level=info msg="Memory available for map entries (0.003% of 67421638656B): 168554096B" subsys=config level=info msg="option bpf-ct-global-tcp-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-ct-global-any-max set by dynamic sizing to 295708" subsys=config level=info msg="option bpf-nat-global-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-neigh-global-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-sock-rev-map-max set by dynamic sizing to 295708" subsys=config level=info msg=" --agent-health-port='9879'" subsys=daemon level=info msg=" --agent-labels=''" subsys=daemon level=info msg=" --agent-liveness-update-interval='1s'" subsys=daemon level=info msg=" --agent-not-ready-taint-key='node.cilium.io/agent-not-ready'" subsys=daemon level=info msg=" --allocator-list-timeout='3m0s'" subsys=daemon level=info msg=" --allow-icmp-frag-needed='true'" subsys=daemon level=info msg=" --allow-localhost='auto'" subsys=daemon level=info msg=" --annotate-k8s-node='false'" subsys=daemon level=info msg=" --api-rate-limit=''" subsys=daemon level=info msg=" --arping-refresh-period='30s'" subsys=daemon level=info msg=" --auto-create-cilium-node-resource='true'" subsys=daemon level=info msg=" --auto-direct-node-routes='false'" subsys=daemon level=info msg=" --bgp-announce-lb-ip='false'" subsys=daemon level=info msg=" --bgp-announce-pod-cidr='false'" subsys=daemon level=info msg=" --bgp-config-path='/var/lib/cilium/bgp/config.yaml'" subsys=daemon level=info msg=" --bpf-auth-map-max='524288'" subsys=daemon level=info msg=" --bpf-ct-global-any-max='262144'" subsys=daemon level=info msg=" --bpf-ct-global-tcp-max='524288'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-any='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp='6h0m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp-fin='10s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp-syn='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-any='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-tcp='6h0m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-tcp-grace='1m0s'" subsys=daemon level=info msg=" --bpf-filter-priority='1'" subsys=daemon level=info msg=" --bpf-fragments-map-max='8192'" subsys=daemon level=info msg=" --bpf-lb-acceleration='disabled'" subsys=daemon level=info msg=" --bpf-lb-affinity-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-algorithm='random'" subsys=daemon level=info msg=" --bpf-lb-dev-ip-addr-inherit=''" subsys=daemon level=info msg=" --bpf-lb-dsr-dispatch='opt'" subsys=daemon level=info msg=" --bpf-lb-dsr-l4-xlate='frontend'" subsys=daemon level=info msg=" --bpf-lb-external-clusterip='false'" subsys=daemon level=info msg=" --bpf-lb-maglev-hash-seed='JLfvgnHc2kaSUFaI'" subsys=daemon level=info msg=" --bpf-lb-maglev-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-maglev-table-size='16381'" subsys=daemon level=info msg=" --bpf-lb-map-max='65536'" subsys=daemon level=info msg=" --bpf-lb-mode='snat'" subsys=daemon level=info msg=" --bpf-lb-rev-nat-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-rss-ipv4-src-cidr=''" subsys=daemon level=info msg=" --bpf-lb-rss-ipv6-src-cidr=''" subsys=daemon level=info msg=" --bpf-lb-service-backend-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-service-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-sock='false'" subsys=daemon level=info msg=" --bpf-lb-sock-hostns-only='false'" subsys=daemon level=info msg=" --bpf-lb-source-range-map-max='0'" subsys=daemon level=info msg=" --bpf-map-dynamic-size-ratio='0.0025'" subsys=daemon level=info msg=" --bpf-map-event-buffers=''" subsys=daemon level=info msg=" --bpf-nat-global-max='524288'" subsys=daemon level=info msg=" --bpf-neigh-global-max='524288'" subsys=daemon level=info msg=" --bpf-policy-map-full-reconciliation-interval='15m0s'" subsys=daemon level=info msg=" --bpf-policy-map-max='16384'" subsys=daemon level=info msg=" --bpf-root='/sys/fs/bpf'" subsys=daemon level=info msg=" --bpf-sock-rev-map-max='262144'" subsys=daemon level=info msg=" --bypass-ip-availability-upon-restore='false'" subsys=daemon level=info msg=" --certificates-directory='/var/run/cilium/certs'" subsys=daemon level=info msg=" --cflags=''" subsys=daemon level=info msg=" --cgroup-root='/run/cilium/cgroupv2'" subsys=daemon level=info msg=" --cilium-endpoint-gc-interval='5m0s'" subsys=daemon level=info msg=" --cluster-health-port='4240'" subsys=daemon level=info msg=" --cluster-id='0'" subsys=daemon level=info msg=" --cluster-name='default'" subsys=daemon level=info msg=" --cluster-pool-ipv4-cidr='10.0.0.0/8'" subsys=daemon level=info msg=" --cluster-pool-ipv4-mask-size='24'" subsys=daemon level=info msg=" --clustermesh-config='/var/lib/cilium/clustermesh/'" subsys=daemon level=info msg=" --clustermesh-ip-identities-sync-timeout='1m0s'" subsys=daemon level=info msg=" --cmdref=''" subsys=daemon level=info msg=" --cni-chaining-mode='none'" subsys=daemon level=info msg=" --cni-chaining-target=''" subsys=daemon level=info msg=" --cni-exclusive='true'" subsys=daemon level=info msg=" --cni-external-routing='false'" subsys=daemon level=info msg=" --cni-log-file='/var/run/cilium/cilium-cni.log'" subsys=daemon level=info msg=" --cnp-node-status-gc-interval='0s'" subsys=daemon level=info msg=" --config=''" subsys=daemon level=info msg=" --config-dir='/tmp/cilium/config-map'" subsys=daemon level=info msg=" --config-sources='config-map:kube-system/cilium-config'" subsys=daemon level=info msg=" --conntrack-gc-interval='0s'" subsys=daemon level=info msg=" --conntrack-gc-max-interval='0s'" subsys=daemon level=info msg=" --crd-wait-timeout='5m0s'" subsys=daemon level=info msg=" --custom-cni-conf='false'" subsys=daemon level=info msg=" --datapath-mode='veth'" subsys=daemon level=info msg=" --debug='false'" subsys=daemon level=info msg=" --debug-verbose=''" subsys=daemon level=info msg=" --derive-masquerade-ip-addr-from-device=''" subsys=daemon level=info msg=" --devices=''" subsys=daemon level=info msg=" --direct-routing-device=''" subsys=daemon level=info msg=" --disable-cnp-status-updates='true'" subsys=daemon level=info msg=" --disable-endpoint-crd='false'" subsys=daemon level=info msg=" --disable-envoy-version-check='false'" subsys=daemon level=info msg=" --disable-iptables-feeder-rules=''" subsys=daemon level=info msg=" --dns-max-ips-per-restored-rule='1000'" subsys=daemon level=info msg=" --dns-policy-unload-on-shutdown='false'" subsys=daemon level=info msg=" --dnsproxy-concurrency-limit='0'" subsys=daemon level=info msg=" --dnsproxy-concurrency-processing-grace-period='0s'" subsys=daemon level=info msg=" --dnsproxy-enable-transparent-mode='true'" subsys=daemon level=info msg=" --dnsproxy-lock-count='128'" subsys=daemon level=info msg=" --dnsproxy-lock-timeout='500ms'" subsys=daemon level=info msg=" --egress-gateway-policy-map-max='16384'" subsys=daemon level=info msg=" --egress-gateway-reconciliation-trigger-interval='1s'" subsys=daemon level=info msg=" --egress-masquerade-interfaces=''" subsys=daemon level=info msg=" --egress-multi-home-ip-rule-compat='false'" subsys=daemon level=info msg=" --enable-auto-protect-node-port-range='true'" subsys=daemon level=info msg=" --enable-bandwidth-manager='false'" subsys=daemon level=info msg=" --enable-bbr='false'" subsys=daemon level=info msg=" --enable-bgp-control-plane='false'" subsys=daemon level=info msg=" --enable-bpf-clock-probe='false'" subsys=daemon level=info msg=" --enable-bpf-masquerade='false'" subsys=daemon level=info msg=" --enable-bpf-tproxy='false'" subsys=daemon level=info msg=" --enable-cilium-api-server-access='*'" subsys=daemon level=info msg=" --enable-cilium-endpoint-slice='false'" subsys=daemon level=info msg=" --enable-cilium-health-api-server-access='*'" subsys=daemon level=info msg=" --enable-custom-calls='false'" subsys=daemon level=info msg=" --enable-endpoint-health-checking='true'" subsys=daemon level=info msg=" --enable-endpoint-routes='false'" subsys=daemon level=info msg=" --enable-envoy-config='false'" subsys=daemon level=info msg=" --enable-external-ips='false'" subsys=daemon level=info msg=" --enable-health-check-nodeport='true'" subsys=daemon level=info msg=" --enable-health-checking='true'" subsys=daemon level=info msg=" --enable-high-scale-ipcache='false'" subsys=daemon level=info msg=" --enable-host-firewall='false'" subsys=daemon level=info msg=" --enable-host-legacy-routing='false'" subsys=daemon level=info msg=" --enable-host-port='false'" subsys=daemon level=info msg=" --enable-hubble='false'" subsys=daemon level=info msg=" --enable-hubble-recorder-api='true'" subsys=daemon level=info msg=" --enable-icmp-rules='true'" subsys=daemon level=info msg=" --enable-identity-mark='true'" subsys=daemon level=info msg=" --enable-ip-masq-agent='false'" subsys=daemon level=info msg=" --enable-ipsec='false'" subsys=daemon level=info msg=" --enable-ipsec-key-watcher='true'" subsys=daemon level=info msg=" --enable-ipv4='true'" subsys=daemon level=info msg=" --enable-ipv4-big-tcp='false'" subsys=daemon level=info msg=" --enable-ipv4-egress-gateway='false'" subsys=daemon level=info msg=" --enable-ipv4-fragment-tracking='true'" subsys=daemon level=info msg=" --enable-ipv4-masquerade='true'" subsys=daemon level=info msg=" --enable-ipv6='false'" subsys=daemon level=info msg=" --enable-ipv6-big-tcp='false'" subsys=daemon level=info msg=" --enable-ipv6-masquerade='true'" subsys=daemon level=info msg=" --enable-ipv6-ndp='false'" subsys=daemon level=info msg=" --enable-k8s='true'" subsys=daemon level=info msg=" --enable-k8s-api-discovery='false'" subsys=daemon level=info msg=" --enable-k8s-endpoint-slice='true'" subsys=daemon level=info msg=" --enable-k8s-event-handover='false'" subsys=daemon level=info msg=" --enable-k8s-networkpolicy='true'" subsys=daemon level=info msg=" --enable-k8s-terminating-endpoint='true'" subsys=daemon level=info msg=" --enable-l2-announcements='false'" subsys=daemon level=info msg=" --enable-l2-neigh-discovery='true'" subsys=daemon level=info msg=" --enable-l2-pod-announcements='false'" subsys=daemon level=info msg=" --enable-l7-proxy='true'" subsys=daemon level=info msg=" --enable-local-node-route='true'" subsys=daemon level=info msg=" --enable-local-redirect-policy='false'" subsys=daemon level=info msg=" --enable-mke='false'" subsys=daemon level=info msg=" --enable-monitor='true'" subsys=daemon level=info msg=" --enable-nat46x64-gateway='false'" subsys=daemon level=info msg=" --enable-node-port='false'" subsys=daemon level=info msg=" --enable-pmtu-discovery='false'" subsys=daemon level=info msg=" --enable-policy='default'" subsys=daemon level=info msg=" --enable-recorder='false'" subsys=daemon level=info msg=" --enable-remote-node-identity='true'" subsys=daemon level=info msg=" --enable-runtime-device-detection='false'" subsys=daemon level=info msg=" --enable-sctp='false'" subsys=daemon level=info msg=" --enable-service-topology='false'" subsys=daemon level=info msg=" --enable-session-affinity='false'" subsys=daemon level=info msg=" --enable-srv6='false'" subsys=daemon level=info msg=" --enable-stale-cilium-endpoint-cleanup='true'" subsys=daemon level=info msg=" --enable-svc-source-range-check='true'" subsys=daemon level=info msg=" --enable-tracing='false'" subsys=daemon level=info msg=" --enable-unreachable-routes='false'" subsys=daemon level=info msg=" --enable-vtep='false'" subsys=daemon level=info msg=" --enable-well-known-identities='false'" subsys=daemon level=info msg=" --enable-wireguard='false'" subsys=daemon level=info msg=" --enable-wireguard-userspace-fallback='false'" subsys=daemon level=info msg=" --enable-xdp-prefilter='false'" subsys=daemon level=info msg=" --enable-xt-socket-fallback='true'" subsys=daemon level=info msg=" --encrypt-interface=''" subsys=daemon level=info msg=" --encrypt-node='false'" subsys=daemon level=info msg=" --endpoint-gc-interval='5m0s'" subsys=daemon level=info msg=" --endpoint-queue-size='25'" subsys=daemon level=info msg=" --endpoint-status=''" subsys=daemon level=info msg=" --envoy-config-timeout='2m0s'" subsys=daemon level=info msg=" --envoy-log=''" subsys=daemon level=info msg=" --exclude-local-address=''" subsys=daemon level=info msg=" --external-envoy-proxy='false'" subsys=daemon level=info msg=" --fixed-identity-mapping=''" subsys=daemon level=info msg=" --fqdn-regex-compile-lru-size='1024'" subsys=daemon level=info msg=" --gops-port='9890'" subsys=daemon level=info msg=" --http-403-msg=''" subsys=daemon level=info msg=" --http-idle-timeout='0'" subsys=daemon level=info msg=" --http-max-grpc-timeout='0'" subsys=daemon level=info msg=" --http-normalize-path='true'" subsys=daemon level=info msg=" --http-request-timeout='3600'" subsys=daemon level=info msg=" --http-retry-count='3'" subsys=daemon level=info msg=" --http-retry-timeout='0'" subsys=daemon level=info msg=" --hubble-disable-tls='false'" subsys=daemon level=info msg=" --hubble-event-buffer-capacity='4095'" subsys=daemon level=info msg=" --hubble-event-queue-size='0'" subsys=daemon level=info msg=" --hubble-export-file-compress='false'" subsys=daemon level=info msg=" --hubble-export-file-max-backups='5'" subsys=daemon level=info msg=" --hubble-export-file-max-size-mb='10'" subsys=daemon level=info msg=" --hubble-export-file-path=''" subsys=daemon level=info msg=" --hubble-listen-address=''" subsys=daemon level=info msg=" --hubble-metrics=''" subsys=daemon level=info msg=" --hubble-metrics-server=''" subsys=daemon level=info msg=" --hubble-monitor-events=''" subsys=daemon level=info msg=" --hubble-prefer-ipv6='false'" subsys=daemon level=info msg=" --hubble-recorder-sink-queue-size='1024'" subsys=daemon level=info msg=" --hubble-recorder-storage-path='/var/run/cilium/pcaps'" subsys=daemon level=info msg=" --hubble-skip-unknown-cgroup-ids='true'" subsys=daemon level=info msg=" --hubble-socket-path='/var/run/cilium/hubble.sock'" subsys=daemon level=info msg=" --hubble-tls-cert-file=''" subsys=daemon level=info msg=" --hubble-tls-client-ca-files=''" subsys=daemon level=info msg=" --hubble-tls-key-file=''" subsys=daemon level=info msg=" --identity-allocation-mode='crd'" subsys=daemon level=info msg=" --identity-change-grace-period='5s'" subsys=daemon level=info msg=" --identity-gc-interval='15m0s'" subsys=daemon level=info msg=" --identity-heartbeat-timeout='30m0s'" subsys=daemon level=info msg=" --identity-restore-grace-period='10m0s'" subsys=daemon level=info msg=" --install-egress-gateway-routes='false'" subsys=daemon level=info msg=" --install-iptables-rules='true'" subsys=daemon level=info msg=" --install-no-conntrack-iptables-rules='false'" subsys=daemon level=info msg=" --ip-allocation-timeout='2m0s'" subsys=daemon level=info msg=" --ip-masq-agent-config-path='/etc/config/ip-masq-agent'" subsys=daemon level=info msg=" --ipam='cluster-pool'" subsys=daemon level=info msg=" --ipam-cilium-node-update-rate='15s'" subsys=daemon level=info msg=" --ipam-multi-pool-pre-allocation='default=8'" subsys=daemon level=info msg=" --ipsec-key-file=''" subsys=daemon level=info msg=" --ipsec-key-rotation-duration='5m0s'" subsys=daemon level=info msg=" --iptables-lock-timeout='5s'" subsys=daemon level=info msg=" --iptables-random-fully='false'" subsys=daemon level=info msg=" --ipv4-native-routing-cidr=''" subsys=daemon level=info msg=" --ipv4-node='auto'" subsys=daemon level=info msg=" --ipv4-pod-subnets=''" subsys=daemon level=info msg=" --ipv4-range='auto'" subsys=daemon level=info msg=" --ipv4-service-loopback-address='169.254.42.1'" subsys=daemon level=info msg=" --ipv4-service-range='auto'" subsys=daemon level=info msg=" --ipv6-cluster-alloc-cidr='f00d::/64'" subsys=daemon level=info msg=" --ipv6-mcast-device=''" subsys=daemon level=info msg=" --ipv6-native-routing-cidr=''" subsys=daemon level=info msg=" --ipv6-node='auto'" subsys=daemon level=info msg=" --ipv6-pod-subnets=''" subsys=daemon level=info msg=" --ipv6-range='auto'" subsys=daemon level=info msg=" --ipv6-service-range='auto'" subsys=daemon level=info msg=" --join-cluster='false'" subsys=daemon level=info msg=" --k8s-api-server=''" subsys=daemon level=info msg=" --k8s-client-burst='10'" subsys=daemon level=info msg=" --k8s-client-qps='5'" subsys=daemon level=info msg=" --k8s-heartbeat-timeout='30s'" subsys=daemon level=info msg=" --k8s-kubeconfig-path=''" subsys=daemon level=info msg=" --k8s-namespace='kube-system'" subsys=daemon level=info msg=" --k8s-require-ipv4-pod-cidr='false'" subsys=daemon level=info msg=" --k8s-require-ipv6-pod-cidr='false'" subsys=daemon level=info msg=" --k8s-service-cache-size='128'" subsys=daemon level=info msg=" --k8s-service-proxy-name=''" subsys=daemon level=info msg=" --k8s-sync-timeout='3m0s'" subsys=daemon level=info msg=" --k8s-watcher-endpoint-selector='metadata.name!