.io/instance=ceph,k8s:app.kubernetes.io/managed-by=rook-ceph-operator,k8s:app.kubernetes.io/name=ceph-rgw,k8s:app.kubernetes.io/part-of=ceph,k8s:app=rook-ceph-rgw,k8s:ceph_daemon_id=ceph,k8s:ceph_daemon_type=rgw,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw,k8s:io.kubernetes.pod.namespace=openstack,k8s:rgw=ceph,k8s:rook.io/operator-namespace=rook-ceph,k8s:rook_cluster=openstack,k8s:rook_object_store=ceph" ipv4=10.0.0.162 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-rtqmt oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5666613e37 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3879 identity=13980 ipv4=10.0.0.162 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-rtqmt subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.15 7ec7bbbe-903c-4473-a08a-3c16c5c759c3 default }" containerID=3e7d1d5309ad158e3a8400d82de0a2faddb99ac95ad023c1c8224a5f0744d797 datapathConfiguration="&{false false false false false }" interface=lxc2dfa8ce1a39a k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-p88dd labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3e7d1d5309 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1306 ipv4=10.0.0.15 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-p88dd subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3e7d1d5309 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1306 identityLabels="k8s:app=rook-ceph-crashcollector,k8s:ceph-version=18.2.7-0,k8s:ceph_daemon_id=crash,k8s:crashcollector=crash,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default,k8s:io.kubernetes.pod.namespace=openstack,k8s:node_name=instance,k8s:rook_cluster=openstack" ipv4=10.0.0.15 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-p88dd subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-crashcollector;k8s:ceph-version=18.2.7-0;k8s:ceph_daemon_id=crash;k8s:crashcollector=crash;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default;k8s:io.kubernetes.pod.namespace=openstack;k8s:node_name=instance;k8s:rook_cluster=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3e7d1d5309 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1306 identity=33377 identityLabels="k8s:app=rook-ceph-crashcollector,k8s:ceph-version=18.2.7-0,k8s:ceph_daemon_id=crash,k8s:crashcollector=crash,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default,k8s:io.kubernetes.pod.namespace=openstack,k8s:node_name=instance,k8s:rook_cluster=openstack" ipv4=10.0.0.15 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-p88dd oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3e7d1d5309 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1306 identity=33377 ipv4=10.0.0.15 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-p88dd subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=5666613e37 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3879 identity=13980 ipv4=10.0.0.162 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-rtqmt subsys=endpoint level=info msg="Successful endpoint creation" containerID=5666613e37 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3879 identity=13980 ipv4=10.0.0.162 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-rtqmt subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=3e7d1d5309 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1306 identity=33377 ipv4=10.0.0.15 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-p88dd subsys=endpoint level=info msg="Successful endpoint creation" containerID=3e7d1d5309 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1306 identity=33377 ipv4=10.0.0.15 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-p88dd subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.33 d3b40089-dc7b-40af-ab1e-9c2cbce2101d default }" containerID=05292b87e9b4a64e8a57f6e21bed22ed39c4c006b6b1f0d03940377c0c13b0f9 datapathConfiguration="&{false false false false false }" interface=lxccb39b99ec84d k8sPodName=openstack/cinder-ks-endpoints-g7jr6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=05292b87e9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2940 ipv4=10.0.0.33 ipv6= k8sPodName=openstack/cinder-ks-endpoints-g7jr6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=05292b87e9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2940 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=a501a468-0b8f-4dee-879c-676a852849e4,k8s:batch.kubernetes.io/job-name=cinder-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=a501a468-0b8f-4dee-879c-676a852849e4,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-ks-endpoints,k8s:release_group=cinder" ipv4=10.0.0.33 ipv6= k8sPodName=openstack/cinder-ks-endpoints-g7jr6 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=a501a468-0b8f-4dee-879c-676a852849e4;k8s:batch.kubernetes.io/job-name=cinder-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=a501a468-0b8f-4dee-879c-676a852849e4;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-ks-endpoints;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=05292b87e9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2940 identity=17983 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=a501a468-0b8f-4dee-879c-676a852849e4,k8s:batch.kubernetes.io/job-name=cinder-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=a501a468-0b8f-4dee-879c-676a852849e4,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-ks-endpoints,k8s:release_group=cinder" ipv4=10.0.0.33 ipv6= k8sPodName=openstack/cinder-ks-endpoints-g7jr6 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=05292b87e9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2940 identity=17983 ipv4=10.0.0.33 ipv6= k8sPodName=openstack/cinder-ks-endpoints-g7jr6 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=05292b87e9 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2940 identity=17983 ipv4=10.0.0.33 ipv6= k8sPodName=openstack/cinder-ks-endpoints-g7jr6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=05292b87e9 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2940 identity=17983 ipv4=10.0.0.33 ipv6= k8sPodName=openstack/cinder-ks-endpoints-g7jr6 subsys=daemon level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=dd41e77629 endpointID=2473 k8sNamespace=openstack k8sPodName=glance-ks-service-862b2 subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=3493731f-7d10-4f07-a81d-780eb92791f3 k8s:batch.kubernetes.io/job-name=glance-ks-service k8s:component=ks-service k8s:controller-uid=3493731f-7d10-4f07-a81d-780eb92791f3 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-service k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=dd41e77629 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2473 identity=2548 ipv4=10.0.0.90 ipv6= k8sPodName=openstack/glance-ks-service-862b2 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.88 6e14bbbd-10a6-42bc-b7a8-e4b1e891e6f2 default }" containerID=03b4aa504e1503f6ac4181500d47335656bde44f8938911439f1adec2bb3a74f datapathConfiguration="&{false false false false false }" interface=lxcb4ca07bd4fde k8sPodName=openstack/glance-ks-endpoints-8rnzd labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=03b4aa504e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1203 ipv4=10.0.0.88 ipv6= k8sPodName=openstack/glance-ks-endpoints-8rnzd subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=03b4aa504e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1203 