level=info msg="Memory available for map entries (0.003% of 67421634560B): 168554086B" subsys=config level=info msg="option bpf-ct-global-tcp-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-ct-global-any-max set by dynamic sizing to 295708" subsys=config level=info msg="option bpf-nat-global-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-neigh-global-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-sock-rev-map-max set by dynamic sizing to 295708" subsys=config level=info msg=" --agent-health-port='9879'" subsys=daemon level=info msg=" --agent-labels=''" subsys=daemon level=info msg=" --agent-liveness-update-interval='1s'" subsys=daemon level=info msg=" --agent-not-ready-taint-key='node.cilium.io/agent-not-ready'" subsys=daemon level=info msg=" --allocator-list-timeout='3m0s'" subsys=daemon level=info msg=" --allow-icmp-frag-needed='true'" subsys=daemon level=info msg=" --allow-localhost='auto'" subsys=daemon level=info msg=" --annotate-k8s-node='false'" subsys=daemon level=info msg=" --api-rate-limit=''" subsys=daemon level=info msg=" --arping-refresh-period='30s'" subsys=daemon level=info msg=" --auto-create-cilium-node-resource='true'" subsys=daemon level=info msg=" --auto-direct-node-routes='false'" subsys=daemon level=info msg=" --bgp-announce-lb-ip='false'" subsys=daemon level=info msg=" --bgp-announce-pod-cidr='false'" subsys=daemon level=info msg=" --bgp-config-path='/var/lib/cilium/bgp/config.yaml'" subsys=daemon level=info msg=" --bpf-auth-map-max='524288'" subsys=daemon level=info msg=" --bpf-ct-global-any-max='262144'" subsys=daemon level=info msg=" --bpf-ct-global-tcp-max='524288'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-any='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp='6h0m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp-fin='10s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp-syn='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-any='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-tcp='6h0m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-tcp-grace='1m0s'" subsys=daemon level=info msg=" --bpf-filter-priority='1'" subsys=daemon level=info msg=" --bpf-fragments-map-max='8192'" subsys=daemon level=info msg=" --bpf-lb-acceleration='disabled'" subsys=daemon level=info msg=" --bpf-lb-affinity-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-algorithm='random'" subsys=daemon level=info msg=" --bpf-lb-dev-ip-addr-inherit=''" subsys=daemon level=info msg=" --bpf-lb-dsr-dispatch='opt'" subsys=daemon level=info msg=" --bpf-lb-dsr-l4-xlate='frontend'" subsys=daemon level=info msg=" --bpf-lb-external-clusterip='false'" subsys=daemon level=info msg=" --bpf-lb-maglev-hash-seed='JLfvgnHc2kaSUFaI'" subsys=daemon level=info msg=" --bpf-lb-maglev-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-maglev-table-size='16381'" subsys=daemon level=info msg=" --bpf-lb-map-max='65536'" subsys=daemon level=info msg=" --bpf-lb-mode='snat'" subsys=daemon level=info msg=" --bpf-lb-rev-nat-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-rss-ipv4-src-cidr=''" subsys=daemon level=info msg=" --bpf-lb-rss-ipv6-src-cidr=''" subsys=daemon level=info msg=" --bpf-lb-service-backend-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-service-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-sock='false'" subsys=daemon level=info msg=" --bpf-lb-sock-hostns-only='false'" subsys=daemon level=info msg=" --bpf-lb-source-range-map-max='0'" subsys=daemon level=info msg=" --bpf-map-dynamic-size-ratio='0.0025'" subsys=daemon level=info msg=" --bpf-map-event-buffers=''" subsys=daemon level=info msg=" --bpf-nat-global-max='524288'" subsys=daemon level=info msg=" --bpf-neigh-global-max='524288'" subsys=daemon level=info msg=" --bpf-policy-map-full-reconciliation-interval='15m0s'" subsys=daemon level=info msg=" --bpf-policy-map-max='16384'" subsys=daemon level=info msg=" --bpf-root='/sys/fs/bpf'" subsys=daemon level=info msg=" --bpf-sock-rev-map-max='262144'" subsys=daemon level=info msg=" --bypass-ip-availability-upon-restore='false'" subsys=daemon level=info msg=" --certificates-directory='/var/run/cilium/certs'" subsys=daemon level=info msg=" --cflags=''" subsys=daemon level=info msg=" --cgroup-root='/run/cilium/cgroupv2'" subsys=daemon level=info msg=" --cilium-endpoint-gc-interval='5m0s'" subsys=daemon level=info msg=" --cluster-health-port='4240'" subsys=daemon level=info msg=" --cluster-id='0'" subsys=daemon level=info msg=" --cluster-name='default'" subsys=daemon level=info msg=" --cluster-pool-ipv4-cidr='10.0.0.0/8'" subsys=daemon level=info msg=" --cluster-pool-ipv4-mask-size='24'" subsys=daemon level=info msg=" --clustermesh-config='/var/lib/cilium/clustermesh/'" subsys=daemon level=info msg=" --clustermesh-ip-identities-sync-timeout='1m0s'" subsys=daemon level=info msg=" --cmdref=''" subsys=daemon level=info msg=" --cni-chaining-mode='none'" subsys=daemon level=info msg=" --cni-chaining-target=''" subsys=daemon level=info msg=" --cni-exclusive='true'" subsys=daemon level=info msg=" --cni-external-routing='false'" subsys=daemon level=info msg=" --cni-log-file='/var/run/cilium/cilium-cni.log'" subsys=daemon level=info msg=" --cnp-node-status-gc-interval='0s'" subsys=daemon level=info msg=" --config=''" subsys=daemon level=info msg=" --config-dir='/tmp/cilium/config-map'" subsys=daemon level=info msg=" --config-sources='config-map:kube-system/cilium-config'" subsys=daemon level=info msg=" --conntrack-gc-interval='0s'" subsys=daemon level=info msg=" --conntrack-gc-max-interval='0s'" subsys=daemon level=info msg=" --crd-wait-timeout='5m0s'" subsys=daemon level=info msg=" --custom-cni-conf='false'" subsys=daemon level=info msg=" --datapath-mode='veth'" subsys=daemon level=info msg=" --debug='false'" subsys=daemon level=info msg=" --debug-verbose=''" subsys=daemon level=info msg=" --derive-masquerade-ip-addr-from-device=''" subsys=daemon level=info msg=" --devices=''" subsys=daemon level=info msg=" --direct-routing-device=''" subsys=daemon level=info msg=" --disable-cnp-status-updates='true'" subsys=daemon level=info msg=" --disable-endpoint-crd='false'" subsys=daemon level=info msg=" --disable-envoy-version-check='false'" subsys=daemon level=info msg=" --disable-iptables-feeder-rules=''" subsys=daemon level=info msg=" --dns-max-ips-per-restored-rule='1000'" subsys=daemon level=info msg=" --dns-policy-unload-on-shutdown='false'" subsys=daemon level=info msg=" --dnsproxy-concurrency-limit='0'" subsys=daemon level=info msg=" --dnsproxy-concurrency-processing-grace-period='0s'" subsys=daemon level=info msg=" --dnsproxy-enable-transparent-mode='true'" subsys=daemon level=info msg=" --dnsproxy-lock-count='128'" subsys=daemon level=info msg=" --dnsproxy-lock-timeout='500ms'" subsys=daemon level=info msg=" --egress-gateway-policy-map-max='16384'" subsys=daemon level=info msg=" --egress-gateway-reconciliation-trigger-interval='1s'" subsys=daemon level=info msg=" --egress-masquerade-interfaces=''" subsys=daemon level=info msg=" --egress-multi-home-ip-rule-compat='false'" subsys=daemon level=info msg=" --enable-auto-protect-node-port-range='true'" subsys=daemon level=info msg=" --enable-bandwidth-manager='false'" subsys=daemon level=info msg=" --enable-bbr='false'" subsys=daemon level=info msg=" --enable-bgp-control-plane='false'" subsys=daemon level=info msg=" --enable-bpf-clock-probe='false'" subsys=daemon level=info msg=" --enable-bpf-masquerade='false'" subsys=daemon level=info msg=" --enable-bpf-tproxy='false'" subsys=daemon level=info msg=" --enable-cilium-api-server-access='*'" subsys=daemon level=info msg=" --enable-cilium-endpoint-slice='false'" subsys=daemon level=info msg=" --enable-cilium-health-api-server-access='*'" subsys=daemon level=info msg=" --enable-custom-calls='false'" subsys=daemon level=info msg=" --enable-endpoint-health-checking='true'" subsys=daemon level=info msg=" --enable-endpoint-routes='false'" subsys=daemon level=info msg=" --enable-envoy-config='false'" subsys=daemon level=info msg=" --enable-external-ips='false'" subsys=daemon level=info msg=" --enable-health-check-nodeport='true'" subsys=daemon level=info msg=" --enable-health-checking='true'" subsys=daemon level=info msg=" --enable-high-scale-ipcache='false'" subsys=daemon level=info msg=" --enable-host-firewall='false'" subsys=daemon level=info msg=" --enable-host-legacy-routing='false'" subsys=daemon level=info msg=" --enable-host-port='false'" subsys=daemon level=info msg=" --enable-hubble='false'" subsys=daemon level=info msg=" --enable-hubble-recorder-api='true'" subsys=daemon level=info msg=" --enable-icmp-rules='true'" subsys=daemon level=info msg=" --enable-identity-mark='true'" subsys=daemon level=info msg=" --enable-ip-masq-agent='false'" subsys=daemon level=info msg=" --enable-ipsec='false'" subsys=daemon level=info msg=" --enable-ipsec-key-watcher='true'" subsys=daemon level=info msg=" --enable-ipv4='true'" subsys=daemon level=info msg=" --enable-ipv4-big-tcp='false'" subsys=daemon level=info msg=" --enable-ipv4-egress-gateway='false'" subsys=daemon level=info msg=" --enable-ipv4-fragment-tracking='true'" subsys=daemon level=info msg=" --enable-ipv4-masquerade='true'" subsys=daemon level=info msg=" --enable-ipv6='false'" subsys=daemon level=info msg=" --enable-ipv6-big-tcp='false'" subsys=daemon level=info msg=" --enable-ipv6-masquerade='true'" subsys=daemon level=info msg=" --enable-ipv6-ndp='false'" subsys=daemon level=info msg=" --enable-k8s='true'" subsys=daemon level=info msg=" --enable-k8s-api-discovery='false'" subsys=daemon level=info msg=" --enable-k8s-endpoint-slice='true'" subsys=daemon level=info msg=" --enable-k8s-event-handover='false'" subsys=daemon level=info msg=" --enable-k8s-networkpolicy='true'" subsys=daemon level=info msg=" --enable-k8s-terminating-endpoint='true'" subsys=daemon level=info msg=" --enable-l2-announcements='false'" subsys=daemon level=info msg=" --enable-l2-neigh-discovery='true'" subsys=daemon level=info msg=" --enable-l2-pod-announcements='false'" subsys=daemon level=info msg=" --enable-l7-proxy='true'" subsys=daemon level=info msg=" --enable-local-node-route='true'" subsys=daemon level=info msg=" --enable-local-redirect-policy='false'" subsys=daemon level=info msg=" --enable-mke='false'" subsys=daemon level=info msg=" --enable-monitor='true'" subsys=daemon level=info msg=" --enable-nat46x64-gateway='false'" subsys=daemon level=info msg=" --enable-node-port='false'" subsys=daemon level=info msg=" --enable-pmtu-discovery='false'" subsys=daemon level=info msg=" --enable-policy='default'" subsys=daemon level=info msg=" --enable-recorder='false'" subsys=daemon level=info msg=" --enable-remote-node-identity='true'" subsys=daemon level=info msg=" --enable-runtime-device-detection='false'" subsys=daemon level=info msg=" --enable-sctp='false'" subsys=daemon level=info msg=" --enable-service-topology='false'" subsys=daemon level=info msg=" --enable-session-affinity='false'" subsys=daemon level=info msg=" --enable-srv6='false'" subsys=daemon level=info msg=" --enable-stale-cilium-endpoint-cleanup='true'" subsys=daemon level=info msg=" --enable-svc-source-range-check='true'" subsys=daemon level=info msg=" --enable-tracing='false'" subsys=daemon level=info msg=" --enable-unreachable-routes='false'" subsys=daemon level=info msg=" --enable-vtep='false'" subsys=daemon level=info msg=" --enable-well-known-identities='false'" subsys=daemon level=info msg=" --enable-wireguard='false'" subsys=daemon level=info msg=" --enable-wireguard-userspace-fallback='false'" subsys=daemon level=info msg=" --enable-xdp-prefilter='false'" subsys=daemon level=info msg=" --enable-xt-socket-fallback='true'" subsys=daemon level=info msg=" --encrypt-interface=''" subsys=daemon level=info msg=" --encrypt-node='false'" subsys=daemon level=info msg=" --endpoint-gc-interval='5m0s'" subsys=daemon level=info msg=" --endpoint-queue-size='25'" subsys=daemon level=info msg=" --endpoint-status=''" subsys=daemon level=info msg=" --envoy-config-timeout='2m0s'" subsys=daemon level=info msg=" --envoy-log=''" subsys=daemon level=info msg=" --exclude-local-address=''" subsys=daemon level=info msg=" --external-envoy-proxy='false'" subsys=daemon level=info msg=" --fixed-identity-mapping=''" subsys=daemon level=info msg=" --fqdn-regex-compile-lru-size='1024'" subsys=daemon level=info msg=" --gops-port='9890'" subsys=daemon level=info msg=" --http-403-msg=''" subsys=daemon level=info msg=" --http-idle-timeout='0'" subsys=daemon level=info msg=" --http-max-grpc-timeout='0'" subsys=daemon level=info msg=" --http-normalize-path='true'" subsys=daemon level=info msg=" --http-request-timeout='3600'" subsys=daemon level=info msg=" --http-retry-count='3'" subsys=daemon level=info msg=" --http-retry-timeout='0'" subsys=daemon level=info msg=" --hubble-disable-tls='false'" subsys=daemon level=info msg=" --hubble-event-buffer-capacity='4095'" subsys=daemon level=info msg=" --hubble-event-queue-size='0'" subsys=daemon level=info msg=" --hubble-export-file-compress='false'" subsys=daemon level=info msg=" --hubble-export-file-max-backups='5'" subsys=daemon level=info msg=" --hubble-export-file-max-size-mb='10'" subsys=daemon level=info msg=" --hubble-export-file-path=''" subsys=daemon level=info msg=" --hubble-listen-address=''" subsys=daemon level=info msg=" --hubble-metrics=''" subsys=daemon level=info msg=" --hubble-metrics-server=''" subsys=daemon level=info msg=" --hubble-monitor-events=''" subsys=daemon level=info msg=" --hubble-prefer-ipv6='false'" subsys=daemon level=info msg=" --hubble-recorder-sink-queue-size='1024'" subsys=daemon level=info msg=" --hubble-recorder-storage-path='/var/run/cilium/pcaps'" subsys=daemon level=info msg=" --hubble-skip-unknown-cgroup-ids='true'" subsys=daemon level=info msg=" --hubble-socket-path='/var/run/cilium/hubble.sock'" subsys=daemon level=info msg=" --hubble-tls-cert-file=''" subsys=daemon level=info msg=" --hubble-tls-client-ca-files=''" subsys=daemon level=info msg=" --hubble-tls-key-file=''" subsys=daemon level=info msg=" --identity-allocation-mode='crd'" subsys=daemon level=info msg=" --identity-change-grace-period='5s'" subsys=daemon level=info msg=" --identity-gc-interval='15m0s'" subsys=daemon level=info msg=" --identity-heartbeat-timeout='30m0s'" subsys=daemon level=info msg=" --identity-restore-grace-period='10m0s'" subsys=daemon level=info msg=" --install-egress-gateway-routes='false'" subsys=daemon level=info msg=" --install-iptables-rules='true'" subsys=daemon level=info msg=" --install-no-conntrack-iptables-rules='false'" subsys=daemon level=info msg=" --ip-allocation-timeout='2m0s'" subsys=daemon level=info msg=" --ip-masq-agent-config-path='/etc/config/ip-masq-agent'" subsys=daemon level=info msg=" --ipam='cluster-pool'" subsys=daemon level=info msg=" --ipam-cilium-node-update-rate='15s'" subsys=daemon level=info msg=" --ipam-multi-pool-pre-allocation='default=8'" subsys=daemon level=info msg=" --ipsec-key-file=''" subsys=daemon level=info msg=" --ipsec-key-rotation-duration='5m0s'" subsys=daemon level=info msg=" --iptables-lock-timeout='5s'" subsys=daemon level=info msg=" --iptables-random-fully='false'" subsys=daemon level=info msg=" --ipv4-native-routing-cidr=''" subsys=daemon level=info msg=" --ipv4-node='auto'" subsys=daemon level=info msg=" --ipv4-pod-subnets=''" subsys=daemon level=info msg=" --ipv4-range='auto'" subsys=daemon level=info msg=" --ipv4-service-loopback-address='169.254.42.1'" subsys=daemon level=info msg=" --ipv4-service-range='auto'" subsys=daemon level=info msg=" --ipv6-cluster-alloc-cidr='f00d::/64'" subsys=daemon level=info msg=" --ipv6-mcast-device=''" subsys=daemon level=info msg=" --ipv6-native-routing-cidr=''" subsys=daemon level=info msg=" --ipv6-node='auto'" subsys=daemon level=info msg=" --ipv6-pod-subnets=''" subsys=daemon level=info msg=" --ipv6-range='auto'" subsys=daemon level=info msg=" --ipv6-service-range='auto'" subsys=daemon level=info msg=" --join-cluster='false'" subsys=daemon level=info msg=" --k8s-api-server=''" subsys=daemon level=info msg=" --k8s-client-burst='10'" subsys=daemon level=info msg=" --k8s-client-qps='5'" subsys=daemon level=info msg=" --k8s-heartbeat-timeout='30s'" subsys=daemon level=info msg=" --k8s-kubeconfig-path=''" subsys=daemon level=info msg=" --k8s-namespace='kube-system'" subsys=daemon level=info msg=" --k8s-require-ipv4-pod-cidr='false'" subsys=daemon level=info msg=" --k8s-require-ipv6-pod-cidr='false'" subsys=daemon level=info msg=" --k8s-service-cache-size='128'" subsys=daemon level=info msg=" --k8s-service-proxy-name=''" subsys=daemon level=info msg=" --k8s-sync-timeout='3m0s'" subsys=daemon level=info msg=" --k8s-watcher-endpoint-selector='metadata.name!=kube-scheduler,metadata.name!=kube-controller-manager,metadata.name!=etcd-operator,metadata.name!=gcp-controller-manager'" subsys=daemon level=info msg=" --keep-config='false'" subsys=daemon level=info msg=" --kube-proxy-replacement='disabled'" subsys=daemon level=info msg=" --kube-proxy-replacement-healthz-bind-address=''" subsys=daemon level=info msg=" --kvstore=''" subsys=daemon level=info msg=" --kvstore-connectivity-timeout='2m0s'" subsys=daemon level=info msg=" --kvstore-lease-ttl='15m0s'" subsys=daemon level=info msg=" --kvstore-max-consecutive-quorum-errors='2'" subsys=daemon level=info msg=" --kvstore-opt=''" subsys=daemon level=info msg=" --kvstore-periodic-sync='5m0s'" subsys=daemon level=info msg=" --l2-announcements-lease-duration='15s'" subsys=daemon level=info msg=" --l2-announcements-renew-deadline='5s'" subsys=daemon level=info msg=" --l2-announcements-retry-period='2s'" subsys=daemon level=info msg=" --l2-pod-announcements-interface=''" subsys=daemon level=info msg=" --label-prefix-file=''" subsys=daemon level=info msg=" --labels=''" subsys=daemon level=info msg=" --lib-dir='/var/lib/cilium'" subsys=daemon level=info msg=" --local-max-addr-scope='252'" subsys=daemon level=info msg=" --local-router-ipv4=''" subsys=daemon level=info msg=" --local-router-ipv6=''" subsys=daemon level=info msg=" --log-driver=''" subsys=daemon level=info msg=" --log-opt=''" subsys=daemon level=info msg=" --log-system-load='false'" subsys=daemon level=info msg=" --max-controller-interval='0'" subsys=daemon level=info msg=" --mesh-auth-enabled='true'" subsys=daemon level=info msg=" --mesh-auth-gc-interval='5m0s'" subsys=daemon level=info msg=" --mesh-auth-mutual-listener-port='0'" subsys=daemon level=info msg=" --mesh-auth-queue-size='1024'" subsys=daemon level=info msg=" --mesh-auth-rotated-identities-queue-size='1024'" subsys=daemon level=info msg=" --mesh-auth-signal-backoff-duration='1s'" subsys=daemon level=info msg=" --mesh-auth-spiffe-trust-domain='spiffe.cilium'" subsys=daemon level=info msg=" --mesh-auth-spire-admin-socket=''" subsys=daemon level=info msg=" --metrics=''" subsys=daemon level=info msg=" --mke-cgroup-mount=''" subsys=daemon level=info msg=" --monitor-aggregation='medium'" subsys=daemon level=info msg=" --monitor-aggregation-flags='all'" subsys=daemon level=info msg=" --monitor-aggregation-interval='5s'" subsys=daemon level=info msg=" --monitor-queue-size='0'" subsys=daemon level=info msg=" --mtu='0'" subsys=daemon level=info msg=" --node-encryption-opt-out-labels='node-role.kubernetes.io/control-plane'" subsys=daemon level=info msg=" --node-port-acceleration='disabled'" subsys=daemon level=info msg=" --node-port-algorithm='random'" subsys=daemon level=info msg=" --node-port-bind-protection='true'" subsys=daemon level=info msg=" --node-port-mode='snat'" subsys=daemon level=info msg=" --node-port-range='30000,32767'" subsys=daemon level=info msg=" --nodes-gc-interval='5m0s'" subsys=daemon level=info msg=" --operator-api-serve-addr='127.0.0.1:9234'" subsys=daemon level=info msg=" --policy-audit-mode='false'" subsys=daemon level=info msg=" --policy-queue-size='100'" subsys=daemon level=info msg=" --policy-trigger-interval='1s'" subsys=daemon level=info msg=" --pprof='false'" subsys=daemon level=info msg=" --pprof-address='localhost'" subsys=daemon level=info msg=" --pprof-port='6060'" subsys=daemon level=info msg=" --preallocate-bpf-maps='false'" subsys=daemon level=info msg=" --prepend-iptables-chains='true'" subsys=daemon level=info msg=" --procfs='/host/proc'" subsys=daemon level=info msg=" --prometheus-serve-addr=':9962'" subsys=daemon level=info msg=" --proxy-connect-timeout='2'" subsys=daemon level=info msg=" --proxy-gid='1337'" subsys=daemon level=info msg=" --proxy-idle-timeout-seconds='60'" subsys=daemon level=info msg=" --proxy-max-connection-duration-seconds='0'" subsys=daemon level=info msg=" --proxy-max-requests-per-connection='0'" subsys=daemon level=info msg=" --proxy-prometheus-port='9964'" subsys=daemon level=info msg=" --read-cni-conf=''" subsys=daemon level=info msg=" --remove-cilium-node-taints='true'" subsys=daemon level=info msg=" --restore='true'" subsys=daemon level=info msg=" --route-metric='0'" subsys=daemon level=info msg=" --routing-mode='tunnel'" subsys=daemon level=info msg=" --set-cilium-is-up-condition='true'" subsys=daemon level=info msg=" --set-cilium-node-taints='true'" subsys=daemon level=info msg=" --sidecar-istio-proxy-image='cilium/istio_proxy'" subsys=daemon level=info msg=" --single-cluster-route='false'" subsys=daemon level=info msg=" --skip-cnp-status-startup-clean='false'" subsys=daemon level=info msg=" --socket-path='/var/run/cilium/cilium.sock'" subsys=daemon level=info msg=" --srv6-encap-mode='reduced'" subsys=daemon level=info msg=" --state-dir='/var/run/cilium'" subsys=daemon level=info msg=" --synchronize-k8s-nodes='true'" subsys=daemon level=info msg=" --tofqdns-dns-reject-response-code='refused'" subsys=daemon level=info msg=" --tofqdns-enable-dns-compression='true'" subsys=daemon level=info msg=" --tofqdns-endpoint-max-ip-per-hostname='50'" subsys=daemon level=info msg=" --tofqdns-idle-connection-grace-period='0s'" subsys=daemon level=info msg=" --tofqdns-max-deferred-connection-deletes='10000'" subsys=daemon level=info msg=" --tofqdns-min-ttl='0'" subsys=daemon level=info msg=" --tofqdns-pre-cache=''" subsys=daemon level=info msg=" --tofqdns-proxy-port='0'" subsys=daemon level=info msg=" --tofqdns-proxy-response-max-delay='100ms'" subsys=daemon level=info msg=" --trace-payloadlen='128'" subsys=daemon level=info msg=" --trace-sock='true'" subsys=daemon level=info msg=" --tunnel=''" subsys=daemon level=info msg=" --tunnel-port='6082'" subsys=daemon level=info msg=" --tunnel-protocol='geneve'" subsys=daemon level=info msg=" --unmanaged-pod-watcher-interval='15'" subsys=daemon level=info msg=" --use-cilium-internal-ip-for-ipsec='false'" subsys=daemon level=info msg=" --version='false'" subsys=daemon level=info msg=" --vlan-bpf-bypass=''" subsys=daemon level=info msg=" --vtep-cidr=''" subsys=daemon level=info msg=" --vtep-endpoint=''" subsys=daemon level=info msg=" --vtep-mac=''" subsys=daemon level=info msg=" --vtep-mask=''" subsys=daemon level=info msg=" --wireguard-encapsulate='false'" subsys=daemon level=info msg=" --write-cni-conf-when-ready='/host/etc/cni/net.d/05-cilium.conflist'" subsys=daemon level=info msg=" _ _ _" subsys=daemon level=info msg=" ___|_| |_|_ _ _____" subsys=daemon level=info msg="| _| | | | | | |" subsys=daemon level=info msg="|___|_|_|_|___|_|_|_|" subsys=daemon level=info msg="Cilium 1.14.8 cf6e022e 2024-03-13T12:23:35-04:00 go version go1.21.8 linux/amd64" subsys=daemon level=info msg="clang (10.0.0) and kernel (5.15.0) versions: OK!" subsys=linux-datapath level=info msg="linking environment: OK!" subsys=linux-datapath level=info msg="Kernel config file not found: if the agent fails to start, check the system requirements at https://docs.cilium.io/en/stable/operations/system_requirements" subsys=probes level=info msg="Detected mounted BPF filesystem at /sys/fs/bpf" subsys=bpf level=info msg="Mounted cgroupv2 filesystem at /run/cilium/cgroupv2" subsys=cgroups level=info msg="Parsing base label prefixes from default label list" subsys=labels-filter level=info msg="Parsing additional label prefixes from user inputs: []" subsys=labels-filter level=info msg="Final label prefixes to be used for identity evaluation:" subsys=labels-filter level=info msg=" - reserved:.*" subsys=labels-filter level=info msg=" - :io\\.kubernetes\\.pod\\.namespace" subsys=labels-filter level=info msg=" - :io\\.cilium\\.k8s\\.namespace\\.labels" subsys=labels-filter level=info msg=" - :app\\.kubernetes\\.io" subsys=labels-filter level=info msg=" - !:io\\.kubernetes" subsys=labels-filter level=info msg=" - !:kubernetes\\.io" subsys=labels-filter level=info msg=" - !:.*beta\\.kubernetes\\.io" subsys=labels-filter level=info msg=" - !:k8s\\.io" subsys=labels-filter level=info msg=" - !:pod-template-generation" subsys=labels-filter level=info msg=" - !:pod-template-hash" subsys=labels-filter level=info msg=" - !:controller-revision-hash" subsys=labels-filter level=info msg=" - !:annotation.*" subsys=labels-filter level=info msg=" - !:etcd_node" subsys=labels-filter level=info msg=Invoked duration="780.287µs" function="pprof.glob..func1 (cell.go:50)" subsys=hive level=info msg=Invoked duration="57.952µs" function="gops.registerGopsHooks (cell.go:38)" subsys=hive level=info msg=Invoked duration="811.808µs" function="metrics.NewRegistry (registry.go:65)" subsys=hive level=info msg=Invoked duration="4µs" function="metrics.glob..func1 (cell.go:12)" subsys=hive level=info msg="Spire Delegate API Client is disabled as no socket path is configured" subsys=spire-delegate level=info msg="Mutual authentication handler is disabled as no port is configured" subsys=auth level=info msg=Invoked duration=101.090613ms function="cmd.glob..func4 (daemon_main.go:1607)" subsys=hive level=info msg=Invoked duration="12.101µs" function="gc.registerSignalHandler (cell.go:47)" subsys=hive level=info msg=Invoked duration="16.35µs" function="utime.initUtimeSync (cell.go:29)" subsys=hive level=info msg=Invoked duration="84.392µs" function="agentliveness.newAgentLivenessUpdater (agent_liveness.go:43)" subsys=hive level=info msg=Invoked duration="79.901µs" function="l2responder.NewL2ResponderReconciler (l2responder.go:63)" subsys=hive level=info msg=Invoked duration="91.842µs" function="garp.newGARPProcessor (processor.go:27)" subsys=hive level=info msg=Starting subsys=hive level=info msg="Started gops server" address="127.0.0.1:9890" subsys=gops level=info msg="Start hook executed" duration="407.429µs" function="gops.registerGopsHooks.func1 (cell.go:43)" subsys=hive level=info msg="Start hook executed" duration="1.91µs" function="metrics.NewRegistry.func1 (registry.go:86)" subsys=hive level=info msg="Establishing connection to apiserver" host="https://10.96.0.1:443" subsys=k8s-client level=info msg="Serving prometheus metrics on :9962" subsys=metrics level=info msg="Connected to apiserver" subsys=k8s-client level=info msg="Start hook executed" duration=9.798906ms function="client.(*compositeClientset).onStart" subsys=hive level=info msg="Start hook executed" duration=9.633802ms function="authmap.newAuthMap.func1 (cell.go:27)" subsys=hive level=info msg="Start hook executed" duration="29.26µs" function="configmap.newMap.func1 (cell.go:23)" subsys=hive level=info msg="Start hook executed" duration="28.65µs" function="signalmap.newMap.func1 (cell.go:44)" subsys=hive level=info msg="Start hook executed" duration="227.115µs" function="nodemap.newNodeMap.func1 (cell.go:23)" subsys=hive level=info msg="Start hook executed" duration="91.732µs" function="eventsmap.newEventsMap.func1 (cell.go:35)" subsys=hive level=info msg="Start hook executed" duration="56.991µs" function="*cni.cniConfigManager.Start" subsys=hive level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Wrote CNI configuration file to /host/etc/cni/net.d/05-cilium.conflist" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Start hook executed" duration=50.992721ms function="datapath.newDatapath.func1 (cells.go:113)" subsys=hive level=info msg="Restored 0 node IDs from the BPF map" subsys=linux-datapath level=info msg="Start hook executed" duration="149.813µs" function="datapath.newDatapath.func2 (cells.go:126)" subsys=hive level=info msg="Start hook executed" duration="17.08µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Node].Start" subsys=hive level=info msg="Start hook executed" duration="2.74µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumNode].Start" subsys=hive level=info msg="Using autogenerated IPv4 allocation range" subsys=node v4Prefix=10.25.0.0/16 level=info msg="no local ciliumnode found, will not restore cilium internal ips from k8s" subsys=daemon level=info msg="Start hook executed" duration=103.505875ms function="node.NewLocalNodeStore.func1 (local_node_store.go:76)" subsys=hive level=info msg="Start hook executed" duration="15.42µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Start" subsys=hive level=info msg="Start hook executed" duration=101.006082ms function="*manager.diffStore[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Start" subsys=hive level=info msg="Start hook executed" duration="3.43µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s.Endpoints].Start" subsys=hive level=info msg="Using discoveryv1.EndpointSlice" subsys=k8s level=info msg="Start hook executed" duration=100.777026ms function="*manager.diffStore[*github.com/cilium/cilium/pkg/k8s.Endpoints].Start" subsys=hive level=info msg="Start hook executed" duration="14.971µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Pod].Start" subsys=hive level=info msg="Start hook executed" duration="2.43µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Namespace].Start" subsys=hive level=info msg="Start hook executed" duration="2.11µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumNetworkPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="2.36µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumClusterwideNetworkPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="4.78µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumCIDRGroup].Start" subsys=hive level=info msg="Start hook executed" duration="37.321µs" function="endpointmanager.newDefaultEndpointManager.func1 (cell.go:203)" subsys=hive level=info msg="Start hook executed" duration="15.39µs" function="cmd.newPolicyTrifecta.func1 (policy.go:135)" subsys=hive level=info msg="Start hook executed" duration="58.711µs" function="*manager.manager.Start" subsys=hive level=info msg="Serving cilium node monitor v1.2 API at unix:///var/run/cilium/monitor1_2.sock" subsys=monitor-agent level=info msg="Start hook executed" duration="477.41µs" function="agent.newMonitorAgent.func1 (cell.go:61)" subsys=hive level=info msg="Start hook executed" duration="5.75µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumL2AnnouncementPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="23.55µs" function="*job.group.Start" subsys=hive level=info msg="Start hook executed" duration="252.865µs" function="proxy.newProxy.func1 (cell.go:55)" subsys=hive level=info msg="Envoy: Starting xDS gRPC server listening on /var/run/cilium/envoy/sockets/xds.sock" subsys=envoy-manager level=info msg="Start hook executed" duration="945.161µs" function="signal.provideSignalManager.func1 (cell.go:25)" subsys=hive level=info msg="Datapath signal listener running" subsys=signal level=info msg="Start hook executed" duration=1.463812ms function="auth.registerAuthManager.func1 (cell.go:109)" subsys=hive level=info msg="Start hook executed" duration="5.34µs" function="auth.registerGCJobs.func1 (cell.go:158)" subsys=hive level=info msg="Start hook executed" duration="21.85µs" function="*job.group.Start" subsys=hive level=warning msg="Deprecated value for --kube-proxy-replacement: disabled (use either \"true\", or \"false\")" subsys=daemon level=info msg="Auto-disabling \"enable-node-port\", \"enable-external-ips\", \"bpf-lb-sock\", \"enable-host-port\" features and falling back to \"enable-host-legacy-routing\"" subsys=daemon level=info msg="Inheriting MTU from external network interface" device=ens3 ipAddr=199.204.45.25 mtu=1500 subsys=mtu level=info msg="Removed map pin at /sys/fs/bpf/tc/globals/cilium_ipcache, recreating and re-pinning map cilium_ipcache" file-path=/sys/fs/bpf/tc/globals/cilium_ipcache name=cilium_ipcache subsys=bpf level=info msg="Removed map pin at /sys/fs/bpf/tc/globals/cilium_tunnel_map, recreating and re-pinning map cilium_tunnel_map" file-path=/sys/fs/bpf/tc/globals/cilium_tunnel_map name=cilium_tunnel_map subsys=bpf level=info msg="Restored services from maps" failedServices=0 restoredServices=0 subsys=service level=info msg="Restored backends from maps" failedBackends=0 restoredBackends=0 skippedBackends=0 subsys=service level=info msg="Reading old endpoints..." subsys=daemon level=info msg="No old endpoints found." subsys=daemon level=info msg="Waiting until all Cilium CRDs are available" subsys=k8s level=info msg="All Cilium CRDs have been found and are available" subsys=k8s level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=warning msg="Unable to get node resource" error="ciliumnodes.cilium.io \"instance\" not found" subsys=nodediscovery level=warning msg="Unable to get node resource" error="ciliumnodes.cilium.io \"instance\" not found" subsys=nodediscovery level=info msg="Successfully created CiliumNode resource" subsys=nodediscovery level=warning msg="Unable to create CiliumNode resource, will retry" error="ciliumnodes.cilium.io \"instance\" already exists" subsys=nodediscovery level=info msg="Retrieved node information from cilium node" nodeName=instance subsys=k8s level=warning msg="Waiting for k8s node information" error="required IPv4 PodCIDR not available" subsys=k8s level=info msg="Retrieved node information from cilium node" nodeName=instance subsys=k8s level=info msg="Received own node information from API server" ipAddr.ipv4=199.204.45.25 ipAddr.ipv6="" k8sNodeIP=199.204.45.25 labels="map[beta.kubernetes.io/arch:amd64 beta.kubernetes.io/os:linux kubernetes.io/arch:amd64 kubernetes.io/hostname:instance kubernetes.io/os:linux node-role.kubernetes.io/control-plane: node.kubernetes.io/exclude-from-external-load-balancers:]" nodeName=instance subsys=k8s v4Prefix=10.0.0.0/24 v6Prefix="" level=info msg="k8s mode: Allowing localhost to reach local endpoints" subsys=daemon level=info msg="Detected devices" devices="[]" subsys=linux-datapath level=info msg="Enabling k8s event listener" subsys=k8s-watcher level=info msg="Removing stale endpoint interfaces" subsys=daemon level=info msg="Waiting until local node addressing before starting watchers depending on it" subsys=k8s-watcher level=info msg="Skipping kvstore configuration" subsys=daemon level=info msg="Initializing node addressing" subsys=daemon level=info msg="Initializing cluster-pool IPAM" subsys=ipam v4Prefix=10.0.0.0/24 v6Prefix="" level=info msg="Restoring endpoints..." subsys=daemon level=info msg="Endpoints restored" failed=0 restored=0 subsys=daemon level=info msg="Addressing information:" subsys=daemon level=info msg=" Cluster-Name: default" subsys=daemon level=info msg=" Cluster-ID: 0" subsys=daemon level=info msg=" Local node-name: instance" subsys=daemon level=info msg=" Node-IPv6: " subsys=daemon level=info msg=" External-Node IPv4: 199.204.45.25" subsys=daemon level=info msg=" Internal-Node IPv4: 10.0.0.137" subsys=daemon level=info msg=" IPv4 allocation prefix: 10.0.0.0/24" subsys=daemon level=info msg=" Loopback IPv4: 169.254.42.1" subsys=daemon level=info msg=" Local IPv4 addresses:" subsys=daemon level=info msg=" - 199.204.45.25" subsys=daemon level=info msg=" - 172.17.0.100" subsys=daemon level=info msg=" - 10.96.240.200" subsys=daemon level=info msg="Node updated" clusterName=default nodeName=instance subsys=nodemanager level=info msg="Adding local node to cluster" node="{instance default [{InternalIP 199.204.45.25} {CiliumInternalIP 10.0.0.137}] 10.0.0.0/24 [] [] 10.0.0.179 0 local 0 map[beta.kubernetes.io/arch:amd64 beta.kubernetes.io/os:linux kubernetes.io/arch:amd64 kubernetes.io/hostname:instance kubernetes.io/os:linux node-role.kubernetes.io/control-plane: node.kubernetes.io/exclude-from-external-load-balancers:] map[] 1 }" subsys=nodediscovery level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Waiting until all pre-existing resources have been received" subsys=k8s-watcher level=info msg="Initializing identity allocator" subsys=identity-cache level=info msg="Allocating identities between range" cluster-id=0 max=65535 min=256 subsys=identity-cache level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.forwarding sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.accept_local sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.send_redirects sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.forwarding sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.accept_local sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.send_redirects sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.core.bpf_jit_enable sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.all.