=kube-scheduler,metadata.name!=kube-controller-manager,metadata.name!=etcd-operator,metadata.name!=gcp-controller-manager'" subsys=daemon level=info msg=" --keep-config='false'" subsys=daemon level=info msg=" --kube-proxy-replacement='disabled'" subsys=daemon level=info msg=" --kube-proxy-replacement-healthz-bind-address=''" subsys=daemon level=info msg=" --kvstore=''" subsys=daemon level=info msg=" --kvstore-connectivity-timeout='2m0s'" subsys=daemon level=info msg=" --kvstore-lease-ttl='15m0s'" subsys=daemon level=info msg=" --kvstore-max-consecutive-quorum-errors='2'" subsys=daemon level=info msg=" --kvstore-opt=''" subsys=daemon level=info msg=" --kvstore-periodic-sync='5m0s'" subsys=daemon level=info msg=" --l2-announcements-lease-duration='15s'" subsys=daemon level=info msg=" --l2-announcements-renew-deadline='5s'" subsys=daemon level=info msg=" --l2-announcements-retry-period='2s'" subsys=daemon level=info msg=" --l2-pod-announcements-interface=''" subsys=daemon level=info msg=" --label-prefix-file=''" subsys=daemon level=info msg=" --labels=''" subsys=daemon level=info msg=" --lib-dir='/var/lib/cilium'" subsys=daemon level=info msg=" --local-max-addr-scope='252'" subsys=daemon level=info msg=" --local-router-ipv4=''" subsys=daemon level=info msg=" --local-router-ipv6=''" subsys=daemon level=info msg=" --log-driver=''" subsys=daemon level=info msg=" --log-opt=''" subsys=daemon level=info msg=" --log-system-load='false'" subsys=daemon level=info msg=" --max-controller-interval='0'" subsys=daemon level=info msg=" --mesh-auth-enabled='true'" subsys=daemon level=info msg=" --mesh-auth-gc-interval='5m0s'" subsys=daemon level=info msg=" --mesh-auth-mutual-listener-port='0'" subsys=daemon level=info msg=" --mesh-auth-queue-size='1024'" subsys=daemon level=info msg=" --mesh-auth-rotated-identities-queue-size='1024'" subsys=daemon level=info msg=" --mesh-auth-signal-backoff-duration='1s'" subsys=daemon level=info msg=" --mesh-auth-spiffe-trust-domain='spiffe.cilium'" subsys=daemon level=info msg=" --mesh-auth-spire-admin-socket=''" subsys=daemon level=info msg=" --metrics=''" subsys=daemon level=info msg=" --mke-cgroup-mount=''" subsys=daemon level=info msg=" --monitor-aggregation='medium'" subsys=daemon level=info msg=" --monitor-aggregation-flags='all'" subsys=daemon level=info msg=" --monitor-aggregation-interval='5s'" subsys=daemon level=info msg=" --monitor-queue-size='0'" subsys=daemon level=info msg=" --mtu='0'" subsys=daemon level=info msg=" --node-encryption-opt-out-labels='node-role.kubernetes.io/control-plane'" subsys=daemon level=info msg=" --node-port-acceleration='disabled'" subsys=daemon level=info msg=" --node-port-algorithm='random'" subsys=daemon level=info msg=" --node-port-bind-protection='true'" subsys=daemon level=info msg=" --node-port-mode='snat'" subsys=daemon level=info msg=" --node-port-range='30000,32767'" subsys=daemon level=info msg=" --nodes-gc-interval='5m0s'" subsys=daemon level=info msg=" --operator-api-serve-addr='127.0.0.1:9234'" subsys=daemon level=info msg=" --policy-audit-mode='false'" subsys=daemon level=info msg=" --policy-queue-size='100'" subsys=daemon level=info msg=" --policy-trigger-interval='1s'" subsys=daemon level=info msg=" --pprof='false'" subsys=daemon level=info msg=" --pprof-address='localhost'" subsys=daemon level=info msg=" --pprof-port='6060'" subsys=daemon level=info msg=" --preallocate-bpf-maps='false'" subsys=daemon level=info msg=" --prepend-iptables-chains='true'" subsys=daemon level=info msg=" --procfs='/host/proc'" subsys=daemon level=info msg=" --prometheus-serve-addr=':9962'" subsys=daemon level=info msg=" --proxy-connect-timeout='2'" subsys=daemon level=info msg=" --proxy-gid='1337'" subsys=daemon level=info msg=" --proxy-idle-timeout-seconds='60'" subsys=daemon level=info msg=" --proxy-max-connection-duration-seconds='0'" subsys=daemon level=info msg=" --proxy-max-requests-per-connection='0'" subsys=daemon level=info msg=" --proxy-prometheus-port='9964'" subsys=daemon level=info msg=" --read-cni-conf=''" subsys=daemon level=info msg=" --remove-cilium-node-taints='true'" subsys=daemon level=info msg=" --restore='true'" subsys=daemon level=info msg=" --route-metric='0'" subsys=daemon level=info msg=" --routing-mode='tunnel'" subsys=daemon level=info msg=" --set-cilium-is-up-condition='true'" subsys=daemon level=info msg=" --set-cilium-node-taints='true'" subsys=daemon level=info msg=" --sidecar-istio-proxy-image='cilium/istio_proxy'" subsys=daemon level=info msg=" --single-cluster-route='false'" subsys=daemon level=info msg=" --skip-cnp-status-startup-clean='false'" subsys=daemon level=info msg=" --socket-path='/var/run/cilium/cilium.sock'" subsys=daemon level=info msg=" --srv6-encap-mode='reduced'" subsys=daemon level=info msg=" --state-dir='/var/run/cilium'" subsys=daemon level=info msg=" --synchronize-k8s-nodes='true'" subsys=daemon level=info msg=" --tofqdns-dns-reject-response-code='refused'" subsys=daemon level=info msg=" --tofqdns-enable-dns-compression='true'" subsys=daemon level=info msg=" --tofqdns-endpoint-max-ip-per-hostname='50'" subsys=daemon level=info msg=" --tofqdns-idle-connection-grace-period='0s'" subsys=daemon level=info msg=" --tofqdns-max-deferred-connection-deletes='10000'" subsys=daemon level=info msg=" --tofqdns-min-ttl='0'" subsys=daemon level=info msg=" --tofqdns-pre-cache=''" subsys=daemon level=info msg=" --tofqdns-proxy-port='0'" subsys=daemon level=info msg=" --tofqdns-proxy-response-max-delay='100ms'" subsys=daemon level=info msg=" --trace-payloadlen='128'" subsys=daemon level=info msg=" --trace-sock='true'" subsys=daemon level=info msg=" --tunnel=''" subsys=daemon level=info msg=" --tunnel-port='6082'" subsys=daemon level=info msg=" --tunnel-protocol='geneve'" subsys=daemon level=info msg=" --unmanaged-pod-watcher-interval='15'" subsys=daemon level=info msg=" --use-cilium-internal-ip-for-ipsec='false'" subsys=daemon level=info msg=" --version='false'" subsys=daemon level=info msg=" --vlan-bpf-bypass=''" subsys=daemon level=info msg=" --vtep-cidr=''" subsys=daemon level=info msg=" --vtep-endpoint=''" subsys=daemon level=info msg=" --vtep-mac=''" subsys=daemon level=info msg=" --vtep-mask=''" subsys=daemon level=info msg=" --wireguard-encapsulate='false'" subsys=daemon level=info msg=" --write-cni-conf-when-ready='/host/etc/cni/net.d/05-cilium.conflist'" subsys=daemon level=info msg=" _ _ _" subsys=daemon level=info msg=" ___|_| |_|_ _ _____" subsys=daemon level=info msg="| _| | | | | | |" subsys=daemon level=info msg="|___|_|_|_|___|_|_|_|" subsys=daemon level=info msg="Cilium 1.14.8 cf6e022e 2024-03-13T12:23:35-04:00 go version go1.21.8 linux/amd64" subsys=daemon level=info msg="clang (10.0.0) and kernel (5.15.0) versions: OK!" subsys=linux-datapath level=info msg="linking environment: OK!" subsys=linux-datapath level=info msg="Kernel config file not found: if the agent fails to start, check the system requirements at https://docs.cilium.io/en/stable/operations/system_requirements" subsys=probes level=info msg="Detected mounted BPF filesystem at /sys/fs/bpf" subsys=bpf level=info msg="Mounted cgroupv2 filesystem at /run/cilium/cgroupv2" subsys=cgroups level=info msg="Parsing base label prefixes from default label list" subsys=labels-filter level=info msg="Parsing additional label prefixes from user inputs: []" subsys=labels-filter level=info msg="Final label prefixes to be used for identity evaluation:" subsys=labels-filter level=info msg=" - reserved:.*" subsys=labels-filter level=info msg=" - :io\\.kubernetes\\.pod\\.namespace" subsys=labels-filter level=info msg=" - :io\\.cilium\\.k8s\\.namespace\\.labels" subsys=labels-filter level=info msg=" - :app\\.kubernetes\\.io" subsys=labels-filter level=info msg=" - !:io\\.kubernetes" subsys=labels-filter level=info msg=" - !:kubernetes\\.io" subsys=labels-filter level=info msg=" - !:.*beta\\.kubernetes\\.io" subsys=labels-filter level=info msg=" - !:k8s\\.io" subsys=labels-filter level=info msg=" - !:pod-template-generation" subsys=labels-filter level=info msg=" - !:pod-template-hash" subsys=labels-filter level=info msg=" - !:controller-revision-hash" subsys=labels-filter level=info msg=" - !:annotation.*" subsys=labels-filter level=info msg=" - !:etcd_node" subsys=labels-filter level=info msg=Invoked duration=1.156392ms function="pprof.glob..func1 (cell.go:50)" subsys=hive level=info msg=Invoked duration="59.852µs" function="gops.registerGopsHooks (cell.go:38)" subsys=hive level=info msg=Invoked duration=1.157023ms function="metrics.NewRegistry (registry.go:65)" subsys=hive level=info msg=Invoked duration="10.641µs" function="metrics.glob..func1 (cell.go:12)" subsys=hive level=info msg="Spire Delegate API Client is disabled as no socket path is configured" subsys=spire-delegate level=info msg="Mutual authentication handler is disabled as no port is configured" subsys=auth level=info msg=Invoked duration=113.752389ms function="cmd.glob..func4 (daemon_main.go:1607)" subsys=hive level=info msg=Invoked duration="62.972µs" function="gc.registerSignalHandler (cell.go:47)" subsys=hive level=info msg=Invoked duration="18.351µs" function="utime.initUtimeSync (cell.go:29)" subsys=hive level=info msg=Invoked duration="62.262µs" function="agentliveness.newAgentLivenessUpdater (agent_liveness.go:43)" subsys=hive level=info msg=Invoked duration="62.852µs" function="l2responder.NewL2ResponderReconciler (l2responder.go:63)" subsys=hive level=info msg=Invoked duration="67.002µs" function="garp.newGARPProcessor (processor.go:27)" subsys=hive level=info msg=Starting subsys=hive level=info msg="Started gops server" address="127.0.0.1:9890" subsys=gops level=info msg="Start hook executed" duration="501.154µs" function="gops.registerGopsHooks.func1 (cell.go:43)" subsys=hive level=info msg="Start hook executed" duration="1.92µs" function="metrics.NewRegistry.func1 (registry.go:86)" subsys=hive level=info msg="Establishing connection to apiserver" host="https://10.96.0.1:443" subsys=k8s-client level=info msg="Serving prometheus metrics on :9962" subsys=metrics level=info msg="Connected to apiserver" subsys=k8s-client level=info msg="Start hook executed" duration=13.315906ms function="client.(*compositeClientset).onStart" subsys=hive level=info msg="Start hook executed" duration=7.46259ms function="authmap.newAuthMap.func1 (cell.go:27)" subsys=hive level=info msg="Start hook executed" duration="49.602µs" function="configmap.newMap.func1 (cell.go:23)" subsys=hive level=info msg="Start hook executed" duration="51.271µs" function="signalmap.newMap.func1 (cell.go:44)" subsys=hive level=info msg="Start hook executed" duration="527.505µs" function="nodemap.newNodeMap.func1 (cell.go:23)" subsys=hive level=info msg="Start hook executed" duration="137.414µs" function="eventsmap.newEventsMap.func1 (cell.go:35)" subsys=hive level=info msg="Start hook executed" duration="91.973µs" function="*cni.cniConfigManager.Start" subsys=hive level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Wrote CNI configuration file to /host/etc/cni/net.d/05-cilium.conflist" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Start hook executed" duration=42.575411ms function="datapath.newDatapath.func1 (cells.go:113)" subsys=hive level=info msg="Restored 0 node IDs from the BPF map" subsys=linux-datapath level=info msg="Start hook executed" duration="106.663µs" function="datapath.newDatapath.func2 (cells.go:126)" subsys=hive level=info msg="Start hook executed" duration="14.56µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Node].Start" subsys=hive level=info msg="Start hook executed" duration="2.27µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumNode].Start" subsys=hive level=info msg="Using autogenerated IPv4 allocation range" subsys=node v4Prefix=10.241.0.0/16 level=info msg="no local ciliumnode found, will not restore cilium internal ips from k8s" subsys=daemon level=info msg="Start hook executed" duration=104.083166ms function="node.NewLocalNodeStore.func1 (local_node_store.go:76)" subsys=hive level=info msg="Start hook executed" duration="15.92µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Start" subsys=hive level=info msg="Start hook executed" duration=200.722072ms function="*manager.diffStore[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Start" subsys=hive level=info msg="Start hook executed" duration="25.111µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s.Endpoints].Start" subsys=hive level=info msg="Using discoveryv1.EndpointSlice" subsys=k8s level=info msg="Start hook executed" duration=101.298486ms function="*manager.diffStore[*github.com/cilium/cilium/pkg/k8s.Endpoints].Start" subsys=hive level=info msg="Start hook executed" duration="3.57µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Pod].Start" subsys=hive level=info msg="Start hook executed" duration="3.991µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Namespace].Start" subsys=hive level=info msg="Start hook executed" duration="1.93µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumNetworkPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="1.56µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumClusterwideNetworkPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="1.55µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumCIDRGroup].Start" subsys=hive level=info msg="Start hook executed" duration="30.911µs" function="endpointmanager.newDefaultEndpointManager.func1 (cell.go:203)" subsys=hive level=info msg="Start hook executed" duration="26.311µs" function="cmd.newPolicyTrifecta.func1 (policy.go:135)" subsys=hive level=info msg="Start hook executed" duration="77.112µs" function="*manager.manager.Start" subsys=hive level=info msg="Serving cilium node monitor v1.2 API at unix:///var/run/cilium/monitor1_2.sock" subsys=monitor-agent level=info msg="Start hook executed" duration="386.981µs" function="agent.newMonitorAgent.func1 (cell.go:61)" subsys=hive level=info msg="Start hook executed" duration="1.93µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumL2AnnouncementPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="9.33µs" function="*job.group.Start" subsys=hive level=info msg="Start hook executed" duration="274.088µs" function="proxy.newProxy.func1 (cell.go:55)" subsys=hive level=info msg="Envoy: Starting xDS gRPC server listening on /var/run/cilium/envoy/sockets/xds.sock" subsys=envoy-manager level=info msg="Start hook executed" duration="974.067µs" function="signal.provideSignalManager.func1 (cell.go:25)" subsys=hive level=info msg="Datapath signal listener running" subsys=signal level=info msg="Start hook executed" duration=1.42578ms function="auth.registerAuthManager.func1 (cell.go:109)" subsys=hive level=info msg="Start hook executed" duration="5.09µs" function="auth.registerGCJobs.func1 (cell.go:158)" subsys=hive level=info msg="Start hook executed" duration="35.331µs" function="*job.group.Start" subsys=hive level=warning msg="Deprecated value for --kube-proxy-replacement: disabled (use either \"true\", or \"false\")" subsys=daemon level=info msg="Auto-disabling \"enable-node-port\", \"enable-external-ips\", \"bpf-lb-sock\", \"enable-host-port\" features and falling back to \"enable-host-legacy-routing\"" subsys=daemon level=info msg="Inheriting MTU from external network interface" device=ens3 ipAddr=199.19.213.241 mtu=1500 subsys=mtu level=info msg="Removed map pin at /sys/fs/bpf/tc/globals/cilium_ipcache, recreating and re-pinning map cilium_ipcache" file-path=/sys/fs/bpf/tc/globals/cilium_ipcache name=cilium_ipcache subsys=bpf level=info msg="Removed map pin at /sys/fs/bpf/tc/globals/cilium_tunnel_map, recreating and re-pinning map cilium_tunnel_map" file-path=/sys/fs/bpf/tc/globals/cilium_tunnel_map name=cilium_tunnel_map subsys=bpf level=info msg="Restored services from maps" failedServices=0 restoredServices=0 subsys=service level=info msg="Restored backends from maps" failedBackends=0 restoredBackends=0 skippedBackends=0 subsys=service level=info msg="Reading old endpoints..." subsys=daemon level=info msg="No old endpoints found." subsys=daemon level=info msg="Waiting until all Cilium CRDs are available" subsys=k8s level=info msg="All