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=c270d589-6548-47f9-81dd-283a45f2d4ed,k8s:batch.kubernetes.io/job-name=glance-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=c270d589-6548-47f9-81dd-283a45f2d4ed,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-endpoints,k8s:release_group=glance" ipv4=10.0.0.88 ipv6= k8sPodName=openstack/glance-ks-endpoints-8rnzd subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=03b4aa504e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1203 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.88 ipv6= k8sPodName=openstack/glance-ks-endpoints-8rnzd line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=c270d589-6548-47f9-81dd-283a45f2d4ed;k8s:batch.kubernetes.io/job-name=glance-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=c270d589-6548-47f9-81dd-283a45f2d4ed;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-endpoints;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=03b4aa504e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1203 identity=41681 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=c270d589-6548-47f9-81dd-283a45f2d4ed,k8s:batch.kubernetes.io/job-name=glance-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=c270d589-6548-47f9-81dd-283a45f2d4ed,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-endpoints,k8s:release_group=glance" ipv4=10.0.0.88 ipv6= k8sPodName=openstack/glance-ks-endpoints-8rnzd oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=03b4aa504e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1203 identity=41681 ipv4=10.0.0.88 ipv6= k8sPodName=openstack/glance-ks-endpoints-8rnzd subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=03b4aa504e datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1203 identity=41681 ipv4=10.0.0.88 ipv6= k8sPodName=openstack/glance-ks-endpoints-8rnzd subsys=endpoint level=info msg="Successful endpoint creation" containerID=03b4aa504e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1203 identity=41681 ipv4=10.0.0.88 ipv6= k8sPodName=openstack/glance-ks-endpoints-8rnzd subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Conntrack garbage collector interval recalculated" deleteRatio=0.03547080227792281 newInterval=11m15s subsys=map-ct level=info msg="Delete endpoint request" containerID=05292b87e9 endpointID=2940 k8sNamespace=openstack k8sPodName=cinder-ks-endpoints-g7jr6 subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=a501a468-0b8f-4dee-879c-676a852849e4 k8s:batch.kubernetes.io/job-name=cinder-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=a501a468-0b8f-4dee-879c-676a852849e4 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-ks-endpoints k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=05292b87e9 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2940 identity=17983 ipv4=10.0.0.33 ipv6= k8sPodName=openstack/cinder-ks-endpoints-g7jr6 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.171 20159a5d-99bc-4fd5-b4cf-2ade155d0943 default }" containerID=94302e5282ba499991dbda63378185e2ed714939ce48fa412ac7f40e53e11965 datapathConfiguration="&{false false false false false }" interface=lxc3dda4ed96d3c k8sPodName=openstack/cinder-ks-user-pphpz labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=94302e5282 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=734 ipv4=10.0.0.171 ipv6= k8sPodName=openstack/cinder-ks-user-pphpz subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=94302e5282 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=734 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=82546467-d329-4804-8fcf-11db932bdf7a,k8s:batch.kubernetes.io/job-name=cinder-ks-user,k8s:component=ks-user,k8s:controller-uid=82546467-d329-4804-8fcf-11db932bdf7a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-ks-user,k8s:release_group=cinder" ipv4=10.0.0.171 ipv6= k8sPodName=openstack/cinder-ks-user-pphpz subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=82546467-d329-4804-8fcf-11db932bdf7a;k8s:batch.kubernetes.io/job-name=cinder-ks-user;k8s:component=ks-user;k8s:controller-uid=82546467-d329-4804-8fcf-11db932bdf7a;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-ks-user;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=94302e5282 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=734 identity=33405 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=82546467-d329-4804-8fcf-11db932bdf7a,k8s:batch.kubernetes.io/job-name=cinder-ks-user,k8s:component=ks-user,k8s:controller-uid=82546467-d329-4804-8fcf-11db932bdf7a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-ks-user,k8s:release_group=cinder" ipv4=10.0.0.171 ipv6= k8sPodName=openstack/cinder-ks-user-pphpz oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=94302e5282 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=734 identity=33405 ipv4=10.0.0.171 ipv6= k8sPodName=openstack/cinder-ks-user-pphpz subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=94302e5282 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=734 identity=33405 ipv4=10.0.0.171 ipv6= k8sPodName=openstack/cinder-ks-user-pphpz subsys=endpoint level=info msg="Successful endpoint creation" containerID=94302e5282 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=734 identity=33405 ipv4=10.0.0.171 ipv6= k8sPodName=openstack/cinder-ks-user-pphpz subsys=daemon level=info msg="Delete endpoint request" containerID=03b4aa504e endpointID=1203 k8sNamespace=openstack k8sPodName=glance-ks-endpoints-8rnzd subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=c270d589-6548-47f9-81dd-283a45f2d4ed k8s:batch.kubernetes.io/job-name=glance-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=c270d589-6548-47f9-81dd-283a45f2d4ed k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-endpoints k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=03b4aa504e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1203 identity=41681 ipv4=10.0.0.88 ipv6= k8sPodName=openstack/glance-ks-endpoints-8rnzd subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.227 1b43194b-8786-480e-9135-6a8e7ba010d8 default }" containerID=4eb8765c9e127d0027911b7e9f9845e2ec4fb4a89d44c93f1823ffc7f80f907b datapathConfiguration="&{false false false false false }" interface=lxc2662c1dd11c8 k8sPodName=openstack/glance-ks-user-qnbd7 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4eb8765c9e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=274 ipv4=10.0.0.227 ipv6= k8sPodName=openstack/glance-ks-user-qnbd7 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4eb8765c9e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=274 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=96a77632-bde5-4d50-b3c5-3f8d3dc76013,k8s:batch.kubernetes.io/job-name=glance-ks-user,k8s:component=ks-user,k8s:controller-uid=96a77632-bde5-4d50-b3c5-3f8d3dc76013,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-user,k8s:release_group=glance" ipv4=10.0.0.227 ipv6= k8sPodName=openstack/glance-ks-user-qnbd7 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=4eb8765c9e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=274 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.227 ipv6= k8sPodName=openstack/glance-ks-user-qnbd7 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=96a77632-bde5-4d50-b3c5-3f8d3dc76013;k8s:batch.kubernetes.io/job-name=glance-ks-user;k8s:component=ks-user;k8s:controller-uid=96a77632-bde5-4d50-b3c5-3f8d3dc76013;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-user;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4eb8765c9e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=274 identity=14143 