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.fib_multipath_use_neigh sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=kernel.unprivileged_bpf_disabled sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=kernel.timer_migration sysParamValue=0 level=info msg="Setting up BPF datapath" bpfClockSource=ktime bpfInsnSet="" subsys=datapath-loader level=info msg="Iptables rules installed" subsys=iptables level=info msg="Adding new proxy port rules for cilium-dns-egress:34471" id=cilium-dns-egress subsys=proxy level=info msg="Iptables proxy rules installed" subsys=iptables level=info msg="Start hook executed" duration=2.979696999s function="cmd.newDaemonPromise.func1 (daemon_main.go:1663)" subsys=hive level=info msg="Starting IP identity watcher" subsys=ipcache level=info msg="Start hook executed" duration="16.11µs" function="utime.initUtimeSync.func1 (cell.go:33)" subsys=hive level=info msg="Initializing daemon" subsys=daemon level=info msg="Start hook executed" duration="26.851µs" function="*job.group.Start" subsys=hive level=info msg="Validating configured node address ranges" subsys=daemon level=info msg="Start hook executed" duration="60.411µs" function="l2respondermap.newMap.func1 (l2_responder_map4.go:44)" subsys=hive level=info msg="Start hook executed" duration="3.85µs" function="*job.group.Start" subsys=hive level=info msg="Starting connection tracking garbage collector" subsys=daemon level=info msg="Initial scan of connection tracking completed" subsys=ct-gc level=info msg="Regenerating restored endpoints" numRestored=0 subsys=daemon level=info msg="Creating host endpoint" subsys=daemon level=info msg="Finished regenerating restored endpoints" regenerated=0 subsys=daemon total=0 level=info msg="Deleted orphan backends" orphanBackends=0 subsys=service level=info msg="New endpoint" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1619 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1619 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Identity of endpoint changed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1619 identity=1 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,reserved:host" ipv4= ipv6= k8sPodName=/ oldIdentity="no identity" subsys=endpoint level=info msg="Launching Cilium health daemon" subsys=daemon level=info msg="Launching Cilium health endpoint" subsys=daemon level=info msg="Started healthz status API server" address="127.0.0.1:9879" subsys=daemon level=info msg="Processing queued endpoint deletion requests from /var/run/cilium/deleteQueue" subsys=daemon level=info msg="processing 0 queued deletion requests" subsys=daemon level=info msg="Initializing Cilium API" subsys=daemon level=info msg="Daemon initialization completed" bootstrapTime=3.945777891s subsys=daemon level=info msg="Hubble server is disabled" subsys=hubble level=info msg="Serving cilium API at unix:///var/run/cilium/cilium.sock" subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.75 605d9f57-933b-420b-8a7f-ff8cc9c536f2 default }" containerID=294b121b0c0c1abaddd302de4278ed6a6e5e47d1b20fdd32feee942b94024d7a datapathConfiguration="&{false false false false false }" interface=lxc426819377d05 k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-7kwcs labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=294b121b0c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=6 ipv4=10.0.0.75 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-7kwcs subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=294b121b0c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=6 identityLabels="k8s:app=certgen,k8s:batch.kubernetes.io/controller-uid=174fa739-c885-47a1-be95-3dd0a3042cf4,k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen,k8s:controller-uid=174fa739-c885-47a1-be95-3dd0a3042cf4,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen,k8s:io.kubernetes.pod.namespace=envoy-gateway-system,k8s:job-name=envoy-gateway-gateway-helm-certgen" ipv4=10.0.0.75 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-7kwcs subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name:envoy-gateway-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=certgen;k8s:batch.kubernetes.io/controller-uid=174fa739-c885-47a1-be95-3dd0a3042cf4;k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen;k8s:controller-uid=174fa739-c885-47a1-be95-3dd0a3042cf4;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system;k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen;k8s:io.kubernetes.pod.namespace=envoy-gateway-system;k8s:job-name=envoy-gateway-gateway-helm-certgen;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=294b121b0c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=6 identity=10511 identityLabels="k8s:app=certgen,k8s:batch.kubernetes.io/controller-uid=174fa739-c885-47a1-be95-3dd0a3042cf4,k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen,k8s:controller-uid=174fa739-c885-47a1-be95-3dd0a3042cf4,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen,k8s:io.kubernetes.pod.namespace=envoy-gateway-system,k8s:job-name=envoy-gateway-gateway-helm-certgen" ipv4=10.0.0.75 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-7kwcs oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=294b121b0c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=6 identity=10511 ipv4=10.0.0.75 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-7kwcs subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.163 04039025-7253-4375-8427-1e42ce631ccf default }" containerID=a4a6f05b7b550c1d5c65eaf094260b993ea2724fe422acde411e17d383edefc3 datapathConfiguration="&{false false false false false }" interface=lxcbc80cb2af297 k8sPodName=kube-system/coredns-7c96b6546b-dnhbj labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a4a6f05b7b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1942 ipv4=10.0.0.163 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-dnhbj subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a4a6f05b7b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1942 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.163 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-dnhbj subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:kube-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=coredns;k8s:io.kubernetes.pod.namespace=kube-system;k8s:k8s-app=kube-dns;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a4a6f05b7b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1942 identity=13118 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.163 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-dnhbj oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a4a6f05b7b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1942 identity=13118 ipv4=10.0.0.163 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-dnhbj subsys=endpoint level=info msg="Compiled new BPF template" BPFCompilationTime=321.04056ms file-path=/var/run/cilium/state/templates/e922b259d7e255e84981aed4669fddd5c3eff08452212bbada94e47aba75f0a0/bpf_host.o subsys=datapath-loader level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1619 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="New endpoint" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=347 ipv4=10.0.0.179 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=347 identityLabels="reserved:health" ipv4=10.0.0.179 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Identity of endpoint changed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=347 identity=4 identityLabels="reserved:health" ipv4=10.0.0.179 ipv6= k8sPodName=/ oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Compiled new BPF template" BPFCompilationTime=1.098711478s file-path=/var/run/cilium/state/templates/f332330cb1820f621313be692770bb37837b951dcb6be6617d9482c642f77cbc/bpf_lxc.o subsys=datapath-loader level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=347 identity=4 ipv4=10.0.0.179 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=294b121b0c datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=6 identity=10511 ipv4=10.0.0.75 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-7kwcs subsys=endpoint level=info msg="Successful endpoint creation" containerID=294b121b0c datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=6 identity=10511 ipv4=10.0.0.75 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-7kwcs subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=a4a6f05b7b datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1942 identity=13118 ipv4=10.0.0.163 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-dnhbj subsys=endpoint level=info msg="Successful endpoint creation" containerID=a4a6f05b7b datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1942 identity=13118 ipv4=10.0.0.163 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-dnhbj subsys=daemon level=info msg="Serving cilium health API at unix:///var/run/cilium/health.sock" subsys=health-server level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=294b121b0c endpointID=6 k8sNamespace=envoy-gateway-system k8sPodName=envoy-gateway-gateway-helm-certgen-7kwcs subsys=daemon level=info msg="Releasing key" key="[k8s:app=certgen k8s:batch.kubernetes.io/controller-uid=174fa739-c885-47a1-be95-3dd0a3042cf4 k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen k8s:controller-uid=174fa739-c885-47a1-be95-3dd0a3042cf4 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen k8s:io.kubernetes.pod.namespace=envoy-gateway-system k8s:job-name=envoy-gateway-gateway-helm-certgen]" subsys=allocator level=info msg="Removed endpoint" containerID=294b121b0c datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=6 identity=10511 ipv4=10.0.0.75 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-7kwcs subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.139 f37c7a38-5e68-425f-8a97-8d30c91b8c07 default }" containerID=63b8a79e159077be14d801b0e00a238f384804a7f28fa2d6ebc1925b4cb542c4 datapathConfiguration="&{false false false false false }" interface=lxc79ea21cc495d k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-qhcn6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=63b8a79e15 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1481 ipv4=10.0.0.139 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-qhcn6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=63b8a79e15 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1481 identityLabels="k8s:app.kubernetes.io/instance=envoy-gateway,k8s:app.kubernetes.io/name=gateway-helm,k8s:control-plane=envoy-gateway,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway,k8s:io.kubernetes.pod.namespace=envoy-gateway-system" ipv4=10.0.0.139 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-qhcn6 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name:envoy-gateway-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=envoy-gateway;k8s:app.kubernetes.io/name=gateway-helm;k8s:control-plane=envoy-gateway;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system;k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway;k8s:io.kubernetes.pod.namespace=envoy-gateway-system;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=63b8a79e15 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1481 identity=21678 identityLabels="k8s:app.kubernetes.io/instance=envoy-gateway,k8s:app.kubernetes.io/name=gateway-helm,k8s:control-plane=envoy-gateway,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway,k8s:io.kubernetes.pod.namespace=envoy-gateway-system" ipv4=10.0.0.139 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-qhcn6 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=63b8a79e15 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1481 identity=21678 ipv4=10.0.0.139 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-qhcn6 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=63b8a79e15 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1481 identity=21678 ipv4=10.0.0.139 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-qhcn6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=63b8a79e15 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1481 identity=21678 ipv4=10.0.0.139 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-qhcn6 subsys=daemon level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1619 identity=1 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,k8s:openstack-compute-node=enabled,k8s:openstack-control-plane=enabled,k8s:openvswitch=enabled,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_hostns_01619 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_hostns_01619 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_hostns_01619 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_hostns_01619:pending" subsys=bpf level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_netdev_00005 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_netdev_00005 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005:pending" subsys=bpf level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1619 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.192 463878a5-d4dc-475c-b610-0af7b425b801 default }" containerID=bd9e0257ca6496cf894d849ac7e6c8491a0e17712e168cc7df17af7eb5f0e301 datapathConfiguration="&{false false false false false }" interface=lxc2330da883efb k8sPodName=kube-system/coredns-67659f764b-zs4lp labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=bd9e0257ca datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=52 ipv4=10.0.0.192 ipv6= k8sPodName=kube-system/coredns-67659f764b-zs4lp subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=bd9e0257ca datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=52 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.192 ipv6= k8sPodName=kube-system/coredns-67659f764b-zs4lp subsys=endpoint level=info msg="Identity of endpoint changed" containerID=bd9e0257ca datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=52 identity=13118 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.192 ipv6= k8sPodName=kube-system/coredns-67659f764b-zs4lp oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=bd9e0257ca datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=52 identity=13118 ipv4=10.0.0.192 ipv6= k8sPodName=kube-system/coredns-67659f764b-zs4lp subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=bd9e0257ca datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=52 identity=13118 ipv4=10.0.0.192 ipv6= k8sPodName=kube-system/coredns-67659f764b-zs4lp subsys=endpoint level=info msg="Successful endpoint creation" containerID=bd9e0257ca datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=52 identity=13118 ipv4=10.0.0.192 ipv6= k8sPodName=kube-system/coredns-67659f764b-zs4lp subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.142 cb22cce9-16a1-4f9f-a77a-2d89b0ebb264 default }" containerID=79b0a657cbe3d5c0c64768e2a38cdad16977318f580f03c2632a34d438ce1d86 datapathConfiguration="&{false false false false false }" interface=lxcd505c5d04b5b k8sPodName=kube-system/coredns-67659f764b-48k4g labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=79b0a657cb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2245 ipv4=10.0.0.142 ipv6= k8sPodName=kube-system/coredns-67659f764b-48k4g subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=79b0a657cb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2245 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.142 ipv6= k8sPodName=kube-system/coredns-67659f764b-48k4g subsys=endpoint level=info msg="Identity of endpoint changed" containerID=79b0a657cb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2245 identity=13118 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.142 ipv6= k8sPodName=kube-system/coredns-67659f764b-48k4g oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=79b0a657cb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2245 identity=13118 ipv4=10.0.0.142 ipv6= k8sPodName=kube-system/coredns-67659f764b-48k4g subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=79b0a657cb datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2245 identity=13118 ipv4=10.0.0.142 ipv6= k8sPodName=kube-system/coredns-67659f764b-48k4g subsys=endpoint level=info msg="Successful endpoint creation" containerID=79b0a657cb datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2245 identity=13118 ipv4=10.0.0.142 ipv6= k8sPodName=kube-system/coredns-67659f764b-48k4g subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.231 67e335dd-93e9-4aff-a759-934dddca6418 default }" containerID=00ba848a3edcb4f3612cbebc107f2695d1dd557cb9e4d980bdd2b7476d743937 datapathConfiguration="&{false false false false false }" interface=lxc927c6a211ea6 k8sPodName=local-path-storage/local-path-provisioner-679c578f5-stmqp labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=00ba848a3e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1356 ipv4=10.0.0.231 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-stmqp subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=00ba848a3e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1356 identityLabels="k8s:app.kubernetes.io/instance=local-path-provisioner,k8s:app.kubernetes.io/name=local-path-provisioner,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.231 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-stmqp subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:local-path-storage k8s:io.cilium.k8s.namespace.labels.name:local-path-storage]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=local-path-provisioner;k8s:app.kubernetes.io/name=local-path-provisioner;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=00ba848a3e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1356 identity=4558 identityLabels="k8s:app.kubernetes.io/instance=local-path-provisioner,k8s:app.kubernetes.io/name=local-path-provisioner,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.231 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-stmqp oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=00ba848a3e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1356 identity=4558 ipv4=10.0.0.231 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-stmqp subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=00ba848a3e datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1356 identity=4558 ipv4=10.0.0.231 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-stmqp subsys=endpoint level=info msg="Successful endpoint creation" containerID=00ba848a3e datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1356 identity=4558 ipv4=10.0.0.231 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-stmqp subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=a4a6f05b7b endpointID=1942 k8sNamespace=kube-system k8sPodName=coredns-7c96b6546b-dnhbj subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=coredns k8s:io.kubernetes.pod.namespace=kube-system k8s:k8s-app=kube-dns]" subsys=allocator level=info msg="Removed endpoint" containerID=a4a6f05b7b datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1942 identity=13118 ipv4=10.0.0.163 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-dnhbj subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.31 cb977bdb-a4df-414d-9a07-84ca42655ee7 default }" containerID=621f0c818ae03f1a12f19392a724f9c3ef309ec4a4e9a867cf5ed1cc9adae9b9 datapathConfiguration="&{false false false false false }" interface=lxc47caa20b2a1f k8sPodName=cert-manager/cert-manager-75c4c745bc-gcrtl labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=621f0c818a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=496 ipv4=10.0.0.31 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-gcrtl subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=621f0c818a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=496 identityLabels="k8s:app.kubernetes.io/component=controller,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cert-manager,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cert-manager,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.31 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-gcrtl subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app=cert-manager;k8s:app.kubernetes.io/component=controller;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=cert-manager;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=621f0c818a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=496 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.31 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-gcrtl line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=621f0c818a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=496 identity=50090 identityLabels="k8s:app.kubernetes.io/component=controller,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cert-manager,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cert-manager,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.31 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-gcrtl oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=621f0c818a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=496 identity=50090 ipv4=10.0.0.31 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-gcrtl subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.228 7533544f-7e22-4994-be2f-87371d40f478 default }" containerID=8aa0e453c0a84f31f11f15f5739818005f58f754b4fae108091ae6ada20f2e70 datapathConfiguration="&{false false false false false }" interface=lxcbcaa47f3bdcb k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-g2szx labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8aa0e453c0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3535 ipv4=10.0.0.228 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-g2szx subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8aa0e453c0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3535 identityLabels="k8s:app.kubernetes.io/component=cainjector,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cainjector,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cainjector,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.228 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-g2szx subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=cainjector;k8s:app.kubernetes.io/component=cainjector;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=cainjector;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8aa0e453c0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3535 identity=63200 identityLabels="k8s:app.kubernetes.io/component=cainjector,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cainjector,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cainjector,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.228 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-g2szx oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8aa0e453c0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3535 identity=63200 ipv4=10.0.0.228 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-g2szx subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=621f0c818a datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=496 identity=50090 ipv4=10.0.0.31 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-gcrtl subsys=endpoint level=info msg="Successful endpoint creation" containerID=621f0c818a datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=496 identity=50090 ipv4=10.0.0.31 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-gcrtl subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.130 25a330d4-8667-4df9-9c37-0b30c0f7f448 default }" containerID=331b8681087e3a022357b31742bcb1adc9293461fbd882882e8c14ada82e2a42 datapathConfiguration="&{false false false false false }" interface=lxc9dbe8503e8a3 k8sPodName=cert-manager/cert-manager-webhook-548949fc64-kqk8d labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=331b868108 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1792 ipv4=10.0.0.130 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-kqk8d subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=331b868108 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1792 identityLabels="k8s:app.kubernetes.io/component=webhook,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=webhook,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=webhook,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.130 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-kqk8d subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=webhook;k8s:app.kubernetes.io/component=webhook;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=webhook;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=331b868108 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1792 identity=3381 identityLabels="k8s:app.kubernetes.io/component=webhook,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=webhook,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=webhook,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.130 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-kqk8d oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=331b868108 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1792 identity=3381 ipv4=10.0.0.130 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-kqk8d subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=8aa0e453c0 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3535 identity=63200 ipv4=10.0.0.228 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-g2szx subsys=endpoint level=info msg="Successful endpoint creation" containerID=8aa0e453c0 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3535 identity=63200 ipv4=10.0.0.228 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-g2szx subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=331b868108 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1792 identity=3381 ipv4=10.0.0.130 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-kqk8d subsys=endpoint level=info msg="Successful endpoint creation" containerID=331b868108 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1792 identity=3381 ipv4=10.0.0.130 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-kqk8d subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.225 8aa66be1-1c86-4b28-a37a-4c492d14383f default }" containerID=161b5b0fdaa464272901e90bff5f56359e5b89b7cecc04987adc6721853b739d datapathConfiguration="&{false false false false false }" interface=lxc8c31550424ed k8sPodName=cert-manager/cert-manager-startupapicheck-7sxvw labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=161b5b0fda datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=309 ipv4=10.0.0.225 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-7sxvw subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=161b5b0fda datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=309 identityLabels="k8s:app.kubernetes.io/component=startupapicheck,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=startupapicheck,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=startupapicheck,k8s:batch.kubernetes.io/controller-uid=208401e0-8952-4843-9f0d-83cd91fdd528,k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck,k8s:controller-uid=208401e0-8952-4843-9f0d-83cd91fdd528,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck,k8s:io.kubernetes.pod.namespace=cert-manager,k8s:job-name=cert-manager-startupapicheck" ipv4=10.0.0.225 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-7sxvw subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=startupapicheck;k8s:app.kubernetes.io/component=startupapicheck;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=startupapicheck;k8s:app.kubernetes.io/version=v1.11.5;k8s:batch.kubernetes.io/controller-uid=208401e0-8952-4843-9f0d-83cd91fdd528;k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck;k8s:controller-uid=208401e0-8952-4843-9f0d-83cd91fdd528;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck;k8s:io.kubernetes.pod.namespace=cert-manager;k8s:job-name=cert-manager-startupapicheck;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=161b5b0fda datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=309 identity=4574 identityLabels="k8s:app.kubernetes.io/component=startupapicheck,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=startupapicheck,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=startupapicheck,k8s:batch.kubernetes.io/controller-uid=208401e0-8952-4843-9f0d-83cd91fdd528,k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck,k8s:controller-uid=208401e0-8952-4843-9f0d-83cd91fdd528,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck,k8s:io.kubernetes.pod.namespace=cert-manager,k8s:job-name=cert-manager-startupapicheck" ipv4=10.0.0.225 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-7sxvw oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=161b5b0fda datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=309 identity=4574 ipv4=10.0.0.225 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-7sxvw subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=161b5b0fda datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=309 identity=4574 ipv4=10.0.0.225 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-7sxvw subsys=endpoint level=info msg="Successful endpoint creation" containerID=161b5b0fda datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=309 identity=4574 ipv4=10.0.0.225 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-7sxvw subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=161b5b0fda endpointID=309 k8sNamespace=cert-manager k8sPodName=cert-manager-startupapicheck-7sxvw subsys=daemon level=info msg="Releasing key" key="[k8s:app=startupapicheck k8s:app.kubernetes.io/component=startupapicheck k8s:app.kubernetes.io/instance=cert-manager k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=startupapicheck k8s:app.kubernetes.io/version=v1.11.5 k8s:batch.kubernetes.io/controller-uid=208401e0-8952-4843-9f0d-83cd91fdd528 k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck k8s:controller-uid=208401e0-8952-4843-9f0d-83cd91fdd528 k8s:helm.sh/chart=cert-manager-v1.11.5 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager k8s:io.cilium.k8s.namespace.labels.name=cert-manager k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck k8s:io.kubernetes.pod.namespace=cert-manager k8s:job-name=cert-manager-startupapicheck]" subsys=allocator level=info msg="Removed endpoint" containerID=161b5b0fda datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=309 identity=4574 ipv4=10.0.0.225 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-7sxvw subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.108 14fd898f-ba6b-4fb5-8d32-49041d02eb95 default }" containerID=60aa86eba6340c4166229cd84047542ebbee8e4dbd355bece05342d8dd5537da datapathConfiguration="&{false false false false false }" interface=lxc3eab41717225 k8sPodName=ingress-nginx/ingress-nginx-admission-create-p9w8w labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=60aa86eba6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=937 ipv4=10.0.0.108 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-p9w8w subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=60aa86eba6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=937 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=e5fd64bc-bf0d-4ec4-b4a2-2df11fb7db52,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create,k8s:controller-uid=e5fd64bc-bf0d-4ec4-b4a2-2df11fb7db52,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-create" ipv4=10.0.0.108 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-p9w8w subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=admission-webhook;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:batch.kubernetes.io/controller-uid=e5fd64bc-bf0d-4ec4-b4a2-2df11fb7db52;k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create;k8s:controller-uid=e5fd64bc-bf0d-4ec4-b4a2-2df11fb7db52;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission;k8s:io.kubernetes.pod.namespace=ingress-nginx;k8s:job-name=ingress-nginx-admission-create;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=60aa86eba6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=937 identity=26591 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=e5fd64bc-bf0d-4ec4-b4a2-2df11fb7db52,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create,k8s:controller-uid=e5fd64bc-bf0d-4ec4-b4a2-2df11fb7db52,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-create" ipv4=10.0.0.108 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-p9w8w oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=60aa86eba6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=937 identity=26591 ipv4=10.0.0.108 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-p9w8w subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=60aa86eba6 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=937 identity=26591 ipv4=10.0.0.108 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-p9w8w subsys=endpoint level=info msg="Successful endpoint creation" containerID=60aa86eba6 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=937 identity=26591 ipv4=10.0.0.108 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-p9w8w subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=60aa86eba6 endpointID=937 k8sNamespace=ingress-nginx k8sPodName=ingress-nginx-admission-create-p9w8w subsys=daemon level=info msg="Releasing key" key="[k8s:app.kubernetes.io/component=admission-webhook k8s:app.kubernetes.io/instance=ingress-nginx k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=ingress-nginx k8s:app.kubernetes.io/part-of=ingress-nginx k8s:app.kubernetes.io/version=1.12.1 k8s:batch.kubernetes.io/controller-uid=e5fd64bc-bf0d-4ec4-b4a2-2df11fb7db52 k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create k8s:controller-uid=e5fd64bc-bf0d-4ec4-b4a2-2df11fb7db52 k8s:helm.sh/chart=ingress-nginx-4.12.1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission k8s:io.kubernetes.pod.namespace=ingress-nginx k8s:job-name=ingress-nginx-admission-create]" subsys=allocator level=info msg="Removed endpoint" containerID=60aa86eba6 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=937 identity=26591 ipv4=10.0.0.108 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-p9w8w subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.24 2633d220-7b8b-4866-b804-d3429ee8e30d default }" containerID=7b44f82ea478c291a458f2c27bdba58be0e2228344b9f4b8c9d58319000a7cb4 datapathConfiguration="&{false false false false false }" interface=lxc0b1167ba374f k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-l256p labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7b44f82ea4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1688 ipv4=10.0.0.24 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-l256p subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7b44f82ea4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1688 identityLabels="k8s:app.kubernetes.io/component=default-backend,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend,k8s:io.kubernetes.pod.namespace=ingress-nginx" ipv4=10.0.0.24 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-l256p subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=default-backend;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend;k8s:io.kubernetes.pod.namespace=ingress-nginx;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7b44f82ea4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1688 identity=58734 identityLabels="k8s:app.kubernetes.io/component=default-backend,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend,k8s:io.kubernetes.pod.namespace=ingress-nginx" ipv4=10.0.0.24 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-l256p oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=7b44f82ea4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1688 identity=58734 ipv4=10.0.0.24 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-l256p subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=7b44f82ea4 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1688 identity=58734 ipv4=10.0.0.24 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-l256p subsys=endpoint level=info msg="Successful endpoint creation" containerID=7b44f82ea4 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1688 identity=58734 ipv4=10.0.0.24 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-l256p subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.138 5a0fd9cc-dcef-41ca-9750-d14df405d91a default }" containerID=e6d07b677c19006a38b3b4bc17b4882853df64e306b664d374332def599642fe datapathConfiguration="&{false false false false false }" interface=lxc137b95f0f649 k8sPodName=ingress-nginx/ingress-nginx-admission-patch-62g4m labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e6d07b677c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2781 ipv4=10.0.0.138 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-62g4m subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e6d07b677c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2781 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=f8b101fb-fe92-4e30-be00-96b568ddec0e,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch,k8s:controller-uid=f8b101fb-fe92-4e30-be00-96b568ddec0e,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-patch" ipv4=10.0.0.138 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-62g4m subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=admission-webhook;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:batch.kubernetes.io/controller-uid=f8b101fb-fe92-4e30-be00-96b568ddec0e;k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch;k8s:controller-uid=f8b101fb-fe92-4e30-be00-96b568ddec0e;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission;k8s:io.kubernetes.pod.namespace=ingress-nginx;k8s:job-name=ingress-nginx-admission-patch;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e6d07b677c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2781 identity=29503 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=f8b101fb-fe92-4e30-be00-96b568ddec0e,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch,k8s:controller-uid=f8b101fb-fe92-4e30-be00-96b568ddec0e,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-patch" ipv4=10.0.0.138 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-62g4m oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e6d07b677c datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2781 identity=29503 ipv4=10.0.0.138 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-62g4m subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e6d07b677c datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2781 identity=29503 ipv4=10.0.0.138 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-62g4m subsys=endpoint level=info msg="Successful endpoint creation" containerID=e6d07b677c datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2781 identity=29503 ipv4=10.0.0.138 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-62g4m subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=e6d07b677c endpointID=2781 k8sNamespace=ingress-nginx k8sPodName=ingress-nginx-admission-patch-62g4m subsys=daemon level=info msg="Releasing key" key="[k8s:app.kubernetes.io/component=admission-webhook k8s:app.kubernetes.io/instance=ingress-nginx k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=ingress-nginx k8s:app.kubernetes.io/part-of=ingress-nginx k8s:app.kubernetes.io/version=1.12.1 k8s:batch.kubernetes.io/controller-uid=f8b101fb-fe92-4e30-be00-96b568ddec0e k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch k8s:controller-uid=f8b101fb-fe92-4e30-be00-96b568ddec0e k8s:helm.sh/chart=ingress-nginx-4.12.1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission k8s:io.kubernetes.pod.namespace=ingress-nginx k8s:job-name=ingress-nginx-admission-patch]" subsys=allocator level=info msg="Removed endpoint" containerID=e6d07b677c datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2781 identity=29503 ipv4=10.0.0.138 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-62g4m subsys=endpoint level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"rabbitmq-operator\",\"k8s:app.kubernetes.io/instance\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/name\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/part-of\":\"rabbitmq\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=rabbitmq-cluster-operator k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=683d7d5e-db5b-467a-91e6-615c60cc9be2] Description:}]" policyAddRequest=7b13c35b-470a-4bf9-87eb-be48a4de6e29 subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=7b13c35b-470a-4bf9-87eb-be48a4de6e29 policyRevision=2 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=rabbitmq-cluster-operator subsys=k8s-watcher level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"messaging-topology-operator\",\"k8s:app.kubernetes.io/instance\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/name\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/part-of\":\"rabbitmq\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:9443 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=rabbitmq-messaging-topology-operator k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=996fe27e-4f2f-4cd3-8d75-0e568bcc584f] Description:}]" policyAddRequest=fc7a5604-e8f1-416d-a466-82efc742b342 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=rabbitmq-messaging-topology-operator subsys=k8s-watcher level=info msg="Policy imported via API, recalculating..." policyAddRequest=fc7a5604-e8f1-416d-a466-82efc742b342 policyRevision=3 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.25 97ddc817-da9a-460f-b5bc-e2ee52521a8d default }" containerID=cce5be8c13e86d2c36a55adfa7cb3e7eb0af1f14bed93908fe5f412ec08b0249 datapathConfiguration="&{false false false false false }" interface=lxc8c0ff311cf6c k8sPodName=openstack/rabbitmq-cluster-operator-67fdb85b4f-dzqjf labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=cce5be8c13 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2586 ipv4=10.0.0.25 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-67fdb85b4f-dzqjf subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=cce5be8c13 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2586 identityLabels="k8s:app.kubernetes.io/component=rabbitmq-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=2.8.0,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.2.4,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.25 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-67fdb85b4f-dzqjf subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq-operator;k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=rabbitmq-cluster-operator;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:app.kubernetes.io/version=2.8.0;k8s:helm.sh/chart=rabbitmq-cluster-operator-4.2.4;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=cce5be8c13 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2586 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.25 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-67fdb85b4f-dzqjf line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=cce5be8c13 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2586 identity=2062 identityLabels="k8s:app.kubernetes.io/component=rabbitmq-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=2.8.0,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.2.4,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.25 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-67fdb85b4f-dzqjf oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=cce5be8c13 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2586 identity=2062 ipv4=10.0.0.25 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-67fdb85b4f-dzqjf subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=cce5be8c13 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=2586 identity=2062 ipv4=10.0.0.25 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-67fdb85b4f-dzqjf subsys=endpoint level=info msg="Successful endpoint creation" containerID=cce5be8c13 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=2586 identity=2062 ipv4=10.0.0.25 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-67fdb85b4f-dzqjf subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.194 fbc6980f-8a67-4709-adf1-39caa528cd76 default }" containerID=31b3dbd1c954656e09e4fa5af3d8e67baa832cfe58642e3281f039709afc9ccc datapathConfiguration="&{false false false false false }" interface=lxc6d6c03ae5444 k8sPodName=openstack/rabbitmq-messaging-topology-operator-5c9876cc97-pqx5t labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=31b3dbd1c9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1431 ipv4=10.0.0.194 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-5c9876cc97-pqx5t subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=31b3dbd1c9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1431 identityLabels="k8s:app.kubernetes.io/component=messaging-topology-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=1.13.0,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.2.4,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.194 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-5c9876cc97-pqx5t subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=messaging-topology-operator;k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=rabbitmq-cluster-operator;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:app.kubernetes.io/version=1.13.0;k8s:helm.sh/chart=rabbitmq-cluster-operator-4.2.4;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=31b3dbd1c9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1431 