Cilium CRDs have been found and are available" subsys=k8s level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=warning msg="Unable to get node resource" error="ciliumnodes.cilium.io \"instance\" not found" subsys=nodediscovery level=warning msg="Unable to get node resource" error="ciliumnodes.cilium.io \"instance\" not found" subsys=nodediscovery level=info msg="Successfully created CiliumNode resource" subsys=nodediscovery level=warning msg="Unable to create CiliumNode resource, will retry" error="ciliumnodes.cilium.io \"instance\" already exists" subsys=nodediscovery level=info msg="Retrieved node information from cilium node" nodeName=instance subsys=k8s level=warning msg="Waiting for k8s node information" error="required IPv4 PodCIDR not available" subsys=k8s level=info msg="Retrieved node information from cilium node" nodeName=instance subsys=k8s level=info msg="Received own node information from API server" ipAddr.ipv4=199.19.213.241 ipAddr.ipv6="" k8sNodeIP=199.19.213.241 labels="map[beta.kubernetes.io/arch:amd64 beta.kubernetes.io/os:linux kubernetes.io/arch:amd64 kubernetes.io/hostname:instance kubernetes.io/os:linux node-role.kubernetes.io/control-plane: node.kubernetes.io/exclude-from-external-load-balancers:]" nodeName=instance subsys=k8s v4Prefix=10.0.0.0/24 v6Prefix="" level=info msg="k8s mode: Allowing localhost to reach local endpoints" subsys=daemon level=info msg="Detected devices" devices="[]" subsys=linux-datapath level=info msg="Enabling k8s event listener" subsys=k8s-watcher level=info msg="Removing stale endpoint interfaces" subsys=daemon level=info msg="Skipping kvstore configuration" subsys=daemon level=info msg="Waiting until local node addressing before starting watchers depending on it" subsys=k8s-watcher level=info msg="Initializing node addressing" subsys=daemon level=info msg="Initializing cluster-pool IPAM" subsys=ipam v4Prefix=10.0.0.0/24 v6Prefix="" level=info msg="Restoring endpoints..." subsys=daemon level=info msg="Endpoints restored" failed=0 restored=0 subsys=daemon level=info msg="Addressing information:" subsys=daemon level=info msg=" Cluster-Name: default" subsys=daemon level=info msg=" Cluster-ID: 0" subsys=daemon level=info msg=" Local node-name: instance" subsys=daemon level=info msg=" Node-IPv6: " subsys=daemon level=info msg=" External-Node IPv4: 199.19.213.241" subsys=daemon level=info msg=" Internal-Node IPv4: 10.0.0.70" subsys=daemon level=info msg=" IPv4 allocation prefix: 10.0.0.0/24" subsys=daemon level=info msg=" Loopback IPv4: 169.254.42.1" subsys=daemon level=info msg=" Local IPv4 addresses:" subsys=daemon level=info msg=" - 199.19.213.241" subsys=daemon level=info msg=" - 172.17.0.100" subsys=daemon level=info msg=" - 10.96.240.200" subsys=daemon level=info msg="Node updated" clusterName=default nodeName=instance subsys=nodemanager level=info msg="Adding local node to cluster" node="{instance default [{InternalIP 199.19.213.241} {CiliumInternalIP 10.0.0.70}] 10.0.0.0/24 [] [] 10.0.0.152 0 local 0 map[beta.kubernetes.io/arch:amd64 beta.kubernetes.io/os:linux kubernetes.io/arch:amd64 kubernetes.io/hostname:instance kubernetes.io/os:linux node-role.kubernetes.io/control-plane: node.kubernetes.io/exclude-from-external-load-balancers:] map[] 1 }" subsys=nodediscovery level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Waiting until all pre-existing resources have been received" subsys=k8s-watcher level=info msg="Initializing identity allocator" subsys=identity-cache level=info msg="Allocating identities between range" cluster-id=0 max=65535 min=256 subsys=identity-cache level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.forwarding sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.accept_local sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.send_redirects sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.forwarding sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.accept_local sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.send_redirects sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.core.bpf_jit_enable sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.all.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.fib_multipath_use_neigh sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=kernel.unprivileged_bpf_disabled sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=kernel.timer_migration sysParamValue=0 level=info msg="Setting up BPF datapath" bpfClockSource=ktime bpfInsnSet="" subsys=datapath-loader level=info msg="Iptables rules installed" subsys=iptables level=info msg="Adding new proxy port rules for cilium-dns-egress:42447" id=cilium-dns-egress subsys=proxy level=info msg="Iptables proxy rules installed" subsys=iptables level=info msg="Start hook executed" duration=2.507305602s function="cmd.newDaemonPromise.func1 (daemon_main.go:1663)" subsys=hive level=info msg="Initializing daemon" subsys=daemon level=info msg="Validating configured node address ranges" subsys=daemon level=info msg="Starting IP identity watcher" subsys=ipcache level=info msg="Starting connection tracking garbage collector" subsys=daemon level=info msg="Start hook executed" duration="174.385µs" function="utime.initUtimeSync.func1 (cell.go:33)" subsys=hive level=info msg="Start hook executed" duration="9.541µs" function="*job.group.Start" subsys=hive level=info msg="Start hook executed" duration="51.221µs" function="l2respondermap.newMap.func1 (l2_responder_map4.go:44)" subsys=hive level=info msg="Start hook executed" duration="27.551µs" function="*job.group.Start" subsys=hive level=info msg="Initial scan of connection tracking completed" subsys=ct-gc level=info msg="Regenerating restored endpoints" numRestored=0 subsys=daemon level=info msg="Creating host endpoint" subsys=daemon level=info msg="Finished regenerating restored endpoints" regenerated=0 subsys=daemon total=0 level=info msg="Deleted orphan backends" orphanBackends=0 subsys=service level=info msg="New endpoint" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1710 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1710 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Identity of endpoint changed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1710 identity=1 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,reserved:host" ipv4= ipv6= k8sPodName=/ oldIdentity="no identity" subsys=endpoint level=info msg="Launching Cilium health daemon" subsys=daemon level=info msg="Launching Cilium health endpoint" subsys=daemon level=info msg="Started healthz status API server" address="127.0.0.1:9879" subsys=daemon level=info msg="Processing queued endpoint deletion requests from /var/run/cilium/deleteQueue" subsys=daemon level=info msg="processing 0 queued deletion requests" subsys=daemon level=info msg="Initializing Cilium API" subsys=daemon level=info msg="Daemon initialization completed" bootstrapTime=3.6043932s subsys=daemon level=info msg="Hubble server is disabled" subsys=hubble level=info msg="Serving cilium API at unix:///var/run/cilium/cilium.sock" subsys=daemon level=info msg="Compiled new BPF template" BPFCompilationTime=303.901313ms file-path=/var/run/cilium/state/templates/23a2312d5f5d23e10f47061df905167a84a6a03361ec106253957f15eaeaaa6c/bpf_host.o subsys=datapath-loader level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1710 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="New endpoint" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=19 ipv4=10.0.0.152 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=19 identityLabels="reserved:health" ipv4=10.0.0.152 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Identity of endpoint changed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=19 identity=4 identityLabels="reserved:health" ipv4=10.0.0.152 ipv6= k8sPodName=/ oldIdentity="no identity" subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.225 4f895d2d-362e-45e9-b0d7-16f12250b893 default }" containerID=8d5cfdd367a22e2800c9ce1582fd957e22acaf173ab0aba1301644248fdc22b5 datapathConfiguration="&{false false false false false }" interface=lxcce7e7b6205ce k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-x45sj labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8d5cfdd367 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1373 ipv4=10.0.0.225 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-x45sj subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8d5cfdd367 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1373 identityLabels="k8s:app=certgen,k8s:batch.kubernetes.io/controller-uid=f1cc6cc9-a621-4ce4-a999-25bb614b2e67,k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen,k8s:controller-uid=f1cc6cc9-a621-4ce4-a999-25bb614b2e67,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen,k8s:io.kubernetes.pod.namespace=envoy-gateway-system,k8s:job-name=envoy-gateway-gateway-helm-certgen" ipv4=10.0.0.225 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-x45sj subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name:envoy-gateway-system]" subsys=crd-allocator level=info msg="Create endpoint request" addressing="&{10.0.0.97 29fbe7fb-a60c-4b01-af6e-e45ae8373600 default }" containerID=e451b02651650d763f2a1df13d80aec0fb94ed0fe25c2bcb810fdfaa58f7214c datapathConfiguration="&{false false false false false }" interface=lxce3da87a6c340 k8sPodName=kube-system/coredns-7c96b6546b-rkv95 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e451b02651 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1566 ipv4=10.0.0.97 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-rkv95 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e451b02651 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1566 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.97 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-rkv95 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=e451b02651 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1566 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.97 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-rkv95 line=611 subsys=endpoint level=info msg="Invalid state transition skipped" containerID=8d5cfdd367 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1373 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.225 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-x45sj line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=certgen;k8s:batch.kubernetes.io/controller-uid=f1cc6cc9-a621-4ce4-a999-25bb614b2e67;k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen;k8s:controller-uid=f1cc6cc9-a621-4ce4-a999-25bb614b2e67;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system;k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen;k8s:io.kubernetes.pod.namespace=envoy-gateway-system;k8s:job-name=envoy-gateway-gateway-helm-certgen;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8d5cfdd367 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1373 identity=40127 identityLabels="k8s:app=certgen,k8s:batch.kubernetes.io/controller-uid=f1cc6cc9-a621-4ce4-a999-25bb614b2e67,k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen,k8s:controller-uid=f1cc6cc9-a621-4ce4-a999-25bb614b2e67,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen,k8s:io.kubernetes.pod.namespace=envoy-gateway-system,k8s:job-name=envoy-gateway-gateway-helm-certgen" ipv4=10.0.0.225 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-x45sj oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8d5cfdd367 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1373 identity=40127 ipv4=10.0.0.225 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-x45sj subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:kube-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=coredns;k8s:io.kubernetes.pod.namespace=kube-system;k8s:k8s-app=kube-dns;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e451b02651 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1566 identity=2862 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.97 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-rkv95 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e451b02651 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1566 identity=2862 ipv4=10.0.0.97 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-rkv95 subsys=endpoint level=info msg="Serving cilium health API at unix:///var/run/cilium/health.sock" subsys=health-server level=info msg="Compiled new BPF template" BPFCompilationTime=1.141372779s file-path=/var/run/cilium/state/templates/b269483f1d7def4f37f5caf99d69846aac6b719ebc2b578b9bb9bb86f431d2e1/bpf_lxc.o subsys=datapath-loader level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=8d5cfdd367 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1373 identity=40127 ipv4=10.0.0.225 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-x45sj subsys=endpoint level=info msg="Successful endpoint creation" containerID=8d5cfdd367 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1373 identity=40127 ipv4=10.0.0.225 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-x45sj subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=e451b02651 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1566 identity=2862 ipv4=10.0.0.97 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-rkv95 subsys=endpoint level=info msg="Successful endpoint creation" containerID=e451b02651 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1566 identity=2862 ipv4=10.0.0.97 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-rkv95 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=19 identity=4 ipv4=10.0.0.152 ipv6= k8sPodName=/ subsys=endpoint level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=8d5cfdd367 endpointID=1373 k8sNamespace=envoy-gateway-system k8sPodName=envoy-gateway-gateway-helm-certgen-x45sj subsys=daemon level=info msg="Releasing key" key="[k8s:app=certgen k8s:batch.kubernetes.io/controller-uid=f1cc6cc9-a621-4ce4-a999-25bb614b2e67 k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen k8s:controller-uid=f1cc6cc9-a621-4ce4-a999-25bb614b2e67 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen k8s:io.kubernetes.pod.namespace=envoy-gateway-system k8s:job-name=envoy-gateway-gateway-helm-certgen]" subsys=allocator level=info msg="Removed endpoint" containerID=8d5cfdd367 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1373 identity=40127 ipv4=10.0.0.225 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-x45sj subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.36 ffcc1127-9c6d-4752-8387-3c543fbf5d33 default }" containerID=d7a7750abae743d4ca5452579ad61aa231fee56b775f2a9606442d889db2a3fa datapathConfiguration="&{false false false false false }" interface=lxc1003eb13d1eb k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-vmz2c labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d7a7750aba datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=697 ipv4=10.0.0.36 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-vmz2c subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d7a7750aba datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=697 identityLabels="k8s:app.kubernetes.io/instance=envoy-gateway,k8s:app.kubernetes.io/name=gateway-helm,k8s:control-plane=envoy-gateway,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway,k8s:io.kubernetes.pod.namespace=envoy-gateway-system" ipv4=10.0.0.36 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-vmz2c subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name:envoy-gateway-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=envoy-gateway;k8s:app.kubernetes.io/name=gateway-helm;k8s:control-plane=envoy-gateway;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system;k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway;k8s:io.kubernetes.pod.namespace=envoy-gateway-system;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d7a7750aba datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=697 identity=30991 identityLabels="k8s:app.kubernetes.io/instance=envoy-gateway,k8s:app.kubernetes.io/name=gateway-helm,k8s:control-plane=envoy-gateway,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway,k8s:io.kubernetes.pod.namespace=envoy-gateway-system" ipv4=10.0.0.36 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-vmz2c oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d7a7750aba datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=697 identity=30991 ipv4=10.0.0.36 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-vmz2c subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=d7a7750aba datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=697 identity=30991 ipv4=10.0.0.36 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-vmz2c subsys=endpoint level=info msg="Successful endpoint creation" containerID=d7a7750aba datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=697 identity=30991 ipv4=10.0.0.36 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-vmz2c subsys=daemon level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1710 identity=1 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,k8s:openstack-compute-node=enabled,k8s:openstack-control-plane=enabled,k8s:openvswitch=enabled,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_hostns_01710 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_hostns_01710 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_hostns_01710 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_hostns_01710:pending" subsys=bpf level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_netdev_00005 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_netdev_00005 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005:pending" subsys=bpf level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1710 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.188 ff90b496-60a1-481c-b9c7-e94cdd1923ad default }" containerID=b7514db2586697fdd3b678cfdb3214ab889b4efd2d109d4ede61b5327381cdfd datapathConfiguration="&{false false false false false }" interface=lxc269f9f99771c k8sPodName=kube-system/coredns-67659f764b-tvs6r labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b7514db258 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3189 ipv4=10.0.0.188 ipv6= k8sPodName=kube-system/coredns-67659f764b-tvs6r subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b7514db258 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3189 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.188 ipv6= k8sPodName=kube-system/coredns-67659f764b-tvs6r subsys=endpoint level=info msg="Identity of endpoint changed" containerID=b7514db258 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3189 identity=2862 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.188 ipv6= k8sPodName=kube-system/coredns-67659f764b-tvs6r oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b7514db258 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3189 identity=2862 ipv4=10.0.0.188 ipv6= k8sPodName=kube-system/coredns-67659f764b-tvs6r subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.165 d878a75b-ef7a-4ea0-b720-ad619517fb5f default }" containerID=4ba5db8cd4ac852c6110d39896ec49ebfb26c294a479d10ac15f0830395936f7 datapathConfiguration="&{false false false false false }" interface=lxc4c616b5428d1 k8sPodName=kube-system/coredns-67659f764b-hzhvh labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4ba5db8cd4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2784 ipv4=10.0.0.165 ipv6= k8sPodName=kube-system/coredns-67659f764b-hzhvh subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4ba5db8cd4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2784 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.165 ipv6= k8sPodName=kube-system/coredns-67659f764b-hzhvh subsys=endpoint level=info msg="Identity of endpoint changed" containerID=4ba5db8cd4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2784 identity=2862 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.165 ipv6= k8sPodName=kube-system/coredns-67659f764b-hzhvh oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4ba5db8cd4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2784 identity=2862 ipv4=10.0.0.165 ipv6= k8sPodName=kube-system/coredns-67659f764b-hzhvh subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b7514db258 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3189 identity=2862 ipv4=10.0.0.188 ipv6= k8sPodName=kube-system/coredns-67659f764b-tvs6r subsys=endpoint level=info msg="Successful endpoint creation" containerID=b7514db258 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3189 identity=2862 ipv4=10.0.0.188 ipv6= k8sPodName=kube-system/coredns-67659f764b-tvs6r subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=4ba5db8cd4 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2784 identity=2862 ipv4=10.0.0.165 ipv6= k8sPodName=kube-system/coredns-67659f764b-hzhvh subsys=endpoint level=info msg="Successful endpoint creation" containerID=4ba5db8cd4 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2784 identity=2862 ipv4=10.0.0.165 ipv6= k8sPodName=kube-system/coredns-67659f764b-hzhvh subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.93 ccf5a22d-2957-40a5-92f3-56c600f4138b default }" containerID=750bfe12ef9fdc6ede6708a86cce5d7819ca89c20503db69c772ae99598f0475 datapathConfiguration="&{false false false false false }" interface=lxc3d5074211330 k8sPodName=local-path-storage/local-path-provisioner-679c578f5-r72kt labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=750bfe12ef datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=871 ipv4=10.0.0.93 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-r72kt subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=750bfe12ef datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=871 identityLabels="k8s:app.kubernetes.io/instance=local-path-provisioner,k8s:app.kubernetes.io/name=local-path-provisioner,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.93 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-r72kt subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:local-path-storage k8s:io.cilium.k8s.namespace.labels.name:local-path-storage]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=local-path-provisioner;k8s:app.kubernetes.io/name=local-path-provisioner;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=750bfe12ef datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=871 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.93 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-r72kt line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=750bfe12ef datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=871 identity=2423 identityLabels="k8s:app.kubernetes.io/instance=local-path-provisioner,k8s:app.kubernetes.io/name=local-path-provisioner,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.93 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-r72kt oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=750bfe12ef datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=871 identity=2423 ipv4=10.0.0.93 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-r72kt subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=750bfe12ef datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=871 identity=2423 ipv4=10.0.0.93 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-r72kt subsys=endpoint level=info msg="Successful endpoint creation" containerID=750bfe12ef datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=871 identity=2423 ipv4=10.0.0.93 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-r72kt subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=e451b02651 endpointID=1566 k8sNamespace=kube-system k8sPodName=coredns-7c96b6546b-rkv95 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=coredns k8s:io.kubernetes.pod.namespace=kube-system k8s:k8s-app=kube-dns]" subsys=allocator level=info msg="Removed endpoint" containerID=e451b02651 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1566 identity=2862 ipv4=10.0.0.97 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-rkv95 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.60 2382241f-bb25-475a-a943-eb0a971db216 default }" containerID=00cc04023299ad94ce9ae5f70da920fd5648d4d797a543194714f7107772f140 datapathConfiguration="&{false false false false false }" interface=lxc17cdc3fad7be k8sPodName=cert-manager/cert-manager-webhook-548949fc64-rfz6w labels="[]" subsys=daemon sync-build=true level=info msg="Create endpoint request" addressing="&{10.0.0.125 5508179c-2921-4cd5-bb29-7d25c526bca3 default }" containerID=c40fce763b3a969144d5159a9a84bac4381b8dab6f63e66c4f496493563509cd datapathConfiguration="&{false false false false false }" interface=lxc25254e2f93e0 k8sPodName=cert-manager/cert-manager-75c4c745bc-vsr85 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=00cc040232 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=460 ipv4=10.0.0.60 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-rfz6w subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=00cc040232 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=460 identityLabels="k8s:app.kubernetes.io/component=webhook,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=webhook,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=webhook,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.60 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-rfz6w subsys=endpoint level=info msg="New endpoint" containerID=c40fce763b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=930 ipv4=10.0.0.125 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-vsr85 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Create endpoint request" addressing="&{10.0.0.94 97b863ea-591a-425d-80e2-a1bcce66c803 default }" containerID=45b11d658476958a41a91e0f2ee0411c75f9f79794ff7277cf1404b8265d3435 datapathConfiguration="&{false false false false false }" interface=lxc5f000dcc7dca k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-snbmd labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=45b11d6584 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=877 ipv4=10.0.0.94 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-snbmd subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=45b11d6584 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=877 identityLabels="k8s:app.kubernetes.io/component=cainjector,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cainjector,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cainjector,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.94 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-snbmd subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c40fce763b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=930 identityLabels="k8s:app.kubernetes.io/component=controller,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cert-manager,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cert-manager,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.125 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-vsr85 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=webhook;k8s:app.kubernetes.io/component=webhook;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=webhook;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=00cc040232 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=460 identity=3302 identityLabels="k8s:app.kubernetes.io/component=webhook,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=webhook,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=webhook,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.60 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-rfz6w oldIdentity="no identity" subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Waiting for endpoint to be generated" containerID=00cc040232 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=460 identity=3302 ipv4=10.0.0.60 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-rfz6w subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=45b11d6584 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=877 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.94 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-snbmd line=611 subsys=endpoint level=info msg="Invalid state transition skipped" containerID=c40fce763b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=930 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.125 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-vsr85 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=cainjector;k8s:app.kubernetes.io/component=cainjector;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=cainjector;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=45b11d6584 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=877 identity=27754 identityLabels="k8s:app.kubernetes.io/component=cainjector,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cainjector,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cainjector,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.94 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-snbmd oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=45b11d6584 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=877 identity=27754 ipv4=10.0.0.94 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-snbmd subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=cert-manager;k8s:app.kubernetes.io/component=controller;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=cert-manager;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c40fce763b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=930 identity=43099 identityLabels="k8s:app.kubernetes.io/component=controller,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cert-manager,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cert-manager,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.125 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-vsr85 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c40fce763b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=930 identity=43099 ipv4=10.0.0.125 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-vsr85 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=00cc040232 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=460 identity=3302 ipv4=10.0.0.60 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-rfz6w subsys=endpoint level=info msg="Successful endpoint creation" containerID=00cc040232 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=460 identity=3302 ipv4=10.0.0.60 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-rfz6w subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=45b11d6584 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=877 identity=27754 ipv4=10.0.0.94 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-snbmd subsys=endpoint level=info msg="Successful endpoint creation" containerID=45b11d6584 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=877 identity=27754 ipv4=10.0.0.94 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-snbmd subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=c40fce763b datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=930 identity=43099 ipv4=10.0.0.125 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-vsr85 subsys=endpoint level=info msg="Successful endpoint creation" containerID=c40fce763b datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=930 identity=43099 ipv4=10.0.0.125 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-vsr85 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.46 a6339102-9559-4ad3-aafc-a1153209a231 default }" containerID=10acb44a8d45c0badd032ce84019bbbe4ef09d81b162f58a59d37a5e690475a3 datapathConfiguration="&{false false false false false }" interface=lxc9e324c76682d k8sPodName=cert-manager/cert-manager-startupapicheck-dfxtp labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=10acb44a8d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2092 ipv4=10.0.0.46 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-dfxtp subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=10acb44a8d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2092 identityLabels="k8s:app.kubernetes.io/component=startupapicheck,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=startupapicheck,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=startupapicheck,k8s:batch.kubernetes.io/controller-uid=00e13f77-3261-44ea-b594-902cbd6afaed,k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck,k8s:controller-uid=00e13f77-3261-44ea-b594-902cbd6afaed,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck,k8s:io.kubernetes.pod.namespace=cert-manager,k8s:job-name=cert-manager-startupapicheck" ipv4=10.0.0.46 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-dfxtp subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=startupapicheck;k8s:app.kubernetes.io/component=startupapicheck;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=startupapicheck;k8s:app.kubernetes.io/version=v1.11.5;k8s:batch.kubernetes.io/controller-uid=00e13f77-3261-44ea-b594-902cbd6afaed;k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck;k8s:controller-uid=00e13f77-3261-44ea-b594-902cbd6afaed;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck;k8s:io.kubernetes.pod.namespace=cert-manager;k8s:job-name=cert-manager-startupapicheck;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=10acb44a8d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2092 identity=21311 identityLabels="k8s:app.kubernetes.io/component=startupapicheck,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=startupapicheck,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=startupapicheck,k8s:batch.kubernetes.io/controller-uid=00e13f77-3261-44ea-b594-902cbd6afaed,k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck,k8s:controller-uid=00e13f77-3261-44ea-b594-902cbd6afaed,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck,k8s:io.kubernetes.pod.namespace=cert-manager,k8s:job-name=cert-manager-startupapicheck" ipv4=10.0.0.46 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-dfxtp oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=10acb44a8d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2092 identity=21311 ipv4=10.0.0.46 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-dfxtp subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=10acb44a8d datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2092 identity=21311 ipv4=10.0.0.46 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-dfxtp subsys=endpoint level=info msg="Successful endpoint creation" containerID=10acb44a8d datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2092 identity=21311 ipv4=10.0.0.46 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-dfxtp subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=10acb44a8d endpointID=2092 k8sNamespace=cert-manager k8sPodName=cert-manager-startupapicheck-dfxtp subsys=daemon level=info msg="Releasing key" key="[k8s:app=startupapicheck k8s:app.kubernetes.io/component=startupapicheck k8s:app.kubernetes.io/instance=cert-manager k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=startupapicheck k8s:app.kubernetes.io/version=v1.11.5 k8s:batch.kubernetes.io/controller-uid=00e13f77-3261-44ea-b594-902cbd6afaed k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck k8s:controller-uid=00e13f77-3261-44ea-b594-902cbd6afaed k8s:helm.sh/chart=cert-manager-v1.11.5 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager k8s:io.cilium.k8s.namespace.labels.name=cert-manager k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck k8s:io.kubernetes.pod.namespace=cert-manager k8s:job-name=cert-manager-startupapicheck]" subsys=allocator level=info msg="Removed endpoint" containerID=10acb44a8d datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2092 identity=21311 ipv4=10.0.0.46 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-dfxtp subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.58 2d3958f7-b4fc-420a-9cf9-0aabf59f8b4f default }" containerID=8b8b2d2091f188c028c2e7a1fba2e322f92bc2795ea457c190d72025a7b26873 datapathConfiguration="&{false false false false false }" interface=lxc4bd4ad1458cb k8sPodName=ingress-nginx/ingress-nginx-admission-create-h8bgv labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8b8b2d2091 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=941 ipv4=10.0.0.58 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-h8bgv subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8b8b2d2091 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=941 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=3658caae-8300-4dd5-bc03-c24f3c4deb85,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create,k8s:controller-uid=3658caae-8300-4dd5-bc03-c24f3c4deb85,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-create" ipv4=10.0.0.58 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-h8bgv subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=admission-webhook;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:batch.kubernetes.io/controller-uid=3658caae-8300-4dd5-bc03-c24f3c4deb85;k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create;k8s:controller-uid=3658caae-8300-4dd5-bc03-c24f3c4deb85;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission;k8s:io.kubernetes.pod.namespace=ingress-nginx;k8s:job-name=ingress-nginx-admission-create;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8b8b2d2091 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=941 identity=8188 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=3658caae-8300-4dd5-bc03-c24f3c4deb85,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create,k8s:controller-uid=3658caae-8300-4dd5-bc03-c24f3c4deb85,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-create" ipv4=10.0.0.58 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-h8bgv oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8b8b2d2091 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=941 identity=8188 ipv4=10.0.0.58 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-h8bgv subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=8b8b2d2091 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=941 identity=8188 ipv4=10.0.0.58 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-h8bgv subsys=endpoint level=info msg="Successful endpoint creation" containerID=8b8b2d2091 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=941 identity=8188 ipv4=10.0.0.58 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-h8bgv subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=8b8b2d2091 endpointID=941 k8sNamespace=ingress-nginx k8sPodName=ingress-nginx-admission-create-h8bgv subsys=daemon level=info msg="Releasing key" key="[k8s:app.kubernetes.io/component=admission-webhook k8s:app.kubernetes.io/instance=ingress-nginx k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=ingress-nginx k8s:app.kubernetes.io/part-of=ingress-nginx k8s:app.kubernetes.io/version=1.12.1 k8s:batch.kubernetes.io/controller-uid=3658caae-8300-4dd5-bc03-c24f3c4deb85 k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create k8s:controller-uid=3658caae-8300-4dd5-bc03-c24f3c4deb85 k8s:helm.sh/chart=ingress-nginx-4.12.1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission k8s:io.kubernetes.pod.namespace=ingress-nginx k8s:job-name=ingress-nginx-admission-create]" subsys=allocator level=info msg="Removed endpoint" containerID=8b8b2d2091 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=941 identity=8188 ipv4=10.0.0.58 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-h8bgv subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.249 ea80a377-1a9b-4f70-bc5e-59ef7d9c31ac default }" containerID=1b826fd651affe7827489ceabc011801d490ce671911e0d70443d2bbf9783eb4 datapathConfiguration="&{false false false false false }" interface=lxcedd426be476d k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-bm794 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1b826fd651 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3176 ipv4=10.0.0.249 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-bm794 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1b826fd651 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3176 identityLabels="k8s:app.kubernetes.io/component=default-backend,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend,k8s:io.kubernetes.pod.namespace=ingress-nginx" ipv4=10.0.0.249 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-bm794 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=1b826fd651 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3176 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.249 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-bm794 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=default-backend;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend;k8s:io.kubernetes.pod.namespace=ingress-nginx;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1b826fd651 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3176 identity=30392 identityLabels="k8s:app.kubernetes.io/component=default-backend,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend,k8s:io.kubernetes.pod.namespace=ingress-nginx" ipv4=10.0.0.249 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-bm794 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1b826fd651 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3176 identity=30392 ipv4=10.0.0.249 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-bm794 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=1b826fd651 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3176 identity=30392 ipv4=10.0.0.249 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-bm794 subsys=endpoint level=info msg="Successful endpoint creation" containerID=1b826fd651 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3176 identity=30392 ipv4=10.0.0.249 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-bm794 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.243 87755494-e92b-4f2e-bf6b-76ba5e1fb11f default }" containerID=9e687dce3102aebb439eadee83ffb142ddd5d4b1272d5174fc900c3e30287a27 datapathConfiguration="&{false false false false false }" interface=lxc08672305017b k8sPodName=ingress-nginx/ingress-nginx-admission-patch-m8mcl labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9e687dce31 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1878 ipv4=10.0.0.243 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-m8mcl subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9e687dce31 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1878 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=507c24f4-d8cf-42a8-891b-2bb01a58f3bf,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch,k8s:controller-uid=507c24f4-d8cf-42a8-891b-2bb01a58f3bf,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-patch" ipv4=10.0.0.243 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-m8mcl subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=admission-webhook;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:batch.kubernetes.io/controller-uid=507c24f4-d8cf-42a8-891b-2bb01a58f3bf;k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch;k8s:controller-uid=507c24f4-d8cf-42a8-891b-2bb01a58f3bf;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission;k8s:io.kubernetes.pod.namespace=ingress-nginx;k8s:job-name=ingress-nginx-admission-patch;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9e687dce31 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1878 identity=32877 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=507c24f4-d8cf-42a8-891b-2bb01a58f3bf,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch,k8s:controller-uid=507c24f4-d8cf-42a8-891b-2bb01a58f3bf,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-patch" ipv4=10.0.0.243 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-m8mcl oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9e687dce31 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1878 identity=32877 ipv4=10.0.0.243 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-m8mcl subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=9e687dce31 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1878 identity=32877 ipv4=10.0.0.243 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-m8mcl subsys=endpoint level=info msg="Successful endpoint creation" containerID=9e687dce31 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1878 identity=32877 ipv4=10.0.0.243 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-m8mcl subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=9e687dce31 endpointID=1878 k8sNamespace=ingress-nginx k8sPodName=ingress-nginx-admission-patch-m8mcl subsys=daemon level=info msg="Releasing key" key="[k8s:app.kubernetes.io/component=admission-webhook k8s:app.kubernetes.io/instance=ingress-nginx k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=ingress-nginx k8s:app.kubernetes.io/part-of=ingress-nginx k8s:app.kubernetes.io/version=1.12.1 k8s:batch.kubernetes.io/controller-uid=507c24f4-d8cf-42a8-891b-2bb01a58f3bf k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch k8s:controller-uid=507c24f4-d8cf-42a8-891b-2bb01a58f3bf k8s:helm.sh/chart=ingress-nginx-4.12.1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission k8s:io.kubernetes.pod.namespace=ingress-nginx k8s:job-name=ingress-nginx-admission-patch]" subsys=allocator level=info msg="Removed endpoint" containerID=9e687dce31 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1878 identity=32877 ipv4=10.0.0.243 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-m8mcl subsys=endpoint level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"rabbitmq-operator\",\"k8s:app.kubernetes.io/instance\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/name\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/part-of\":\"rabbitmq\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=rabbitmq-cluster-operator k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=fcf2af7a-0c2b-47a0-bcc0-ae92c42cdaa8] Description:}]" policyAddRequest=cd569837-f557-443d-be11-183dea0b54b4 subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=cd569837-f557-443d-be11-183dea0b54b4 policyRevision=2 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=rabbitmq-cluster-operator subsys=k8s-watcher level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"messaging-topology-operator\",\"k8s:app.kubernetes.io/instance\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/name\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/part-of\":\"rabbitmq\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:9443 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=rabbitmq-messaging-topology-operator k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=335f8d41-c698-49fd-944c-3dcdecfabb4a] Description:}]" policyAddRequest=2cf80d5a-4d99-48ba-9ead-8c0a9dd07dc9 subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=2cf80d5a-4d99-48ba-9ead-8c0a9dd07dc9 policyRevision=3 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=rabbitmq-messaging-topology-operator subsys=k8s-watcher level=info msg="Create endpoint request" addressing="&{10.0.0.33 71f3cad5-33e0-4c28-b653-882eb4e2e38e default }" containerID=5a34da307e9fc6efc93b5ee24d84f082d4f6abd11794c9751be09724daf48f5f datapathConfiguration="&{false false false false false }" interface=lxc9dbe774f5a50 k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-qr65r labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5a34da307e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3098 ipv4=10.0.0.33 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-qr65r subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5a34da307e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3098 identityLabels="k8s:app.kubernetes.io/component=messaging-topology-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=1.17.4,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.33 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-qr65r subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Create endpoint request" addressing="&{10.0.0.207 c55ac694-2add-4691-948a-b9e573dbaa01 default }" containerID=095d2edc147abe83f097ddaef6778978c7b8da89b35db95b6c42f0e87ee602c9 datapathConfiguration="&{false false false false false }" interface=lxcb53d3c1aedd0 k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-bpnh5 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=095d2edc14 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1366 ipv4=10.0.0.207 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-bpnh5 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=095d2edc14 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1366 identityLabels="k8s:app.kubernetes.io/component=rabbitmq-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=2.16.1,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.207 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-bpnh5 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=messaging-topology-operator;k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=rabbitmq-cluster-operator;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:app.kubernetes.io/version=1.17.4;k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5a34da307e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3098 identity=11921 identityLabels="k8s:app.kubernetes.io/component=messaging-topology-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=1.17.4,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.33 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-qr65r oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5a34da307e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3098 identity=11921 ipv4=10.0.0.33 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-qr65r subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Invalid state transition skipped" containerID=095d2edc14 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1366 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.207 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-bpnh5 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq-operator;k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=rabbitmq-cluster-operator;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:app.kubernetes.io/version=2.16.1;k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=095d2edc14 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1366 identity=52108 identityLabels="k8s:app.kubernetes.io/component=rabbitmq-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=2.16.1,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.207 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-bpnh5 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=095d2edc14 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1366 identity=52108 ipv4=10.0.0.207 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-bpnh5 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=095d2edc14 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=1366 identity=52108 ipv4=10.0.0.207 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-bpnh5 subsys=endpoint level=info msg="Successful endpoint creation" containerID=095d2edc14 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=1366 identity=52108 ipv4=10.0.0.207 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-bpnh5 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=5a34da307e datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=3098 identity=11921 ipv4=10.0.0.33 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-qr65r subsys=endpoint level=info msg="Successful endpoint creation" containerID=5a34da307e datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=3098 identity=11921 ipv4=10.0.0.33 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-qr65r subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.14 7cbe70a0-7058-49ce-8c6c-72e3788e3340 default }" containerID=d19074753ea1cc6306242bc9f67447fdefe53596ce3619d494286e01ece76c19 datapathConfiguration="&{false false false false false }" interface=lxc902f24b8f586 k8sPodName=openstack/pxc-operator-69cb5bbdb9-bw7h4 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d19074753e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3075 ipv4=10.0.0.14 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-bw7h4 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d19074753e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3075 identityLabels="k8s:app.kubernetes.io/component=operator,k8s:app.kubernetes.io/instance=pxc-operator,k8s:app.kubernetes.io/name=pxc-operator,k8s:app.kubernetes.io/part-of=pxc-operator,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.14 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-bw7h4 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=operator;k8s:app.kubernetes.io/instance=pxc-operator;k8s:app.kubernetes.io/name=pxc-operator;k8s:app.kubernetes.io/part-of=pxc-operator;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d19074753e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3075 identity=62144 identityLabels="k8s:app.kubernetes.io/component=operator,k8s:app.kubernetes.io/instance=pxc-operator,k8s:app.kubernetes.io/name=pxc-operator,k8s:app.kubernetes.io/part-of=pxc-operator,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.14 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-bw7h4 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d19074753e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3075 identity=62144 ipv4=10.0.0.14 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-bw7h4 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=d19074753e datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=3075 identity=62144 ipv4=10.0.0.14 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-bw7h4 subsys=endpoint level=info msg="Successful endpoint creation" containerID=d19074753e datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=3075 identity=62144 ipv4=10.0.0.14 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-bw7h4 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.35 2da721a1-4850-463f-b98c-98309693f3d3 default }" containerID=7b8c8136e74dbe1062fcd8707cb8c38c0f4fba296f7a0a4adb85682b3f3dc2b8 datapathConfiguration="&{false false false false false }" interface=lxcd128b3fd6e08 k8sPodName=openstack/percona-xtradb-haproxy-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7b8c8136e7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=21 ipv4=10.0.0.35 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7b8c8136e7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=21 identityLabels="k8s:app.kubernetes.io/component=haproxy,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0" ipv4=10.0.0.35 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=haproxy;k8s:app.kubernetes.io/instance=percona-xtradb;k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator;k8s:app.kubernetes.io/name=percona-xtradb-cluster;k8s:app.kubernetes.io/part-of=percona-xtradb-cluster;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7b8c8136e7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=21 identity=17152 identityLabels="k8s:app.kubernetes.io/component=haproxy,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0" ipv4=10.0.0.35 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7b8c8136e7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=21 identity=17152 ipv4=10.0.0.35 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=7b8c8136e7 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=21 identity=17152 ipv4=10.0.0.35 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=7b8c8136e7 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=21 identity=17152 ipv4=10.0.0.35 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.142 1fed1fd8-a215-45c9-b0d5-9bb3c60b2194 default }" containerID=c5ac8a988ce46456d6a80a483832d60647aa294cd5336ec9b89e671bf2221b51 datapathConfiguration="&{false false false false false }" interface=lxc1191a02afa82 k8sPodName=local-path-storage/helper-pod-create-pvc-a62ef289-dfb6-40a4-8b07-c7dd16d706f3 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c5ac8a988c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=720 ipv4=10.0.0.142 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a62ef289-dfb6-40a4-8b07-c7dd16d706f3 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c5ac8a988c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=720 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.142 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a62ef289-dfb6-40a4-8b07-c7dd16d706f3 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:local-path-storage k8s:io.cilium.k8s.namespace.labels.name:local-path-storage]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c5ac8a988c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=720 identity=284 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.142 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a62ef289-dfb6-40a4-8b07-c7dd16d706f3 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c5ac8a988c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=720 identity=284 ipv4=10.0.0.142 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a62ef289-dfb6-40a4-8b07-c7dd16d706f3 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c5ac8a988c datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=720 identity=284 ipv4=10.0.0.142 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a62ef289-dfb6-40a4-8b07-c7dd16d706f3 subsys=endpoint level=info msg="Successful endpoint creation" containerID=c5ac8a988c datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=720 identity=284 ipv4=10.0.0.142 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a62ef289-dfb6-40a4-8b07-c7dd16d706f3 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=c5ac8a988c endpointID=720 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-a62ef289-dfb6-40a4-8b07-c7dd16d706f3 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=c5ac8a988c datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=720 identity=284 ipv4=10.0.0.142 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a62ef289-dfb6-40a4-8b07-c7dd16d706f3 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.117 99fc7197-dd8f-44b6-bf55-3e8a4a4954bc default }" containerID=0c239181dc913f90ec3fe430d495ccf135f9e293a49139f0573811fe053d8655 datapathConfiguration="&{false false false false false }" interface=lxcaca72a660121 k8sPodName=openstack/percona-xtradb-pxc-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0c239181dc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2329 ipv4=10.0.0.117 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0c239181dc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2329 identityLabels="k8s:app.kubernetes.io/component=pxc,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0" ipv4=10.0.0.117 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=pxc;k8s:app.kubernetes.io/instance=percona-xtradb;k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator;k8s:app.kubernetes.io/name=percona-xtradb-cluster;k8s:app.kubernetes.io/part-of=percona-xtradb-cluster;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0c239181dc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2329 identity=2165 identityLabels="k8s:app.kubernetes.io/component=pxc,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0" ipv4=10.0.0.117 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0c239181dc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2329 identity=2165 ipv4=10.0.0.117 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=0c239181dc datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=2329 identity=2165 ipv4=10.0.0.117 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=0c239181dc datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=2329 identity=2165 ipv4=10.0.0.117 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/instance\":\"valkey\",\"k8s:app.kubernetes.io/name\":\"valkey\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:6379 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:} {Ports:[{Port:26379 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:} {IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:9121 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=valkey k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=63cf1b62-f654-450d-a77c-5a614106c33b] Description:}]" policyAddRequest=28f2087c-f5aa-4805-af68-9941c01cea73 subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=28f2087c-f5aa-4805-af68-9941c01cea73 policyRevision=4 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=valkey subsys=k8s-watcher level=info msg="Create endpoint request" addressing="&{10.0.0.198 eacc06f1-4b19-460d-bf60-b91466bd28e2 default }" containerID=b5cd5dd24ccdfaeeabf336113d157a16dea45d95cb6ab214e28d9df4cce63411 datapathConfiguration="&{false false false false false }" interface=lxc2cc409fab39b k8sPodName=local-path-storage/helper-pod-create-pvc-0bb8d136-3606-492d-9553-6e00ffe65e3a labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b5cd5dd24c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1396 ipv4=10.0.0.198 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-0bb8d136-3606-492d-9553-6e00ffe65e3a subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b5cd5dd24c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1396 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.198 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-0bb8d136-3606-492d-9553-6e00ffe65e3a subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b5cd5dd24c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1396 identity=284 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.198 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-0bb8d136-3606-492d-9553-6e00ffe65e3a oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b5cd5dd24c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1396 identity=284 ipv4=10.0.0.198 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-0bb8d136-3606-492d-9553-6e00ffe65e3a subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b5cd5dd24c datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1396 identity=284 ipv4=10.0.0.198 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-0bb8d136-3606-492d-9553-6e00ffe65e3a subsys=endpoint level=info msg="Successful endpoint creation" containerID=b5cd5dd24c datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1396 identity=284 ipv4=10.0.0.198 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-0bb8d136-3606-492d-9553-6e00ffe65e3a subsys=daemon level=info msg="Delete endpoint request" containerID=b5cd5dd24c endpointID=1396 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-0bb8d136-3606-492d-9553-6e00ffe65e3a subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=b5cd5dd24c datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1396 identity=284 ipv4=10.0.0.198 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-0bb8d136-3606-492d-9553-6e00ffe65e3a subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.212 a15271f1-b385-484f-bb9b-e33f88ed73c5 default }" containerID=70cfe046b8669ad5d97a0a8205957e3ae67f50a4e5cecd97b0c8782e0bef5560 datapathConfiguration="&{false false false false false }" interface=lxcfab8cd4c8572 k8sPodName=openstack/valkey-node-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=70cfe046b8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=11 ipv4=10.0.0.212 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=70cfe046b8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=11 identityLabels="k8s:app.kubernetes.io/component=node,k8s:app.kubernetes.io/instance=valkey,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=valkey,k8s:app.kubernetes.io/version=8.0.2,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=valkey-2.4.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=valkey,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=valkey-node-0" ipv4=10.0.0.212 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=node;k8s:app.kubernetes.io/instance=valkey;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=valkey;k8s:app.kubernetes.io/version=8.0.2;k8s:apps.kubernetes.io/pod-index=0;k8s:helm.sh/chart=valkey-2.4.6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=valkey;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=valkey-node-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=70cfe046b8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=11 identity=35783 identityLabels="k8s:app.kubernetes.io/component=node,k8s:app.kubernetes.io/instance=valkey,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=valkey,k8s:app.kubernetes.io/version=8.0.2,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=valkey-2.4.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=valkey,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=valkey-node-0" ipv4=10.0.0.212 ipv6= k8sPodName=openstack/valkey-node-0 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=70cfe046b8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=11 identity=35783 ipv4=10.0.0.212 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=70cfe046b8 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=11 identity=35783 ipv4=10.0.0.212 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=70cfe046b8 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=11 identity=35783 ipv4=10.0.0.212 ipv6= k8sPodName=openstack/valkey-node-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"keycloak\",\"k8s:app.kubernetes.io/instance\":\"keycloak\",\"k8s:app.kubernetes.io/name\":\"keycloak\",\"k8s:io.kubernetes.pod.namespace\":\"auth-system\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:7800 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:} {Ports:[{Port:8080 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=keycloak k8s:io.cilium.k8s.policy.namespace=auth-system k8s:io.cilium.k8s.policy.uid=e89e218c-4272-4294-8605-3e720756fd6c] Description:}]" policyAddRequest=06188e33-07e0-4b17-bf70-e53d5645c6a9 subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=06188e33-07e0-4b17-bf70-e53d5645c6a9 policyRevision=5 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=keycloak subsys=k8s-watcher level=info msg="Create endpoint request" addressing="&{10.0.0.216 3daa2e1f-4a8b-42a8-9cd8-6e50feda35f3 default }" containerID=dd8018782103e4aef3f830f43485d16bbaee14ee798faff30674a27807016530 datapathConfiguration="&{false false false false false }" interface=lxc75fd6443c072 k8sPodName=auth-system/keycloak-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=dd80187821 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=651 ipv4=10.0.0.216 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=dd80187821 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=651 identityLabels="k8s:app.kubernetes.io/component=keycloak,k8s:app.kubernetes.io/instance=keycloak,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=keycloak,k8s:app.kubernetes.io/version=24.0.5,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=keycloak-21.4.