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=96a77632-bde5-4d50-b3c5-3f8d3dc76013,k8s:batch.kubernetes.io/job-name=glance-ks-user,k8s:component=ks-user,k8s:controller-uid=96a77632-bde5-4d50-b3c5-3f8d3dc76013,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-user,k8s:release_group=glance" ipv4=10.0.0.227 ipv6= k8sPodName=openstack/glance-ks-user-qnbd7 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4eb8765c9e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=274 identity=14143 ipv4=10.0.0.227 ipv6= k8sPodName=openstack/glance-ks-user-qnbd7 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=4eb8765c9e datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=274 identity=14143 ipv4=10.0.0.227 ipv6= k8sPodName=openstack/glance-ks-user-qnbd7 subsys=endpoint level=info msg="Successful endpoint creation" containerID=4eb8765c9e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=274 identity=14143 ipv4=10.0.0.227 ipv6= k8sPodName=openstack/glance-ks-user-qnbd7 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=4cc6afd710 endpointID=3722 k8sNamespace=openstack k8sPodName=heat-ks-user-29nwc subsys=daemon level=info msg="Releasing key" key="[k8s:application=heat k8s:batch.kubernetes.io/controller-uid=dafc3b25-081e-46f7-a525-0b9516dae26e k8s:batch.kubernetes.io/job-name=heat-ks-user k8s:component=ks-user k8s:controller-uid=dafc3b25-081e-46f7-a525-0b9516dae26e k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=heat-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=heat-ks-user k8s:release_group=heat]" subsys=allocator level=info msg="Removed endpoint" containerID=4cc6afd710 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3722 identity=20121 ipv4=10.0.0.99 ipv6= k8sPodName=openstack/heat-ks-user-29nwc subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.149 2281b599-5643-4583-863e-6bd1be10e39d default }" containerID=b00818ab37bab32e5ca406f0d4b93e8b1277b311b8e0720d778f9a7ae958b0eb datapathConfiguration="&{false false false false false }" interface=lxcde3673b5bdb1 k8sPodName=openstack/heat-bootstrap-lc676 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b00818ab37 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1921 ipv4=10.0.0.149 ipv6= k8sPodName=openstack/heat-bootstrap-lc676 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b00818ab37 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1921 identityLabels="k8s:application=heat,k8s:batch.kubernetes.io/controller-uid=b09d6bb2-9522-401e-b869-d0a0f1683351,k8s:batch.kubernetes.io/job-name=heat-bootstrap,k8s:component=bootstrap,k8s:controller-uid=b09d6bb2-9522-401e-b869-d0a0f1683351,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=heat-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=heat-bootstrap,k8s:release_group=heat" ipv4=10.0.0.149 ipv6= k8sPodName=openstack/heat-bootstrap-lc676 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=heat;k8s:batch.kubernetes.io/controller-uid=b09d6bb2-9522-401e-b869-d0a0f1683351;k8s:batch.kubernetes.io/job-name=heat-bootstrap;k8s:component=bootstrap;k8s:controller-uid=b09d6bb2-9522-401e-b869-d0a0f1683351;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=heat-bootstrap;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=heat-bootstrap;k8s:release_group=heat;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=b00818ab37 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1921 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.149 ipv6= k8sPodName=openstack/heat-bootstrap-lc676 line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=b00818ab37 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1921 identity=36174 identityLabels="k8s:application=heat,k8s:batch.kubernetes.io/controller-uid=b09d6bb2-9522-401e-b869-d0a0f1683351,k8s:batch.kubernetes.io/job-name=heat-bootstrap,k8s:component=bootstrap,k8s:controller-uid=b09d6bb2-9522-401e-b869-d0a0f1683351,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=heat-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=heat-bootstrap,k8s:release_group=heat" ipv4=10.0.0.149 ipv6= k8sPodName=openstack/heat-bootstrap-lc676 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b00818ab37 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1921 identity=36174 ipv4=10.0.0.149 ipv6= k8sPodName=openstack/heat-bootstrap-lc676 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b00818ab37 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1921 identity=36174 ipv4=10.0.0.149 ipv6= k8sPodName=openstack/heat-bootstrap-lc676 subsys=endpoint level=info msg="Successful endpoint creation" containerID=b00818ab37 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1921 identity=36174 ipv4=10.0.0.149 ipv6= k8sPodName=openstack/heat-bootstrap-lc676 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=b00818ab37 endpointID=1921 k8sNamespace=openstack k8sPodName=heat-bootstrap-lc676 subsys=daemon level=info msg="Releasing key" key="[k8s:application=heat k8s:batch.kubernetes.io/controller-uid=b09d6bb2-9522-401e-b869-d0a0f1683351 k8s:batch.kubernetes.io/job-name=heat-bootstrap k8s:component=bootstrap k8s:controller-uid=b09d6bb2-9522-401e-b869-d0a0f1683351 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=heat-bootstrap k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=heat-bootstrap k8s:release_group=heat]" subsys=allocator level=info msg="Removed endpoint" containerID=b00818ab37 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1921 identity=36174 ipv4=10.0.0.149 ipv6= k8sPodName=openstack/heat-bootstrap-lc676 subsys=endpoint level=info msg="Delete endpoint request" containerID=4eb8765c9e endpointID=274 k8sNamespace=openstack k8sPodName=glance-ks-user-qnbd7 subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=96a77632-bde5-4d50-b3c5-3f8d3dc76013 k8s:batch.kubernetes.io/job-name=glance-ks-user k8s:component=ks-user k8s:controller-uid=96a77632-bde5-4d50-b3c5-3f8d3dc76013 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-user k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=4eb8765c9e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=274 identity=14143 ipv4=10.0.0.227 ipv6= k8sPodName=openstack/glance-ks-user-qnbd7 subsys=endpoint level=info msg="Delete endpoint request" containerID=94302e5282 endpointID=734 k8sNamespace=openstack k8sPodName=cinder-ks-user-pphpz subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=82546467-d329-4804-8fcf-11db932bdf7a k8s:batch.kubernetes.io/job-name=cinder-ks-user k8s:component=ks-user k8s:controller-uid=82546467-d329-4804-8fcf-11db932bdf7a k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-ks-user k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=94302e5282 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=734 identity=33405 ipv4=10.0.0.171 ipv6= k8sPodName=openstack/cinder-ks-user-pphpz subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.72 efd17949-7929-4b24-9cab-754d5519ff32 default }" containerID=f4efcfcc1fb27df5c0276d2d38ec95192c3dfb8ab7eec09cd245a4edcd7fc10e datapathConfiguration="&{false false false false false }" interface=lxcb890505ced50 k8sPodName=openstack/heat-domain-ks-user-fhhd7 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f4efcfcc1f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2229 ipv4=10.0.0.72 ipv6= k8sPodName=openstack/heat-domain-ks-user-fhhd7 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f4efcfcc1f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2229 