identity=16088 identityLabels="k8s:app.kubernetes.io/component=messaging-topology-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=1.13.0,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.2.4,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.194 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-5c9876cc97-pqx5t oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=31b3dbd1c9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1431 identity=16088 ipv4=10.0.0.194 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-5c9876cc97-pqx5t subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=31b3dbd1c9 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=1431 identity=16088 ipv4=10.0.0.194 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-5c9876cc97-pqx5t subsys=endpoint level=info msg="Successful endpoint creation" containerID=31b3dbd1c9 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=1431 identity=16088 ipv4=10.0.0.194 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-5c9876cc97-pqx5t subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.32 8866a6e4-3474-45c3-8731-0a3df97730a7 default }" containerID=f4bcf5b789221a6bdc37909d5672ad888ff7c1fcdb7735956974b676f5b64d93 datapathConfiguration="&{false false false false false }" interface=lxc686659deebf7 k8sPodName=openstack/pxc-operator-7cff949c8b-rds27 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f4bcf5b789 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3331 ipv4=10.0.0.32 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-rds27 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f4bcf5b789 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3331 identityLabels="k8s:app.kubernetes.io/component=operator,k8s:app.kubernetes.io/instance=pxc-operator,k8s:app.kubernetes.io/name=pxc-operator,k8s:app.kubernetes.io/part-of=pxc-operator,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.32 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-rds27 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=operator;k8s:app.kubernetes.io/instance=pxc-operator;k8s:app.kubernetes.io/name=pxc-operator;k8s:app.kubernetes.io/part-of=pxc-operator;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f4bcf5b789 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3331 identity=1934 identityLabels="k8s:app.kubernetes.io/component=operator,k8s:app.kubernetes.io/instance=pxc-operator,k8s:app.kubernetes.io/name=pxc-operator,k8s:app.kubernetes.io/part-of=pxc-operator,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.32 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-rds27 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f4bcf5b789 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3331 identity=1934 ipv4=10.0.0.32 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-rds27 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f4bcf5b789 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=3331 identity=1934 ipv4=10.0.0.32 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-rds27 subsys=endpoint level=info msg="Successful endpoint creation" containerID=f4bcf5b789 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=3331 identity=1934 ipv4=10.0.0.32 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-rds27 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.65 707decd6-2414-466e-a0e6-82c1734061c0 default }" containerID=e8230d0125bd69b195375a7a32632419e2bbd84bd792f8798301307908b3a111 datapathConfiguration="&{false false false false false }" interface=lxccc337a11a31c k8sPodName=openstack/percona-xtradb-haproxy-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e8230d0125 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1417 ipv4=10.0.0.65 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e8230d0125 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1417 identityLabels="k8s:app.kubernetes.io/component=haproxy,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0" ipv4=10.0.0.65 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=haproxy;k8s:app.kubernetes.io/instance=percona-xtradb;k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator;k8s:app.kubernetes.io/name=percona-xtradb-cluster;k8s:app.kubernetes.io/part-of=percona-xtradb-cluster;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e8230d0125 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1417 identity=23947 identityLabels="k8s:app.kubernetes.io/component=haproxy,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0" ipv4=10.0.0.65 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e8230d0125 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1417 identity=23947 ipv4=10.0.0.65 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e8230d0125 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=1417 identity=23947 ipv4=10.0.0.65 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=e8230d0125 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=1417 identity=23947 ipv4=10.0.0.65 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.93 e74becfb-e1a3-46e2-a3df-62f8e71bdb7e default }" containerID=4474382bec227590b34a4b8b34603041407650334ac3652023a2b48a5ca7276b datapathConfiguration="&{false false false false false }" interface=lxc65851e6ea7a8 k8sPodName=local-path-storage/helper-pod-create-pvc-8ee7329b-5add-4b92-ba7a-4a2aa0f7e5d3 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4474382bec datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1703 ipv4=10.0.0.93 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-8ee7329b-5add-4b92-ba7a-4a2aa0f7e5d3 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4474382bec datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1703 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.93 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-8ee7329b-5add-4b92-ba7a-4a2aa0f7e5d3 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:local-path-storage k8s:io.cilium.k8s.namespace.labels.name:local-path-storage]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4474382bec datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1703 identity=31342 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.93 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-8ee7329b-5add-4b92-ba7a-4a2aa0f7e5d3 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4474382bec datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1703 identity=31342 ipv4=10.0.0.93 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-8ee7329b-5add-4b92-ba7a-4a2aa0f7e5d3 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=4474382bec datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=1703 identity=31342 ipv4=10.0.0.93 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-8ee7329b-5add-4b92-ba7a-4a2aa0f7e5d3 subsys=endpoint level=info msg="Successful endpoint creation" containerID=4474382bec datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=1703 identity=31342 ipv4=10.0.0.93 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-8ee7329b-5add-4b92-ba7a-4a2aa0f7e5d3 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=4474382bec endpointID=1703 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-8ee7329b-5add-4b92-ba7a-4a2aa0f7e5d3 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=4474382bec datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=1703 identity=31342 ipv4=10.0.0.93 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-8ee7329b-5add-4b92-ba7a-4a2aa0f7e5d3 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.149 981198ee-800f-4e88-bb8f-df36274bdde1 default }" containerID=d1ad6620fef57e78469e9aa6f3d0a4797d59c19f520a4da80c7a141a47d9d1b1 datapathConfiguration="&{false false false false false }" interface=lxca78ef53211e3 k8sPodName=openstack/percona-xtradb-pxc-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d1ad6620fe datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=511 ipv4=10.0.0.149 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d1ad6620fe datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=511 identityLabels="k8s:app.kubernetes.io/component=pxc,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0" ipv4=10.0.0.149 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=pxc;k8s:app.kubernetes.io/instance=percona-xtradb;k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator;k8s:app.kubernetes.io/name=percona-xtradb-cluster;k8s:app.kubernetes.io/part-of=percona-xtradb-cluster;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=d1ad6620fe datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=511 identity=2717 identityLabels="k8s:app.kubernetes.io/component=pxc,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0" ipv4=10.0.0.149 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d1ad6620fe datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=511 identity=2717 ipv4=10.0.0.149 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d1ad6620fe datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=511 identity=2717 ipv4=10.0.0.149 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=d1ad6620fe datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=511 identity=2717 ipv4=10.0.0.149 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"keycloak\",\"k8s:app.kubernetes.io/instance\":\"keycloak\",\"k8s:app.kubernetes.io/name\":\"keycloak\",\"k8s:io.kubernetes.pod.namespace\":\"auth-system\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:7800 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:} {Ports:[{Port:8080 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=keycloak k8s:io.cilium.k8s.policy.namespace=auth-system k8s:io.cilium.k8s.policy.uid=f79623c7-7734-4178-ba6f-f92a51935f5c] Description:}]" policyAddRequest=a108e32c-fa90-4350-9587-a3b14e0679a7 subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=a108e32c-fa90-4350-9587-a3b14e0679a7 policyRevision=4 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=keycloak subsys=k8s-watcher level=info msg="Create endpoint request" addressing="&{10.0.0.205 5e226506-60de-4949-a631-f6389349cc13 default }" containerID=8d8f0afec2964f1319c12d0a97de696d0065519578e937f204fb8e177c2a90f6 datapathConfiguration="&{false false false false false }" interface=lxc68aa95ad0c59 k8sPodName=auth-system/keycloak-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8d8f0afec2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1594 ipv4=10.0.0.205 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8d8f0afec2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1594 identityLabels="k8s:app.kubernetes.io/component=keycloak,k8s:app.kubernetes.io/instance=keycloak,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=keycloak,k8s:app.kubernetes.io/version=23.0.7,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=keycloak-20.0.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system,k8s:io.cilium.k8s.namespace.labels.name=auth-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keycloak,k8s:io.kubernetes.pod.namespace=auth-system,k8s:statefulset.kubernetes.io/pod-name=keycloak-0" ipv4=10.0.0.205 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:auth-system k8s:io.cilium.k8s.namespace.labels.name:auth-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=keycloak;k8s:app.kubernetes.io/instance=keycloak;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=keycloak;k8s:app.kubernetes.io/version=23.0.7;k8s:apps.kubernetes.io/pod-index=0;k8s:helm.sh/chart=keycloak-20.0.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system;k8s:io.cilium.k8s.namespace.labels.name=auth-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keycloak;k8s:io.kubernetes.pod.namespace=auth-system;k8s:statefulset.kubernetes.io/pod-name=keycloak-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8d8f0afec2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1594 identity=13048 identityLabels="k8s:app.kubernetes.io/component=keycloak,k8s:app.kubernetes.io/instance=keycloak,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=keycloak,k8s:app.kubernetes.io/version=23.0.7,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=keycloak-20.0.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system,k8s:io.cilium.k8s.namespace.labels.name=auth-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keycloak,k8s:io.kubernetes.pod.namespace=auth-system,k8s:statefulset.kubernetes.io/pod-name=keycloak-0" ipv4=10.0.0.205 ipv6= k8sPodName=auth-system/keycloak-0 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=8d8f0afec2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1594 identity=13048 ipv4=10.0.0.205 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=8d8f0afec2 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1594 identity=13048 ipv4=10.0.0.205 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=8d8f0afec2 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1594 identity=13048 ipv4=10.0.0.205 ipv6= k8sPodName=auth-system/keycloak-0 subsys=daemon level=info msg="Conntrack garbage collector interval recalculated" deleteRatio=0.009117102006032978 newInterval=7m30s subsys=map-ct level=info msg="Create endpoint request" addressing="&{10.0.0.8 8f28eb33-e350-4b7a-8b11-7dec598021a4 default }" containerID=acdfd589bc2dbb2dc34444119bccbd946a8d90ff1befb50785c331c9d1a263e8 datapathConfiguration="&{false false false false false }" interface=lxc46a81a3843e9 k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-jtzlz labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=acdfd589bc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3796 ipv4=10.0.0.8 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-jtzlz subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=acdfd589bc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3796 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=master" ipv4=10.0.0.8 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-jtzlz subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=master;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=acdfd589bc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3796 identity=54167 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=master" ipv4=10.0.0.8 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-jtzlz oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=acdfd589bc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3796 identity=54167 ipv4=10.0.0.8 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-jtzlz subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.232 aff46147-0005-48a6-a02e-2ee6f0af7b8a default }" containerID=73e4063f6a4d9388df9ebe391bc90fae2517c1500886533f4cf6fadf48d80b02 datapathConfiguration="&{false false false false false }" interface=lxcc4ddc1d222fd k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-nbfct labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=73e4063f6a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1890 ipv4=10.0.0.232 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-nbfct subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=73e4063f6a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1890 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=gc" ipv4=10.0.0.232 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-nbfct subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Create endpoint request" addressing="&{10.0.0.161 ca0c69a1-ff13-41e6-84e1-2a0047d956fc default }" containerID=af71c44c417c399cbee89867be74c821139a753f51b838bbefab750c3cc87ecb datapathConfiguration="&{false false false false false }" interface=lxc2864b8e05a3f k8sPodName=monitoring/node-feature-discovery-worker-6vfmg labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=af71c44c41 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=575 ipv4=10.0.0.161 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-6vfmg subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=af71c44c41 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=575 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=worker" ipv4=10.0.0.161 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-6vfmg subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=gc;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=73e4063f6a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1890 identity=8058 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=gc" ipv4=10.0.0.232 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-nbfct oldIdentity="no identity" subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Waiting for endpoint to be generated" containerID=73e4063f6a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1890 identity=8058 ipv4=10.0.0.232 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-nbfct subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=worker;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=af71c44c41 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=575 identity=33197 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=worker" ipv4=10.0.0.161 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-6vfmg oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=af71c44c41 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=575 identity=33197 ipv4=10.0.0.161 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-6vfmg subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=acdfd589bc datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=3796 identity=54167 ipv4=10.0.0.8 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-jtzlz subsys=endpoint level=info msg="Successful endpoint creation" containerID=acdfd589bc datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3796 identity=54167 ipv4=10.0.0.8 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-jtzlz subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=73e4063f6a datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1890 identity=8058 ipv4=10.0.0.232 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-nbfct subsys=endpoint level=info msg="Successful endpoint creation" containerID=73e4063f6a datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1890 identity=8058 ipv4=10.0.0.232 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-nbfct subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=af71c44c41 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=575 identity=33197 ipv4=10.0.0.161 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-6vfmg subsys=endpoint level=info msg="Successful endpoint creation" containerID=af71c44c41 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=575 identity=33197 ipv4=10.0.0.161 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-6vfmg subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.245 77f41521-9fa9-4685-a659-28261243a593 default }" containerID=6d90e08d394eb4c825856b9b8de912913a5e47552d96c5de742fa2e7d122b901 datapathConfiguration="&{false false false false false }" interface=lxc8b4453baf622 k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-btvv7 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6d90e08d39 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2937 ipv4=10.0.0.245 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-btvv7 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6d90e08d39 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2937 identityLabels="k8s:app=secretgen-controller,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa,k8s:io.kubernetes.pod.namespace=secretgen-controller" ipv4=10.0.0.245 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-btvv7 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:secretgen-controller]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=secretgen-controller;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa;k8s:io.kubernetes.pod.namespace=secretgen-controller;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6d90e08d39 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2937 identity=4013 identityLabels="k8s:app=secretgen-controller,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa,k8s:io.kubernetes.pod.namespace=secretgen-controller" ipv4=10.0.0.245 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-btvv7 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6d90e08d39 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2937 identity=4013 ipv4=10.0.0.245 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-btvv7 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=6d90e08d39 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2937 identity=4013 ipv4=10.0.0.245 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-btvv7 subsys=endpoint level=info msg="Successful endpoint creation" containerID=6d90e08d39 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2937 identity=4013 ipv4=10.0.0.245 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-btvv7 subsys=daemon level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1619 identity=1 identityLabels="k8s:feature.node.kubernetes.io/cpu-cpuid.ADX=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AESNI=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AVX2=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AVX=true,k8s:feature.node.kubernetes.io/cpu-cpuid.CLZERO=true,k8s:feature.node.kubernetes.io/cpu-cpuid.CMPXCHG8=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FMA3=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FXSR=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FXSROPT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.HYPERVISOR=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IA32_ARCH_CAP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IBPB=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IBRS=true,k8s:feature.node.kubernetes.io/cpu-cpuid.LAHF=true,k8s:feature.node.kubernetes.io/cpu-cpuid.MOVBE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.NRIPS=true,k8s:feature.node.kubernetes.io/cpu-cpuid.OSXSAVE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SHA=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SPEC_CTRL_SSBD=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SSE4A=true,k8s:feature.node.kubernetes.io/cpu-cpuid.STIBP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SVM=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SVMNP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SYSCALL=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SYSEE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.TOPEXT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.WBNOINVD=true,k8s:feature.node.kubernetes.io/cpu-cpuid.X87=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XGETBV1=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVEC=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVEOPT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVES=true,k8s:feature.node.kubernetes.io/cpu-hardware_multithreading=false,k8s:feature.node.kubernetes.io/cpu-model.family=23,k8s:feature.node.kubernetes.io/cpu-model.id=49,k8s:feature.node.kubernetes.io/cpu-model.vendor_id=AMD,k8s:feature.node.kubernetes.io/kernel-config.NO_HZ=true,k8s:feature.node.kubernetes.io/kernel-config.NO_HZ_IDLE=true,k8s:feature.node.kubernetes.io/kernel-version.full=5.15.0-176-generic,k8s:feature.node.kubernetes.io/kernel-version.major=5,k8s:feature.node.kubernetes.io/kernel-version.minor=15,k8s:feature.node.kubernetes.io/kernel-version.revision=0,k8s:feature.node.kubernetes.io/pci-0300_1af4.present=true,k8s:feature.node.kubernetes.io/system-os_release.ID=ubuntu,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID.major=22,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID.minor=04,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID=22.04,k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,k8s:openstack-compute-node=enabled,k8s:openstack-control-plane=enabled,k8s:openvswitch=enabled,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_hostns_01619 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_hostns_01619 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_hostns_01619 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_hostns_01619:pending" subsys=bpf level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_netdev_00005 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_netdev_00005 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005:pending" subsys=bpf level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1619 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.26 aa9455d6-2503-49da-8b8a-ed2514782be4 default }" containerID=f223135569d0fb4917d951594c5ab653bd9671d2d8706b788e02407f611d3283 datapathConfiguration="&{false false false false false }" interface=lxc4e61980426c7 k8sPodName=monitoring/kube-prometheus-stack-admission-create-29mjs labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f223135569 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3533 ipv4=10.0.0.26 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-29mjs subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f223135569 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3533 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=58.2.1,k8s:app=kube-prometheus-stack-admission-create,k8s:batch.kubernetes.io/controller-uid=fef29e42-3d56-4521-ad62-669793932ae7,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create,k8s:chart=kube-prometheus-stack-58.2.1,k8s:controller-uid=fef29e42-3d56-4521-ad62-669793932ae7,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-create,k8s:release=kube-prometheus-stack" ipv4=10.0.0.26 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-29mjs subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-admission-create;k8s:app.kubernetes.io/component=prometheus-operator-webhook;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=58.2.1;k8s:batch.kubernetes.io/controller-uid=fef29e42-3d56-4521-ad62-669793932ae7;k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create;k8s:chart=kube-prometheus-stack-58.2.1;k8s:controller-uid=fef29e42-3d56-4521-ad62-669793932ae7;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission;k8s:io.kubernetes.pod.namespace=monitoring;k8s:job-name=kube-prometheus-stack-admission-create;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f223135569 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3533 identity=58474 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=58.2.1,k8s:app=kube-prometheus-stack-admission-create,k8s:batch.kubernetes.io/controller-uid=fef29e42-3d56-4521-ad62-669793932ae7,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create,k8s:chart=kube-prometheus-stack-58.2.1,k8s:controller-uid=fef29e42-3d56-4521-ad62-669793932ae7,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-create,k8s:release=kube-prometheus-stack" ipv4=10.0.0.26 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-29mjs oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=f223135569 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3533 identity=58474 ipv4=10.0.0.26 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-29mjs subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f223135569 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=3533 identity=58474 ipv4=10.0.0.26 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-29mjs subsys=endpoint level=info msg="Successful endpoint creation" containerID=f223135569 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3533 identity=58474 ipv4=10.0.0.26 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-29mjs subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=f223135569 endpointID=3533 k8sNamespace=monitoring k8sPodName=kube-prometheus-stack-admission-create-29mjs subsys=daemon level=info msg="Releasing key" key="[k8s:app=kube-prometheus-stack-admission-create k8s:app.kubernetes.io/component=prometheus-operator-webhook k8s:app.kubernetes.io/instance=kube-prometheus-stack k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator k8s:app.kubernetes.io/part-of=kube-prometheus-stack k8s:app.kubernetes.io/version=58.2.1 k8s:batch.kubernetes.io/controller-uid=fef29e42-3d56-4521-ad62-669793932ae7 k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create k8s:chart=kube-prometheus-stack-58.2.1 k8s:controller-uid=fef29e42-3d56-4521-ad62-669793932ae7 k8s:heritage=Helm k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring k8s:io.cilium.k8s.namespace.labels.name=monitoring k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission k8s:io.kubernetes.pod.namespace=monitoring k8s:job-name=kube-prometheus-stack-admission-create k8s:release=kube-prometheus-stack]" subsys=allocator level=info msg="Removed endpoint" containerID=f223135569 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3533 identity=58474 ipv4=10.0.0.26 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-29mjs subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.117 9dcaa853-ec71-48f2-b5e0-5533c33833a0 default }" containerID=aa4b97819ae5acfa21cbe2d59a6e8eac197e06a7eeea726cadfea17fc4d3b2ab datapathConfiguration="&{false false false false false }" interface=lxc2fcfe800bd5a k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-c7bd54d7-9c5hw labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=aa4b97819a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1533 ipv4=10.0.0.117 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-c7bd54d7-9c5hw subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=aa4b97819a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1533 identityLabels="k8s:app.kubernetes.io/component=metrics,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-state-metrics,k8s:app.kubernetes.io/part-of=kube-state-metrics,k8s:app.kubernetes.io/version=2.12.0,k8s:helm.sh/chart=kube-state-metrics-5.18.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.117 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-c7bd54d7-9c5hw subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=aa4b97819a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1533 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.117 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-c7bd54d7-9c5hw line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=metrics;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-state-metrics;k8s:app.kubernetes.io/part-of=kube-state-metrics;k8s:app.kubernetes.io/version=2.12.0;k8s:helm.sh/chart=kube-state-metrics-5.18.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics;k8s:io.kubernetes.pod.namespace=monitoring;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=aa4b97819a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1533 identity=2574 identityLabels="k8s:app.kubernetes.io/component=metrics,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-state-metrics,k8s:app.kubernetes.io/part-of=kube-state-metrics,k8s:app.kubernetes.io/version=2.12.0,k8s:helm.sh/chart=kube-state-metrics-5.18.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.117 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-c7bd54d7-9c5hw oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=aa4b97819a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1533 identity=2574 ipv4=10.0.0.117 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-c7bd54d7-9c5hw subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.129 64ff838d-e718-4fa2-87ef-c8cfb5ce1190 default }" containerID=8138cb0dd9d2b23fe294bb9b3a0f65561c10ae986473c20e37313d9e8319459d datapathConfiguration="&{false false false false false }" interface=lxc6783a4257192 k8sPodName=monitoring/kube-prometheus-stack-operator-7d58f4b66c-swdh8 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8138cb0dd9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=269 ipv4=10.0.0.129 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-7d58f4b66c-swdh8 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8138cb0dd9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=269 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=58.2.1,k8s:app=kube-prometheus-stack-operator,k8s:chart=kube-prometheus-stack-58.2.1,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.129 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-7d58f4b66c-swdh8 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-operator;k8s:app.kubernetes.io/component=prometheus-operator;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=58.2.1;k8s:chart=kube-prometheus-stack-58.2.1;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator;k8s:io.kubernetes.pod.namespace=monitoring;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8138cb0dd9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=269 identity=62356 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=58.2.1,k8s:app=kube-prometheus-stack-operator,k8s:chart=kube-prometheus-stack-58.2.1,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.129 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-7d58f4b66c-swdh8 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8138cb0dd9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=269 identity=62356 ipv4=10.0.0.129 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-7d58f4b66c-swdh8 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.67 fc506390-55c7-43b5-ab5d-1beef69c295b default }" containerID=d9bdc6c198a55b85a51fc0abedf9ab59ff6ec42bf106746bbaae22d51e3606fa datapathConfiguration="&{false false false false false }" interface=lxcd1d886e29597 k8sPodName=monitoring/kube-prometheus-stack-grafana-856d9f996f-vx4rg labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d9bdc6c198 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1109 ipv4=10.0.0.67 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-856d9f996f-vx4rg subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d9bdc6c198 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1109 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/name=grafana,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.67 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-856d9f996f-vx4rg subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/name=grafana;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d9bdc6c198 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1109 identity=30911 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/name=grafana,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.67 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-856d9f996f-vx4rg oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d9bdc6c198 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1109 identity=30911 ipv4=10.0.0.67 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-856d9f996f-vx4rg subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=aa4b97819a datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1533 identity=2574 ipv4=10.0.0.117 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-c7bd54d7-9c5hw subsys=endpoint level=info msg="Successful endpoint creation" containerID=aa4b97819a datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1533 identity=2574 ipv4=10.0.0.117 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-c7bd54d7-9c5hw subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=8138cb0dd9 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=269 identity=62356 ipv4=10.0.0.129 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-7d58f4b66c-swdh8 subsys=endpoint level=info msg="Successful endpoint creation" containerID=8138cb0dd9 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=269 identity=62356 ipv4=10.0.0.129 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-7d58f4b66c-swdh8 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=d9bdc6c198 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1109 identity=30911 ipv4=10.0.0.67 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-856d9f996f-vx4rg subsys=endpoint level=info msg="Successful endpoint creation" containerID=d9bdc6c198 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1109 identity=30911 ipv4=10.0.0.67 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-856d9f996f-vx4rg subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.101 88fcb6ad-82c5-438f-bcff-dce824c50b6b default }" containerID=fcd03e82ecb5eae8d9ec21ece9f8b34dc6cfb61ff746c7a18e6696b2f9546224 datapathConfiguration="&{false false false false false }" interface=lxc0fc0ace51d6a k8sPodName=monitoring/kube-prometheus-stack-admission-patch-thvl6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=fcd03e82ec datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1808 ipv4=10.0.0.101 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-thvl6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=fcd03e82ec datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1808 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=58.2.1,k8s:app=kube-prometheus-stack-admission-patch,k8s:batch.kubernetes.io/controller-uid=e679b1da-fc96-4099-a74d-6c30f5879771,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch,k8s:chart=kube-prometheus-stack-58.2.1,k8s:controller-uid=e679b1da-fc96-4099-a74d-6c30f5879771,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-patch,k8s:release=kube-prometheus-stack" ipv4=10.0.0.101 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-thvl6 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-admission-patch;k8s:app.kubernetes.io/component=prometheus-operator-webhook;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=58.2.1;k8s:batch.kubernetes.io/controller-uid=e679b1da-fc96-4099-a74d-6c30f5879771;k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch;k8s:chart=kube-prometheus-stack-58.2.1;k8s:controller-uid=e679b1da-fc96-4099-a74d-6c30f5879771;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission;k8s:io.kubernetes.pod.namespace=monitoring;k8s:job-name=kube-prometheus-stack-admission-patch;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=fcd03e82ec datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1808 identity=28683 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=58.2.1,k8s:app=kube-prometheus-stack-admission-patch,k8s:batch.kubernetes.io/controller-uid=e679b1da-fc96-4099-a74d-6c30f5879771,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch,k8s:chart=kube-prometheus-stack-58.2.1,k8s:controller-uid=e679b1da-fc96-4099-a74d-6c30f5879771,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-patch,k8s:release=kube-prometheus-stack" ipv4=10.0.0.101 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-thvl6 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=fcd03e82ec datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1808 identity=28683 ipv4=10.0.0.101 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-thvl6 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=fcd03e82ec datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1808 identity=28683 ipv4=10.0.0.101 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-thvl6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=fcd03e82ec datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1808 identity=28683 ipv4=10.0.0.101 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-thvl6 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.217 79a373a6-1db4-4189-878a-8061802d789c default }" containerID=8218d45ce2dfcd0b44d0e43b53bf0539715647623dd2eab59c510d38417ace59 datapathConfiguration="&{false false false false false }" interface=lxceacd1d500d1a k8sPodName=local-path-storage/helper-pod-create-pvc-6597e276-2942-4edf-a510-e89d925ce2dd labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8218d45ce2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=154 ipv4=10.0.0.217 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-6597e276-2942-4edf-a510-e89d925ce2dd subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8218d45ce2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=154 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.217 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-6597e276-2942-4edf-a510-e89d925ce2dd subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8218d45ce2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=154 identity=31342 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.217 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-6597e276-2942-4edf-a510-e89d925ce2dd oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8218d45ce2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=154 identity=31342 ipv4=10.0.0.217 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-6597e276-2942-4edf-a510-e89d925ce2dd subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=8218d45ce2 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=154 identity=31342 ipv4=10.0.0.217 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-6597e276-2942-4edf-a510-e89d925ce2dd subsys=endpoint level=info msg="Successful endpoint creation" containerID=8218d45ce2 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=154 identity=31342 ipv4=10.0.0.217 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-6597e276-2942-4edf-a510-e89d925ce2dd subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.99 88f1e57a-bf96-45f5-a5b5-b823fe3c15d7 default }" containerID=b01c0d5f81c824c30ee5d62eb601de2e06b39ca2a846e5f64e512c6076a117dd datapathConfiguration="&{false false false false false }" interface=lxc6106b47ef192 k8sPodName=local-path-storage/helper-pod-create-pvc-f02a8b0a-abdf-4d8c-9ecd-7bbfaeda76f2 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b01c0d5f81 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2193 