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system,k8s:io.cilium.k8s.namespace.labels.name=auth-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keycloak,k8s:io.kubernetes.pod.namespace=auth-system,k8s:statefulset.kubernetes.io/pod-name=keycloak-0" ipv4=10.0.0.216 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:auth-system k8s:io.cilium.k8s.namespace.labels.name:auth-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=keycloak;k8s:app.kubernetes.io/instance=keycloak;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=keycloak;k8s:app.kubernetes.io/version=24.0.5;k8s:apps.kubernetes.io/pod-index=0;k8s:helm.sh/chart=keycloak-21.4.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system;k8s:io.cilium.k8s.namespace.labels.name=auth-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keycloak;k8s:io.kubernetes.pod.namespace=auth-system;k8s:statefulset.kubernetes.io/pod-name=keycloak-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=dd80187821 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=651 identity=33960 identityLabels="k8s:app.kubernetes.io/component=keycloak,k8s:app.kubernetes.io/instance=keycloak,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=keycloak,k8s:app.kubernetes.io/version=24.0.5,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=keycloak-21.4.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system,k8s:io.cilium.k8s.namespace.labels.name=auth-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keycloak,k8s:io.kubernetes.pod.namespace=auth-system,k8s:statefulset.kubernetes.io/pod-name=keycloak-0" ipv4=10.0.0.216 ipv6= k8sPodName=auth-system/keycloak-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=dd80187821 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=651 identity=33960 ipv4=10.0.0.216 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=dd80187821 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=651 identity=33960 ipv4=10.0.0.216 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=dd80187821 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=651 identity=33960 ipv4=10.0.0.216 ipv6= k8sPodName=auth-system/keycloak-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Conntrack garbage collector interval recalculated" deleteRatio=0.0097461008833038 newInterval=7m30s subsys=map-ct level=info msg="Create endpoint request" addressing="&{10.0.0.236 1fff71d1-caeb-4446-9edb-e6779037f40a default }" containerID=c8e69efb48e2c202ba11129e3b8cbee131964ef3f68e3f650c145cca2233b54d datapathConfiguration="&{false false false false false }" interface=lxca855bc110153 k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-pbwxm labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c8e69efb48 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2538 ipv4=10.0.0.236 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-pbwxm subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c8e69efb48 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2538 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=gc" ipv4=10.0.0.236 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-pbwxm subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=gc;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=c8e69efb48 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2538 identity=29760 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=gc" ipv4=10.0.0.236 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-pbwxm oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c8e69efb48 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2538 identity=29760 ipv4=10.0.0.236 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-pbwxm subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.202 9bad43a4-481b-4566-94a8-df7bd06f0378 default }" containerID=2ab07819b9621da3b9981bf408d09bcecb2a456fb552f9b809b5f7974fa447f9 datapathConfiguration="&{false false false false false }" interface=lxcda5d39e6a1cd k8sPodName=monitoring/node-feature-discovery-worker-n5bjk labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2ab07819b9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=30 ipv4=10.0.0.202 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-n5bjk subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2ab07819b9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=30 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=worker" ipv4=10.0.0.202 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-n5bjk subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=worker;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2ab07819b9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=30 identity=28523 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=worker" ipv4=10.0.0.202 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-n5bjk oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2ab07819b9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=30 identity=28523 ipv4=10.0.0.202 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-n5bjk subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c8e69efb48 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2538 identity=29760 ipv4=10.0.0.236 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-pbwxm subsys=endpoint level=info msg="Successful endpoint creation" containerID=c8e69efb48 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2538 identity=29760 ipv4=10.0.0.236 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-pbwxm subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.21 03dfabdd-2095-493b-a804-d8328c5c4723 default }" containerID=f8705ff2c6469b464dd5b86eb521764d6b948b299fa9c97b15a7dc9cc0ee5208 datapathConfiguration="&{false false false false false }" interface=lxc5e5342e89cfb k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-v4vjw labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f8705ff2c6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3469 ipv4=10.0.0.21 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-v4vjw subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f8705ff2c6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3469 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=master" ipv4=10.0.0.21 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-v4vjw subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=master;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f8705ff2c6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3469 identity=26478 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=master" ipv4=10.0.0.21 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-v4vjw oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f8705ff2c6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3469 identity=26478 ipv4=10.0.0.21 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-v4vjw subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=2ab07819b9 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=30 identity=28523 ipv4=10.0.0.202 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-n5bjk subsys=endpoint level=info msg="Successful endpoint creation" containerID=2ab07819b9 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=30 identity=28523 ipv4=10.0.0.202 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-n5bjk subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=f8705ff2c6 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3469 identity=26478 ipv4=10.0.0.21 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-v4vjw subsys=endpoint level=info msg="Successful endpoint creation" containerID=f8705ff2c6 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3469 identity=26478 ipv4=10.0.0.21 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-v4vjw subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.136 607c5910-be17-426f-b126-af1f20762b0f default }" containerID=47a0bae4d3612d6985bca20b16dcadba92651e256a12b4f27eaf5d78f9a6b1c9 datapathConfiguration="&{false false false false false }" interface=lxcaa4230bf3d78 k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-jklp5 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=47a0bae4d3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=961 ipv4=10.0.0.136 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-jklp5 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=47a0bae4d3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=961 identityLabels="k8s:app=secretgen-controller,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa,k8s:io.kubernetes.pod.namespace=secretgen-controller" ipv4=10.0.0.136 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-jklp5 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:secretgen-controller]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=secretgen-controller;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa;k8s:io.kubernetes.pod.namespace=secretgen-controller;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=47a0bae4d3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=961 identity=6310 identityLabels="k8s:app=secretgen-controller,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa,k8s:io.kubernetes.pod.namespace=secretgen-controller" ipv4=10.0.0.136 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-jklp5 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=47a0bae4d3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=961 identity=6310 ipv4=10.0.0.136 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-jklp5 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=47a0bae4d3 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=961 identity=6310 ipv4=10.0.0.136 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-jklp5 subsys=endpoint level=info msg="Successful endpoint creation" containerID=47a0bae4d3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=961 identity=6310 ipv4=10.0.0.136 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-jklp5 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1710 identity=1 identityLabels="k8s:feature.node.kubernetes.io/cpu-cpuid.ADX=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AESNI=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AVX2=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AVX=true,k8s:feature.node.kubernetes.io/cpu-cpuid.CLZERO=true,k8s:feature.node.kubernetes.io/cpu-cpuid.CMPXCHG8=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FMA3=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FXSR=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FXSROPT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.HYPERVISOR=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IA32_ARCH_CAP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IBPB=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IBRS=true,k8s:feature.node.kubernetes.io/cpu-cpuid.LAHF=true,k8s:feature.node.kubernetes.io/cpu-cpuid.MOVBE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.NRIPS=true,k8s:feature.node.kubernetes.io/cpu-cpuid.OSXSAVE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SHA=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SPEC_CTRL_SSBD=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SSE4A=true,k8s:feature.node.kubernetes.io/cpu-cpuid.STIBP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SVM=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SVMNP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SYSCALL=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SYSEE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.TOPEXT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.WBNOINVD=true,k8s:feature.node.kubernetes.io/cpu-cpuid.X87=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XGETBV1=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVEC=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVEOPT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVES=true,k8s:feature.node.kubernetes.io/cpu-hardware_multithreading=false,k8s:feature.node.kubernetes.io/cpu-model.family=23,k8s:feature.node.kubernetes.io/cpu-model.id=49,k8s:feature.node.kubernetes.io/cpu-model.vendor_id=AMD,k8s:feature.node.kubernetes.io/kernel-config.NO_HZ=true,k8s:feature.node.kubernetes.io/kernel-config.NO_HZ_IDLE=true,k8s:feature.node.kubernetes.io/kernel-version.full=5.15.0-176-generic,k8s:feature.node.kubernetes.io/kernel-version.major=5,k8s:feature.node.kubernetes.io/kernel-version.minor=15,k8s:feature.node.kubernetes.io/kernel-version.revision=0,k8s:feature.node.kubernetes.io/pci-0300_1af4.present=true,k8s:feature.node.kubernetes.io/system-os_release.ID=ubuntu,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID.major=22,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID.minor=04,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID=22.04,k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,k8s:openstack-compute-node=enabled,k8s:openstack-control-plane=enabled,k8s:openvswitch=enabled,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_hostns_01710 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_hostns_01710 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_hostns_01710 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_hostns_01710:pending" subsys=bpf level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_netdev_00005 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_netdev_00005 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005:pending" subsys=bpf level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1710 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.161 1640216b-f206-43a1-aeeb-2cd2335133fd default }" containerID=a86b92901fc23e673151708ea76b06e955c33cee341fc73c97521a66294cd41e datapathConfiguration="&{false false false false false }" interface=lxcbfdbb7c56f30 k8sPodName=monitoring/kube-prometheus-stack-admission-create-xw2lm labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a86b92901f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=336 ipv4=10.0.0.161 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-xw2lm subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a86b92901f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=336 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-create,k8s:batch.kubernetes.io/controller-uid=7a84a57b-277e-4fe9-824c-3062da405f1b,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=7a84a57b-277e-4fe9-824c-3062da405f1b,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-create,k8s:release=kube-prometheus-stack" ipv4=10.0.0.161 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-xw2lm subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-admission-create;k8s:app.kubernetes.io/component=prometheus-operator-webhook;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:batch.kubernetes.io/controller-uid=7a84a57b-277e-4fe9-824c-3062da405f1b;k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create;k8s:chart=kube-prometheus-stack-60.2.0;k8s:controller-uid=7a84a57b-277e-4fe9-824c-3062da405f1b;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission;k8s:io.kubernetes.pod.namespace=monitoring;k8s:job-name=kube-prometheus-stack-admission-create;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=a86b92901f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=336 identity=17034 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-create,k8s:batch.kubernetes.io/controller-uid=7a84a57b-277e-4fe9-824c-3062da405f1b,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=7a84a57b-277e-4fe9-824c-3062da405f1b,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-create,k8s:release=kube-prometheus-stack" ipv4=10.0.0.161 