identityLabels="k8s:application=heat,k8s:batch.kubernetes.io/controller-uid=9352067b-093d-43bf-94f9-9677802f9cf1,k8s:batch.kubernetes.io/job-name=heat-domain-ks-user,k8s:component=ks-user,k8s:controller-uid=9352067b-093d-43bf-94f9-9677802f9cf1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=heat-ks-user-domain,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=heat-domain-ks-user,k8s:release_group=heat" ipv4=10.0.0.72 ipv6= k8sPodName=openstack/heat-domain-ks-user-fhhd7 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack]" subsys=crd-allocator level=info msg="Create endpoint request" addressing="&{10.0.0.230 c519533f-7eb1-4a7a-bac5-7cfa377cee2d default }" containerID=a94ad6b7df088a5fc2ef3abd36c834e96074c92b9c7e4200cb43276b489af5fc datapathConfiguration="&{false false false false false }" interface=lxc18225d4c22ea k8sPodName=openstack/glance-metadefs-load-b4fd6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a94ad6b7df datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2878 ipv4=10.0.0.230 ipv6= k8sPodName=openstack/glance-metadefs-load-b4fd6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a94ad6b7df datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2878 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=cba10d54-8cd5-47c4-9d92-cf74df6351d2,k8s:batch.kubernetes.io/job-name=glance-metadefs-load,k8s:component=metadefs_load,k8s:controller-uid=cba10d54-8cd5-47c4-9d92-cf74df6351d2,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-metadefs-load,k8s:release_group=glance" ipv4=10.0.0.230 ipv6= k8sPodName=openstack/glance-metadefs-load-b4fd6 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=f4efcfcc1f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2229 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.72 ipv6= k8sPodName=openstack/heat-domain-ks-user-fhhd7 line=611 subsys=endpoint level=info msg="Invalid state transition skipped" containerID=a94ad6b7df datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2878 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.230 ipv6= k8sPodName=openstack/glance-metadefs-load-b4fd6 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=heat;k8s:batch.kubernetes.io/controller-uid=9352067b-093d-43bf-94f9-9677802f9cf1;k8s:batch.kubernetes.io/job-name=heat-domain-ks-user;k8s:component=ks-user;k8s:controller-uid=9352067b-093d-43bf-94f9-9677802f9cf1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=heat-ks-user-domain;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=heat-domain-ks-user;k8s:release_group=heat;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f4efcfcc1f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2229 identity=10450 identityLabels="k8s:application=heat,k8s:batch.kubernetes.io/controller-uid=9352067b-093d-43bf-94f9-9677802f9cf1,k8s:batch.kubernetes.io/job-name=heat-domain-ks-user,k8s:component=ks-user,k8s:controller-uid=9352067b-093d-43bf-94f9-9677802f9cf1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=heat-ks-user-domain,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=heat-domain-ks-user,k8s:release_group=heat" ipv4=10.0.0.72 ipv6= k8sPodName=openstack/heat-domain-ks-user-fhhd7 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f4efcfcc1f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2229 identity=10450 ipv4=10.0.0.72 ipv6= k8sPodName=openstack/heat-domain-ks-user-fhhd7 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=cba10d54-8cd5-47c4-9d92-cf74df6351d2;k8s:batch.kubernetes.io/job-name=glance-metadefs-load;k8s:component=metadefs_load;k8s:controller-uid=cba10d54-8cd5-47c4-9d92-cf74df6351d2;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-metadefs-load;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a94ad6b7df datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2878 identity=18388 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=cba10d54-8cd5-47c4-9d92-cf74df6351d2,k8s:batch.kubernetes.io/job-name=glance-metadefs-load,k8s:component=metadefs_load,k8s:controller-uid=cba10d54-8cd5-47c4-9d92-cf74df6351d2,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-metadefs-load,k8s:release_group=glance" ipv4=10.0.0.230 ipv6= k8sPodName=openstack/glance-metadefs-load-b4fd6 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a94ad6b7df datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2878 identity=18388 ipv4=10.0.0.230 ipv6= k8sPodName=openstack/glance-metadefs-load-b4fd6 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f4efcfcc1f datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2229 identity=10450 ipv4=10.0.0.72 ipv6= k8sPodName=openstack/heat-domain-ks-user-fhhd7 subsys=endpoint level=info msg="Successful endpoint creation" containerID=f4efcfcc1f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2229 identity=10450 ipv4=10.0.0.72 ipv6= k8sPodName=openstack/heat-domain-ks-user-fhhd7 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=a94ad6b7df datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2878 identity=18388 ipv4=10.0.0.230 ipv6= k8sPodName=openstack/glance-metadefs-load-b4fd6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=a94ad6b7df datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2878 identity=18388 ipv4=10.0.0.230 ipv6= k8sPodName=openstack/glance-metadefs-load-b4fd6 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.231 9a1390f0-1e96-41fd-8487-776f06e67120 default }" containerID=29592e8a97eb16b11d979834f331baf66a8c3c99a2e66205982e0bd955451e3c datapathConfiguration="&{false false false false false }" interface=lxcfad8228618be k8sPodName=openstack/cinder-backup-storage-init-9xvtf labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=29592e8a97 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1764 ipv4=10.0.0.231 ipv6= k8sPodName=openstack/cinder-backup-storage-init-9xvtf subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=29592e8a97 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1764 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=8697d1e4-70e1-4435-9c98-fae16790231e,k8s:batch.kubernetes.io/job-name=cinder-backup-storage-init,k8s:component=storage-init,k8s:controller-uid=8697d1e4-70e1-4435-9c98-fae16790231e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-backup-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-backup-storage-init,k8s:release_group=cinder" ipv4=10.0.0.231 ipv6= k8sPodName=openstack/cinder-backup-storage-init-9xvtf subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=8697d1e4-70e1-4435-9c98-fae16790231e;k8s:batch.kubernetes.io/job-name=cinder-backup-storage-init;k8s:component=storage-init;k8s:controller-uid=8697d1e4-70e1-4435-9c98-fae16790231e;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-backup-storage-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-backup-storage-init;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=29592e8a97 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1764 identity=55710 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=8697d1e4-70e1-4435-9c98-fae16790231e,k8s:batch.kubernetes.io/job-name=cinder-backup-storage-init,k8s:component=storage-init,k8s:controller-uid=8697d1e4-70e1-4435-9c98-fae16790231e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-backup-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-backup-storage-init,k8s:release_group=cinder" ipv4=10.0.0.231 ipv6= k8sPodName=openstack/cinder-backup-storage-init-9xvtf oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=29592e8a97 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1764 identity=55710 ipv4=10.0.0.231 ipv6= k8sPodName=openstack/cinder-backup-storage-init-9xvtf subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=29592e8a97 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1764 identity=55710 ipv4=10.0.0.231 ipv6= k8sPodName=openstack/cinder-backup-storage-init-9xvtf subsys=endpoint level=info msg="Successful endpoint creation" containerID=29592e8a97 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1764 identity=55710 ipv4=10.0.0.231 ipv6= k8sPodName=openstack/cinder-backup-storage-init-9xvtf subsys=daemon level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=a94ad6b7df endpointID=2878 k8sNamespace=openstack k8sPodName=glance-metadefs-load-b4fd6 subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=cba10d54-8cd5-47c4-9d92-cf74df6351d2 k8s:batch.kubernetes.io/job-name=glance-metadefs-load k8s:component=metadefs_load k8s:controller-uid=cba10d54-8cd5-47c4-9d92-cf74df6351d2 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-metadefs-load k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=a94ad6b7df datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2878 identity=18388 ipv4=10.0.0.230 ipv6= k8sPodName=openstack/glance-metadefs-load-b4fd6 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.83 d3589ffd-61aa-4fb3-806b-a03f5b6d74fd default }" containerID=57846c8a8b77dc8827971312415b761abb51f31f8c8ab6f97c731cb1b74ee55e datapathConfiguration="&{false false false false false }" interface=lxcaba75f18ecbc k8sPodName=openstack/glance-storage-init-9blw7 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=57846c8a8b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1950 ipv4=10.0.0.83 ipv6= k8sPodName=openstack/glance-storage-init-9blw7 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=57846c8a8b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1950 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=3063a092-8c50-4096-862f-058d43098512,k8s:batch.kubernetes.io/job-name=glance-storage-init,k8s:component=storage-init,k8s:controller-uid=3063a092-8c50-4096-862f-058d43098512,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-storage-init,k8s:release_group=glance" ipv4=10.0.0.83 ipv6= k8sPodName=openstack/glance-storage-init-9blw7 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=57846c8a8b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1950 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.83 ipv6= k8sPodName=openstack/glance-storage-init-9blw7 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=3063a092-8c50-4096-862f-058d43098512;k8s:batch.kubernetes.io/job-name=glance-storage-init;k8s:component=storage-init;k8s:controller-uid=3063a092-8c50-4096-862f-058d43098512;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-storage-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=57846c8a8b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1950 identity=26987 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=3063a092-8c50-4096-862f-058d43098512,k8s:batch.kubernetes.io/job-name=glance-storage-init,k8s:component=storage-init,k8s:controller-uid=3063a092-8c50-4096-862f-058d43098512,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-storage-init,k8s:release_group=glance" ipv4=10.0.0.83 ipv6= k8sPodName=openstack/glance-storage-init-9blw7 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=57846c8a8b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1950 identity=26987 ipv4=10.0.0.83 ipv6= k8sPodName=openstack/glance-storage-init-9blw7 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=57846c8a8b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1950 identity=26987 ipv4=10.0.0.83 ipv6= k8sPodName=openstack/glance-storage-init-9blw7 subsys=endpoint level=info msg="Successful endpoint creation" containerID=57846c8a8b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1950 identity=26987 ipv4=10.0.0.83 ipv6= k8sPodName=openstack/glance-storage-init-9blw7 subsys=daemon level=info msg="Delete endpoint request" containerID=29592e8a97 endpointID=1764 k8sNamespace=openstack k8sPodName=cinder-backup-storage-init-9xvtf subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=8697d1e4-70e1-4435-9c98-fae16790231e k8s:batch.kubernetes.io/job-name=cinder-backup-storage-init k8s:component=storage-init k8s:controller-uid=8697d1e4-70e1-4435-9c98-fae16790231e k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-backup-storage-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-backup-storage-init k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=29592e8a97 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1764 identity=55710 ipv4=10.0.0.231 ipv6= k8sPodName=openstack/cinder-backup-storage-init-9xvtf subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.183 392ad047-bade-4ebd-8036-702ae7e23c32 default }" containerID=c1148c4de1c3541aa8caa3c38fc10664b8d78538ebe675eaf56b3e707ff77ba4 datapathConfiguration="&{false false false false false }" interface=lxc39305f19414a k8sPodName=openstack/cinder-create-internal-tenant-76h7x labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c1148c4de1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1078 ipv4=10.0.0.183 ipv6= k8sPodName=openstack/cinder-create-internal-tenant-76h7x subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c1148c4de1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1078 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=5dd5a5a0-6ac1-4330-856d-7c2d0f423730,k8s:batch.kubernetes.io/job-name=cinder-create-internal-tenant,k8s:component=create-internal-tenant,k8s:controller-uid=5dd5a5a0-6ac1-4330-856d-7c2d0f423730,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-create-internal-tenant,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-create-internal-tenant,k8s:release_group=cinder" ipv4=10.0.0.183 ipv6= k8sPodName=openstack/cinder-create-internal-tenant-76h7x subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=5dd5a5a0-6ac1-4330-856d-7c2d0f423730;k8s:batch.kubernetes.io/job-name=cinder-create-internal-tenant;k8s:component=create-internal-tenant;k8s:controller-uid=5dd5a5a0-6ac1-4330-856d-7c2d0f423730;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-create-internal-tenant;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-create-internal-tenant;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c1148c4de1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1078 identity=14379 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=5dd5a5a0-6ac1-4330-856d-7c2d0f423730,k8s:batch.kubernetes.io/job-name=cinder-create-internal-tenant,k8s:component=create-internal-tenant,k8s:controller-uid=5dd5a5a0-6ac1-4330-856d-7c2d0f423730,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-create-internal-tenant,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-create-internal-tenant,k8s:release_group=cinder" ipv4=10.0.0.183 ipv6= k8sPodName=openstack/cinder-create-internal-tenant-76h7x oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c1148c4de1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1078 identity=14379 ipv4=10.0.0.183 ipv6= k8sPodName=openstack/cinder-create-internal-tenant-76h7x subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=c1148c4de1 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1078 identity=14379 ipv4=10.0.0.183 ipv6= k8sPodName=openstack/cinder-create-internal-tenant-76h7x subsys=endpoint level=info msg="Successful endpoint creation" containerID=c1148c4de1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1078 identity=14379 ipv4=10.0.0.183 ipv6= k8sPodName=openstack/cinder-create-internal-tenant-76h7x subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=57846c8a8b endpointID=1950 k8sNamespace=openstack k8sPodName=glance-storage-init-9blw7 subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=3063a092-8c50-4096-862f-058d43098512 k8s:batch.kubernetes.io/job-name=glance-storage-init k8s:component=storage-init k8s:controller-uid=3063a092-8c50-4096-862f-058d43098512 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-storage-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=57846c8a8b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1950 identity=26987 ipv4=10.0.0.83 ipv6= k8sPodName=openstack/glance-storage-init-9blw7 subsys=endpoint level=info msg="Delete endpoint request" containerID=c1148c4de1 endpointID=1078 k8sNamespace=openstack k8sPodName=cinder-create-internal-tenant-76h7x subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=5dd5a5a0-6ac1-4330-856d-7c2d0f423730 k8s:batch.kubernetes.io/job-name=cinder-create-internal-tenant k8s:component=create-internal-tenant k8s:controller-uid=5dd5a5a0-6ac1-4330-856d-7c2d0f423730 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-create-internal-tenant k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-create-internal-tenant k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=c1148c4de1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1078 identity=14379 ipv4=10.0.0.183 ipv6= k8sPodName=openstack/cinder-create-internal-tenant-76h7x subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.193 fd1802f4-c803-496f-b851-3e555420f18c default }" containerID=f391408cddd90997a42363db7d377f44c2df9a253e119c1152dc9a59645cddd9 datapathConfiguration="&{false false false false false }" interface=lxcddcceb5a7dbe k8sPodName=openstack/cinder-storage-init-w4jkh labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f391408cdd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=998 ipv4=10.0.0.193 ipv6= k8sPodName=openstack/cinder-storage-init-w4jkh subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f391408cdd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=998 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=3d245116-d41c-470d-a52d-e683aaa77e5d,k8s:batch.kubernetes.io/job-name=cinder-storage-init,k8s:component=storage-init,k8s:controller-uid=3d245116-d41c-470d-a52d-e683aaa77e5d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-storage-init,k8s:release_group=cinder" ipv4=10.0.0.193 ipv6= k8sPodName=openstack/cinder-storage-init-w4jkh subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=3d245116-d41c-470d-a52d-e683aaa77e5d;k8s:batch.kubernetes.io/job-name=cinder-storage-init;k8s:component=storage-init;k8s:controller-uid=3d245116-d41c-470d-a52d-e683aaa77e5d;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-storage-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-storage-init;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f391408cdd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=998 identity=1454 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=3d245116-d41c-470d-a52d-e683aaa77e5d,k8s:batch.kubernetes.io/job-name=cinder-storage-init,k8s:component=storage-init,k8s:controller-uid=3d245116-d41c-470d-a52d-e683aaa77e5d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-storage-init,k8s:release_group=cinder" ipv4=10.0.0.193 ipv6= k8sPodName=openstack/cinder-storage-init-w4jkh oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=f391408cdd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=998 identity=1454 ipv4=10.0.0.193 ipv6= k8sPodName=openstack/cinder-storage-init-w4jkh subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f391408cdd datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=998 identity=1454 ipv4=10.0.0.193 ipv6= k8sPodName=openstack/cinder-storage-init-w4jkh subsys=endpoint level=info msg="Successful endpoint creation" containerID=f391408cdd datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=998 identity=1454 ipv4=10.0.0.193 ipv6= k8sPodName=openstack/cinder-storage-init-w4jkh subsys=daemon level=info msg="Delete endpoint request" containerID=f4efcfcc1f endpointID=2229 k8sNamespace=openstack k8sPodName=heat-domain-ks-user-fhhd7 subsys=daemon level=info msg="Releasing key" key="[k8s:application=heat k8s:batch.kubernetes.io/controller-uid=9352067b-093d-43bf-94f9-9677802f9cf1 k8s:batch.kubernetes.io/job-name=heat-domain-ks-user k8s:component=ks-user k8s:controller-uid=9352067b-093d-43bf-94f9-9677802f9cf1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=heat-ks-user-domain k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=heat-domain-ks-user k8s:release_group=heat]" subsys=allocator level=info msg="Removed endpoint" containerID=f4efcfcc1f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2229 identity=10450 ipv4=10.0.0.72 ipv6= k8sPodName=openstack/heat-domain-ks-user-fhhd7 subsys=endpoint level=info msg="Delete endpoint request" containerID=f391408cdd endpointID=998 k8sNamespace=openstack k8sPodName=cinder-storage-init-w4jkh subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=3d245116-d41c-470d-a52d-e683aaa77e5d k8s:batch.kubernetes.io/job-name=cinder-storage-init k8s:component=storage-init k8s:controller-uid=3d245116-d41c-470d-a52d-e683aaa77e5d k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-storage-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-storage-init k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=f391408cdd datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=998 identity=1454 ipv4=10.0.0.193 ipv6= k8sPodName=openstack/cinder-storage-init-w4jkh subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.175 77880fe8-5e60-4d8c-9a6f-f314c339c74f default }" containerID=8370b3342225435ce5e2eb221bc9825e7067d983c2bf69910778a12af3a4b09c datapathConfiguration="&{false false false false false }" interface=lxca5c412647de1 k8sPodName=openstack/heat-trusts-5ln24 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8370b33422 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1289 ipv4=10.0.0.175 ipv6= k8sPodName=openstack/heat-trusts-5ln24 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8370b33422 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1289 identityLabels="k8s:application=heat,k8s:batch.kubernetes.io/controller-uid=492a870b-2bec-4b8d-95c8-27fc4e17a005,k8s:batch.kubernetes.io/job-name=heat-trusts,k8s:component=trusts,k8s:controller-uid=492a870b-2bec-4b8d-95c8-27fc4e17a005,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=heat-trusts,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=heat-trusts,k8s:release_group=heat" ipv4=10.0.0.175 ipv6= k8sPodName=openstack/heat-trusts-5ln24 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=heat;k8s:batch.kubernetes.io/controller-uid=492a870b-2bec-4b8d-95c8-27fc4e17a005;k8s:batch.kubernetes.io/job-name=heat-trusts;k8s:component=trusts;k8s:controller-uid=492a870b-2bec-4b8d-95c8-27fc4e17a005;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=heat-trusts;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=heat-trusts;k8s:release_group=heat;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8370b33422 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1289 identity=9692 identityLabels="k8s:application=heat,k8s:batch.kubernetes.io/controller-uid=492a870b-2bec-4b8d-95c8-27fc4e17a005,k8s:batch.kubernetes.io/job-name=heat-trusts,k8s:component=trusts,k8s:controller-uid=492a870b-2bec-4b8d-95c8-27fc4e17a005,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=heat-trusts,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=heat-trusts,k8s:release_group=heat" ipv4=10.0.0.175 