ipv4=10.0.0.99 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f02a8b0a-abdf-4d8c-9ecd-7bbfaeda76f2 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b01c0d5f81 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2193 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.99 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f02a8b0a-abdf-4d8c-9ecd-7bbfaeda76f2 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=b01c0d5f81 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2193 identity=31342 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.99 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f02a8b0a-abdf-4d8c-9ecd-7bbfaeda76f2 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b01c0d5f81 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2193 identity=31342 ipv4=10.0.0.99 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f02a8b0a-abdf-4d8c-9ecd-7bbfaeda76f2 subsys=endpoint level=info msg="Delete endpoint request" containerID=fcd03e82ec endpointID=1808 k8sNamespace=monitoring k8sPodName=kube-prometheus-stack-admission-patch-thvl6 subsys=daemon level=info msg="Releasing key" key="[k8s:app=kube-prometheus-stack-admission-patch k8s:app.kubernetes.io/component=prometheus-operator-webhook k8s:app.kubernetes.io/instance=kube-prometheus-stack k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator k8s:app.kubernetes.io/part-of=kube-prometheus-stack k8s:app.kubernetes.io/version=58.2.1 k8s:batch.kubernetes.io/controller-uid=e679b1da-fc96-4099-a74d-6c30f5879771 k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch k8s:chart=kube-prometheus-stack-58.2.1 k8s:controller-uid=e679b1da-fc96-4099-a74d-6c30f5879771 k8s:heritage=Helm k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring k8s:io.cilium.k8s.namespace.labels.name=monitoring k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission k8s:io.kubernetes.pod.namespace=monitoring k8s:job-name=kube-prometheus-stack-admission-patch k8s:release=kube-prometheus-stack]" subsys=allocator level=info msg="Removed endpoint" containerID=fcd03e82ec datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1808 identity=28683 ipv4=10.0.0.101 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-thvl6 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b01c0d5f81 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2193 identity=31342 ipv4=10.0.0.99 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f02a8b0a-abdf-4d8c-9ecd-7bbfaeda76f2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=b01c0d5f81 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2193 identity=31342 ipv4=10.0.0.99 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f02a8b0a-abdf-4d8c-9ecd-7bbfaeda76f2 subsys=daemon level=info msg="Delete endpoint request" containerID=8218d45ce2 endpointID=154 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-6597e276-2942-4edf-a510-e89d925ce2dd subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=8218d45ce2 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=154 identity=31342 ipv4=10.0.0.217 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-6597e276-2942-4edf-a510-e89d925ce2dd subsys=endpoint level=info msg="Delete endpoint request" containerID=b01c0d5f81 endpointID=2193 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-f02a8b0a-abdf-4d8c-9ecd-7bbfaeda76f2 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=b01c0d5f81 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2193 identity=31342 ipv4=10.0.0.99 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f02a8b0a-abdf-4d8c-9ecd-7bbfaeda76f2 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.251 e4af0964-b33c-4d1c-b7ba-fd731ea20a8b default }" containerID=c2743aa197d51859db63c09bfb2392a97dbb0f73745db81363e19cbd6c995b5b datapathConfiguration="&{false false false false false }" interface=lxc165648a0cbd4 k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c2743aa197 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=476 ipv4=10.0.0.251 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c2743aa197 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=476 identityLabels="k8s:alertmanager=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=alertmanager,k8s:app.kubernetes.io/version=0.27.0,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0" ipv4=10.0.0.251 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:alertmanager=kube-prometheus-stack-alertmanager;k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager;k8s:app.kubernetes.io/managed-by=prometheus-operator;k8s:app.kubernetes.io/name=alertmanager;k8s:app.kubernetes.io/version=0.27.0;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager;k8s:io.kubernetes.pod.namespace=monitoring;k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c2743aa197 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=476 identity=2301 identityLabels="k8s:alertmanager=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=alertmanager,k8s:app.kubernetes.io/version=0.27.0,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0" ipv4=10.0.0.251 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c2743aa197 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=476 identity=2301 ipv4=10.0.0.251 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=c2743aa197 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=476 identity=2301 ipv4=10.0.0.251 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=c2743aa197 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=476 identity=2301 ipv4=10.0.0.251 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.131 8bb25e90-a6a2-490c-91dd-506ce585d453 default }" containerID=d42c10df194b32d195479b9ee5750e4a044ed18717228fc0ea3e6aef2bd0c491 datapathConfiguration="&{false false false false false }" interface=lxca74b400d87f1 k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d42c10df19 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1911 ipv4=10.0.0.131 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d42c10df19 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1911 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=prometheus,k8s:app.kubernetes.io/version=2.51.2,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus,k8s:io.kubernetes.pod.namespace=monitoring,k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus,k8s:operator.prometheus.io/shard=0,k8s:prometheus=kube-prometheus-stack-prometheus,k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0" ipv4=10.0.0.131 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus;k8s:app.kubernetes.io/managed-by=prometheus-operator;k8s:app.kubernetes.io/name=prometheus;k8s:app.kubernetes.io/version=2.51.2;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus;k8s:io.kubernetes.pod.namespace=monitoring;k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus;k8s:operator.prometheus.io/shard=0;k8s:prometheus=kube-prometheus-stack-prometheus;k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d42c10df19 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1911 identity=20235 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=prometheus,k8s:app.kubernetes.io/version=2.51.2,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus,k8s:io.kubernetes.pod.namespace=monitoring,k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus,k8s:operator.prometheus.io/shard=0,k8s:prometheus=kube-prometheus-stack-prometheus,k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0" ipv4=10.0.0.131 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d42c10df19 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1911 identity=20235 ipv4=10.0.0.131 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=d42c10df19 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1911 identity=20235 ipv4=10.0.0.131 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=d42c10df19 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1911 identity=20235 ipv4=10.0.0.131 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.140 ff8c9902-6ecb-43fc-b30d-8570d925da7d default }" containerID=f58dde60253467a955bfd9399d973b8eba2575ec44b6e980c5d12de3cb01c994 datapathConfiguration="&{false false false false false }" interface=lxce923a9d43ab0 k8sPodName=monitoring/loki-results-cache-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f58dde6025 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=319 ipv4=10.0.0.140 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.145 8ecfc140-7d40-4119-b63b-24dae756e422 default }" containerID=b823571e6e4ae9131a4e8edb9d71c03f226688f5d936d08108bdae54efc7a4d0 datapathConfiguration="&{false false false false false }" interface=lxc2273f16110cc k8sPodName=monitoring/loki-gateway-748b556d75-vfnqt labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b823571e6e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=692 ipv4=10.0.0.145 ipv6= k8sPodName=monitoring/loki-gateway-748b556d75-vfnqt subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f58dde6025 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=319 identityLabels="k8s:app.kubernetes.io/component=memcached-results-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-results-cache,k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0" ipv4=10.0.0.140 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Resolving identity labels (blocking)" containerID=b823571e6e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=692 identityLabels="k8s:app.kubernetes.io/component=gateway,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.145 ipv6= k8sPodName=monitoring/loki-gateway-748b556d75-vfnqt subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=memcached-results-cache;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:name=memcached-results-cache;k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f58dde6025 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=319 identity=41574 identityLabels="k8s:app.kubernetes.io/component=memcached-results-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-results-cache,k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0" ipv4=10.0.0.140 ipv6= k8sPodName=monitoring/loki-results-cache-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f58dde6025 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=319 identity=41574 ipv4=10.0.0.140 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=gateway;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b823571e6e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=692 identity=40056 identityLabels="k8s:app.kubernetes.io/component=gateway,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.145 ipv6= k8sPodName=monitoring/loki-gateway-748b556d75-vfnqt oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b823571e6e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=692 identity=40056 ipv4=10.0.0.145 ipv6= k8sPodName=monitoring/loki-gateway-748b556d75-vfnqt subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.6 feeae91d-1074-474e-be7e-067b66cdd6b0 default }" containerID=598b6924d86ee7b61ac529505ac0892553842184295edb042f243887dfd1a4d1 datapathConfiguration="&{false false false false false }" interface=lxcbbec9a8d61d2 k8sPodName=monitoring/loki-chunks-cache-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=598b6924d8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1523 ipv4=10.0.0.6 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=598b6924d8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1523 identityLabels="k8s:app.kubernetes.io/component=memcached-chunks-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-chunks-cache,k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0" ipv4=10.0.0.6 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=memcached-chunks-cache;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:name=memcached-chunks-cache;k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=598b6924d8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1523 identity=7045 identityLabels="k8s:app.kubernetes.io/component=memcached-chunks-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-chunks-cache,k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0" ipv4=10.0.0.6 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=598b6924d8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1523 identity=7045 ipv4=10.0.0.6 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f58dde6025 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=319 identity=41574 ipv4=10.0.0.140 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=f58dde6025 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=319 identity=41574 ipv4=10.0.0.140 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=b823571e6e datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=692 identity=40056 ipv4=10.0.0.145 ipv6= k8sPodName=monitoring/loki-gateway-748b556d75-vfnqt subsys=endpoint level=info msg="Successful endpoint creation" containerID=b823571e6e datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=692 identity=40056 ipv4=10.0.0.145 ipv6= k8sPodName=monitoring/loki-gateway-748b556d75-vfnqt subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=598b6924d8 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1523 identity=7045 ipv4=10.0.0.6 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=598b6924d8 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1523 identity=7045 ipv4=10.0.0.6 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.49 a389fbdc-1f07-4086-8d6f-1446eda5cafc default }" containerID=73c196f279865d4d8ae1fec7cd765ac7c741bfe73f9d6ec077f34d92bbadc0e7 datapathConfiguration="&{false false false false false }" interface=lxcf47426beb5c3 k8sPodName=local-path-storage/helper-pod-create-pvc-04182a2a-4755-482c-9cfb-35bc5cb29892 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=73c196f279 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1845 ipv4=10.0.0.49 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-04182a2a-4755-482c-9cfb-35bc5cb29892 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=73c196f279 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1845 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.49 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-04182a2a-4755-482c-9cfb-35bc5cb29892 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=73c196f279 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1845 identity=31342 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.49 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-04182a2a-4755-482c-9cfb-35bc5cb29892 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=73c196f279 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1845 identity=31342 ipv4=10.0.0.49 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-04182a2a-4755-482c-9cfb-35bc5cb29892 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=73c196f279 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1845 identity=31342 ipv4=10.0.0.49 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-04182a2a-4755-482c-9cfb-35bc5cb29892 subsys=endpoint level=info msg="Successful endpoint creation" containerID=73c196f279 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1845 identity=31342 ipv4=10.0.0.49 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-04182a2a-4755-482c-9cfb-35bc5cb29892 subsys=daemon level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.211 502155e2-6f8f-46ad-aedf-efd510dc9fff default }" containerID=ce45f8aa7a0cf412eb1809b3d4dfe7c8743f245abc9cff5ec8b672957ea226b7 datapathConfiguration="&{false false false false false }" interface=lxc04a15008c830 k8sPodName=monitoring/vector-zxzh6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ce45f8aa7a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1853 ipv4=10.0.0.211 ipv6= k8sPodName=monitoring/vector-zxzh6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ce45f8aa7a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1853 identityLabels="k8s:app.kubernetes.io/component=Agent,k8s:app.kubernetes.io/instance=vector,k8s:app.kubernetes.io/name=vector,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=vector,k8s:io.kubernetes.pod.namespace=monitoring,k8s:vector.dev/exclude=true" ipv4=10.0.0.211 ipv6= k8sPodName=monitoring/vector-zxzh6 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=Agent;k8s:app.kubernetes.io/instance=vector;k8s:app.kubernetes.io/name=vector;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=vector;k8s:io.kubernetes.pod.namespace=monitoring;k8s:vector.dev/exclude=true;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ce45f8aa7a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1853 identity=32541 identityLabels="k8s:app.kubernetes.io/component=Agent,k8s:app.kubernetes.io/instance=vector,k8s:app.kubernetes.io/name=vector,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=vector,k8s:io.kubernetes.pod.namespace=monitoring,k8s:vector.dev/exclude=true" ipv4=10.0.0.211 ipv6= k8sPodName=monitoring/vector-zxzh6 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ce45f8aa7a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1853 identity=32541 ipv4=10.0.0.211 ipv6= k8sPodName=monitoring/vector-zxzh6 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ce45f8aa7a datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1853 identity=32541 ipv4=10.0.0.211 ipv6= k8sPodName=monitoring/vector-zxzh6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=ce45f8aa7a datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1853 identity=32541 ipv4=10.0.0.211 ipv6= k8sPodName=monitoring/vector-zxzh6 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=73c196f279 endpointID=1845 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-04182a2a-4755-482c-9cfb-35bc5cb29892 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=73c196f279 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1845 identity=31342 ipv4=10.0.0.49 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-04182a2a-4755-482c-9cfb-35bc5cb29892 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.225 2bc3d655-7d89-416f-b052-3db3d0a2a5dd default }" containerID=14990d5ec1781c1dce99eaf4d9e30304c9aa9773ebe5e029402a1a5d9a2a4e5a datapathConfiguration="&{false false false false false }" interface=lxc81d98774df0f k8sPodName=monitoring/loki-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=14990d5ec1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3189 ipv4=10.0.0.225 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=14990d5ec1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3189 identityLabels="k8s:app.kubernetes.io/component=single-binary,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:app.kubernetes.io/part-of=memberlist,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=loki-0" ipv4=10.0.0.225 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=single-binary;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:app.kubernetes.io/part-of=memberlist;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:statefulset.kubernetes.io/pod-name=loki-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=14990d5ec1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3189 identity=5318 identityLabels="k8s:app.kubernetes.io/component=single-binary,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:app.kubernetes.io/part-of=memberlist,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=loki-0" ipv4=10.0.0.225 ipv6= k8sPodName=monitoring/loki-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=14990d5ec1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3189 identity=5318 ipv4=10.0.0.225 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=14990d5ec1 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=3189 identity=5318 ipv4=10.0.0.225 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=14990d5ec1 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3189 identity=5318 ipv4=10.0.0.225 ipv6= k8sPodName=monitoring/loki-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.196 e339cb57-11bc-45a9-b97c-bec77f7d7d56 default }" containerID=9808109f71b11a4e5840ebc29f8dc1a927006b1736e9a943c1cd1fe34198f401 datapathConfiguration="&{false false false false false }" interface=lxc3258f05a0483 k8sPodName=monitoring/prometheus-pushgateway-7c6f84b96c-tqsm8 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9808109f71 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1225 ipv4=10.0.0.196 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7c6f84b96c-tqsm8 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9808109f71 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1225 identityLabels="k8s:app.kubernetes.io/instance=prometheus-pushgateway,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=prometheus-pushgateway,k8s:app.kubernetes.io/version=v1.8.0,k8s:helm.sh/chart=prometheus-pushgateway-2.12.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.196 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7c6f84b96c-tqsm8 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=prometheus-pushgateway;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=prometheus-pushgateway;k8s:app.kubernetes.io/version=v1.8.0;k8s:helm.sh/chart=prometheus-pushgateway-2.12.0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9808109f71 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1225 identity=57529 identityLabels="k8s:app.kubernetes.io/instance=prometheus-pushgateway,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=prometheus-pushgateway,k8s:app.kubernetes.io/version=v1.8.0,k8s:helm.sh/chart=prometheus-pushgateway-2.12.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.196 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7c6f84b96c-tqsm8 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9808109f71 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1225 identity=57529 ipv4=10.0.0.196 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7c6f84b96c-tqsm8 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=9808109f71 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1225 identity=57529 ipv4=10.0.0.196 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7c6f84b96c-tqsm8 subsys=endpoint level=info msg="Successful endpoint creation" containerID=9808109f71 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1225 identity=57529 ipv4=10.0.0.196 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7c6f84b96c-tqsm8 subsys=daemon level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.64 d2e373b6-5f58-4b0f-9112-2c78390953cf default }" containerID=4aa12a73183f49743467b51c62d3508cc9d320102efc6f89877135439176ab95 datapathConfiguration="&{false false false false false }" interface=lxc2be92abb3bb0 k8sPodName=openstack/memcached-memcached-6479589586-xmfxf labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4aa12a7318 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1735 ipv4=10.0.0.64 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-xmfxf subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4aa12a7318 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1735 identityLabels="k8s:application=memcached,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=memcached" ipv4=10.0.0.64 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-xmfxf subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=memcached;k8s:component=server;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=memcached;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4aa12a7318 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1735 identity=31445 identityLabels="k8s:application=memcached,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=memcached" ipv4=10.0.0.64 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-xmfxf oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4aa12a7318 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1735 identity=31445 ipv4=10.0.0.64 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-xmfxf subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=4aa12a7318 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1735 identity=31445 ipv4=10.0.0.64 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-xmfxf subsys=endpoint level=info msg="Successful endpoint creation" containerID=4aa12a7318 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1735 identity=31445 ipv4=10.0.0.64 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-xmfxf subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.204 c4f6095b-f83e-4808-8bd4-6d53ffb385fb default }" containerID=ede59bd8682389d3831e32305dfcabeb4559888622723a085dfbe07bfcf691f5 datapathConfiguration="&{false false false false false }" interface=lxc363eba934ea2 k8sPodName=local-path-storage/helper-pod-create-pvc-c43fc80f-da61-4b40-a47b-f3c89692406a labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ede59bd868 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=294 ipv4=10.0.0.204 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-c43fc80f-da61-4b40-a47b-f3c89692406a subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ede59bd868 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=294 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.204 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-c43fc80f-da61-4b40-a47b-f3c89692406a subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ede59bd868 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=294 identity=31342 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.204 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-c43fc80f-da61-4b40-a47b-f3c89692406a oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ede59bd868 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=294 identity=31342 ipv4=10.0.0.204 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-c43fc80f-da61-4b40-a47b-f3c89692406a subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ede59bd868 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=294 identity=31342 ipv4=10.0.0.204 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-c43fc80f-da61-4b40-a47b-f3c89692406a subsys=endpoint level=info msg="Successful endpoint creation" containerID=ede59bd868 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=294 identity=31342 ipv4=10.0.0.204 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-c43fc80f-da61-4b40-a47b-f3c89692406a subsys=daemon level=info msg="Delete endpoint request" containerID=ede59bd868 endpointID=294 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-c43fc80f-da61-4b40-a47b-f3c89692406a subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=ede59bd868 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=294 identity=31342 ipv4=10.0.0.204 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-c43fc80f-da61-4b40-a47b-f3c89692406a subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.54 31245947-cab1-4afc-bcec-5821e6dc255a default }" containerID=e5561c025ec1316b0ea41e36f9597d87224675974d723c7a22b9e5454e06004a datapathConfiguration="&{false false false false false }" interface=lxc59497bf267b3 k8sPodName=openstack/rabbitmq-keystone-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e5561c025e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1438 ipv4=10.0.0.54 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e5561c025e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1438 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-keystone,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0" ipv4=10.0.0.54 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-keystone;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e5561c025e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1438 identity=13083 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-keystone,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0" ipv4=10.0.0.54 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=e5561c025e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1438 identity=13083 ipv4=10.0.0.54 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e5561c025e datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1438 identity=13083 ipv4=10.0.0.54 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=e5561c025e datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1438 identity=13083 ipv4=10.0.0.54 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.98 8cf57e48-f21d-4399-8b6c-04a7a3082e9e default }" containerID=dfb82c3587b2ebabced84b81d886304c0c7cfa232e9ef3aa7a0364d84cac85a7 datapathConfiguration="&{false false false false false }" interface=lxcba5ce27a053f k8sPodName=openstack/keystone-api-758b8fb886-9pzhg labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=dfb82c3587 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=23 ipv4=10.0.0.98 ipv6= k8sPodName=openstack/keystone-api-758b8fb886-9pzhg subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=dfb82c3587 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=23 identityLabels="k8s:application=keystone,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=keystone" ipv4=10.0.0.98 ipv6= k8sPodName=openstack/keystone-api-758b8fb886-9pzhg subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=dfb82c3587 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=23 identity=12549 identityLabels="k8s:application=keystone,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=keystone" ipv4=10.0.0.98 ipv6= k8sPodName=openstack/keystone-api-758b8fb886-9pzhg oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=dfb82c3587 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=23 identity=12549 ipv4=10.0.0.98 ipv6= k8sPodName=openstack/keystone-api-758b8fb886-9pzhg subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.23 6f20709b-757e-432e-a608-ac4b55f638c0 default }" containerID=752d4afacb6e2fb626a6760711325bd740597717de7b1b62dd35f39bb774cede datapathConfiguration="&{false false false false false }" interface=lxcbdaee8c47c84 k8sPodName=openstack/keystone-credential-setup-7bvx2 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=752d4afacb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=933 ipv4=10.0.0.23 ipv6= k8sPodName=openstack/keystone-credential-setup-7bvx2 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=752d4afacb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=933 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=5bd967ec-c414-4b68-b394-d31aca43446c,k8s:batch.kubernetes.io/job-name=keystone-credential-setup,k8s:component=credential-setup,k8s:controller-uid=5bd967ec-c414-4b68-b394-d31aca43446c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-credential-setup,k8s:release_group=keystone" ipv4=10.0.0.23 ipv6= k8sPodName=openstack/keystone-credential-setup-7bvx2 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=5bd967ec-c414-4b68-b394-d31aca43446c;k8s:batch.kubernetes.io/job-name=keystone-credential-setup;k8s:component=credential-setup;k8s:controller-uid=5bd967ec-c414-4b68-b394-d31aca43446c;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-credential-setup;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=752d4afacb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=933 identity=29552 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=5bd967ec-c414-4b68-b394-d31aca43446c,k8s:batch.kubernetes.io/job-name=keystone-credential-setup,k8s:component=credential-setup,k8s:controller-uid=5bd967ec-c414-4b68-b394-d31aca43446c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-credential-setup,k8s:release_group=keystone" ipv4=10.0.0.23 ipv6= k8sPodName=openstack/keystone-credential-setup-7bvx2 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=752d4afacb datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=933 identity=29552 ipv4=10.0.0.23 ipv6= k8sPodName=openstack/keystone-credential-setup-7bvx2 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=dfb82c3587 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=23 identity=12549 ipv4=10.0.0.98 ipv6= k8sPodName=openstack/keystone-api-758b8fb886-9pzhg subsys=endpoint level=info msg="Successful endpoint creation" containerID=dfb82c3587 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=23 identity=12549 ipv4=10.0.0.98 ipv6= k8sPodName=openstack/keystone-api-758b8fb886-9pzhg subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=752d4afacb datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=933 identity=29552 ipv4=10.0.0.23 ipv6= k8sPodName=openstack/keystone-credential-setup-7bvx2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=752d4afacb datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=933 identity=29552 ipv4=10.0.0.23 ipv6= k8sPodName=openstack/keystone-credential-setup-7bvx2 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=752d4afacb endpointID=933 k8sNamespace=openstack k8sPodName=keystone-credential-setup-7bvx2 subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=5bd967ec-c414-4b68-b394-d31aca43446c k8s:batch.kubernetes.io/job-name=keystone-credential-setup k8s:component=credential-setup k8s:controller-uid=5bd967ec-c414-4b68-b394-d31aca43446c k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-credential-setup k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=752d4afacb datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=933 identity=29552 ipv4=10.0.0.23 ipv6= k8sPodName=openstack/keystone-credential-setup-7bvx2 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.89 0f24252e-2b6b-4e37-aa2f-6f23f16fe7db default }" containerID=b30f75eb42dd901393fa914210119367913da07d423e0ae67b1f7ded9821e850 datapathConfiguration="&{false false false false false }" interface=lxcf12c72769956 k8sPodName=openstack/keystone-db-init-wtsf6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b30f75eb42 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=186 ipv4=10.0.0.89 ipv6= k8sPodName=openstack/keystone-db-init-wtsf6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b30f75eb42 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=186 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=d6f6b652-9d36-4b4d-aa5d-15fe4731e52b,k8s:batch.kubernetes.io/job-name=keystone-db-init,k8s:component=db-init,k8s:controller-uid=d6f6b652-9d36-4b4d-aa5d-15fe4731e52b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-init,k8s:release_group=keystone" ipv4=10.0.0.89 ipv6= k8sPodName=openstack/keystone-db-init-wtsf6 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=d6f6b652-9d36-4b4d-aa5d-15fe4731e52b;k8s:batch.kubernetes.io/job-name=keystone-db-init;k8s:component=db-init;k8s:controller-uid=d6f6b652-9d36-4b4d-aa5d-15fe4731e52b;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-db-init;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b30f75eb42 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=186 identity=6037 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=d6f6b652-9d36-4b4d-aa5d-15fe4731e52b,k8s:batch.kubernetes.io/job-name=keystone-db-init,k8s:component=db-init,k8s:controller-uid=d6f6b652-9d36-4b4d-aa5d-15fe4731e52b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-init,k8s:release_group=keystone" ipv4=10.0.0.89 ipv6= k8sPodName=openstack/keystone-db-init-wtsf6 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b30f75eb42 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=186 identity=6037 ipv4=10.0.0.89 ipv6= k8sPodName=openstack/keystone-db-init-wtsf6 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=b30f75eb42 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=186 identity=6037 ipv4=10.0.0.89 ipv6= k8sPodName=openstack/keystone-db-init-wtsf6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=b30f75eb42 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=186 identity=6037 ipv4=10.0.0.89 ipv6= k8sPodName=openstack/keystone-db-init-wtsf6 subsys=daemon level=info msg="Delete endpoint request" containerID=b30f75eb42 endpointID=186 k8sNamespace=openstack k8sPodName=keystone-db-init-wtsf6 subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=d6f6b652-9d36-4b4d-aa5d-15fe4731e52b k8s:batch.kubernetes.io/job-name=keystone-db-init k8s:component=db-init k8s:controller-uid=d6f6b652-9d36-4b4d-aa5d-15fe4731e52b k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-db-init k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=b30f75eb42 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=186 identity=6037 ipv4=10.0.0.89 ipv6= k8sPodName=openstack/keystone-db-init-wtsf6 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.214 775f2184-8b3d-4f94-b29d-70d2b04a572d default }" containerID=937d7fe16935aa32808c18c318a47a4b6e088850b5a1039a12d074b39058364c datapathConfiguration="&{false false false false false }" interface=lxc8d92c52ec867 k8sPodName=openstack/keystone-fernet-setup-gn7j9 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=937d7fe169 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2303 ipv4=10.0.0.214 ipv6= k8sPodName=openstack/keystone-fernet-setup-gn7j9 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=937d7fe169 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2303 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=b083002d-c6b0-4e8b-8aeb-3f6f8af4c150,k8s:batch.kubernetes.io/job-name=keystone-fernet-setup,k8s:component=fernet-setup,k8s:controller-uid=b083002d-c6b0-4e8b-8aeb-3f6f8af4c150,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-setup,k8s:release_group=keystone" ipv4=10.0.0.214 ipv6= k8sPodName=openstack/keystone-fernet-setup-gn7j9 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=937d7fe169 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2303 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.214 ipv6= k8sPodName=openstack/keystone-fernet-setup-gn7j9 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=b083002d-c6b0-4e8b-8aeb-3f6f8af4c150;k8s:batch.kubernetes.io/job-name=keystone-fernet-setup;k8s:component=fernet-setup;k8s:controller-uid=b083002d-c6b0-4e8b-8aeb-3f6f8af4c150;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-fernet-setup;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=937d7fe169 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2303 identity=9584 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=b083002d-c6b0-4e8b-8aeb-3f6f8af4c150,k8s:batch.kubernetes.io/job-name=keystone-fernet-setup,k8s:component=fernet-setup,k8s:controller-uid=b083002d-c6b0-4e8b-8aeb-3f6f8af4c150,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-setup,k8s:release_group=keystone" ipv4=10.0.0.214 ipv6= k8sPodName=openstack/keystone-fernet-setup-gn7j9 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=937d7fe169 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2303 identity=9584 ipv4=10.0.0.214 ipv6= k8sPodName=openstack/keystone-fernet-setup-gn7j9 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=937d7fe169 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2303 identity=9584 ipv4=10.0.0.214 ipv6= k8sPodName=openstack/keystone-fernet-setup-gn7j9 subsys=endpoint level=info msg="Successful endpoint creation" containerID=937d7fe169 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2303 identity=9584 ipv4=10.0.0.214 ipv6= k8sPodName=openstack/keystone-fernet-setup-gn7j9 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=937d7fe169 endpointID=2303 k8sNamespace=openstack k8sPodName=keystone-fernet-setup-gn7j9 subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=b083002d-c6b0-4e8b-8aeb-3f6f8af4c150 k8s:batch.kubernetes.io/job-name=keystone-fernet-setup k8s:component=fernet-setup k8s:controller-uid=b083002d-c6b0-4e8b-8aeb-3f6f8af4c150 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-fernet-setup k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=937d7fe169 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2303 identity=9584 ipv4=10.0.0.214 ipv6= k8sPodName=openstack/keystone-fernet-setup-gn7j9 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.160 8233c103-55a7-4b95-95ee-ac892ab2c510 default }" containerID=ed3316ccc3e22df55dc3b8e511932b11964b8bc79dcc701bb6c04302d79c682f datapathConfiguration="&{false false false false false }" interface=lxc90624509d14d k8sPodName=openstack/keystone-db-sync-xm7l5 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ed3316ccc3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1611 ipv4=10.0.0.160 ipv6= k8sPodName=openstack/keystone-db-sync-xm7l5 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ed3316ccc3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1611 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=02e52997-551f-4877-acd5-9186c0dcb1f2,k8s:batch.kubernetes.io/job-name=keystone-db-sync,k8s:component=db-sync,k8s:controller-uid=02e52997-551f-4877-acd5-9186c0dcb1f2,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-sync,k8s:release_group=keystone" ipv4=10.0.0.160 ipv6= k8sPodName=openstack/keystone-db-sync-xm7l5 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=02e52997-551f-4877-acd5-9186c0dcb1f2;k8s:batch.kubernetes.io/job-name=keystone-db-sync;k8s:component=db-sync;k8s:controller-uid=02e52997-551f-4877-acd5-9186c0dcb1f2;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-db-sync;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ed3316ccc3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1611 identity=57122 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=02e52997-551f-4877-acd5-9186c0dcb1f2,k8s:batch.kubernetes.io/job-name=keystone-db-sync,k8s:component=db-sync,k8s:controller-uid=02e52997-551f-4877-acd5-9186c0dcb1f2,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-sync,k8s:release_group=keystone" ipv4=10.0.0.160 ipv6= k8sPodName=openstack/keystone-db-sync-xm7l5 