ipv6= k8sPodName=openstack/heat-trusts-5ln24 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8370b33422 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1289 identity=9692 ipv4=10.0.0.175 ipv6= k8sPodName=openstack/heat-trusts-5ln24 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=8370b33422 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1289 identity=9692 ipv4=10.0.0.175 ipv6= k8sPodName=openstack/heat-trusts-5ln24 subsys=endpoint level=info msg="Successful endpoint creation" containerID=8370b33422 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1289 identity=9692 ipv4=10.0.0.175 ipv6= k8sPodName=openstack/heat-trusts-5ln24 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.247 b3789230-55ef-42ec-a152-f109181ad0b4 default }" containerID=0de1e3ff551216777b703b519f2ec4c73e3d8eb218e79b9e690fbf83fc0f387f datapathConfiguration="&{false false false false false }" interface=lxceef1f374440c k8sPodName=openstack/cinder-bootstrap-5snrf labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0de1e3ff55 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=267 ipv4=10.0.0.247 ipv6= k8sPodName=openstack/cinder-bootstrap-5snrf subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0de1e3ff55 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=267 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=5a9f166c-65b7-4fcf-9f14-1daaa097c327,k8s:batch.kubernetes.io/job-name=cinder-bootstrap,k8s:component=bootstrap,k8s:controller-uid=5a9f166c-65b7-4fcf-9f14-1daaa097c327,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-bootstrap,k8s:release_group=cinder" ipv4=10.0.0.247 ipv6= k8sPodName=openstack/cinder-bootstrap-5snrf subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=5a9f166c-65b7-4fcf-9f14-1daaa097c327;k8s:batch.kubernetes.io/job-name=cinder-bootstrap;k8s:component=bootstrap;k8s:controller-uid=5a9f166c-65b7-4fcf-9f14-1daaa097c327;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-bootstrap;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-bootstrap;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0de1e3ff55 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=267 identity=58821 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=5a9f166c-65b7-4fcf-9f14-1daaa097c327,k8s:batch.kubernetes.io/job-name=cinder-bootstrap,k8s:component=bootstrap,k8s:controller-uid=5a9f166c-65b7-4fcf-9f14-1daaa097c327,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-bootstrap,k8s:release_group=cinder" ipv4=10.0.0.247 ipv6= k8sPodName=openstack/cinder-bootstrap-5snrf oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0de1e3ff55 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=267 identity=58821 ipv4=10.0.0.247 ipv6= k8sPodName=openstack/cinder-bootstrap-5snrf subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=0de1e3ff55 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=267 identity=58821 ipv4=10.0.0.247 ipv6= k8sPodName=openstack/cinder-bootstrap-5snrf subsys=endpoint level=info msg="Successful endpoint creation" containerID=0de1e3ff55 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=267 identity=58821 ipv4=10.0.0.247 ipv6= k8sPodName=openstack/cinder-bootstrap-5snrf subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=8370b33422 endpointID=1289 k8sNamespace=openstack k8sPodName=heat-trusts-5ln24 subsys=daemon level=info msg="Releasing key" key="[k8s:application=heat k8s:batch.kubernetes.io/controller-uid=492a870b-2bec-4b8d-95c8-27fc4e17a005 k8s:batch.kubernetes.io/job-name=heat-trusts k8s:component=trusts k8s:controller-uid=492a870b-2bec-4b8d-95c8-27fc4e17a005 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=heat-trusts k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=heat-trusts k8s:release_group=heat]" subsys=allocator level=info msg="Removed endpoint" containerID=8370b33422 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1289 identity=9692 ipv4=10.0.0.175 ipv6= k8sPodName=openstack/heat-trusts-5ln24 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.210 ed977602-826a-486c-853d-8ebf77883b9a default }" containerID=4bff4d0d4d41a81234cfebb39b73aa5d593cb67f0cc4195417f6f2a7e8566a4d datapathConfiguration="&{false false false false false }" interface=lxc6eabb6141e7d k8sPodName=openstack/heat-engine-cleaner-29618895-nskdg labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4bff4d0d4d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2740 ipv4=10.0.0.210 ipv6= k8sPodName=openstack/heat-engine-cleaner-29618895-nskdg subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4bff4d0d4d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2740 identityLabels="k8s:application=heat,k8s:batch.kubernetes.io/controller-uid=7d628148-06f6-4c20-9b08-c657f91f714f,k8s:batch.kubernetes.io/job-name=heat-engine-cleaner-29618895,k8s:component=engine-cleaner,k8s:controller-uid=7d628148-06f6-4c20-9b08-c657f91f714f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=heat-engine-cleaner,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=heat-engine-cleaner-29618895,k8s:release_group=heat" ipv4=10.0.0.210 ipv6= k8sPodName=openstack/heat-engine-cleaner-29618895-nskdg subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=heat;k8s:batch.kubernetes.io/controller-uid=7d628148-06f6-4c20-9b08-c657f91f714f;k8s:batch.kubernetes.io/job-name=heat-engine-cleaner-29618895;k8s:component=engine-cleaner;k8s:controller-uid=7d628148-06f6-4c20-9b08-c657f91f714f;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=heat-engine-cleaner;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=heat-engine-cleaner-29618895;k8s:release_group=heat;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=4bff4d0d4d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2740 identity=693 identityLabels="k8s:application=heat,k8s:batch.kubernetes.io/controller-uid=7d628148-06f6-4c20-9b08-c657f91f714f,k8s:batch.kubernetes.io/job-name=heat-engine-cleaner-29618895,k8s:component=engine-cleaner,k8s:controller-uid=7d628148-06f6-4c20-9b08-c657f91f714f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=heat-engine-cleaner,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=heat-engine-cleaner-29618895,k8s:release_group=heat" ipv4=10.0.0.210 ipv6= k8sPodName=openstack/heat-engine-cleaner-29618895-nskdg oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4bff4d0d4d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2740 identity=693 ipv4=10.0.0.210 ipv6= k8sPodName=openstack/heat-engine-cleaner-29618895-nskdg subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=4bff4d0d4d datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2740 identity=693 ipv4=10.0.0.210 ipv6= k8sPodName=openstack/heat-engine-cleaner-29618895-nskdg subsys=endpoint level=info msg="Successful endpoint creation" containerID=4bff4d0d4d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2740 identity=693 ipv4=10.0.0.210 ipv6= k8sPodName=openstack/heat-engine-cleaner-29618895-nskdg subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=4bff4d0d4d endpointID=2740 k8sNamespace=openstack k8sPodName=heat-engine-cleaner-29618895-nskdg subsys=daemon level=info msg="Releasing key" key="[k8s:application=heat k8s:batch.kubernetes.io/controller-uid=7d628148-06f6-4c20-9b08-c657f91f714f k8s:batch.kubernetes.io/job-name=heat-engine-cleaner-29618895 k8s:component=engine-cleaner k8s:controller-uid=7d628148-06f6-4c20-9b08-c657f91f714f k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=heat-engine-cleaner