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ed3316ccc3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1611 identity=57122 ipv4=10.0.0.160 ipv6= k8sPodName=openstack/keystone-db-sync-xm7l5 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=ed3316ccc3 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1611 identity=57122 ipv4=10.0.0.160 ipv6= k8sPodName=openstack/keystone-db-sync-xm7l5 subsys=endpoint level=info msg="Successful endpoint creation" containerID=ed3316ccc3 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1611 identity=57122 ipv4=10.0.0.160 ipv6= k8sPodName=openstack/keystone-db-sync-xm7l5 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=ed3316ccc3 endpointID=1611 k8sNamespace=openstack k8sPodName=keystone-db-sync-xm7l5 subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=02e52997-551f-4877-acd5-9186c0dcb1f2 k8s:batch.kubernetes.io/job-name=keystone-db-sync k8s:component=db-sync k8s:controller-uid=02e52997-551f-4877-acd5-9186c0dcb1f2 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-db-sync k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=ed3316ccc3 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1611 identity=57122 ipv4=10.0.0.160 ipv6= k8sPodName=openstack/keystone-db-sync-xm7l5 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.252 982bd4a5-e65d-4832-854a-5c0d819005b0 default }" containerID=28a50b0480f5e42ca9ef941c71eec846e9e3fe03bb0be2312d288beedf464c3d datapathConfiguration="&{false false false false false }" interface=lxca8882fa3c6d3 k8sPodName=openstack/keystone-rabbit-init-gn6rj labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=28a50b0480 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=531 ipv4=10.0.0.252 ipv6= k8sPodName=openstack/keystone-rabbit-init-gn6rj subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=28a50b0480 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=531 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=2dfd5505-db80-4583-b1bf-24c3198b5867,k8s:batch.kubernetes.io/job-name=keystone-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=2dfd5505-db80-4583-b1bf-24c3198b5867,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-rabbit-init,k8s:release_group=keystone" ipv4=10.0.0.252 ipv6= k8sPodName=openstack/keystone-rabbit-init-gn6rj subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=28a50b0480 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=531 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.252 ipv6= k8sPodName=openstack/keystone-rabbit-init-gn6rj line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=2dfd5505-db80-4583-b1bf-24c3198b5867;k8s:batch.kubernetes.io/job-name=keystone-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=2dfd5505-db80-4583-b1bf-24c3198b5867;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-rabbit-init;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=28a50b0480 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=531 identity=4385 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=2dfd5505-db80-4583-b1bf-24c3198b5867,k8s:batch.kubernetes.io/job-name=keystone-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=2dfd5505-db80-4583-b1bf-24c3198b5867,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-rabbit-init,k8s:release_group=keystone" ipv4=10.0.0.252 ipv6= k8sPodName=openstack/keystone-rabbit-init-gn6rj oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=28a50b0480 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=531 identity=4385 ipv4=10.0.0.252 ipv6= k8sPodName=openstack/keystone-rabbit-init-gn6rj subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=28a50b0480 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=531 identity=4385 ipv4=10.0.0.252 ipv6= k8sPodName=openstack/keystone-rabbit-init-gn6rj subsys=endpoint level=info msg="Successful endpoint creation" containerID=28a50b0480 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=531 identity=4385 ipv4=10.0.0.252 ipv6= k8sPodName=openstack/keystone-rabbit-init-gn6rj subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=28a50b0480 endpointID=531 k8sNamespace=openstack k8sPodName=keystone-rabbit-init-gn6rj subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=2dfd5505-db80-4583-b1bf-24c3198b5867 k8s:batch.kubernetes.io/job-name=keystone-rabbit-init k8s:component=rabbit-init k8s:controller-uid=2dfd5505-db80-4583-b1bf-24c3198b5867 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-rabbit-init k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=28a50b0480 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=531 identity=4385 ipv4=10.0.0.252 ipv6= k8sPodName=openstack/keystone-rabbit-init-gn6rj subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.79 110d7d9b-0a9d-4a51-9aa6-1ee48ebdb138 default }" containerID=7ffa60dd7942a9024d2bdc6c4727076eb294d2c1fb0080a45d53f9399a61057f datapathConfiguration="&{false false false false false }" interface=lxcb674e37542e0 k8sPodName=openstack/keystone-domain-manage-h2dq7 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7ffa60dd79 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1834 ipv4=10.0.0.79 ipv6= k8sPodName=openstack/keystone-domain-manage-h2dq7 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7ffa60dd79 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1834 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=d021d3e7-2c4c-4de7-a722-9473273130b6,k8s:batch.kubernetes.io/job-name=keystone-domain-manage,k8s:component=domain-manage,k8s:controller-uid=d021d3e7-2c4c-4de7-a722-9473273130b6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-domain-manage,k8s:release_group=keystone" ipv4=10.0.0.79 ipv6= k8sPodName=openstack/keystone-domain-manage-h2dq7 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=d021d3e7-2c4c-4de7-a722-9473273130b6;k8s:batch.kubernetes.io/job-name=keystone-domain-manage;k8s:component=domain-manage;k8s:controller-uid=d021d3e7-2c4c-4de7-a722-9473273130b6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-domain-manage;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7ffa60dd79 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1834 identity=7485 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=d021d3e7-2c4c-4de7-a722-9473273130b6,k8s:batch.kubernetes.io/job-name=keystone-domain-manage,k8s:component=domain-manage,k8s:controller-uid=d021d3e7-2c4c-4de7-a722-9473273130b6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-domain-manage,k8s:release_group=keystone" ipv4=10.0.0.79 ipv6= k8sPodName=openstack/keystone-domain-manage-h2dq7 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7ffa60dd79 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1834 identity=7485 ipv4=10.0.0.79 ipv6= k8sPodName=openstack/keystone-domain-manage-h2dq7 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=7ffa60dd79 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1834 identity=7485 ipv4=10.0.0.79 ipv6= k8sPodName=openstack/keystone-domain-manage-h2dq7 subsys=endpoint level=info msg="Successful endpoint creation" containerID=7ffa60dd79 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1834 identity=7485 ipv4=10.0.0.79 ipv6= k8sPodName=openstack/keystone-domain-manage-h2dq7 subsys=daemon level=info msg="Delete endpoint request" containerID=7ffa60dd79 endpointID=1834 k8sNamespace=openstack k8sPodName=keystone-domain-manage-h2dq7 subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=d021d3e7-2c4c-4de7-a722-9473273130b6 k8s:batch.kubernetes.io/job-name=keystone-domain-manage k8s:component=domain-manage k8s:controller-uid=d021d3e7-2c4c-4de7-a722-9473273130b6 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-domain-manage k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=7ffa60dd79 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1834 identity=7485 ipv4=10.0.0.79 ipv6= k8sPodName=openstack/keystone-domain-manage-h2dq7 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.148 99d7e141-cb2e-49fa-9ca3-828c4086915c default }" containerID=e9fb21ef1ff52d1dd333ecf21aff56e8f8c7d51b7b0b39728df24b4d59ef9d9b datapathConfiguration="&{false false false false false }" interface=lxcc2dac18ff72e k8sPodName=openstack/keystone-bootstrap-dr96c labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e9fb21ef1f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1528 ipv4=10.0.0.148 ipv6= k8sPodName=openstack/keystone-bootstrap-dr96c subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e9fb21ef1f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1528 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=fe86c3d8-f201-428b-b25e-f0e3e5fcfc5f,k8s:batch.kubernetes.io/job-name=keystone-bootstrap,k8s:component=bootstrap,k8s:controller-uid=fe86c3d8-f201-428b-b25e-f0e3e5fcfc5f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-bootstrap,k8s:release_group=keystone" ipv4=10.0.0.148 ipv6= k8sPodName=openstack/keystone-bootstrap-dr96c subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=fe86c3d8-f201-428b-b25e-f0e3e5fcfc5f;k8s:batch.kubernetes.io/job-name=keystone-bootstrap;k8s:component=bootstrap;k8s:controller-uid=fe86c3d8-f201-428b-b25e-f0e3e5fcfc5f;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-bootstrap;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e9fb21ef1f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1528 identity=13982 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=fe86c3d8-f201-428b-b25e-f0e3e5fcfc5f,k8s:batch.kubernetes.io/job-name=keystone-bootstrap,k8s:component=bootstrap,k8s:controller-uid=fe86c3d8-f201-428b-b25e-f0e3e5fcfc5f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-bootstrap,k8s:release_group=keystone" ipv4=10.0.0.148 ipv6= k8sPodName=openstack/keystone-bootstrap-dr96c oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=e9fb21ef1f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1528 identity=13982 ipv4=10.0.0.148 ipv6= k8sPodName=openstack/keystone-bootstrap-dr96c subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e9fb21ef1f datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1528 identity=13982 ipv4=10.0.0.148 ipv6= k8sPodName=openstack/keystone-bootstrap-dr96c subsys=endpoint level=info msg="Successful endpoint creation" containerID=e9fb21ef1f datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1528 identity=13982 ipv4=10.0.0.148 ipv6= k8sPodName=openstack/keystone-bootstrap-dr96c subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=e9fb21ef1f endpointID=1528 k8sNamespace=openstack k8sPodName=keystone-bootstrap-dr96c subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=fe86c3d8-f201-428b-b25e-f0e3e5fcfc5f k8s:batch.kubernetes.io/job-name=keystone-bootstrap k8s:component=bootstrap k8s:controller-uid=fe86c3d8-f201-428b-b25e-f0e3e5fcfc5f k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-bootstrap k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=e9fb21ef1f datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1528 identity=13982 ipv4=10.0.0.148 ipv6= k8sPodName=openstack/keystone-bootstrap-dr96c subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.14 62c4a92e-c4a3-4595-855c-e2ff0c05b1dc default }" containerID=cf3565ddc77a8f835e503fafa35bab6d94db1bbef1d1d7ea90fa4a99ed093487 datapathConfiguration="&{false false false false false }" interface=lxcf9bf307f0923 k8sPodName=local-path-storage/helper-pod-create-pvc-d43ab5b1-c281-43fd-a9c8-83c3d505c3f2 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=cf3565ddc7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1775 ipv4=10.0.0.14 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-d43ab5b1-c281-43fd-a9c8-83c3d505c3f2 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=cf3565ddc7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1775 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.14 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-d43ab5b1-c281-43fd-a9c8-83c3d505c3f2 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=cf3565ddc7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1775 identity=31342 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.14 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-d43ab5b1-c281-43fd-a9c8-83c3d505c3f2 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=cf3565ddc7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1775 identity=31342 ipv4=10.0.0.14 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-d43ab5b1-c281-43fd-a9c8-83c3d505c3f2 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=cf3565ddc7 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1775 identity=31342 ipv4=10.0.0.14 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-d43ab5b1-c281-43fd-a9c8-83c3d505c3f2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=cf3565ddc7 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1775 identity=31342 ipv4=10.0.0.14 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-d43ab5b1-c281-43fd-a9c8-83c3d505c3f2 subsys=daemon level=info msg="Delete endpoint request" containerID=cf3565ddc7 endpointID=1775 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-d43ab5b1-c281-43fd-a9c8-83c3d505c3f2 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=cf3565ddc7 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1775 identity=31342 ipv4=10.0.0.14 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-d43ab5b1-c281-43fd-a9c8-83c3d505c3f2 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.105 8eca04c7-52c8-41ef-89a0-d4df0d892aaa default }" containerID=4580a6a327272dd0abafe9c4431c140b5da5f71f225087e24bef679d4e151516 datapathConfiguration="&{false false false false false }" interface=lxc0f2e30952cf7 k8sPodName=openstack/rabbitmq-barbican-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4580a6a327 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1779 ipv4=10.0.0.105 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4580a6a327 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1779 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-barbican,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0" ipv4=10.0.0.105 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-barbican;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4580a6a327 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1779 identity=5768 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-barbican,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0" ipv4=10.0.0.105 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=4580a6a327 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1779 identity=5768 ipv4=10.0.0.105 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=4580a6a327 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1779 identity=5768 ipv4=10.0.0.105 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=4580a6a327 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1779 identity=5768 ipv4=10.0.0.105 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Conntrack garbage collector interval recalculated" deleteRatio=0.034334546241562625 newInterval=11m15s subsys=map-ct level=info msg="Create endpoint request" addressing="&{10.0.0.38 d6e06763-e1a4-4cc1-a36c-409d75f115d7 default }" containerID=6dd4e4f7c2501fb6956c501038872ea639f2f6bf62a1e4245aaf13581b8f671c datapathConfiguration="&{false false false false false }" interface=lxc52d9f7a167ea k8sPodName=openstack/barbican-api-75486d849c-h5xqr labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6dd4e4f7c2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=772 ipv4=10.0.0.38 ipv6= k8sPodName=openstack/barbican-api-75486d849c-h5xqr subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6dd4e4f7c2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=772 identityLabels="k8s:application=barbican,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=barbican" ipv4=10.0.0.38 ipv6= k8sPodName=openstack/barbican-api-75486d849c-h5xqr subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=6dd4e4f7c2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=772 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.38 ipv6= k8sPodName=openstack/barbican-api-75486d849c-h5xqr line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6dd4e4f7c2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=772 identity=6111 identityLabels="k8s:application=barbican,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=barbican" ipv4=10.0.0.38 ipv6= k8sPodName=openstack/barbican-api-75486d849c-h5xqr oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6dd4e4f7c2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=772 identity=6111 ipv4=10.0.0.38 ipv6= k8sPodName=openstack/barbican-api-75486d849c-h5xqr subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=6dd4e4f7c2 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=772 identity=6111 ipv4=10.0.0.38 ipv6= k8sPodName=openstack/barbican-api-75486d849c-h5xqr subsys=endpoint level=info msg="Successful endpoint creation" containerID=6dd4e4f7c2 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=772 identity=6111 ipv4=10.0.0.38 ipv6= k8sPodName=openstack/barbican-api-75486d849c-h5xqr subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.220 e6f9b6a8-2ced-455c-a16a-43c10aa81872 default }" containerID=3872d31ee1f8b524afba80f4b93870e066d8a44752480cdc373ff6996413e787 datapathConfiguration="&{false false false false false }" interface=lxc189563ccea6d k8sPodName=openstack/barbican-db-init-6kk4z labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3872d31ee1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1406 ipv4=10.0.0.220 ipv6= k8sPodName=openstack/barbican-db-init-6kk4z subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3872d31ee1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1406 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=bcbd1417-6ee5-4a77-8009-695c519c5eb9,k8s:batch.kubernetes.io/job-name=barbican-db-init,k8s:component=db-init,k8s:controller-uid=bcbd1417-6ee5-4a77-8009-695c519c5eb9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-init,k8s:release_group=barbican" ipv4=10.0.0.220 ipv6= k8sPodName=openstack/barbican-db-init-6kk4z subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=bcbd1417-6ee5-4a77-8009-695c519c5eb9;k8s:batch.kubernetes.io/job-name=barbican-db-init;k8s:component=db-init;k8s:controller-uid=bcbd1417-6ee5-4a77-8009-695c519c5eb9;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-db-init;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3872d31ee1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1406 identity=16680 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=bcbd1417-6ee5-4a77-8009-695c519c5eb9,k8s:batch.kubernetes.io/job-name=barbican-db-init,k8s:component=db-init,k8s:controller-uid=bcbd1417-6ee5-4a77-8009-695c519c5eb9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-init,k8s:release_group=barbican" ipv4=10.0.0.220 ipv6= k8sPodName=openstack/barbican-db-init-6kk4z oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3872d31ee1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1406 identity=16680 ipv4=10.0.0.220 ipv6= k8sPodName=openstack/barbican-db-init-6kk4z subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=3872d31ee1 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1406 identity=16680 ipv4=10.0.0.220 ipv6= k8sPodName=openstack/barbican-db-init-6kk4z subsys=endpoint level=info msg="Successful endpoint creation" containerID=3872d31ee1 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1406 identity=16680 ipv4=10.0.0.220 ipv6= k8sPodName=openstack/barbican-db-init-6kk4z subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=3872d31ee1 endpointID=1406 k8sNamespace=openstack k8sPodName=barbican-db-init-6kk4z subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=bcbd1417-6ee5-4a77-8009-695c519c5eb9 k8s:batch.kubernetes.io/job-name=barbican-db-init k8s:component=db-init k8s:controller-uid=bcbd1417-6ee5-4a77-8009-695c519c5eb9 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-db-init k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=3872d31ee1 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1406 identity=16680 ipv4=10.0.0.220 ipv6= k8sPodName=openstack/barbican-db-init-6kk4z subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.109 1ead1295-3783-4a17-86b8-ff6456afd8d2 default }" containerID=35dbbca7554e97e2f063039fc8d11df85005a7bf080799382ac0cddf5c5af4be datapathConfiguration="&{false false false false false }" interface=lxca132f43f2345 k8sPodName=openstack/barbican-db-sync-fsf45 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=35dbbca755 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=82 ipv4=10.0.0.109 ipv6= k8sPodName=openstack/barbican-db-sync-fsf45 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=35dbbca755 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=82 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=515b717d-0b17-422a-a21c-824e0e75571b,k8s:batch.kubernetes.io/job-name=barbican-db-sync,k8s:component=db-sync,k8s:controller-uid=515b717d-0b17-422a-a21c-824e0e75571b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-sync,k8s:release_group=barbican" ipv4=10.0.0.109 ipv6= k8sPodName=openstack/barbican-db-sync-fsf45 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=515b717d-0b17-422a-a21c-824e0e75571b;k8s:batch.kubernetes.io/job-name=barbican-db-sync;k8s:component=db-sync;k8s:controller-uid=515b717d-0b17-422a-a21c-824e0e75571b;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-db-sync;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=35dbbca755 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=82 identity=1490 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=515b717d-0b17-422a-a21c-824e0e75571b,k8s:batch.kubernetes.io/job-name=barbican-db-sync,k8s:component=db-sync,k8s:controller-uid=515b717d-0b17-422a-a21c-824e0e75571b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-sync,k8s:release_group=barbican" ipv4=10.0.0.109 ipv6= k8sPodName=openstack/barbican-db-sync-fsf45 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=35dbbca755 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=82 identity=1490 ipv4=10.0.0.109 ipv6= k8sPodName=openstack/barbican-db-sync-fsf45 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=35dbbca755 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=82 identity=1490 ipv4=10.0.0.109 ipv6= k8sPodName=openstack/barbican-db-sync-fsf45 subsys=endpoint level=info msg="Successful endpoint creation" containerID=35dbbca755 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=82 identity=1490 ipv4=10.0.0.109 ipv6= k8sPodName=openstack/barbican-db-sync-fsf45 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=35dbbca755 endpointID=82 k8sNamespace=openstack k8sPodName=barbican-db-sync-fsf45 subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=515b717d-0b17-422a-a21c-824e0e75571b k8s:batch.kubernetes.io/job-name=barbican-db-sync k8s:component=db-sync k8s:controller-uid=515b717d-0b17-422a-a21c-824e0e75571b k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-db-sync k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=35dbbca755 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=82 identity=1490 ipv4=10.0.0.109 ipv6= k8sPodName=openstack/barbican-db-sync-fsf45 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.110 eea6ed97-e0e8-4aa4-b140-5b6234088cd7 default }" containerID=67dbdf144784ebe9912b9bdd7169ef0fdc7610d7cf16cc858d18593e8b1e0e6a datapathConfiguration="&{false false false false false }" interface=lxcad3ec1666afe k8sPodName=openstack/barbican-rabbit-init-7rj7m labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=67dbdf1447 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1313 ipv4=10.0.0.110 ipv6= k8sPodName=openstack/barbican-rabbit-init-7rj7m subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=67dbdf1447 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1313 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=1dbcc9fd-c876-4139-a6b3-c75e543aada0,k8s:batch.kubernetes.io/job-name=barbican-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=1dbcc9fd-c876-4139-a6b3-c75e543aada0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-rabbit-init,k8s:release_group=barbican" ipv4=10.0.0.110 ipv6= k8sPodName=openstack/barbican-rabbit-init-7rj7m subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=67dbdf1447 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1313 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.110 ipv6= k8sPodName=openstack/barbican-rabbit-init-7rj7m line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=1dbcc9fd-c876-4139-a6b3-c75e543aada0;k8s:batch.kubernetes.io/job-name=barbican-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=1dbcc9fd-c876-4139-a6b3-c75e543aada0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-rabbit-init;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=67dbdf1447 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1313 identity=9018 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=1dbcc9fd-c876-4139-a6b3-c75e543aada0,k8s:batch.kubernetes.io/job-name=barbican-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=1dbcc9fd-c876-4139-a6b3-c75e543aada0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-rabbit-init,k8s:release_group=barbican" ipv4=10.0.0.110 ipv6= k8sPodName=openstack/barbican-rabbit-init-7rj7m oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=67dbdf1447 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1313 identity=9018 ipv4=10.0.0.110 ipv6= k8sPodName=openstack/barbican-rabbit-init-7rj7m subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=67dbdf1447 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1313 identity=9018 ipv4=10.0.0.110 ipv6= k8sPodName=openstack/barbican-rabbit-init-7rj7m subsys=endpoint level=info msg="Successful endpoint creation" containerID=67dbdf1447 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1313 identity=9018 ipv4=10.0.0.110 ipv6= k8sPodName=openstack/barbican-rabbit-init-7rj7m subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=67dbdf1447 endpointID=1313 k8sNamespace=openstack k8sPodName=barbican-rabbit-init-7rj7m subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=1dbcc9fd-c876-4139-a6b3-c75e543aada0 k8s:batch.kubernetes.io/job-name=barbican-rabbit-init k8s:component=rabbit-init k8s:controller-uid=1dbcc9fd-c876-4139-a6b3-c75e543aada0 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-rabbit-init k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=67dbdf1447 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1313 identity=9018 ipv4=10.0.0.110 ipv6= k8sPodName=openstack/barbican-rabbit-init-7rj7m subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.184 5f6d7edd-5270-470e-8098-7b01ce5ba45f default }" containerID=b09b722f1d0eabb06d087f9beb2216b9301fae350450296d1d04ca2b8a85dc0e datapathConfiguration="&{false false false false false }" interface=lxc8252f07e205b k8sPodName=openstack/barbican-ks-service-lb4db labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b09b722f1d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2068 ipv4=10.0.0.184 ipv6= k8sPodName=openstack/barbican-ks-service-lb4db subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b09b722f1d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2068 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=0c125aa9-8264-442e-bf9d-436676702693,k8s:batch.kubernetes.io/job-name=barbican-ks-service,k8s:component=ks-service,k8s:controller-uid=0c125aa9-8264-442e-bf9d-436676702693,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-service,k8s:release_group=barbican" ipv4=10.0.0.184 ipv6= k8sPodName=openstack/barbican-ks-service-lb4db subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=0c125aa9-8264-442e-bf9d-436676702693;k8s:batch.kubernetes.io/job-name=barbican-ks-service;k8s:component=ks-service;k8s:controller-uid=0c125aa9-8264-442e-bf9d-436676702693;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-service;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b09b722f1d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2068 identity=23635 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=0c125aa9-8264-442e-bf9d-436676702693,k8s:batch.kubernetes.io/job-name=barbican-ks-service,k8s:component=ks-service,k8s:controller-uid=0c125aa9-8264-442e-bf9d-436676702693,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-service,k8s:release_group=barbican" ipv4=10.0.0.184 ipv6= k8sPodName=openstack/barbican-ks-service-lb4db oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b09b722f1d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2068 identity=23635 ipv4=10.0.0.184 ipv6= k8sPodName=openstack/barbican-ks-service-lb4db subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=b09b722f1d datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2068 identity=23635 ipv4=10.0.0.184 ipv6= k8sPodName=openstack/barbican-ks-service-lb4db subsys=endpoint level=info msg="Successful endpoint creation" containerID=b09b722f1d datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2068 identity=23635 ipv4=10.0.0.184 ipv6= k8sPodName=openstack/barbican-ks-service-lb4db subsys=daemon level=info msg="Delete endpoint request" containerID=b09b722f1d endpointID=2068 k8sNamespace=openstack k8sPodName=barbican-ks-service-lb4db subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=0c125aa9-8264-442e-bf9d-436676702693 k8s:batch.kubernetes.io/job-name=barbican-ks-service k8s:component=ks-service k8s:controller-uid=0c125aa9-8264-442e-bf9d-436676702693 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-service k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=b09b722f1d datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2068 identity=23635 ipv4=10.0.0.184 ipv6= k8sPodName=openstack/barbican-ks-service-lb4db subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.28 e7beb5fe-d00d-4862-a764-52baef2b10c7 default }" containerID=97598ef3d023ccfb24bf8dcd6305befb2acf83341349f2ee003b7fca0ad5056b datapathConfiguration="&{false false false false false }" interface=lxcc823c24c50cd k8sPodName=openstack/barbican-ks-endpoints-f8tmj labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=97598ef3d0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3726 ipv4=10.0.0.28 ipv6= k8sPodName=openstack/barbican-ks-endpoints-f8tmj subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=97598ef3d0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3726 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=ab919b16-d5f1-4dfb-812a-d421b86d46ee,k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=ab919b16-d5f1-4dfb-812a-d421b86d46ee,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-endpoints,k8s:release_group=barbican" ipv4=10.0.0.28 ipv6= k8sPodName=openstack/barbican-ks-endpoints-f8tmj subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=ab919b16-d5f1-4dfb-812a-d421b86d46ee;k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=ab919b16-d5f1-4dfb-812a-d421b86d46ee;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-endpoints;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=97598ef3d0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3726 identity=28403 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=ab919b16-d5f1-4dfb-812a-d421b86d46ee,k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=ab919b16-d5f1-4dfb-812a-d421b86d46ee,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-endpoints,k8s:release_group=barbican" ipv4=10.0.0.28 ipv6= k8sPodName=openstack/barbican-ks-endpoints-f8tmj oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=97598ef3d0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3726 identity=28403 ipv4=10.0.0.28 ipv6= k8sPodName=openstack/barbican-ks-endpoints-f8tmj subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=97598ef3d0 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=3726 identity=28403 ipv4=10.0.0.28 ipv6= k8sPodName=openstack/barbican-ks-endpoints-f8tmj subsys=endpoint level=info msg="Successful endpoint creation" containerID=97598ef3d0 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3726 identity=28403 ipv4=10.0.0.28 ipv6= k8sPodName=openstack/barbican-ks-endpoints-f8tmj subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=97598ef3d0 endpointID=3726 k8sNamespace=openstack k8sPodName=barbican-ks-endpoints-f8tmj subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=ab919b16-d5f1-4dfb-812a-d421b86d46ee k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=ab919b16-d5f1-4dfb-812a-d421b86d46ee k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-endpoints k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=97598ef3d0 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3726 identity=28403 ipv4=10.0.0.28 ipv6= k8sPodName=openstack/barbican-ks-endpoints-f8tmj subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.33 e57b55a7-a392-4bc0-9b2a-5576982a9294 default }" containerID=f12e8919d5d95b3e3608bec094f3a35a2b52553b561eb510b8d199c1900dc7d4 datapathConfiguration="&{false false false false false }" interface=lxca9901e830e61 k8sPodName=openstack/barbican-ks-user-8hlz4 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f12e8919d5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=140 ipv4=10.0.0.33 ipv6= k8sPodName=openstack/barbican-ks-user-8hlz4 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f12e8919d5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=140 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=2701f7a0-6344-471b-b816-76dfdd627332,k8s:batch.kubernetes.io/job-name=barbican-ks-user,k8s:component=ks-user,k8s:controller-uid=2701f7a0-6344-471b-b816-76dfdd627332,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-user,k8s:release_group=barbican" ipv4=10.0.0.33 ipv6= k8sPodName=openstack/barbican-ks-user-8hlz4 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=f12e8919d5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=140 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.33 ipv6= k8sPodName=openstack/barbican-ks-user-8hlz4 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=2701f7a0-6344-471b-b816-76dfdd627332;k8s:batch.kubernetes.io/job-name=barbican-ks-user;k8s:component=ks-user;k8s:controller-uid=2701f7a0-6344-471b-b816-76dfdd627332;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-user;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f12e8919d5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=140 identity=20045 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=2701f7a0-6344-471b-b816-76dfdd627332,k8s:batch.kubernetes.io/job-name=barbican-ks-user,k8s:component=ks-user,k8s:controller-uid=2701f7a0-6344-471b-b816-76dfdd627332,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-user,k8s:release_group=barbican" ipv4=10.0.0.33 ipv6= k8sPodName=openstack/barbican-ks-user-8hlz4 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f12e8919d5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=140 identity=20045 ipv4=10.0.0.33 ipv6= k8sPodName=openstack/barbican-ks-user-8hlz4 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f12e8919d5 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=140 identity=20045 ipv4=10.0.0.33 ipv6= k8sPodName=openstack/barbican-ks-user-8hlz4 subsys=endpoint level=info msg="Successful endpoint creation" containerID=f12e8919d5 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=140 identity=20045 ipv4=10.0.0.33 ipv6= k8sPodName=openstack/barbican-ks-user-8hlz4 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=f12e8919d5 endpointID=140 k8sNamespace=openstack k8sPodName=barbican-ks-user-8hlz4 subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=2701f7a0-6344-471b-b816-76dfdd627332 k8s:batch.kubernetes.io/job-name=barbican-ks-user k8s:component=ks-user k8s:controller-uid=2701f7a0-6344-471b-b816-76dfdd627332 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-user k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=f12e8919d5 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=140 identity=20045 ipv4=10.0.0.33 ipv6= k8sPodName=openstack/barbican-ks-user-8hlz4 subsys=endpoint level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Create endpoint request" addressing="&{10.0.0.92 2c3b4a2d-7caa-45af-9310-ed1fe8c80cf3 default }" containerID=5317f7f902c9cfa4267735defb52610aa3617a00ad5b04382ab2875ffcb8418d datapathConfiguration="&{false false false false false }" interface=lxcc0a57457fe7f k8sPodName=rook-ceph/rook-ceph-operator-76c484c45f-qxtp4 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5317f7f902 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=142 ipv4=10.0.0.92 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76c484c45f-qxtp4 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5317f7f902 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=142 identityLabels="k8s:app=rook-ceph-operator,k8s:helm.sh/chart=rook-ceph-v1.14.2,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph,k8s:io.cilium.k8s.namespace.labels.name=rook-ceph,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system,k8s:io.kubernetes.pod.namespace=rook-ceph" ipv4=10.0.0.92 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76c484c45f-qxtp4 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:rook-ceph k8s:io.cilium.k8s.namespace.labels.name:rook-ceph]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-operator;k8s:helm.sh/chart=rook-ceph-v1.14.2;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph;k8s:io.cilium.k8s.namespace.labels.name=rook-ceph;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system;k8s:io.kubernetes.pod.namespace=rook-ceph;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5317f7f902 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=142 identity=63203 identityLabels="k8s:app=rook-ceph-operator,k8s:helm.sh/chart=rook-ceph-v1.14.2,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph,k8s:io.cilium.k8s.namespace.labels.name=rook-ceph,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system,k8s:io.kubernetes.pod.namespace=rook-ceph" ipv4=10.0.0.92 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76c484c45f-qxtp4 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5317f7f902 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=142 identity=63203 ipv4=10.0.0.92 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76c484c45f-qxtp4 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=5317f7f902 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=142 identity=63203 ipv4=10.0.0.92 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76c484c45f-qxtp4 subsys=endpoint level=info msg="Successful endpoint creation" containerID=5317f7f902 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=142 identity=63203 ipv4=10.0.0.92 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76c484c45f-qxtp4 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.188 7f2a0a7e-4e39-4d14-9c0b-a9e93248193a default }" containerID=de553e978b8eb94e3bb0873686fd79fae1ca4d9ebe5ed0b21c471ac685592282 datapathConfiguration="&{false false false false false }" interface=lxc500a96161c89 k8sPodName=openstack/rook-ceph-detect-version-fp8fk labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=de553e978b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1389 ipv4=10.0.0.188 ipv6= k8sPodName=openstack/rook-ceph-detect-version-fp8fk subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=de553e978b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1389 identityLabels="k8s:app=rook-ceph-detect-version,k8s:batch.kubernetes.io/controller-uid=109bb39c-a64e-4f74-996e-cf501bfee893,k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version,k8s:controller-uid=109bb39c-a64e-4f74-996e-cf501bfee893,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=rook-ceph-detect-version,k8s:rook-version=v1.14.2" ipv4=10.0.0.188 ipv6= k8sPodName=openstack/rook-ceph-detect-version-fp8fk subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app=rook-ceph-detect-version;k8s:batch.kubernetes.io/controller-uid=109bb39c-a64e-4f74-996e-cf501bfee893;k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version;k8s:controller-uid=109bb39c-a64e-4f74-996e-cf501bfee893;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=rook-ceph-detect-version;k8s:rook-version=v1.14.2;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=de553e978b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1389 identity=3150 identityLabels="k8s:app=rook-ceph-detect-version,k8s:batch.kubernetes.io/controller-uid=109bb39c-a64e-4f74-996e-cf501bfee893,k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version,k8s:controller-uid=109bb39c-a64e-4f74-996e-cf501bfee893,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=rook-ceph-detect-version,k8s:rook-version=v1.14.2" ipv4=10.0.0.188 ipv6= k8sPodName=openstack/rook-ceph-detect-version-fp8fk oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=de553e978b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1389 identity=3150 ipv4=10.0.0.188 ipv6= k8sPodName=openstack/rook-ceph-detect-version-fp8fk subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=de553e978b datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1389 identity=3150 ipv4=10.0.0.188 ipv6= k8sPodName=openstack/rook-ceph-detect-version-fp8fk subsys=endpoint level=info msg="Successful endpoint creation" containerID=de553e978b datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1389 identity=3150 ipv4=10.0.0.188 ipv6= k8sPodName=openstack/rook-ceph-detect-version-fp8fk subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=de553e978b endpointID=1389 k8sNamespace=openstack k8sPodName=rook-ceph-detect-version-fp8fk subsys=daemon level=info msg="Releasing key" key="[k8s:app=rook-ceph-detect-version k8s:batch.kubernetes.io/controller-uid=109bb39c-a64e-4f74-996e-cf501bfee893 k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version k8s:controller-uid=109bb39c-a64e-4f74-996e-cf501bfee893 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=rook-ceph-detect-version k8s:rook-version=v1.14.2]" subsys=allocator level=info msg="Removed endpoint" containerID=de553e978b datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1389 identity=3150 ipv4=10.0.0.188 ipv6= k8sPodName=openstack/rook-ceph-detect-version-fp8fk subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.217 120ad28e-3a53-4fad-b58e-575c793c92f6 default }" containerID=313ddc8b103ee08470f964598cd7d53a443016a1d1934f3c12b8cba893f20325 datapathConfiguration="&{false false false false false }" interface=lxcc92caa82979d k8sPodName=local-path-storage/helper-pod-create-pvc-d65e5e6a-8f29-4d73-bfc3-9176aaed1565 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=313ddc8b10 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2476 ipv4=10.0.0.217 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-d65e5e6a-8f29-4d73-bfc3-9176aaed1565 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=313ddc8b10 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2476 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.217 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-d65e5e6a-8f29-4d73-bfc3-9176aaed1565 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=313ddc8b10 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2476 identity=31342 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.217 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-d65e5e6a-8f29-4d73-bfc3-9176aaed1565 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=313ddc8b10 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2476 identity=31342 ipv4=10.0.0.217 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-d65e5e6a-8f29-4d73-bfc3-9176aaed1565 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=313ddc8b10 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2476 identity=31342 ipv4=10.0.0.217 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-d65e5e6a-8f29-4d73-bfc3-9176aaed1565 subsys=endpoint level=info msg="Successful endpoint creation" containerID=313ddc8b10 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2476 identity=31342 ipv4=10.0.0.217 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-d65e5e6a-8f29-4d73-bfc3-9176aaed1565 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.168 c40fa51a-97d5-4e85-95b3-d70734fd335a default }" containerID=bc0407f788342cdd93ead61af02d66f693d7cc1d578aa295d5ff95e3d0d4dfa7 datapathConfiguration="&{false false false false false }" interface=lxcb9a3a3f12416 k8sPodName=openstack/ceph-object-controller-detect-version-zbc6d labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=bc0407f788 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=488 ipv4=10.0.0.168 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-zbc6d subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=bc0407f788 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=488 identityLabels="k8s:app=ceph-object-controller-detect-version,k8s:batch.kubernetes.io/controller-uid=6c77fc28-e2ec-4180-9c4c-71c98d4b6e0d,k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version,k8s:controller-uid=6c77fc28-e2ec-4180-9c4c-71c98d4b6e0d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=ceph-object-controller-detect-version,k8s:rook-version=v1.14.2" ipv4=10.0.0.168 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-zbc6d subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=ceph-object-controller-detect-version;k8s:batch.kubernetes.io/controller-uid=6c77fc28-e2ec-4180-9c4c-71c98d4b6e0d;k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version;k8s:controller-uid=6c77fc28-e2ec-4180-9c4c-71c98d4b6e0d;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=ceph-object-controller-detect-version;k8s:rook-version=v1.14.2;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=bc0407f788 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=488 identity=10603 identityLabels="k8s:app=ceph-object-controller-detect-version,k8s:batch.kubernetes.io/controller-uid=6c77fc28-e2ec-4180-9c4c-71c98d4b6e0d,k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version,k8s:controller-uid=6c77fc28-e2ec-4180-9c4c-71c98d4b6e0d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=ceph-object-controller-detect-version,k8s:rook-version=v1.14.2" ipv4=10.0.0.168 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-zbc6d oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=bc0407f788 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=488 identity=10603 ipv4=10.0.0.168 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-zbc6d subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=bc0407f788 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=488 identity=10603 ipv4=10.0.0.168 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-zbc6d subsys=endpoint level=info msg="Successful endpoint creation" containerID=bc0407f788 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=488 identity=10603 ipv4=10.0.0.168 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-zbc6d subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=313ddc8b10 endpointID=2476 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-d65e5e6a-8f29-4d73-bfc3-9176aaed1565 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=313ddc8b10 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2476 identity=31342 ipv4=10.0.0.217 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-d65e5e6a-8f29-4d73-bfc3-9176aaed1565 subsys=endpoint level=info msg="Delete endpoint request" containerID=bc0407f788 endpointID=488 k8sNamespace=openstack k8sPodName=ceph-object-controller-detect-version-zbc6d subsys=daemon level=info msg="Releasing key" key="[k8s:app=ceph-object-controller-detect-version k8s:batch.kubernetes.io/controller-uid=6c77fc28-e2ec-4180-9c4c-71c98d4b6e0d k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version k8s:controller-uid=6c77fc28-e2ec-4180-9c4c-71c98d4b6e0d k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=ceph-object-controller-detect-version k8s:rook-version=v1.14.2]" subsys=allocator level=info msg="Removed endpoint" containerID=bc0407f788 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=488 identity=10603 ipv4=10.0.0.168 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-zbc6d subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.100 c626675b-a6d4-4aae-8736-7850b3c9ad30 default }" containerID=f811db5f09e02cc859613d54fcdff9787b6d55ef333b5d000dbb01494be638b4 datapathConfiguration="&{false false false false false }" interface=lxc4edaaaa226b6 k8sPodName=openstack/rabbitmq-glance-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f811db5f09 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3551 ipv4=10.0.0.100 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f811db5f09 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3551 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-glance,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0" ipv4=10.0.0.100 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-glance;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f811db5f09 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3551 identity=54806 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-glance,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0" ipv4=10.0.0.100 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f811db5f09 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3551 identity=54806 ipv4=10.0.0.100 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=f811db5f09 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=3551 identity=54806 ipv4=10.0.0.100 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=f811db5f09 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3551 identity=54806 ipv4=10.0.0.100 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.94 fe93b1a0-8edb-4783-a41a-2e4636f1a51b default }" containerID=461ee3deb59d47ec412b1501081628a4e2712cab4aefebff651bb30bc95c10a0 datapathConfiguration="&{false false false false false }" interface=lxc09725b64f19f k8sPodName=openstack/glance-db-init-w9bbq labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=461ee3deb5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=158 ipv4=10.0.0.94 ipv6= k8sPodName=openstack/glance-db-init-w9bbq subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=461ee3deb5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=158 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=0927c325-5d83-4d38-a3d2-3a19d05b6862,k8s:batch.kubernetes.io/job-name=glance-db-init,k8s:component=db-init,k8s:controller-uid=0927c325-5d83-4d38-a3d2-3a19d05b6862,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-init,k8s:release_group=glance" ipv4=10.0.0.94 ipv6= k8sPodName=openstack/glance-db-init-w9bbq subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=461ee3deb5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=158 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.94 ipv6= k8sPodName=openstack/glance-db-init-w9bbq line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=0927c325-5d83-4d38-a3d2-3a19d05b6862;k8s:batch.kubernetes.io/job-name=glance-db-init;k8s:component=db-init;k8s:controller-uid=0927c325-5d83-4d38-a3d2-3a19d05b6862;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-db-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=461ee3deb5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=158 identity=455 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=0927c325-5d83-4d38-a3d2-3a19d05b6862,k8s:batch.kubernetes.io/job-name=glance-db-init,k8s:component=db-init,k8s:controller-uid=0927c325-5d83-4d38-a3d2-3a19d05b6862,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-init,k8s:release_group=glance" ipv4=10.0.0.94 ipv6= k8sPodName=openstack/glance-db-init-w9bbq oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=461ee3deb5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=158 identity=455 ipv4=10.0.0.94 ipv6= k8sPodName=openstack/glance-db-init-w9bbq subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=461ee3deb5 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=158 identity=455 ipv4=10.0.0.94 ipv6= k8sPodName=openstack/glance-db-init-w9bbq subsys=endpoint level=info msg="Successful endpoint creation" containerID=461ee3deb5 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=158 identity=455 ipv4=10.0.0.94 ipv6= k8sPodName=openstack/glance-db-init-w9bbq subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=461ee3deb5 endpointID=158 k8sNamespace=openstack k8sPodName=glance-db-init-w9bbq subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=0927c325-5d83-4d38-a3d2-3a19d05b6862 k8s:batch.kubernetes.io/job-name=glance-db-init k8s:component=db-init k8s:controller-uid=0927c325-5d83-4d38-a3d2-3a19d05b6862 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-db-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=461ee3deb5 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=158 identity=455 ipv4=10.0.0.94 ipv6= k8sPodName=openstack/glance-db-init-w9bbq subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.135 f3c41588-e49a-4f1a-b729-36cf093137ea default }" containerID=e6910613557701f6a42b93f6aa7801389057c12f864b294f138070bb25bd7d15 datapathConfiguration="&{false false false false false }" interface=lxcdb2ceb09467e k8sPodName=openstack/glance-db-sync-5jmtm labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e691061355 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2922 ipv4=10.0.0.135 ipv6= k8sPodName=openstack/glance-db-sync-5jmtm subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e691061355 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2922 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=24c12853-5ca3-46ad-975d-aaf1d7af8386,k8s:batch.kubernetes.io/job-name=glance-db-sync,k8s:component=db-sync,k8s:controller-uid=24c12853-5ca3-46ad-975d-aaf1d7af8386,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-sync,k8s:release_group=glance" ipv4=10.0.0.135 ipv6= k8sPodName=openstack/glance-db-sync-5jmtm subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=e691061355 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2922 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.135 ipv6= k8sPodName=openstack/glance-db-sync-5jmtm line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=24c12853-5ca3-46ad-975d-aaf1d7af8386;k8s:batch.kubernetes.io/job-name=glance-db-sync;k8s:component=db-sync;k8s:controller-uid=24c12853-5ca3-46ad-975d-aaf1d7af8386;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-db-sync;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e691061355 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2922 identity=2087 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=24c12853-5ca3-46ad-975d-aaf1d7af8386,k8s:batch.kubernetes.io/job-name=glance-db-sync,k8s:component=db-sync,k8s:controller-uid=24c12853-5ca3-46ad-975d-aaf1d7af8386,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-sync,k8s:release_group=glance" ipv4=10.0.0.135 ipv6= k8sPodName=openstack/glance-db-sync-5jmtm oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e691061355 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2922 identity=2087 ipv4=10.0.0.135 ipv6= k8sPodName=openstack/glance-db-sync-5jmtm subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e691061355 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2922 identity=2087 ipv4=10.0.0.135 ipv6= k8sPodName=openstack/glance-db-sync-5jmtm subsys=endpoint level=info msg="Successful endpoint creation" containerID=e691061355 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2922 identity=2087 ipv4=10.0.0.135 ipv6= k8sPodName=openstack/glance-db-sync-5jmtm subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=e691061355 endpointID=2922 k8sNamespace=openstack k8sPodName=glance-db-sync-5jmtm subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=24c12853-5ca3-46ad-975d-aaf1d7af8386 k8s:batch.kubernetes.io/job-name=glance-db-sync k8s:component=db-sync k8s:controller-uid=24c12853-5ca3-46ad-975d-aaf1d7af8386 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-db-sync k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=e691061355 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2922 identity=2087 ipv4=10.0.0.135 ipv6= k8sPodName=openstack/glance-db-sync-5jmtm subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.121 9aed409b-9abc-435d-b8d5-d7e7c9c91052 default }" containerID=7d52cadc9110924e2949e3f36c240f86abc7bb731040a5c0e0804f94a79ada4f datapathConfiguration="&{false false false false false }" interface=lxc1fb20067ac0f k8sPodName=openstack/glance-rabbit-init-wm8z9 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7d52cadc91 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2049 ipv4=10.0.0.121 ipv6= k8sPodName=openstack/glance-rabbit-init-wm8z9 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7d52cadc91 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2049 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=91349743-e2c1-4b87-93d3-54422371d13b,k8s:batch.kubernetes.io/job-name=glance-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=91349743-e2c1-4b87-93d3-54422371d13b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-rabbit-init,k8s:release_group=glance" ipv4=10.0.0.121 ipv6= k8sPodName=openstack/glance-rabbit-init-wm8z9 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=91349743-e2c1-4b87-93d3-54422371d13b;k8s:batch.kubernetes.io/job-name=glance-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=91349743-e2c1-4b87-93d3-54422371d13b;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-rabbit-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7d52cadc91 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2049 identity=37033 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=91349743-e2c1-4b87-93d3-54422371d13b,k8s:batch.kubernetes.io/job-name=glance-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=91349743-e2c1-4b87-93d3-54422371d13b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-rabbit-init,k8s:release_group=glance" ipv4=10.0.0.121 ipv6= k8sPodName=openstack/glance-rabbit-init-wm8z9 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7d52cadc91 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2049 identity=37033 ipv4=10.0.0.121 ipv6= k8sPodName=openstack/glance-rabbit-init-wm8z9 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=7d52cadc91 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2049 identity=37033 ipv4=10.0.0.121 ipv6= k8sPodName=openstack/glance-rabbit-init-wm8z9 subsys=endpoint level=info msg="Successful endpoint creation" containerID=7d52cadc91 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2049 identity=37033 ipv4=10.0.0.121 ipv6= k8sPodName=openstack/glance-rabbit-init-wm8z9 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.39 91e27fe1-c532-4bd2-b2fd-5381edc37a2b default }" containerID=f9d8f16527d9dc8a96f429ca0019f99d13f4687325fc1028ffe03d4d6379d6b4 datapathConfiguration="&{false false false false false }" interface=lxc30925f3f5c5c k8sPodName=openstack/rook-ceph-rgw-ceph-a-cf9f85b9f-nbsgv labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f9d8f16527 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=755 ipv4=10.0.0.39 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-cf9f85b9f-nbsgv subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f9d8f16527 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=755 identityLabels="k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io,k8s:app.kubernetes.io/created-by=rook-ceph-operator,k8s:app.kubernetes.io/instance=ceph,k8s:app.kubernetes.io/managed-by=rook-ceph-operator,k8s:app.kubernetes.io/name=ceph-rgw,k8s:app.kubernetes.io/part-of=ceph,k8s:app=rook-ceph-rgw,k8s:ceph_daemon_id=ceph,k8s:ceph_daemon_type=rgw,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw,k8s:io.kubernetes.pod.namespace=openstack,k8s:rgw=ceph,k8s:rook.io/operator-namespace=rook-ceph,k8s:rook_cluster=openstack,k8s:rook_object_store=ceph" ipv4=10.0.0.39 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-cf9f85b9f-nbsgv subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app=rook-ceph-rgw;k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io;k8s:app.kubernetes.io/created-by=rook-ceph-operator;k8s:app.kubernetes.io/instance=ceph;k8s:app.kubernetes.io/managed-by=rook-ceph-operator;k8s:app.kubernetes.io/name=ceph-rgw;k8s:app.kubernetes.io/part-of=ceph;k8s:ceph_daemon_id=ceph;k8s:ceph_daemon_type=rgw;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw;k8s:io.kubernetes.pod.namespace=openstack;k8s:rgw=ceph;k8s:rook.io/operator-namespace=rook-ceph;k8s:rook_cluster=openstack;k8s:rook_object_store=ceph;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f9d8f16527 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=755 identity=4942 identityLabels="k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io,k8s:app.kubernetes.io/created-by=rook-ceph-operator,k8s:app.kubernetes.io/instance=ceph,k8s:app.kubernetes.io/managed-by=rook-ceph-operator,k8s:app.kubernetes.io/name=ceph-rgw,k8s:app.kubernetes.io/part-of=ceph,k8s:app=rook-ceph-rgw,k8s:ceph_daemon_id=ceph,k8s:ceph_daemon_type=rgw,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw,k8s:io.kubernetes.pod.namespace=openstack,k8s:rgw=ceph,k8s:rook.io/operator-namespace=rook-ceph,k8s:rook_cluster=openstack,k8s:rook_object_store=ceph" ipv4=10.0.0.39 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-cf9f85b9f-nbsgv oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f9d8f16527 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=755 identity=4942 ipv4=10.0.0.39 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-cf9f85b9f-nbsgv subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f9d8f16527 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=755 identity=4942 ipv4=10.0.0.39 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-cf9f85b9f-nbsgv subsys=endpoint level=info msg="Successful endpoint creation" containerID=f9d8f16527 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=755 identity=4942 ipv4=10.0.0.39 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-cf9f85b9f-nbsgv subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.118 586ffc9b-b255-4cdb-beb1-ff8a4abc59fb default }" containerID=308eb9d0fc197d867e24a0cf73006bcb5f3869d0f0fab37e675bc83e172e8d61 datapathConfiguration="&{false false false false false }" interface=lxc1e7702554b01 k8sPodName=openstack/rook-ceph-crashcollector-instance-7c8df6f89b-lnm6j labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=308eb9d0fc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2954 ipv4=10.0.0.118 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-7c8df6f89b-lnm6j subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=308eb9d0fc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2954 identityLabels="k8s:app=rook-ceph-crashcollector,k8s:ceph-version=18.2.1-0,k8s:ceph_daemon_id=crash,k8s:crashcollector=crash,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default,k8s:io.kubernetes.pod.namespace=openstack,k8s:node_name=instance,k8s:rook_cluster=openstack" ipv4=10.0.0.118 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-7c8df6f89b-lnm6j subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-crashcollector;k8s:ceph-version=18.2.1-0;k8s:ceph_daemon_id=crash;k8s:crashcollector=crash;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default;k8s:io.kubernetes.pod.namespace=openstack;k8s:node_name=instance;k8s:rook_cluster=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=308eb9d0fc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2954 identity=58226 identityLabels="k8s:app=rook-ceph-crashcollector,k8s:ceph-version=18.2.1-0,k8s:ceph_daemon_id=crash,k8s:crashcollector=crash,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default,k8s:io.kubernetes.pod.namespace=openstack,k8s:node_name=instance,k8s:rook_cluster=openstack" ipv4=10.0.0.118 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-7c8df6f89b-lnm6j oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=308eb9d0fc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2954 identity=58226 ipv4=10.0.0.118 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-7c8df6f89b-lnm6j subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=308eb9d0fc datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2954 identity=58226 ipv4=10.0.0.118 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-7c8df6f89b-lnm6j subsys=endpoint level=info msg="Successful endpoint creation" containerID=308eb9d0fc datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2954 identity=58226 ipv4=10.0.0.118 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-7c8df6f89b-lnm6j subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=7d52cadc91 endpointID=2049 k8sNamespace=openstack k8sPodName=glance-rabbit-init-wm8z9 subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=91349743-e2c1-4b87-93d3-54422371d13b k8s:batch.kubernetes.io/job-name=glance-rabbit-init k8s:component=rabbit-init k8s:controller-uid=91349743-e2c1-4b87-93d3-54422371d13b k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-rabbit-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=7d52cadc91 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2049 identity=37033 ipv4=10.0.0.121 ipv6= k8sPodName=openstack/glance-rabbit-init-wm8z9 subsys=endpoint level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.84 b3c27747-f1b6-4cda-8fcd-9f6226ac1a92 default }" containerID=fceaaa3cc93fee63445b5c971adc8edec246f9feb6c3f329498cf62247235a3a datapathConfiguration="&{false false false false false }" interface=lxcccfe949ee354 k8sPodName=openstack/glance-ks-service-qp8vg labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=fceaaa3cc9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1474 ipv4=10.0.0.84 ipv6= k8sPodName=openstack/glance-ks-service-qp8vg subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=fceaaa3cc9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1474 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=951ee82a-bd3e-4ee4-8300-93b40b4d5659,k8s:batch.kubernetes.io/job-name=glance-ks-service,k8s:component=ks-service,k8s:controller-uid=951ee82a-bd3e-4ee4-8300-93b40b4d5659,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-service,k8s:release_group=glance" ipv4=10.0.0.84 ipv6= k8sPodName=openstack/glance-ks-service-qp8vg subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=951ee82a-bd3e-4ee4-8300-93b40b4d5659;k8s:batch.kubernetes.io/job-name=glance-ks-service;k8s:component=ks-service;k8s:controller-uid=951ee82a-bd3e-4ee4-8300-93b40b4d5659;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-service;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=fceaaa3cc9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1474 identity=7594 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=951ee82a-bd3e-4ee4-8300-93b40b4d5659,k8s:batch.kubernetes.io/job-name=glance-ks-service,k8s:component=ks-service,k8s:controller-uid=951ee82a-bd3e-4ee4-8300-93b40b4d5659,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-service,k8s:release_group=glance" ipv4=10.0.0.84 ipv6= k8sPodName=openstack/glance-ks-service-qp8vg oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=fceaaa3cc9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1474 identity=7594 ipv4=10.0.0.84 ipv6= k8sPodName=openstack/glance-ks-service-qp8vg subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=fceaaa3cc9 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1474 identity=7594 ipv4=10.0.0.84 ipv6= k8sPodName=openstack/glance-ks-service-qp8vg subsys=endpoint level=info msg="Successful endpoint creation" containerID=fceaaa3cc9 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1474 identity=7594 ipv4=10.0.0.84 ipv6= k8sPodName=openstack/glance-ks-service-qp8vg subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=fceaaa3cc9 endpointID=1474 k8sNamespace=openstack k8sPodName=glance-ks-service-qp8vg subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=951ee82a-bd3e-4ee4-8300-93b40b4d5659 k8s:batch.kubernetes.io/job-name=glance-ks-service k8s:component=ks-service k8s:controller-uid=951ee82a-bd3e-4ee4-8300-93b40b4d5659 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-service k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=fceaaa3cc9 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1474 identity=7594 ipv4=10.0.0.84 ipv6= k8sPodName=openstack/glance-ks-service-qp8vg subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.106 960336b4-1e7d-4a05-8c15-2a863a681c04 default }" containerID=a75450e0f687596251d9f9996c2cd8e90a644494506def845cc7b97beb189fdd datapathConfiguration="&{false false false false false }" interface=lxc2a4238d73a9d k8sPodName=openstack/glance-ks-endpoints-jslmr labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a75450e0f6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2508 ipv4=10.0.0.106 ipv6= k8sPodName=openstack/glance-ks-endpoints-jslmr subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a75450e0f6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2508 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=f40006d1-1428-4828-8433-af5ca83c2c51,k8s:batch.kubernetes.io/job-name=glance-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=f40006d1-1428-4828-8433-af5ca83c2c51,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-endpoints,k8s:release_group=glance" ipv4=10.0.0.106 ipv6= k8sPodName=openstack/glance-ks-endpoints-jslmr subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=a75450e0f6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2508 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.106 ipv6= k8sPodName=openstack/glance-ks-endpoints-jslmr line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=f40006d1-1428-4828-8433-af5ca83c2c51;k8s:batch.kubernetes.io/job-name=glance-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=f40006d1-1428-4828-8433-af5ca83c2c51;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-endpoints;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a75450e0f6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2508 identity=14902 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=f40006d1-1428-4828-8433-af5ca83c2c51,k8s:batch.kubernetes.io/job-name=glance-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=f40006d1-1428-4828-8433-af5ca83c2c51,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-endpoints,k8s:release_group=glance" ipv4=10.0.0.106 ipv6= k8sPodName=openstack/glance-ks-endpoints-jslmr oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a75450e0f6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2508 identity=14902 ipv4=10.0.0.106 ipv6= k8sPodName=openstack/glance-ks-endpoints-jslmr subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a75450e0f6 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2508 identity=14902 ipv4=10.0.0.106 ipv6= k8sPodName=openstack/glance-ks-endpoints-jslmr subsys=endpoint level=info msg="Successful endpoint creation" containerID=a75450e0f6 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2508 identity=14902 ipv4=10.0.0.106 ipv6= k8sPodName=openstack/glance-ks-endpoints-jslmr subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.134 7d928c17-76ee-40e4-97c1-def22f5fb87d default }" containerID=4f4cb525bde27149c090b960d2260c27d3b422fef6ed856484f26759fc5eae05 datapathConfiguration="&{false false false false false }" interface=lxca4435c144868 k8sPodName=openstack/ceph-object-controller-detect-version-mth92 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4f4cb525bd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1295 ipv4=10.0.0.134 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-mth92 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4f4cb525bd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1295 identityLabels="k8s:app=ceph-object-controller-detect-version,k8s:batch.kubernetes.io/controller-uid=87a4f965-918c-41a8-b4ae-7eb0e7d6af7e,k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version,k8s:controller-uid=87a4f965-918c-41a8-b4ae-7eb0e7d6af7e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=ceph-object-controller-detect-version,k8s:rook-version=v1.14.2" ipv4=10.0.0.134 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-mth92 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=4f4cb525bd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1295 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.134 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-mth92 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=ceph-object-controller-detect-version;k8s:batch.kubernetes.io/controller-uid=87a4f965-918c-41a8-b4ae-7eb0e7d6af7e;k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version;k8s:controller-uid=87a4f965-918c-41a8-b4ae-7eb0e7d6af7e;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=ceph-object-controller-detect-version;k8s:rook-version=v1.14.2;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4f4cb525bd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1295 identity=27996 identityLabels="k8s:app=ceph-object-controller-detect-version,k8s:batch.kubernetes.io/controller-uid=87a4f965-918c-41a8-b4ae-7eb0e7d6af7e,k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version,k8s:controller-uid=87a4f965-918c-41a8-b4ae-7eb0e7d6af7e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=ceph-object-controller-detect-version,k8s:rook-version=v1.14.2" ipv4=10.0.0.134 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-mth92 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4f4cb525bd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1295 identity=27996 ipv4=10.0.0.134 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-mth92 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=4f4cb525bd datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1295 identity=27996 ipv4=10.0.0.134 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-mth92 subsys=endpoint level=info msg="Successful endpoint creation" containerID=4f4cb525bd datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1295 identity=27996 ipv4=10.0.0.134 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-mth92 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=4f4cb525bd endpointID=1295 k8sNamespace=openstack k8sPodName=ceph-object-controller-detect-version-mth92 subsys=daemon level=info msg="Releasing key" key="[k8s:app=ceph-object-controller-detect-version k8s:batch.kubernetes.io/controller-uid=87a4f965-918c-41a8-b4ae-7eb0e7d6af7e k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version k8s:controller-uid=87a4f965-918c-41a8-b4ae-7eb0e7d6af7e k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=ceph-object-controller-detect-version k8s:rook-version=v1.14.2]" subsys=allocator level=info msg="Removed endpoint" containerID=4f4cb525bd datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1295 identity=27996 ipv4=10.0.0.134 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-mth92 subsys=endpoint level=info msg="Delete endpoint request" containerID=a75450e0f6 endpointID=2508 k8sNamespace=openstack k8sPodName=glance-ks-endpoints-jslmr subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=f40006d1-1428-4828-8433-af5ca83c2c51 k8s:batch.kubernetes.io/job-name=glance-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=f40006d1-1428-4828-8433-af5ca83c2c51 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-endpoints k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=a75450e0f6 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2508 identity=14902 ipv4=10.0.0.106 ipv6= k8sPodName=openstack/glance-ks-endpoints-jslmr subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.51 a0ba2675-75a2-4dbc-9b65-b953e10991eb default }" containerID=c549ee25fcde1089cd3333aa1c577bae4c813e08088fc3a5dc04a93d665fa7d2 datapathConfiguration="&{false false false false false }" interface=lxcfcdada502b78 k8sPodName=openstack/glance-ks-user-pbwd7 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c549ee25fc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1971 ipv4=10.0.0.51 ipv6= k8sPodName=openstack/glance-ks-user-pbwd7 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c549ee25fc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1971 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=38da9a0a-f4f4-4ba8-a1ec-a2b9f468aad2,k8s:batch.kubernetes.io/job-name=glance-ks-user,k8s:component=ks-user,k8s:controller-uid=38da9a0a-f4f4-4ba8-a1ec-a2b9f468aad2,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-user,k8s:release_group=glance" ipv4=10.0.0.51 ipv6= k8sPodName=openstack/glance-ks-user-pbwd7 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=c549ee25fc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1971 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.51 ipv6= k8sPodName=openstack/glance-ks-user-pbwd7 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=38da9a0a-f4f4-4ba8-a1ec-a2b9f468aad2;k8s:batch.kubernetes.io/job-name=glance-ks-user;k8s:component=ks-user;k8s:controller-uid=38da9a0a-f4f4-4ba8-a1ec-a2b9f468aad2;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-user;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c549ee25fc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1971 identity=5486 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=38da9a0a-f4f4-4ba8-a1ec-a2b9f468aad2,k8s:batch.kubernetes.io/job-name=glance-ks-user,k8s:component=ks-user,k8s:controller-uid=38da9a0a-f4f4-4ba8-a1ec-a2b9f468aad2,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-user,k8s:release_group=glance" ipv4=10.0.0.51 ipv6= k8sPodName=openstack/glance-ks-user-pbwd7 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c549ee25fc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1971 identity=5486 ipv4=10.0.0.51 ipv6= k8sPodName=openstack/glance-ks-user-pbwd7 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c549ee25fc datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1971 identity=5486 ipv4=10.0.0.51 ipv6= k8sPodName=openstack/glance-ks-user-pbwd7 subsys=endpoint level=info msg="Successful endpoint creation" containerID=c549ee25fc datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1971 identity=5486 ipv4=10.0.0.51 ipv6= k8sPodName=openstack/glance-ks-user-pbwd7 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=c549ee25fc endpointID=1971 k8sNamespace=openstack k8sPodName=glance-ks-user-pbwd7 subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=38da9a0a-f4f4-4ba8-a1ec-a2b9f468aad2 k8s:batch.kubernetes.io/job-name=glance-ks-user k8s:component=ks-user k8s:controller-uid=38da9a0a-f4f4-4ba8-a1ec-a2b9f468aad2 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-user k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=c549ee25fc datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1971 identity=5486 ipv4=10.0.0.51 ipv6= k8sPodName=openstack/glance-ks-user-pbwd7 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.202 575dfd7e-a8f7-435f-81ba-4723c20c3953 default }" containerID=c476a73f85d6bb4c11f8b8b612f2bf475f79d56798e7329fbc3d13753f77291d datapathConfiguration="&{false false false false false }" interface=lxcf1c402439d9d k8sPodName=openstack/glance-metadefs-load-75cn7 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c476a73f85 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1295 ipv4=10.0.0.202 ipv6= k8sPodName=openstack/glance-metadefs-load-75cn7 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c476a73f85 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1295 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=8b9736c4-2931-43b5-bdb8-6894e39be6b4,k8s:batch.kubernetes.io/job-name=glance-metadefs-load,k8s:component=metadefs_load,k8s:controller-uid=8b9736c4-2931-43b5-bdb8-6894e39be6b4,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-metadefs-load,k8s:release_group=glance" ipv4=10.0.0.202 ipv6= k8sPodName=openstack/glance-metadefs-load-75cn7 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=8b9736c4-2931-43b5-bdb8-6894e39be6b4;k8s:batch.kubernetes.io/job-name=glance-metadefs-load;k8s:component=metadefs_load;k8s:controller-uid=8b9736c4-2931-43b5-bdb8-6894e39be6b4;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-metadefs-load;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c476a73f85 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1295 identity=3510 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=8b9736c4-2931-43b5-bdb8-6894e39be6b4,k8s:batch.kubernetes.io/job-name=glance-metadefs-load,k8s:component=metadefs_load,k8s:controller-uid=8b9736c4-2931-43b5-bdb8-6894e39be6b4,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-metadefs-load,k8s:release_group=glance" ipv4=10.0.0.202 ipv6= k8sPodName=openstack/glance-metadefs-load-75cn7 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c476a73f85 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1295 identity=3510 ipv4=10.0.0.202 ipv6= k8sPodName=openstack/glance-metadefs-load-75cn7 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=c476a73f85 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1295 identity=3510 ipv4=10.0.0.202 ipv6= k8sPodName=openstack/glance-metadefs-load-75cn7 subsys=endpoint level=info msg="Successful endpoint creation" containerID=c476a73f85 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1295 identity=3510 ipv4=10.0.0.202 ipv6= k8sPodName=openstack/glance-metadefs-load-75cn7 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=c476a73f85 endpointID=1295 k8sNamespace=openstack k8sPodName=glance-metadefs-load-75cn7 subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=8b9736c4-2931-43b5-bdb8-6894e39be6b4 k8s:batch.kubernetes.io/job-name=glance-metadefs-load k8s:component=metadefs_load k8s:controller-uid=8b9736c4-2931-43b5-bdb8-6894e39be6b4 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-metadefs-load k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=c476a73f85 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1295 identity=3510 ipv4=10.0.0.202 ipv6= k8sPodName=openstack/glance-metadefs-load-75cn7 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.10 d6b01f3d-0095-4d5f-b259-47e3906fe94f default }" containerID=5a413fab3e00a09e9151856ca6f67c696dc362df6e18c7ec9645fa26e4eeb4e4 datapathConfiguration="&{false false false false false }" interface=lxcff7c623d4fc2 k8sPodName=openstack/glance-storage-init-tsn74 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5a413fab3e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3079 ipv4=10.0.0.10 ipv6= k8sPodName=openstack/glance-storage-init-tsn74 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5a413fab3e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3079 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=cd58ed95-983c-40fc-a553-88ae0eaddd31,k8s:batch.kubernetes.io/job-name=glance-storage-init,k8s:component=storage-init,k8s:controller-uid=cd58ed95-983c-40fc-a553-88ae0eaddd31,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-storage-init,k8s:release_group=glance" ipv4=10.0.0.10 ipv6= k8sPodName=openstack/glance-storage-init-tsn74 