k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=heat-engine-cleaner-29618895 k8s:release_group=heat]" subsys=allocator level=info msg="Removed endpoint" containerID=4bff4d0d4d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2740 identity=693 ipv4=10.0.0.210 ipv6= k8sPodName=openstack/heat-engine-cleaner-29618895-nskdg subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.207 848a09ee-0a19-4534-9f63-163cc39b21b7 default }" containerID=952545fac26ac6ef2a731213faf9a763f64b35c443a568c10bf907d2044d217b datapathConfiguration="&{false false false false false }" interface=lxcc92f316f614f k8sPodName=openstack/cinder-volume-6b69698bcc-vkd28 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=952545fac2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3321 ipv4=10.0.0.207 ipv6= k8sPodName=openstack/cinder-volume-6b69698bcc-vkd28 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=952545fac2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3321 identityLabels="k8s:application=cinder,k8s:component=volume,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-volume,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=cinder" ipv4=10.0.0.207 ipv6= k8sPodName=openstack/cinder-volume-6b69698bcc-vkd28 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack]" subsys=crd-allocator level=info msg="Create endpoint request" addressing="&{10.0.0.181 44d0e317-3483-43e9-bf42-56117849698e default }" containerID=81630151d73d246ee44bf7cf45c1fad0e5e52059dd7e7cc35565bf14958b8373 datapathConfiguration="&{false false false false false }" interface=lxc2168a097d383 k8sPodName=openstack/cinder-backup-6fd459887-wqlrt labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=81630151d7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1871 ipv4=10.0.0.181 ipv6= k8sPodName=openstack/cinder-backup-6fd459887-wqlrt subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=81630151d7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1871 identityLabels="k8s:application=cinder,k8s:component=backup,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-backup,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=cinder" ipv4=10.0.0.181 ipv6= k8sPodName=openstack/cinder-backup-6fd459887-wqlrt subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:component=volume;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-volume;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=cinder;" subsys=allocator level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack]" subsys=crd-allocator level=info msg="Identity of endpoint changed" containerID=952545fac2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3321 identity=19288 identityLabels="k8s:application=cinder,k8s:component=volume,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-volume,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=cinder" ipv4=10.0.0.207 ipv6= k8sPodName=openstack/cinder-volume-6b69698bcc-vkd28 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=952545fac2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3321 identity=19288 ipv4=10.0.0.207 ipv6= k8sPodName=openstack/cinder-volume-6b69698bcc-vkd28 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=81630151d7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1871 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.181 ipv6= k8sPodName=openstack/cinder-backup-6fd459887-wqlrt line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:component=backup;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-backup;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=81630151d7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1871 identity=56334 identityLabels="k8s:application=cinder,k8s:component=backup,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-backup,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=cinder" ipv4=10.0.0.181 ipv6= k8sPodName=openstack/cinder-backup-6fd459887-wqlrt oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=81630151d7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1871 identity=56334 ipv4=10.0.0.181 ipv6= k8sPodName=openstack/cinder-backup-6fd459887-wqlrt subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=952545fac2 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3321 identity=19288 ipv4=10.0.0.207 ipv6= k8sPodName=openstack/cinder-volume-6b69698bcc-vkd28 subsys=endpoint level=info msg="Successful endpoint creation" containerID=952545fac2 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3321 identity=19288 ipv4=10.0.0.207 ipv6= k8sPodName=openstack/cinder-volume-6b69698bcc-vkd28 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=81630151d7 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1871 identity=56334 ipv4=10.0.0.181 ipv6= k8sPodName=openstack/cinder-backup-6fd459887-wqlrt subsys=endpoint level=info msg="Successful endpoint creation" containerID=81630151d7 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1871 identity=56334 ipv4=10.0.0.181 ipv6= k8sPodName=openstack/cinder-backup-6fd459887-wqlrt subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.199 b33ece10-c933-4413-96fc-6636f591e07b default }" containerID=9efedde82324d376ac09b1525890d200737ada5db78a24e0508399aea5859754 datapathConfiguration="&{false false false false false }" interface=lxc1b3f00bdcf36 k8sPodName=openstack/glance-api-6864d84f4c-plzsh labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9efedde823 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=546 ipv4=10.0.0.199 ipv6= k8sPodName=openstack/glance-api-6864d84f4c-plzsh subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9efedde823 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=546 identityLabels="k8s:application=glance,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=glance" ipv4=10.0.0.199 ipv6= k8sPodName=openstack/glance-api-6864d84f4c-plzsh subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9efedde823 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=546 identity=42505 identityLabels="k8s:application=glance,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=glance" ipv4=10.0.0.199 ipv6= k8sPodName=openstack/glance-api-6864d84f4c-plzsh oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9efedde823 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=546 identity=42505 ipv4=10.0.0.199 ipv6= k8sPodName=openstack/glance-api-6864d84f4c-plzsh subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=9efedde823 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=546 identity=42505 ipv4=10.0.0.199 ipv6= k8sPodName=openstack/glance-api-6864d84f4c-plzsh subsys=endpoint level=info msg="Successful endpoint creation" containerID=9efedde823 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=546 identity=42505 ipv4=10.0.0.199 ipv6= k8sPodName=openstack/glance-api-6864d84f4c-plzsh subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=0de1e3ff55 endpointID=267 k8sNamespace=openstack k8sPodName=cinder-bootstrap-5snrf subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=5a9f166c-65b7-4fcf-9f14-1daaa097c327 k8s:batch.kubernetes.io/job-name=cinder-bootstrap k8s:component=bootstrap k8s:controller-uid=5a9f166c-65b7-4fcf-9f14-1daaa097c327 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-bootstrap k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-bootstrap k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=0de1e3ff55 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=267 identity=58821 ipv4=10.0.0.247 ipv6= k8sPodName=openstack/cinder-bootstrap-5snrf subsys=endpoint