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=cd58ed95-983c-40fc-a553-88ae0eaddd31;k8s:batch.kubernetes.io/job-name=glance-storage-init;k8s:component=storage-init;k8s:controller-uid=cd58ed95-983c-40fc-a553-88ae0eaddd31;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-storage-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5a413fab3e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3079 identity=7449 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=cd58ed95-983c-40fc-a553-88ae0eaddd31,k8s:batch.kubernetes.io/job-name=glance-storage-init,k8s:component=storage-init,k8s:controller-uid=cd58ed95-983c-40fc-a553-88ae0eaddd31,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-storage-init,k8s:release_group=glance" ipv4=10.0.0.10 ipv6= k8sPodName=openstack/glance-storage-init-tsn74 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=5a413fab3e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3079 identity=7449 ipv4=10.0.0.10 ipv6= k8sPodName=openstack/glance-storage-init-tsn74 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=5a413fab3e datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=3079 identity=7449 ipv4=10.0.0.10 ipv6= k8sPodName=openstack/glance-storage-init-tsn74 subsys=endpoint level=info msg="Successful endpoint creation" containerID=5a413fab3e datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3079 identity=7449 ipv4=10.0.0.10 ipv6= k8sPodName=openstack/glance-storage-init-tsn74 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=5a413fab3e endpointID=3079 k8sNamespace=openstack k8sPodName=glance-storage-init-tsn74 subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=cd58ed95-983c-40fc-a553-88ae0eaddd31 k8s:batch.kubernetes.io/job-name=glance-storage-init k8s:component=storage-init k8s:controller-uid=cd58ed95-983c-40fc-a553-88ae0eaddd31 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-storage-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=5a413fab3e datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3079 identity=7449 ipv4=10.0.0.10 ipv6= k8sPodName=openstack/glance-storage-init-tsn74 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.99 0cd403f9-3fc7-4058-8d0d-57e16742b147 default }" containerID=62f0e879135b8b7f9af5822107d9bf8378d0b291e954340b206e46cdb92f0b76 datapathConfiguration="&{false false false false false }" interface=lxcb5d4871f4cdd k8sPodName=openstack/glance-api-5d9cb8449d-24xqg labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=62f0e87913 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=433 ipv4=10.0.0.99 ipv6= k8sPodName=openstack/glance-api-5d9cb8449d-24xqg subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=62f0e87913 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=433 identityLabels="k8s:application=glance,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=glance" ipv4=10.0.0.99 ipv6= k8sPodName=openstack/glance-api-5d9cb8449d-24xqg subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=62f0e87913 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=433 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.99 ipv6= k8sPodName=openstack/glance-api-5d9cb8449d-24xqg line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=glance;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=62f0e87913 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=433 identity=11370 identityLabels="k8s:application=glance,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=glance" ipv4=10.0.0.99 ipv6= k8sPodName=openstack/glance-api-5d9cb8449d-24xqg oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=62f0e87913 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=433 identity=11370 ipv4=10.0.0.99 ipv6= k8sPodName=openstack/glance-api-5d9cb8449d-24xqg subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=62f0e87913 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=433 identity=11370 ipv4=10.0.0.99 ipv6= k8sPodName=openstack/glance-api-5d9cb8449d-24xqg subsys=endpoint level=info msg="Successful endpoint creation" containerID=62f0e87913 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=433 identity=11370 ipv4=10.0.0.99 ipv6= k8sPodName=openstack/glance-api-5d9cb8449d-24xqg subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.4 0cbeaea6-a4c7-43ad-9116-07ab3a97c43e default }" containerID=998a76fa9206dacf95b486435103592c630daadfdfe6962ecd4e6abfbef06883 datapathConfiguration="&{false false false false false }" interface=lxc7daa5e957fda k8sPodName=openstack/staffeln-api-6487ccd844-bb48x labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=998a76fa92 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=70 ipv4=10.0.0.4 ipv6= k8sPodName=openstack/staffeln-api-6487ccd844-bb48x subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.175 43c22f20-5f17-4528-af35-ffbd1b66b6a5 default }" containerID=606980980eafdebd4858c63faa902519eac0842c7510e45b63d7e8fc35b36c34 datapathConfiguration="&{false false false false false }" interface=lxcb529b8f9874c k8sPodName=openstack/staffeln-conductor-657f45b9f-d22v7 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=606980980e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1422 ipv4=10.0.0.175 ipv6= k8sPodName=openstack/staffeln-conductor-657f45b9f-d22v7 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=998a76fa92 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=70 identityLabels="k8s:application=staffeln,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.4 ipv6= k8sPodName=openstack/staffeln-api-6487ccd844-bb48x subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Resolving identity labels (blocking)" containerID=606980980e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1422 identityLabels="k8s:application=staffeln,k8s:component=conductor,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.175 ipv6= k8sPodName=openstack/staffeln-conductor-657f45b9f-d22v7 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=606980980e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1422 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.175 ipv6= k8sPodName=openstack/staffeln-conductor-657f45b9f-d22v7 line=611 subsys=endpoint level=info msg="Invalid state transition skipped" containerID=998a76fa92 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=70 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.4 ipv6= k8sPodName=openstack/staffeln-api-6487ccd844-bb48x line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=998a76fa92 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=70 identity=42591 identityLabels="k8s:application=staffeln,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.4 ipv6= k8sPodName=openstack/staffeln-api-6487ccd844-bb48x oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=998a76fa92 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=70 identity=42591 ipv4=10.0.0.4 ipv6= k8sPodName=openstack/staffeln-api-6487ccd844-bb48x subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:component=conductor;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=606980980e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1422 identity=42174 identityLabels="k8s:application=staffeln,k8s:component=conductor,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.175 ipv6= k8sPodName=openstack/staffeln-conductor-657f45b9f-d22v7 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=606980980e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1422 identity=42174 ipv4=10.0.0.175 ipv6= k8sPodName=openstack/staffeln-conductor-657f45b9f-d22v7 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.66 6511a502-0a2c-4d11-b860-f8d415b48204 default }" containerID=7589c109d9e67c453c179be5d8751f9acc7a0b505f0034baafbc837a02408dc7 datapathConfiguration="&{false false false false false }" interface=lxce1623880e3a7 k8sPodName=openstack/staffeln-db-init-lrnhh labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7589c109d9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=41 ipv4=10.0.0.66 ipv6= k8sPodName=openstack/staffeln-db-init-lrnhh subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7589c109d9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=41 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=0f501b9c-ea87-4b6f-935a-8927e4b98338,k8s:batch.kubernetes.io/job-name=staffeln-db-init,k8s:component=db-init,k8s:controller-uid=0f501b9c-ea87-4b6f-935a-8927e4b98338,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-init,k8s:release_group=staffeln" ipv4=10.0.0.66 ipv6= k8sPodName=openstack/staffeln-db-init-lrnhh subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:batch.kubernetes.io/controller-uid=0f501b9c-ea87-4b6f-935a-8927e4b98338;k8s:batch.kubernetes.io/job-name=staffeln-db-init;k8s:component=db-init;k8s:controller-uid=0f501b9c-ea87-4b6f-935a-8927e4b98338;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=staffeln-db-init;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7589c109d9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=41 identity=2026 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=0f501b9c-ea87-4b6f-935a-8927e4b98338,k8s:batch.kubernetes.io/job-name=staffeln-db-init,k8s:component=db-init,k8s:controller-uid=0f501b9c-ea87-4b6f-935a-8927e4b98338,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-init,k8s:release_group=staffeln" ipv4=10.0.0.66 ipv6= k8sPodName=openstack/staffeln-db-init-lrnhh oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7589c109d9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=41 identity=2026 ipv4=10.0.0.66 ipv6= k8sPodName=openstack/staffeln-db-init-lrnhh subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=998a76fa92 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=70 identity=42591 ipv4=10.0.0.4 ipv6= k8sPodName=openstack/staffeln-api-6487ccd844-bb48x subsys=endpoint level=info msg="Successful endpoint creation" containerID=998a76fa92 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=70 identity=42591 ipv4=10.0.0.4 ipv6= k8sPodName=openstack/staffeln-api-6487ccd844-bb48x subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=606980980e datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1422 identity=42174 ipv4=10.0.0.175 ipv6= k8sPodName=openstack/staffeln-conductor-657f45b9f-d22v7 subsys=endpoint level=info msg="Successful endpoint creation" containerID=606980980e datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1422 identity=42174 ipv4=10.0.0.175 ipv6= k8sPodName=openstack/staffeln-conductor-657f45b9f-d22v7 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=7589c109d9 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=41 identity=2026 ipv4=10.0.0.66 ipv6= k8sPodName=openstack/staffeln-db-init-lrnhh subsys=endpoint level=info msg="Successful endpoint creation" containerID=7589c109d9 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=41 identity=2026 ipv4=10.0.0.66 ipv6= k8sPodName=openstack/staffeln-db-init-lrnhh subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=7589c109d9 endpointID=41 k8sNamespace=openstack k8sPodName=staffeln-db-init-lrnhh subsys=daemon level=info msg="Releasing key" key="[k8s:application=staffeln k8s:batch.kubernetes.io/controller-uid=0f501b9c-ea87-4b6f-935a-8927e4b98338 k8s:batch.kubernetes.io/job-name=staffeln-db-init k8s:component=db-init k8s:controller-uid=0f501b9c-ea87-4b6f-935a-8927e4b98338 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=staffeln-db-init k8s:release_group=staffeln]" subsys=allocator level=info msg="Removed endpoint" containerID=7589c109d9 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=41 identity=2026 ipv4=10.0.0.66 ipv6= k8sPodName=openstack/staffeln-db-init-lrnhh subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.234 cf6f07fc-8f69-4618-aa3b-6c132b500465 default }" containerID=5863d0a3ec701de042ac7a061898aa0b17d980b5f7d95bd864109680c5f0d045 datapathConfiguration="&{false false false false false }" interface=lxc8692da8262d0 k8sPodName=openstack/staffeln-db-sync-j5f96 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5863d0a3ec datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3336 ipv4=10.0.0.234 ipv6= k8sPodName=openstack/staffeln-db-sync-j5f96 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5863d0a3ec datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3336 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=27eca585-0ac8-447e-be69-693639fcfe94,k8s:batch.kubernetes.io/job-name=staffeln-db-sync,k8s:component=db-sync,k8s:controller-uid=27eca585-0ac8-447e-be69-693639fcfe94,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-sync,k8s:release_group=staffeln" ipv4=10.0.0.234 ipv6= k8sPodName=openstack/staffeln-db-sync-j5f96 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:batch.kubernetes.io/controller-uid=27eca585-0ac8-447e-be69-693639fcfe94;k8s:batch.kubernetes.io/job-name=staffeln-db-sync;k8s:component=db-sync;k8s:controller-uid=27eca585-0ac8-447e-be69-693639fcfe94;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=staffeln-db-sync;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5863d0a3ec datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3336 identity=51423 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=27eca585-0ac8-447e-be69-693639fcfe94,k8s:batch.kubernetes.io/job-name=staffeln-db-sync,k8s:component=db-sync,k8s:controller-uid=27eca585-0ac8-447e-be69-693639fcfe94,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-sync,k8s:release_group=staffeln" ipv4=10.0.0.234 ipv6= k8sPodName=openstack/staffeln-db-sync-j5f96 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5863d0a3ec datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3336 identity=51423 ipv4=10.0.0.234 ipv6= k8sPodName=openstack/staffeln-db-sync-j5f96 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=5863d0a3ec datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=3336 identity=51423 ipv4=10.0.0.234 ipv6= k8sPodName=openstack/staffeln-db-sync-j5f96 subsys=endpoint level=info msg="Successful endpoint creation" containerID=5863d0a3ec datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3336 identity=51423 ipv4=10.0.0.234 ipv6= k8sPodName=openstack/staffeln-db-sync-j5f96 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=5863d0a3ec endpointID=3336 k8sNamespace=openstack k8sPodName=staffeln-db-sync-j5f96 subsys=daemon level=info msg="Releasing key" key="[k8s:application=staffeln k8s:batch.kubernetes.io/controller-uid=27eca585-0ac8-447e-be69-693639fcfe94 k8s:batch.kubernetes.io/job-name=staffeln-db-sync k8s:component=db-sync k8s:controller-uid=27eca585-0ac8-447e-be69-693639fcfe94 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=staffeln-db-sync k8s:release_group=staffeln]" subsys=allocator level=info msg="Removed endpoint" containerID=5863d0a3ec datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3336 identity=51423 ipv4=10.0.0.234 ipv6= k8sPodName=openstack/staffeln-db-sync-j5f96 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.78 61cc04be-be4c-4c4e-aa52-8c68a5a90ba9 default }" containerID=8eddd2b4bfed7b73cac3311707133d40450ca479be3e0b935dba4e61296fa465 datapathConfiguration="&{false false false false false }" interface=lxcb3a375596c08 k8sPodName=local-path-storage/helper-pod-create-pvc-191ff5ee-8cc0-4ba8-8571-1c8696becfc1 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8eddd2b4bf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2841 ipv4=10.0.0.78 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-191ff5ee-8cc0-4ba8-8571-1c8696becfc1 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8eddd2b4bf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2841 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.78 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-191ff5ee-8cc0-4ba8-8571-1c8696becfc1 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8eddd2b4bf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2841 identity=31342 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.78 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-191ff5ee-8cc0-4ba8-8571-1c8696becfc1 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8eddd2b4bf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2841 identity=31342 ipv4=10.0.0.78 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-191ff5ee-8cc0-4ba8-8571-1c8696becfc1 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=8eddd2b4bf datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2841 identity=31342 ipv4=10.0.0.78 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-191ff5ee-8cc0-4ba8-8571-1c8696becfc1 subsys=endpoint level=info msg="Successful endpoint creation" containerID=8eddd2b4bf datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2841 identity=31342 ipv4=10.0.0.78 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-191ff5ee-8cc0-4ba8-8571-1c8696becfc1 subsys=daemon level=info msg="Delete endpoint request" containerID=8eddd2b4bf endpointID=2841 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-191ff5ee-8cc0-4ba8-8571-1c8696becfc1 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=8eddd2b4bf datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2841 identity=31342 ipv4=10.0.0.78 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-191ff5ee-8cc0-4ba8-8571-1c8696becfc1 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.121 8d7b8be4-5e89-4523-ba2d-63dac3bdcbe4 default }" containerID=7ea062e22d90deac83d3b74b5d331a7dbc571c0450f26c38005f8024373de29d datapathConfiguration="&{false false false false false }" interface=lxc36de319ae7f1 k8sPodName=openstack/rabbitmq-cinder-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7ea062e22d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1931 ipv4=10.0.0.121 ipv6= k8sPodName=openstack/rabbitmq-cinder-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7ea062e22d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1931 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-cinder,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cinder-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-cinder-server-0" ipv4=10.0.0.121 ipv6= k8sPodName=openstack/rabbitmq-cinder-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-cinder;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cinder-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-cinder-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7ea062e22d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1931 identity=16914 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-cinder,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cinder-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-cinder-server-0" ipv4=10.0.0.121 ipv6= k8sPodName=openstack/rabbitmq-cinder-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=7ea062e22d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1931 identity=16914 ipv4=10.0.0.121 ipv6= k8sPodName=openstack/rabbitmq-cinder-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=7ea062e22d datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1931 identity=16914 ipv4=10.0.0.121 ipv6= k8sPodName=openstack/rabbitmq-cinder-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=7ea062e22d datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1931 identity=16914 ipv4=10.0.0.121 ipv6= k8sPodName=openstack/rabbitmq-cinder-server-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.62 0588826e-b5d7-4807-819d-47619d5785b9 default }" containerID=477825909ef27a884ed94801066becf3ab1b890a1fa2a318acd77a56cefc96f5 datapathConfiguration="&{false false false false false }" interface=lxca8e5c4aff371 k8sPodName=openstack/cinder-scheduler-7467d74cd7-dbp5g labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=477825909e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2459 ipv4=10.0.0.62 ipv6= k8sPodName=openstack/cinder-scheduler-7467d74cd7-dbp5g subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=477825909e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2459 identityLabels="k8s:application=cinder,k8s:component=scheduler,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-scheduler,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=cinder" ipv4=10.0.0.62 ipv6= k8sPodName=openstack/cinder-scheduler-7467d74cd7-dbp5g subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Create endpoint request" addressing="&{10.0.0.233 5868fc8b-b83d-4fff-b4b0-c821045e149d default }" containerID=788b99e3851d30424d21ba988b60490ecf50929056aa72cb603bd64122fa6638 datapathConfiguration="&{false false false false false }" interface=lxccb20c3ddadc7 k8sPodName=openstack/cinder-api-c54c56c5d-rp9c5 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=788b99e385 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=889 ipv4=10.0.0.233 ipv6= k8sPodName=openstack/cinder-api-c54c56c5d-rp9c5 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=788b99e385 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=889 identityLabels="k8s:application=cinder,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=cinder" ipv4=10.0.0.233 ipv6= k8sPodName=openstack/cinder-api-c54c56c5d-rp9c5 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:component=scheduler;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-scheduler;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=cinder;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=477825909e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2459 identity=15604 identityLabels="k8s:application=cinder,k8s:component=scheduler,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-scheduler,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=cinder" ipv4=10.0.0.62 ipv6= k8sPodName=openstack/cinder-scheduler-7467d74cd7-dbp5g oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=477825909e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2459 identity=15604 ipv4=10.0.0.62 ipv6= k8sPodName=openstack/cinder-scheduler-7467d74cd7-dbp5g subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Invalid state transition skipped" containerID=788b99e385 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=889 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.233 ipv6= k8sPodName=openstack/cinder-api-c54c56c5d-rp9c5 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=788b99e385 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=889 identity=2589 identityLabels="k8s:application=cinder,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=cinder" ipv4=10.0.0.233 ipv6= k8sPodName=openstack/cinder-api-c54c56c5d-rp9c5 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=788b99e385 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=889 identity=2589 ipv4=10.0.0.233 ipv6= k8sPodName=openstack/cinder-api-c54c56c5d-rp9c5 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.33 30fba2f0-2555-4005-8fe2-0a5c455ecba4 default }" containerID=181c89af2906d88891a6c7441b3cef372a1597857739ebb0e10faad7e05179c2 datapathConfiguration="&{false false false false false }" interface=lxc621a74bf3990 k8sPodName=openstack/cinder-db-init-zvzng labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=181c89af29 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2164 ipv4=10.0.0.33 ipv6= k8sPodName=openstack/cinder-db-init-zvzng subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=181c89af29 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2164 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=67eb8bc8-34d0-44a1-af7b-2dd06d37b133,k8s:batch.kubernetes.io/job-name=cinder-db-init,k8s:component=db-init,k8s:controller-uid=67eb8bc8-34d0-44a1-af7b-2dd06d37b133,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-db-init,k8s:release_group=cinder" ipv4=10.0.0.33 ipv6= k8sPodName=openstack/cinder-db-init-zvzng subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=67eb8bc8-34d0-44a1-af7b-2dd06d37b133;k8s:batch.kubernetes.io/job-name=cinder-db-init;k8s:component=db-init;k8s:controller-uid=67eb8bc8-34d0-44a1-af7b-2dd06d37b133;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-db-init;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=181c89af29 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2164 identity=51501 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=67eb8bc8-34d0-44a1-af7b-2dd06d37b133,k8s:batch.kubernetes.io/job-name=cinder-db-init,k8s:component=db-init,k8s:controller-uid=67eb8bc8-34d0-44a1-af7b-2dd06d37b133,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-db-init,k8s:release_group=cinder" ipv4=10.0.0.33 ipv6= k8sPodName=openstack/cinder-db-init-zvzng oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=181c89af29 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2164 identity=51501 ipv4=10.0.0.33 ipv6= k8sPodName=openstack/cinder-db-init-zvzng subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=788b99e385 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=889 identity=2589 ipv4=10.0.0.233 ipv6= k8sPodName=openstack/cinder-api-c54c56c5d-rp9c5 subsys=endpoint level=info msg="Successful endpoint creation" containerID=788b99e385 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=889 identity=2589 ipv4=10.0.0.233 ipv6= k8sPodName=openstack/cinder-api-c54c56c5d-rp9c5 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=477825909e datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2459 identity=15604 ipv4=10.0.0.62 ipv6= k8sPodName=openstack/cinder-scheduler-7467d74cd7-dbp5g subsys=endpoint level=info msg="Successful endpoint creation" containerID=477825909e datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2459 identity=15604 ipv4=10.0.0.62 ipv6= k8sPodName=openstack/cinder-scheduler-7467d74cd7-dbp5g subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=181c89af29 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2164 identity=51501 ipv4=10.0.0.33 ipv6= k8sPodName=openstack/cinder-db-init-zvzng subsys=endpoint level=info msg="Successful endpoint creation" containerID=181c89af29 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2164 identity=51501 ipv4=10.0.0.33 ipv6= k8sPodName=openstack/cinder-db-init-zvzng subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=181c89af29 endpointID=2164 k8sNamespace=openstack k8sPodName=cinder-db-init-zvzng subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=67eb8bc8-34d0-44a1-af7b-2dd06d37b133 k8s:batch.kubernetes.io/job-name=cinder-db-init k8s:component=db-init k8s:controller-uid=67eb8bc8-34d0-44a1-af7b-2dd06d37b133 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-db-init k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=181c89af29 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2164 identity=51501 ipv4=10.0.0.33 ipv6= k8sPodName=openstack/cinder-db-init-zvzng subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.80 078556a7-ef5d-4a42-b96c-ead54bd22d51 default }" containerID=9fa9df512a66e28f634d5d4d75154afcc2297eaaefd29f1409df7f82e23e0378 datapathConfiguration="&{false false false false false }" interface=lxca9f985cb4506 k8sPodName=openstack/cinder-db-sync-n6sg4 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9fa9df512a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3216 ipv4=10.0.0.80 ipv6= k8sPodName=openstack/cinder-db-sync-n6sg4 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9fa9df512a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3216 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=94fb3940-f512-41de-adf8-3a278b446fcb,k8s:batch.kubernetes.io/job-name=cinder-db-sync,k8s:component=db-sync,k8s:controller-uid=94fb3940-f512-41de-adf8-3a278b446fcb,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-db-sync,k8s:release_group=cinder" ipv4=10.0.0.80 ipv6= k8sPodName=openstack/cinder-db-sync-n6sg4 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=94fb3940-f512-41de-adf8-3a278b446fcb;k8s:batch.kubernetes.io/job-name=cinder-db-sync;k8s:component=db-sync;k8s:controller-uid=94fb3940-f512-41de-adf8-3a278b446fcb;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-db-sync;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9fa9df512a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3216 identity=21359 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=94fb3940-f512-41de-adf8-3a278b446fcb,k8s:batch.kubernetes.io/job-name=cinder-db-sync,k8s:component=db-sync,k8s:controller-uid=94fb3940-f512-41de-adf8-3a278b446fcb,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-db-sync,k8s:release_group=cinder" ipv4=10.0.0.80 ipv6= k8sPodName=openstack/cinder-db-sync-n6sg4 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9fa9df512a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3216 identity=21359 ipv4=10.0.0.80 ipv6= k8sPodName=openstack/cinder-db-sync-n6sg4 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=9fa9df512a datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=3216 identity=21359 ipv4=10.0.0.80 ipv6= k8sPodName=openstack/cinder-db-sync-n6sg4 subsys=endpoint level=info msg="Successful endpoint creation" containerID=9fa9df512a datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3216 identity=21359 ipv4=10.0.0.80 ipv6= k8sPodName=openstack/cinder-db-sync-n6sg4 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=9fa9df512a endpointID=3216 k8sNamespace=openstack k8sPodName=cinder-db-sync-n6sg4 subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=94fb3940-f512-41de-adf8-3a278b446fcb k8s:batch.kubernetes.io/job-name=cinder-db-sync k8s:component=db-sync k8s:controller-uid=94fb3940-f512-41de-adf8-3a278b446fcb k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-db-sync k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=9fa9df512a datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3216 identity=21359 ipv4=10.0.0.80 ipv6= k8sPodName=openstack/cinder-db-sync-n6sg4 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.253 d539b3e5-d4e6-4d5b-8aca-5fe7b9c3a7d8 default }" containerID=80c5983bdb20a01334e4e17d975aec21f18bae87b0a1169f9000ba2ea236908d datapathConfiguration="&{false false false false false }" interface=lxc71e117a1cac3 k8sPodName=openstack/cinder-rabbit-init-bphvx labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=80c5983bdb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=576 ipv4=10.0.0.253 ipv6= k8sPodName=openstack/cinder-rabbit-init-bphvx subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=80c5983bdb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=576 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=f68f01c8-c81f-4df2-b565-147489288a85,k8s:batch.kubernetes.io/job-name=cinder-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=f68f01c8-c81f-4df2-b565-147489288a85,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-rabbit-init,k8s:release_group=cinder" ipv4=10.0.0.253 ipv6= k8sPodName=openstack/cinder-rabbit-init-bphvx subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=f68f01c8-c81f-4df2-b565-147489288a85;k8s:batch.kubernetes.io/job-name=cinder-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=f68f01c8-c81f-4df2-b565-147489288a85;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-rabbit-init;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=80c5983bdb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=576 identity=24790 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=f68f01c8-c81f-4df2-b565-147489288a85,k8s:batch.kubernetes.io/job-name=cinder-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=f68f01c8-c81f-4df2-b565-147489288a85,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-rabbit-init,k8s:release_group=cinder" ipv4=10.0.0.253 ipv6= k8sPodName=openstack/cinder-rabbit-init-bphvx oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=80c5983bdb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=576 identity=24790 ipv4=10.0.0.253 ipv6= k8sPodName=openstack/cinder-rabbit-init-bphvx subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=80c5983bdb datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=576 identity=24790 ipv4=10.0.0.253 ipv6= k8sPodName=openstack/cinder-rabbit-init-bphvx subsys=endpoint level=info msg="Successful endpoint creation" containerID=80c5983bdb datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=576 identity=24790 ipv4=10.0.0.253 ipv6= k8sPodName=openstack/cinder-rabbit-init-bphvx subsys=daemon level=info msg="Delete endpoint request" containerID=80c5983bdb endpointID=576 k8sNamespace=openstack k8sPodName=cinder-rabbit-init-bphvx subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=f68f01c8-c81f-4df2-b565-147489288a85 k8s:batch.kubernetes.io/job-name=cinder-rabbit-init k8s:component=rabbit-init k8s:controller-uid=f68f01c8-c81f-4df2-b565-147489288a85 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-rabbit-init k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=80c5983bdb datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=576 identity=24790 ipv4=10.0.0.253 ipv6= k8sPodName=openstack/cinder-rabbit-init-bphvx subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.173 b74b79ee-6805-43d7-9be1-ceb475a3e698 default }" containerID=0f2168b88f106e8ddbee6764127286ca6683ad24d737ff6714f9b0585a63a6cd datapathConfiguration="&{false false false false false }" interface=lxca19c6bb76676 k8sPodName=openstack/cinder-ks-service-rm6z2 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0f2168b88f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2292 ipv4=10.0.0.173 ipv6= k8sPodName=openstack/cinder-ks-service-rm6z2 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0f2168b88f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2292 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=1207f175-084b-475d-9caf-9dba5cab098a,k8s:batch.kubernetes.io/job-name=cinder-ks-service,k8s:component=ks-service,k8s:controller-uid=1207f175-084b-475d-9caf-9dba5cab098a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-ks-service,k8s:release_group=cinder" ipv4=10.0.0.173 ipv6= k8sPodName=openstack/cinder-ks-service-rm6z2 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=1207f175-084b-475d-9caf-9dba5cab098a;k8s:batch.kubernetes.io/job-name=cinder-ks-service;k8s:component=ks-service;k8s:controller-uid=1207f175-084b-475d-9caf-9dba5cab098a;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-ks-service;k8s:release_group=cinder;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=0f2168b88f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2292 identity=2586 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=1207f175-084b-475d-9caf-9dba5cab098a,k8s:batch.kubernetes.io/job-name=cinder-ks-service,k8s:component=ks-service,k8s:controller-uid=1207f175-084b-475d-9caf-9dba5cab098a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-ks-service,k8s:release_group=cinder" ipv4=10.0.0.173 ipv6= k8sPodName=openstack/cinder-ks-service-rm6z2 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0f2168b88f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2292 identity=2586 ipv4=10.0.0.173 ipv6= k8sPodName=openstack/cinder-ks-service-rm6z2 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=0f2168b88f datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2292 identity=2586 ipv4=10.0.0.173 ipv6= k8sPodName=openstack/cinder-ks-service-rm6z2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=0f2168b88f datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2292 identity=2586 ipv4=10.0.0.173 ipv6= k8sPodName=openstack/cinder-ks-service-rm6z2 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=0f2168b88f endpointID=2292 k8sNamespace=openstack k8sPodName=cinder-ks-service-rm6z2 subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=1207f175-084b-475d-9caf-9dba5cab098a k8s:batch.kubernetes.io/job-name=cinder-ks-service k8s:component=ks-service k8s:controller-uid=1207f175-084b-475d-9caf-9dba5cab098a k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-ks-service k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=0f2168b88f datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2292 identity=2586 ipv4=10.0.0.173 ipv6= k8sPodName=openstack/cinder-ks-service-rm6z2 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.17 60748abd-27c2-44a9-877a-f105f92ee8ef default }" containerID=dfe795fc424f491af94e2eb7d0b6ed0bf3c403595eda9db644b4c25343f57546 datapathConfiguration="&{false false false false false }" interface=lxca41628cc4787 k8sPodName=openstack/cinder-ks-endpoints-98qwz labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=dfe795fc42 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1367 ipv4=10.0.0.17 ipv6= k8sPodName=openstack/cinder-ks-endpoints-98qwz subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=dfe795fc42 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1367 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=56a08d2d-f38e-48d8-84de-a6e2a2bfb40f,k8s:batch.kubernetes.io/job-name=cinder-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=56a08d2d-f38e-48d8-84de-a6e2a2bfb40f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-ks-endpoints,k8s:release_group=cinder" ipv4=10.0.0.17 ipv6= k8sPodName=openstack/cinder-ks-endpoints-98qwz subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=dfe795fc42 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1367 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.17 ipv6= k8sPodName=openstack/cinder-ks-endpoints-98qwz line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=56a08d2d-f38e-48d8-84de-a6e2a2bfb40f;k8s:batch.kubernetes.io/job-name=cinder-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=56a08d2d-f38e-48d8-84de-a6e2a2bfb40f;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-ks-endpoints;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=dfe795fc42 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1367 identity=52564 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=56a08d2d-f38e-48d8-84de-a6e2a2bfb40f,k8s:batch.kubernetes.io/job-name=cinder-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=56a08d2d-f38e-48d8-84de-a6e2a2bfb40f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-ks-endpoints,k8s:release_group=cinder" ipv4=10.0.0.17 ipv6= k8sPodName=openstack/cinder-ks-endpoints-98qwz oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=dfe795fc42 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1367 identity=52564 ipv4=10.0.0.17 ipv6= k8sPodName=openstack/cinder-ks-endpoints-98qwz subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=dfe795fc42 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1367 identity=52564 ipv4=10.0.0.17 ipv6= k8sPodName=openstack/cinder-ks-endpoints-98qwz subsys=endpoint level=info msg="Successful endpoint creation" containerID=dfe795fc42 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1367 identity=52564 ipv4=10.0.0.17 ipv6= k8sPodName=openstack/cinder-ks-endpoints-98qwz subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=dfe795fc42 endpointID=1367 k8sNamespace=openstack k8sPodName=cinder-ks-endpoints-98qwz subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=56a08d2d-f38e-48d8-84de-a6e2a2bfb40f k8s:batch.kubernetes.io/job-name=cinder-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=56a08d2d-f38e-48d8-84de-a6e2a2bfb40f k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-ks-endpoints k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=dfe795fc42 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1367 identity=52564 ipv4=10.0.0.17 ipv6= k8sPodName=openstack/cinder-ks-endpoints-98qwz subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.242 545827e8-4083-4ed1-ac90-640287a7cbe7 default }" containerID=68238d71f74dde55bb0de0618cda3cf089f90203663bc57e91ffd98159e04bbd datapathConfiguration="&{false false false false false }" interface=lxc8cb8f96c8816 k8sPodName=openstack/cinder-ks-user-jpll4 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=68238d71f7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3184 ipv4=10.0.0.242 ipv6= k8sPodName=openstack/cinder-ks-user-jpll4 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=68238d71f7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3184 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=daf2163d-a0f6-4b21-9979-7481b2bd3656,k8s:batch.kubernetes.io/job-name=cinder-ks-user,k8s:component=ks-user,k8s:controller-uid=daf2163d-a0f6-4b21-9979-7481b2bd3656,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-ks-user,k8s:release_group=cinder" ipv4=10.0.0.242 ipv6= k8sPodName=openstack/cinder-ks-user-jpll4 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=daf2163d-a0f6-4b21-9979-7481b2bd3656;k8s:batch.kubernetes.io/job-name=cinder-ks-user;k8s:component=ks-user;k8s:controller-uid=daf2163d-a0f6-4b21-9979-7481b2bd3656;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-ks-user;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=68238d71f7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3184 identity=24260 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=daf2163d-a0f6-4b21-9979-7481b2bd3656,k8s:batch.kubernetes.io/job-name=cinder-ks-user,k8s:component=ks-user,k8s:controller-uid=daf2163d-a0f6-4b21-9979-7481b2bd3656,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-ks-user,k8s:release_group=cinder" ipv4=10.0.0.242 ipv6= k8sPodName=openstack/cinder-ks-user-jpll4 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=68238d71f7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3184 identity=24260 ipv4=10.0.0.242 ipv6= k8sPodName=openstack/cinder-ks-user-jpll4 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=68238d71f7 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=3184 identity=24260 ipv4=10.0.0.242 ipv6= k8sPodName=openstack/cinder-ks-user-jpll4 subsys=endpoint level=info msg="Successful endpoint creation" containerID=68238d71f7 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3184 identity=24260 ipv4=10.0.0.242 ipv6= k8sPodName=openstack/cinder-ks-user-jpll4 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=68238d71f7 endpointID=3184 k8sNamespace=openstack k8sPodName=cinder-ks-user-jpll4 subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=daf2163d-a0f6-4b21-9979-7481b2bd3656 k8s:batch.kubernetes.io/job-name=cinder-ks-user k8s:component=ks-user k8s:controller-uid=daf2163d-a0f6-4b21-9979-7481b2bd3656 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-ks-user k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=68238d71f7 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3184 identity=24260 ipv4=10.0.0.242 ipv6= k8sPodName=openstack/cinder-ks-user-jpll4 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.75 d12e88a9-e6c1-4d68-b97f-9c92bb138ad7 default }" containerID=0fee826c371c99656a98629371710ac3be54c39c4aeb96f9fd5de429525e91c0 datapathConfiguration="&{false false false false false }" interface=lxc4e37a94653ef k8sPodName=openstack/cinder-backup-storage-init-6xhw4 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0fee826c37 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1743 ipv4=10.0.0.75 ipv6= k8sPodName=openstack/cinder-backup-storage-init-6xhw4 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0fee826c37 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1743 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=853eb045-00a0-402c-8dc8-667ea698608d,k8s:batch.kubernetes.io/job-name=cinder-backup-storage-init,k8s:component=storage-init,k8s:controller-uid=853eb045-00a0-402c-8dc8-667ea698608d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-backup-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-backup-storage-init,k8s:release_group=cinder" ipv4=10.0.0.75 ipv6= k8sPodName=openstack/cinder-backup-storage-init-6xhw4 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=853eb045-00a0-402c-8dc8-667ea698608d;k8s:batch.kubernetes.io/job-name=cinder-backup-storage-init;k8s:component=storage-init;k8s:controller-uid=853eb045-00a0-402c-8dc8-667ea698608d;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-backup-storage-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-backup-storage-init;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0fee826c37 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1743 identity=15026 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=853eb045-00a0-402c-8dc8-667ea698608d,k8s:batch.kubernetes.io/job-name=cinder-backup-storage-init,k8s:component=storage-init,k8s:controller-uid=853eb045-00a0-402c-8dc8-667ea698608d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-backup-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-backup-storage-init,k8s:release_group=cinder" ipv4=10.0.0.75 ipv6= k8sPodName=openstack/cinder-backup-storage-init-6xhw4 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0fee826c37 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1743 identity=15026 ipv4=10.0.0.75 ipv6= k8sPodName=openstack/cinder-backup-storage-init-6xhw4 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=0fee826c37 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1743 identity=15026 ipv4=10.0.0.75 ipv6= k8sPodName=openstack/cinder-backup-storage-init-6xhw4 subsys=endpoint level=info msg="Successful endpoint creation" containerID=0fee826c37 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1743 identity=15026 ipv4=10.0.0.75 ipv6= k8sPodName=openstack/cinder-backup-storage-init-6xhw4 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=0fee826c37 endpointID=1743 k8sNamespace=openstack k8sPodName=cinder-backup-storage-init-6xhw4 subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=853eb045-00a0-402c-8dc8-667ea698608d k8s:batch.kubernetes.io/job-name=cinder-backup-storage-init k8s:component=storage-init k8s:controller-uid=853eb045-00a0-402c-8dc8-667ea698608d k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-backup-storage-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-backup-storage-init k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=0fee826c37 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1743 identity=15026 ipv4=10.0.0.75 ipv6= k8sPodName=openstack/cinder-backup-storage-init-6xhw4 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.83 b039bc6d-4e9f-4976-9b44-ff2aee4d974e default }" containerID=cb66caa5f707206ce6de9a73976b3fdfacfee0df46a228c2ee7f509d75490449 datapathConfiguration="&{false false false false false }" interface=lxc823cf2fe113e k8sPodName=openstack/cinder-create-internal-tenant-hr89p labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=cb66caa5f7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2292 ipv4=10.0.0.83 ipv6= k8sPodName=openstack/cinder-create-internal-tenant-hr89p subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=cb66caa5f7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2292 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=3e1a913e-bf45-4306-8e22-0bd98000a223,k8s:batch.kubernetes.io/job-name=cinder-create-internal-tenant,k8s:component=create-internal-tenant,k8s:controller-uid=3e1a913e-bf45-4306-8e22-0bd98000a223,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-create-internal-tenant,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-create-internal-tenant,k8s:release_group=cinder" ipv4=10.0.0.83 ipv6= k8sPodName=openstack/cinder-create-internal-tenant-hr89p subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=3e1a913e-bf45-4306-8e22-0bd98000a223;k8s:batch.kubernetes.io/job-name=cinder-create-internal-tenant;k8s:component=create-internal-tenant;k8s:controller-uid=3e1a913e-bf45-4306-8e22-0bd98000a223;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-create-internal-tenant;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-create-internal-tenant;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=cb66caa5f7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2292 identity=8414 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=3e1a913e-bf45-4306-8e22-0bd98000a223,k8s:batch.kubernetes.io/job-name=cinder-create-internal-tenant,k8s:component=create-internal-tenant,k8s:controller-uid=3e1a913e-bf45-4306-8e22-0bd98000a223,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-create-internal-tenant,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-create-internal-tenant,k8s:release_group=cinder" ipv4=10.0.0.83 ipv6= k8sPodName=openstack/cinder-create-internal-tenant-hr89p oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=cb66caa5f7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2292 identity=8414 ipv4=10.0.0.83 ipv6= k8sPodName=openstack/cinder-create-internal-tenant-hr89p subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=cb66caa5f7 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2292 identity=8414 ipv4=10.0.0.83 ipv6= k8sPodName=openstack/cinder-create-internal-tenant-hr89p subsys=endpoint level=info msg="Successful endpoint creation" containerID=cb66caa5f7 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2292 identity=8414 ipv4=10.0.0.83 ipv6= k8sPodName=openstack/cinder-create-internal-tenant-hr89p subsys=daemon level=info msg="Delete endpoint request" containerID=cb66caa5f7 endpointID=2292 k8sNamespace=openstack k8sPodName=cinder-create-internal-tenant-hr89p subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=3e1a913e-bf45-4306-8e22-0bd98000a223 k8s:batch.kubernetes.io/job-name=cinder-create-internal-tenant k8s:component=create-internal-tenant k8s:controller-uid=3e1a913e-bf45-4306-8e22-0bd98000a223 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-create-internal-tenant k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-create-internal-tenant k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=cb66caa5f7 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2292 identity=8414 ipv4=10.0.0.83 ipv6= k8sPodName=openstack/cinder-create-internal-tenant-hr89p subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.120 61752e1a-0a5f-4abe-b72c-92e97743d9f7 default }" containerID=ebd81efcba182cb8c871661c197bfd9cdc4d8d2ee6b93d2aa303f5a43f17e937 datapathConfiguration="&{false false false false false }" interface=lxc5f26f13c313f k8sPodName=openstack/cinder-storage-init-4h9m5 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ebd81efcba datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2149 ipv4=10.0.0.120 ipv6= k8sPodName=openstack/cinder-storage-init-4h9m5 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ebd81efcba datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2149 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=73c512f8-39dd-45c1-949f-8fdb1c2b6cb0,k8s:batch.kubernetes.io/job-name=cinder-storage-init,k8s:component=storage-init,k8s:controller-uid=73c512f8-39dd-45c1-949f-8fdb1c2b6cb0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-storage-init,k8s:release_group=cinder" ipv4=10.0.0.120 ipv6= k8sPodName=openstack/cinder-storage-init-4h9m5 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=73c512f8-39dd-45c1-949f-8fdb1c2b6cb0;k8s:batch.kubernetes.io/job-name=cinder-storage-init;k8s:component=storage-init;k8s:controller-uid=73c512f8-39dd-45c1-949f-8fdb1c2b6cb0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-storage-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-storage-init;k8s:release_group=cinder;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=ebd81efcba datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2149 identity=7937 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=73c512f8-39dd-45c1-949f-8fdb1c2b6cb0,k8s:batch.kubernetes.io/job-name=cinder-storage-init,k8s:component=storage-init,k8s:controller-uid=73c512f8-39dd-45c1-949f-8fdb1c2b6cb0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-storage-init,k8s:release_group=cinder" ipv4=10.0.0.120 ipv6= k8sPodName=openstack/cinder-storage-init-4h9m5 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ebd81efcba datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2149 identity=7937 ipv4=10.0.0.120 ipv6= k8sPodName=openstack/cinder-storage-init-4h9m5 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ebd81efcba datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2149 identity=7937 ipv4=10.0.0.120 ipv6= k8sPodName=openstack/cinder-storage-init-4h9m5 subsys=endpoint level=info msg="Successful endpoint creation" containerID=ebd81efcba datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2149 identity=7937 ipv4=10.0.0.120 ipv6= k8sPodName=openstack/cinder-storage-init-4h9m5 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=ebd81efcba endpointID=2149 k8sNamespace=openstack k8sPodName=cinder-storage-init-4h9m5 subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=73c512f8-39dd-45c1-949f-8fdb1c2b6cb0 k8s:batch.kubernetes.io/job-name=cinder-storage-init k8s:component=storage-init k8s:controller-uid=73c512f8-39dd-45c1-949f-8fdb1c2b6cb0 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-storage-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-storage-init k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=ebd81efcba datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2149 identity=7937 ipv4=10.0.0.120 ipv6= k8sPodName=openstack/cinder-storage-init-4h9m5 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.134 f8f5cae7-4e20-46b6-8a4d-0c6bbe92a33f default }" containerID=ffb42ddada0968498077aa11b936c198656093d8cf8641d3b76d1be81bbd018d datapathConfiguration="&{false false false false false }" interface=lxc8b9a07e5faa5 k8sPodName=openstack/cinder-bootstrap-bvrcb labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ffb42ddada datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1461 ipv4=10.0.0.134 ipv6= k8sPodName=openstack/cinder-bootstrap-bvrcb subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ffb42ddada datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1461 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=dbcfd9c6-3bd8-414a-9e7c-6bc09bb6b649,k8s:batch.kubernetes.io/job-name=cinder-bootstrap,k8s:component=bootstrap,k8s:controller-uid=dbcfd9c6-3bd8-414a-9e7c-6bc09bb6b649,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-bootstrap,k8s:release_group=cinder" ipv4=10.0.0.134 ipv6= k8sPodName=openstack/cinder-bootstrap-bvrcb subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=dbcfd9c6-3bd8-414a-9e7c-6bc09bb6b649;k8s:batch.kubernetes.io/job-name=cinder-bootstrap;k8s:component=bootstrap;k8s:controller-uid=dbcfd9c6-3bd8-414a-9e7c-6bc09bb6b649;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-bootstrap;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-bootstrap;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ffb42ddada datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1461 identity=29133 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=dbcfd9c6-3bd8-414a-9e7c-6bc09bb6b649,k8s:batch.kubernetes.io/job-name=cinder-bootstrap,k8s:component=bootstrap,k8s:controller-uid=dbcfd9c6-3bd8-414a-9e7c-6bc09bb6b649,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-bootstrap,k8s:release_group=cinder" ipv4=10.0.0.134 ipv6= k8sPodName=openstack/cinder-bootstrap-bvrcb oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ffb42ddada datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1461 identity=29133 ipv4=10.0.0.134 ipv6= k8sPodName=openstack/cinder-bootstrap-bvrcb subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=ffb42ddada datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1461 identity=29133 ipv4=10.0.0.134 ipv6= k8sPodName=openstack/cinder-bootstrap-bvrcb subsys=endpoint level=info msg="Successful endpoint creation" containerID=ffb42ddada datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1461 identity=29133 ipv4=10.0.0.134 ipv6= k8sPodName=openstack/cinder-bootstrap-bvrcb subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.56 e2343671-f6f3-4fca-ad98-976d6487b497 default }" containerID=ed8ed7a2f9a2a169725358d4b41486bb42507c9d3c36d265cd71891ae449f9aa datapathConfiguration="&{false false false false false }" interface=lxc0595d67385ed k8sPodName=openstack/cinder-volume-84d498db6d-vqg6t labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ed8ed7a2f9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=244 ipv4=10.0.0.56 ipv6= k8sPodName=openstack/cinder-volume-84d498db6d-vqg6t subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ed8ed7a2f9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=244 identityLabels="k8s:application=cinder,k8s:component=volume,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-volume,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=cinder" ipv4=10.0.0.56 ipv6= k8sPodName=openstack/cinder-volume-84d498db6d-vqg6t subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:component=volume;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-volume;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ed8ed7a2f9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=244 identity=9048 identityLabels="k8s:application=cinder,k8s:component=volume,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-volume,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=cinder" ipv4=10.0.0.56 ipv6= k8sPodName=openstack/cinder-volume-84d498db6d-vqg6t oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ed8ed7a2f9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=244 identity=9048 ipv4=10.0.0.56 ipv6= k8sPodName=openstack/cinder-volume-84d498db6d-vqg6t subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=ed8ed7a2f9 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=244 identity=9048 ipv4=10.0.0.56 ipv6= k8sPodName=openstack/cinder-volume-84d498db6d-vqg6t subsys=endpoint level=info msg="Successful endpoint creation" containerID=ed8ed7a2f9 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=244 identity=9048 ipv4=10.0.0.56 ipv6= k8sPodName=openstack/cinder-volume-84d498db6d-vqg6t subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.200 d46cbe09-743a-4a18-b458-5dfda3ac5556 default }" containerID=67c792ee128da358746f3ca1a14b1437c335e370d7a266db681488bd79a5c71c datapathConfiguration="&{false false false false false }" interface=lxc25c9dd4417c5 k8sPodName=openstack/cinder-backup-58b8c5dcf5-vl7zv labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=67c792ee12 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3054 ipv4=10.0.0.200 ipv6= k8sPodName=openstack/cinder-backup-58b8c5dcf5-vl7zv subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=67c792ee12 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3054 identityLabels="k8s:application=cinder,k8s:component=backup,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-backup,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=cinder" ipv4=10.0.0.200 ipv6= k8sPodName=openstack/cinder-backup-58b8c5dcf5-vl7zv subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:component=backup;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-backup;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=67c792ee12 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3054 identity=51262 identityLabels="k8s:application=cinder,k8s:component=backup,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-backup,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=cinder" ipv4=10.0.0.200 ipv6= k8sPodName=openstack/cinder-backup-58b8c5dcf5-vl7zv oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=67c792ee12 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3054 identity=51262 ipv4=10.0.0.200 ipv6= k8sPodName=openstack/cinder-backup-58b8c5dcf5-vl7zv subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=67c792ee12 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=3054 identity=51262 ipv4=10.0.0.200 ipv6= k8sPodName=openstack/cinder-backup-58b8c5dcf5-vl7zv subsys=endpoint level=info msg="Successful endpoint creation" containerID=67c792ee12 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3054 identity=51262 ipv4=10.0.0.200 ipv6= k8sPodName=openstack/cinder-backup-58b8c5dcf5-vl7zv subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=ffb42ddada endpointID=1461 k8sNamespace=openstack k8sPodName=cinder-bootstrap-bvrcb subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=dbcfd9c6-3bd8-414a-9e7c-6bc09bb6b649 k8s:batch.kubernetes.io/job-name=cinder-bootstrap k8s:component=bootstrap k8s:controller-uid=dbcfd9c6-3bd8-414a-9e7c-6bc09bb6b649 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-bootstrap k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-bootstrap k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=ffb42ddada datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1461 identity=29133 ipv4=10.0.0.134 ipv6= k8sPodName=openstack/cinder-bootstrap-bvrcb subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.79 94372bfd-1074-4136-baf3-1ad24aa6889a default }" containerID=1a159360c2bbac8c223d881921d834fb9897630b57019a20ce23834d94c3f702 datapathConfiguration="&{false false false false false }" interface=lxc3a5c8ddcea32 k8sPodName=openstack/placement-api-7df87b58fd-2lrkb labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1a159360c2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1641 ipv4=10.0.0.79 ipv6= k8sPodName=openstack/placement-api-7df87b58fd-2lrkb subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1a159360c2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1641 identityLabels="k8s:application=placement,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=placement" ipv4=10.0.0.79 ipv6= k8sPodName=openstack/placement-api-7df87b58fd-2lrkb subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=placement;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=placement-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=placement;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1a159360c2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1641 identity=53275 identityLabels="k8s:application=placement,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=placement" ipv4=10.0.0.79 ipv6= k8sPodName=openstack/placement-api-7df87b58fd-2lrkb oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1a159360c2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1641 identity=53275 ipv4=10.0.0.79 ipv6= k8sPodName=openstack/placement-api-7df87b58fd-2lrkb subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.250 aecda173-325d-47fb-8236-dc84130cf3cb default }" containerID=b1ab5deedec6e884a2eb857e4385f53c41670affcb58ea1e33ba61740b9fcaab datapathConfiguration="&{false false false false false }" interface=lxcf7a2d30f0cdb k8sPodName=openstack/placement-db-init-6n5t6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b1ab5deede datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1276 ipv4=10.0.0.250 ipv6= k8sPodName=openstack/placement-db-init-6n5t6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b1ab5deede datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1276 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=3b0401e4-919e-42b9-814e-877652f75ef0,k8s:batch.kubernetes.io/job-name=placement-db-init,k8s:component=db-init,k8s:controller-uid=3b0401e4-919e-42b9-814e-877652f75ef0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-db-init,k8s:release_group=placement" ipv4=10.0.0.250 ipv6= k8sPodName=openstack/placement-db-init-6n5t6 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=placement;k8s:batch.kubernetes.io/controller-uid=3b0401e4-919e-42b9-814e-877652f75ef0;k8s:batch.kubernetes.io/job-name=placement-db-init;k8s:component=db-init;k8s:controller-uid=3b0401e4-919e-42b9-814e-877652f75ef0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=placement-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=placement-db-init;k8s:release_group=placement;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b1ab5deede datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1276 identity=20669 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=3b0401e4-919e-42b9-814e-877652f75ef0,k8s:batch.kubernetes.io/job-name=placement-db-init,k8s:component=db-init,k8s:controller-uid=3b0401e4-919e-42b9-814e-877652f75ef0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-db-init,k8s:release_group=placement" ipv4=10.0.0.250 ipv6= k8sPodName=openstack/placement-db-init-6n5t6 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b1ab5deede datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1276 identity=20669 ipv4=10.0.0.250 ipv6= k8sPodName=openstack/placement-db-init-6n5t6 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=1a159360c2 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1641 identity=53275 ipv4=10.0.0.79 ipv6= k8sPodName=openstack/placement-api-7df87b58fd-2lrkb subsys=endpoint level=info msg="Successful endpoint creation" containerID=1a159360c2 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1641 identity=53275 ipv4=10.0.0.79 ipv6= k8sPodName=openstack/placement-api-7df87b58fd-2lrkb subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=b1ab5deede datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1276 identity=20669 ipv4=10.0.0.250 ipv6= k8sPodName=openstack/placement-db-init-6n5t6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=b1ab5deede datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1276 identity=20669 ipv4=10.0.0.250 ipv6= k8sPodName=openstack/placement-db-init-6n5t6 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=b1ab5deede endpointID=1276 k8sNamespace=openstack k8sPodName=placement-db-init-6n5t6 subsys=daemon level=info msg="Releasing key" key="[k8s:application=placement k8s:batch.kubernetes.io/controller-uid=3b0401e4-919e-42b9-814e-877652f75ef0 k8s:batch.kubernetes.io/job-name=placement-db-init k8s:component=db-init k8s:controller-uid=3b0401e4-919e-42b9-814e-877652f75ef0 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=placement-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=placement-db-init k8s:release_group=placement]" subsys=allocator level=info msg="Removed endpoint" containerID=b1ab5deede datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1276 identity=20669 ipv4=10.0.0.250 ipv6= k8sPodName=openstack/placement-db-init-6n5t6 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.220 6648f5f3-d820-4619-bcf8-97bc33a9243d default }" containerID=7939cdf8c64fad4bf6ed177bfd08f96ce15e8ac77eac7c96a7e294d9f0202092 datapathConfiguration="&{false false false false false }" interface=lxce18912a4fe64 k8sPodName=openstack/placement-db-sync-6nt4n labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7939cdf8c6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2842 ipv4=10.0.0.220 ipv6= k8sPodName=openstack/placement-db-sync-6nt4n subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7939cdf8c6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2842 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=88bb2fd9-ecf0-4059-997f-4359e6bb71fa,k8s:batch.kubernetes.io/job-name=placement-db-sync,k8s:component=db-sync,k8s:controller-uid=88bb2fd9-ecf0-4059-997f-4359e6bb71fa,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-db-sync,k8s:release_group=placement" ipv4=10.0.0.220 ipv6= k8sPodName=openstack/placement-db-sync-6nt4n subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=placement;k8s:batch.kubernetes.io/controller-uid=88bb2fd9-ecf0-4059-997f-4359e6bb71fa;k8s:batch.kubernetes.io/job-name=placement-db-sync;k8s:component=db-sync;k8s:controller-uid=88bb2fd9-ecf0-4059-997f-4359e6bb71fa;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=placement-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=placement-db-sync;k8s:release_group=placement;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7939cdf8c6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2842 identity=48054 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=88bb2fd9-ecf0-4059-997f-4359e6bb71fa,k8s:batch.kubernetes.io/job-name=placement-db-sync,k8s:component=db-sync,k8s:controller-uid=88bb2fd9-ecf0-4059-997f-4359e6bb71fa,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-db-sync,k8s:release_group=placement" ipv4=10.0.0.220 ipv6= k8sPodName=openstack/placement-db-sync-6nt4n oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7939cdf8c6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2842 identity=48054 ipv4=10.0.0.220 ipv6= k8sPodName=openstack/placement-db-sync-6nt4n subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=7939cdf8c6 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2842 identity=48054 ipv4=10.0.0.220 ipv6= k8sPodName=openstack/placement-db-sync-6nt4n subsys=endpoint level=info msg="Successful endpoint creation" containerID=7939cdf8c6 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2842 identity=48054 ipv4=10.0.0.220 ipv6= k8sPodName=openstack/placement-db-sync-6nt4n subsys=daemon level=info msg="Delete endpoint request" containerID=7939cdf8c6 endpointID=2842 k8sNamespace=openstack k8sPodName=placement-db-sync-6nt4n subsys=daemon level=info msg="Releasing key" key="[k8s:application=placement k8s:batch.kubernetes.io/controller-uid=88bb2fd9-ecf0-4059-997f-4359e6bb71fa k8s:batch.kubernetes.io/job-name=placement-db-sync k8s:component=db-sync k8s:controller-uid=88bb2fd9-ecf0-4059-997f-4359e6bb71fa k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=placement-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=placement-db-sync k8s:release_group=placement]" subsys=allocator level=info msg="Removed endpoint" containerID=7939cdf8c6 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2842 identity=48054 ipv4=10.0.0.220 ipv6= k8sPodName=openstack/placement-db-sync-6nt4n subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.37 e817c7a3-2871-4a0a-ae85-7ad6e1b2dee5 default }" containerID=e5c42c36f7787bac9c862f495afd01196c33ff8c132277fad3fb5e56d32ad9d7 datapathConfiguration="&{false false false false false }" interface=lxcdd06bebed742 k8sPodName=openstack/placement-ks-service-8zf7h labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e5c42c36f7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1156 ipv4=10.0.0.37 ipv6= k8sPodName=openstack/placement-ks-service-8zf7h subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e5c42c36f7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1156 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=22d9a8db-0267-485f-bcd6-337fdb8deb02,k8s:batch.kubernetes.io/job-name=placement-ks-service,k8s:component=ks-service,k8s:controller-uid=22d9a8db-0267-485f-bcd6-337fdb8deb02,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-ks-service,k8s:release_group=placement" ipv4=10.0.0.37 ipv6= k8sPodName=openstack/placement-ks-service-8zf7h subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=placement;k8s:batch.kubernetes.io/controller-uid=22d9a8db-0267-485f-bcd6-337fdb8deb02;k8s:batch.kubernetes.io/job-name=placement-ks-service;k8s:component=ks-service;k8s:controller-uid=22d9a8db-0267-485f-bcd6-337fdb8deb02;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=placement-ks-service;k8s:release_group=placement;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e5c42c36f7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1156 identity=1201 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=22d9a8db-0267-485f-bcd6-337fdb8deb02,k8s:batch.kubernetes.io/job-name=placement-ks-service,k8s:component=ks-service,k8s:controller-uid=22d9a8db-0267-485f-bcd6-337fdb8deb02,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-ks-service,k8s:release_group=placement" ipv4=10.0.0.37 ipv6= k8sPodName=openstack/placement-ks-service-8zf7h oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e5c42c36f7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1156 identity=1201 ipv4=10.0.0.37 ipv6= k8sPodName=openstack/placement-ks-service-8zf7h subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e5c42c36f7 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1156 identity=1201 ipv4=10.0.0.37 ipv6= k8sPodName=openstack/placement-ks-service-8zf7h subsys=endpoint level=info msg="Successful endpoint creation" containerID=e5c42c36f7 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1156 identity=1201 ipv4=10.0.0.37 ipv6= k8sPodName=openstack/placement-ks-service-8zf7h subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.132 2d669b5e-7fe0-4145-85fc-8ff6da4bf04e default }" containerID=1cdf165bdc198d8c9aa0db71cddd89e08c22193caba7b34d10fa78b7eb825ebd datapathConfiguration="&{false false false false false }" interface=lxcb132f6047b7e k8sPodName=openstack/cinder-volume-usage-audit-29631005-xfl5t labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1cdf165bdc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2211 ipv4=10.0.0.132 ipv6= k8sPodName=openstack/cinder-volume-usage-audit-29631005-xfl5t subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1cdf165bdc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2211 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=197febfb-d5d7-4c47-ac24-84a7a3bc223f,k8s:batch.kubernetes.io/job-name=cinder-volume-usage-audit-29631005,k8s:component=volume-usage-audit,k8s:controller-uid=197febfb-d5d7-4c47-ac24-84a7a3bc223f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-volume-usage-audit,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-volume-usage-audit-29631005,k8s:release_group=cinder" ipv4=10.0.0.132 ipv6= k8sPodName=openstack/cinder-volume-usage-audit-29631005-xfl5t subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=197febfb-d5d7-4c47-ac24-84a7a3bc223f;k8s:batch.kubernetes.io/job-name=cinder-volume-usage-audit-29631005;k8s:component=volume-usage-audit;k8s:controller-uid=197febfb-d5d7-4c47-ac24-84a7a3bc223f;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-volume-usage-audit;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-volume-usage-audit-29631005;k8s:release_group=cinder;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=1cdf165bdc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2211 identity=31181 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=197febfb-d5d7-4c47-ac24-84a7a3bc223f,k8s:batch.kubernetes.io/job-name=cinder-volume-usage-audit-29631005,k8s:component=volume-usage-audit,k8s:controller-uid=197febfb-d5d7-4c47-ac24-84a7a3bc223f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-volume-usage-audit,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-volume-usage-audit-29631005,k8s:release_group=cinder" ipv4=10.0.0.132 ipv6= k8sPodName=openstack/cinder-volume-usage-audit-29631005-xfl5t oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1cdf165bdc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2211 identity=31181 ipv4=10.0.0.132 ipv6= k8sPodName=openstack/cinder-volume-usage-audit-29631005-xfl5t subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=1cdf165bdc datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2211 identity=31181 ipv4=10.0.0.132 ipv6= k8sPodName=openstack/cinder-volume-usage-audit-29631005-xfl5t subsys=endpoint level=info msg="Successful endpoint creation" containerID=1cdf165bdc datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2211 identity=31181 ipv4=10.0.0.132 ipv6= k8sPodName=openstack/cinder-volume-usage-audit-29631005-xfl5t subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=1cdf165bdc endpointID=2211 k8sNamespace=openstack k8sPodName=cinder-volume-usage-audit-29631005-xfl5t subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=197febfb-d5d7-4c47-ac24-84a7a3bc223f k8s:batch.kubernetes.io/job-name=cinder-volume-usage-audit-29631005 k8s:component=volume-usage-audit k8s:controller-uid=197febfb-d5d7-4c47-ac24-84a7a3bc223f k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-volume-usage-audit k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-volume-usage-audit-29631005 k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=1cdf165bdc datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2211 identity=31181 ipv4=10.0.0.132 ipv6= k8sPodName=openstack/cinder-volume-usage-audit-29631005-xfl5t subsys=endpoint level=info msg="Delete endpoint request" containerID=e5c42c36f7 endpointID=1156 k8sNamespace=openstack k8sPodName=placement-ks-service-8zf7h subsys=daemon level=info msg="Releasing key" key="[k8s:application=placement k8s:batch.kubernetes.io/controller-uid=22d9a8db-0267-485f-bcd6-337fdb8deb02 k8s:batch.kubernetes.io/job-name=placement-ks-service k8s:component=ks-service k8s:controller-uid=22d9a8db-0267-485f-bcd6-337fdb8deb02 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=placement-ks-service k8s:release_group=placement]" subsys=allocator level=info msg="Removed endpoint" containerID=e5c42c36f7 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1156 identity=1201 ipv4=10.0.0.37 ipv6= k8sPodName=openstack/placement-ks-service-8zf7h subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.252 ab5d3e7d-3545-414d-b950-deb4644f7fa6 default }" containerID=d94d393e3a9f8f227a9ce27593945f78e3bae994c7fa6860b9ee489bc9ac5877 datapathConfiguration="&{false false false false false }" interface=lxc180ef7ed4ae7 k8sPodName=openstack/placement-ks-user-sgn92 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d94d393e3a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=874 ipv4=10.0.0.252 ipv6= k8sPodName=openstack/placement-ks-user-sgn92 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d94d393e3a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=874 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=72fe0d98-80f6-4840-a55f-5091f5c56274,k8s:batch.kubernetes.io/job-name=placement-ks-user,k8s:component=ks-user,k8s:controller-uid=72fe0d98-80f6-4840-a55f-5091f5c56274,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-ks-user,k8s:release_group=placement" ipv4=10.0.0.252 ipv6= k8sPodName=openstack/placement-ks-user-sgn92 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=placement;k8s:batch.kubernetes.io/controller-uid=72fe0d98-80f6-4840-a55f-5091f5c56274;k8s:batch.kubernetes.io/job-name=placement-ks-user;k8s:component=ks-user;k8s:controller-uid=72fe0d98-80f6-4840-a55f-5091f5c56274;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=placement-ks-user;k8s:release_group=placement;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=d94d393e3a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=874 identity=14852 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=72fe0d98-80f6-4840-a55f-5091f5c56274,k8s:batch.kubernetes.io/job-name=placement-ks-user,k8s:component=ks-user,k8s:controller-uid=72fe0d98-80f6-4840-a55f-5091f5c56274,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-ks-user,k8s:release_group=placement" ipv4=10.0.0.252 ipv6= k8sPodName=openstack/placement-ks-user-sgn92 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d94d393e3a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=874 identity=14852 ipv4=10.0.0.252 ipv6= k8sPodName=openstack/placement-ks-user-sgn92 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d94d393e3a datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=874 identity=14852 ipv4=10.0.0.252 ipv6= k8sPodName=openstack/placement-ks-user-sgn92 subsys=endpoint level=info msg="Successful endpoint creation" containerID=d94d393e3a datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=874 identity=14852 ipv4=10.0.0.252 ipv6= k8sPodName=openstack/placement-ks-user-sgn92 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=d94d393e3a endpointID=874 k8sNamespace=openstack k8sPodName=placement-ks-user-sgn92 subsys=daemon level=info msg="Releasing key" key="[k8s:application=placement k8s:batch.kubernetes.io/controller-uid=72fe0d98-80f6-4840-a55f-5091f5c56274 k8s:batch.kubernetes.io/job-name=placement-ks-user k8s:component=ks-user k8s:controller-uid=72fe0d98-80f6-4840-a55f-5091f5c56274 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=placement-ks-user k8s:release_group=placement]" subsys=allocator level=info msg="Removed endpoint" containerID=d94d393e3a datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=874 identity=14852 ipv4=10.0.0.252 ipv6= k8sPodName=openstack/placement-ks-user-sgn92 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.123 296bba42-ebda-45ff-a143-df5dfcc3fe3e default }" containerID=9c55ee1e062b5ce3c20c28058fefad53ea5496c2422fa5df063525192d6ea0d4 datapathConfiguration="&{false false false false false }" interface=lxc21fe574d72b4 k8sPodName=openstack/placement-ks-endpoints-q28jv labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9c55ee1e06 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3486 ipv4=10.0.0.123 ipv6= k8sPodName=openstack/placement-ks-endpoints-q28jv subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9c55ee1e06 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3486 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=b947f217-42e6-4b53-986d-9384c7bc3549,k8s:batch.kubernetes.io/job-name=placement-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=b947f217-42e6-4b53-986d-9384c7bc3549,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-ks-endpoints,k8s:release_group=placement" ipv4=10.0.0.123 ipv6= k8sPodName=openstack/placement-ks-endpoints-q28jv subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=9c55ee1e06 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3486 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.123 ipv6= k8sPodName=openstack/placement-ks-endpoints-q28jv line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=placement;k8s:batch.kubernetes.io/controller-uid=b947f217-42e6-4b53-986d-9384c7bc3549;k8s:batch.kubernetes.io/job-name=placement-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=b947f217-42e6-4b53-986d-9384c7bc3549;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=placement-ks-endpoints;k8s:release_group=placement;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9c55ee1e06 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3486 identity=35090 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=b947f217-42e6-4b53-986d-9384c7bc3549,k8s:batch.kubernetes.io/job-name=placement-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=b947f217-42e6-4b53-986d-9384c7bc3549,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-ks-endpoints,k8s:release_group=placement" ipv4=10.0.0.123 ipv6= k8sPodName=openstack/placement-ks-endpoints-q28jv oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9c55ee1e06 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3486 identity=35090 ipv4=10.0.0.123 ipv6= k8sPodName=openstack/placement-ks-endpoints-q28jv subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=9c55ee1e06 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=3486 identity=35090 ipv4=10.0.0.123 ipv6= k8sPodName=openstack/placement-ks-endpoints-q28jv subsys=endpoint level=info msg="Successful endpoint creation" containerID=9c55ee1e06 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3486 identity=35090 ipv4=10.0.0.123 ipv6= k8sPodName=openstack/placement-ks-endpoints-q28jv subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=9c55ee1e06 endpointID=3486 k8sNamespace=openstack k8sPodName=placement-ks-endpoints-q28jv subsys=daemon level=info msg="Releasing key" key="[k8s:application=placement k8s:batch.kubernetes.io/controller-uid=b947f217-42e6-4b53-986d-9384c7bc3549 k8s:batch.kubernetes.io/job-name=placement-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=b947f217-42e6-4b53-986d-9384c7bc3549 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=placement-ks-endpoints k8s:release_group=placement]" subsys=allocator level=info msg="Removed endpoint" containerID=9c55ee1e06 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3486 identity=35090 ipv4=10.0.0.123 ipv6= k8sPodName=openstack/placement-ks-endpoints-q28jv subsys=endpoint