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-xw2lm oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a86b92901f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=336 identity=17034 ipv4=10.0.0.161 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-xw2lm subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a86b92901f datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=336 identity=17034 ipv4=10.0.0.161 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-xw2lm subsys=endpoint level=info msg="Successful endpoint creation" containerID=a86b92901f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=336 identity=17034 ipv4=10.0.0.161 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-xw2lm subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=a86b92901f endpointID=336 k8sNamespace=monitoring k8sPodName=kube-prometheus-stack-admission-create-xw2lm subsys=daemon level=info msg="Releasing key" key="[k8s:app=kube-prometheus-stack-admission-create k8s:app.kubernetes.io/component=prometheus-operator-webhook k8s:app.kubernetes.io/instance=kube-prometheus-stack k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator k8s:app.kubernetes.io/part-of=kube-prometheus-stack k8s:app.kubernetes.io/version=60.2.0 k8s:batch.kubernetes.io/controller-uid=7a84a57b-277e-4fe9-824c-3062da405f1b k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create k8s:chart=kube-prometheus-stack-60.2.0 k8s:controller-uid=7a84a57b-277e-4fe9-824c-3062da405f1b k8s:heritage=Helm k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring k8s:io.cilium.k8s.namespace.labels.name=monitoring k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission k8s:io.kubernetes.pod.namespace=monitoring k8s:job-name=kube-prometheus-stack-admission-create k8s:release=kube-prometheus-stack]" subsys=allocator level=info msg="Removed endpoint" containerID=a86b92901f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=336 identity=17034 ipv4=10.0.0.161 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-xw2lm subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.239 7d0c636f-60c1-4cfd-b851-2a482b4d702a default }" containerID=e4d1d0e11385a12831c9f8664562c0933371730bc20acc68d461c7be827d3799 datapathConfiguration="&{false false false false false }" interface=lxc4f0e7033b7d0 k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-5jk27 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e4d1d0e113 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3063 ipv4=10.0.0.239 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-5jk27 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e4d1d0e113 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3063 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-operator,k8s:chart=kube-prometheus-stack-60.2.0,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.239 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-5jk27 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-operator;k8s:app.kubernetes.io/component=prometheus-operator;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:chart=kube-prometheus-stack-60.2.0;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator;k8s:io.kubernetes.pod.namespace=monitoring;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=e4d1d0e113 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3063 identity=47815 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-operator,k8s:chart=kube-prometheus-stack-60.2.0,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.239 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-5jk27 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e4d1d0e113 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3063 identity=47815 ipv4=10.0.0.239 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-5jk27 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.167 d6fe92c0-992e-4711-8f4a-a0606bce845d default }" containerID=069552f8ce6096c4d327fa7406f55e4e39a66f9cc2fb7ced730225a0a6be316a datapathConfiguration="&{false false false false false }" interface=lxc893e2f2f2138 k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-2c8fm labels="[]" subsys=daemon sync-build=true level=info msg="Create endpoint request" addressing="&{10.0.0.118 77b9733a-20bf-4d34-a684-dad2b85d8991 default }" containerID=0015a6d430223cc22f30774af0edfdd5fe7f05916e647480d42e973b6156d1c2 datapathConfiguration="&{false false false false false }" interface=lxc7275076fcdef k8sPodName=monitoring/kube-prometheus-stack-grafana-67f6fc88c5-ljxm9 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=069552f8ce datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2573 ipv4=10.0.0.167 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-2c8fm subsys=endpoint level=info msg="New endpoint" containerID=0015a6d430 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3930 ipv4=10.0.0.118 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-67f6fc88c5-ljxm9 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=069552f8ce datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2573 identityLabels="k8s:app.kubernetes.io/component=metrics,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-state-metrics,k8s:app.kubernetes.io/part-of=kube-state-metrics,k8s:app.kubernetes.io/version=2.12.0,k8s:helm.sh/chart=kube-state-metrics-5.20.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.167 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-2c8fm subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Resolving identity labels (blocking)" containerID=0015a6d430 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3930 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/name=grafana,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.118 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-67f6fc88c5-ljxm9 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=metrics;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-state-metrics;k8s:app.kubernetes.io/part-of=kube-state-metrics;k8s:app.kubernetes.io/version=2.12.0;k8s:helm.sh/chart=kube-state-metrics-5.20.0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics;k8s:io.kubernetes.pod.namespace=monitoring;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=069552f8ce datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2573 identity=55003 identityLabels="k8s:app.kubernetes.io/component=metrics,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-state-metrics,k8s:app.kubernetes.io/part-of=kube-state-metrics,k8s:app.kubernetes.io/version=2.12.0,k8s:helm.sh/chart=kube-state-metrics-5.20.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.167 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-2c8fm oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=069552f8ce datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2573 identity=55003 ipv4=10.0.0.167 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-2c8fm subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/name=grafana;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0015a6d430 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3930 identity=49403 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/name=grafana,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.118 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-67f6fc88c5-ljxm9 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0015a6d430 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3930 identity=49403 ipv4=10.0.0.118 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-67f6fc88c5-ljxm9 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e4d1d0e113 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3063 identity=47815 ipv4=10.0.0.239 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-5jk27 subsys=endpoint level=info msg="Successful endpoint creation" containerID=e4d1d0e113 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3063 identity=47815 ipv4=10.0.0.239 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-5jk27 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=0015a6d430 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3930 identity=49403 ipv4=10.0.0.118 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-67f6fc88c5-ljxm9 subsys=endpoint level=info msg="Successful endpoint creation" containerID=0015a6d430 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3930 identity=49403 ipv4=10.0.0.118 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-67f6fc88c5-ljxm9 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=069552f8ce datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2573 identity=55003 ipv4=10.0.0.167 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-2c8fm subsys=endpoint level=info msg="Successful endpoint creation" containerID=069552f8ce datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2573 identity=55003 ipv4=10.0.0.167 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-2c8fm subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.180 44343bcc-f5b9-416f-bd43-eed69a3525d4 default }" containerID=7a79df398bb9b5709c19b35ecec10b053d3d0662b85973f13c188be1caa44b4d datapathConfiguration="&{false false false false false }" interface=lxcb03517153aea k8sPodName=monitoring/kube-prometheus-stack-admission-patch-tgxm8 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7a79df398b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1217 ipv4=10.0.0.180 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-tgxm8 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7a79df398b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1217 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-patch,k8s:batch.kubernetes.io/controller-uid=fa49ecfd-35cb-4a7e-9b8d-01d1e7699912,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=fa49ecfd-35cb-4a7e-9b8d-01d1e7699912,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-patch,k8s:release=kube-prometheus-stack" ipv4=10.0.0.180 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-tgxm8 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-admission-patch;k8s:app.kubernetes.io/component=prometheus-operator-webhook;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:batch.kubernetes.io/controller-uid=fa49ecfd-35cb-4a7e-9b8d-01d1e7699912;k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch;k8s:chart=kube-prometheus-stack-60.2.0;k8s:controller-uid=fa49ecfd-35cb-4a7e-9b8d-01d1e7699912;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission;k8s:io.kubernetes.pod.namespace=monitoring;k8s:job-name=kube-prometheus-stack-admission-patch;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7a79df398b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1217 identity=50957 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-patch,k8s:batch.kubernetes.io/controller-uid=fa49ecfd-35cb-4a7e-9b8d-01d1e7699912,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=fa49ecfd-35cb-4a7e-9b8d-01d1e7699912,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-patch,k8s:release=kube-prometheus-stack" ipv4=10.0.0.180 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-tgxm8 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7a79df398b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1217 identity=50957 ipv4=10.0.0.180 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-tgxm8 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=7a79df398b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1217 identity=50957 ipv4=10.0.0.180 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-tgxm8 subsys=endpoint level=info msg="Successful endpoint creation" containerID=7a79df398b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1217 identity=50957 ipv4=10.0.0.180 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-tgxm8 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.203 19271567-ba2f-4b91-b796-43440011c7eb default }" containerID=15b6fb9e677dc15a087a18b9f8e121a888d8ab2fe3e4bb849df53802d9739ff1 datapathConfiguration="&{false false false false false }" interface=lxc4178a8a46e69 k8sPodName=local-path-storage/helper-pod-create-pvc-1ea67afc-8cfe-458d-8efb-5626f143291a labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=15b6fb9e67 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3085 ipv4=10.0.0.203 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-1ea67afc-8cfe-458d-8efb-5626f143291a subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=15b6fb9e67 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3085 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.203 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-1ea67afc-8cfe-458d-8efb-5626f143291a subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=15b6fb9e67 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3085 identity=284 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.203 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-1ea67afc-8cfe-458d-8efb-5626f143291a oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=15b6fb9e67 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3085 identity=284 ipv4=10.0.0.203 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-1ea67afc-8cfe-458d-8efb-5626f143291a subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=15b6fb9e67 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3085 identity=284 ipv4=10.0.0.203 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-1ea67afc-8cfe-458d-8efb-5626f143291a subsys=endpoint level=info msg="Successful endpoint creation" containerID=15b6fb9e67 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3085 identity=284 ipv4=10.0.0.203 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-1ea67afc-8cfe-458d-8efb-5626f143291a subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.205 52913869-8ebf-422c-9d71-a11ccf432a98 default }" containerID=06e471f29948a8da5d0781835f03bfbe0ff0aa390826919a3d8462c4587136cf datapathConfiguration="&{false false false false false }" interface=lxc2175a2c4e104 k8sPodName=local-path-storage/helper-pod-create-pvc-96013996-c015-4867-be32-cfe4b169c3c3 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=06e471f299 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3446 ipv4=10.0.0.205 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-96013996-c015-4867-be32-cfe4b169c3c3 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=06e471f299 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3446 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.205 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-96013996-c015-4867-be32-cfe4b169c3c3 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=06e471f299 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3446 identity=284 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.205 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-96013996-c015-4867-be32-cfe4b169c3c3 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=06e471f299 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3446 identity=284 ipv4=10.0.0.205 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-96013996-c015-4867-be32-cfe4b169c3c3 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=06e471f299 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3446 identity=284 ipv4=10.0.0.205 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-96013996-c015-4867-be32-cfe4b169c3c3 subsys=endpoint level=info msg="Successful endpoint creation" containerID=06e471f299 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3446 identity=284 ipv4=10.0.0.205 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-96013996-c015-4867-be32-cfe4b169c3c3 subsys=daemon level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=7a79df398b endpointID=1217 k8sNamespace=monitoring k8sPodName=kube-prometheus-stack-admission-patch-tgxm8 subsys=daemon level=info msg="Releasing key" key="[k8s:app=kube-prometheus-stack-admission-patch k8s:app.kubernetes.io/component=prometheus-operator-webhook k8s:app.kubernetes.io/instance=kube-prometheus-stack k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator k8s:app.kubernetes.io/part-of=kube-prometheus-stack k8s:app.kubernetes.io/version=60.2.0 k8s:batch.kubernetes.io/controller-uid=fa49ecfd-35cb-4a7e-9b8d-01d1e7699912 k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch k8s:chart=kube-prometheus-stack-60.2.0 k8s:controller-uid=fa49ecfd-35cb-4a7e-9b8d-01d1e7699912 k8s:heritage=Helm k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring k8s:io.cilium.k8s.namespace.labels.name=monitoring k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission k8s:io.kubernetes.pod.namespace=monitoring k8s:job-name=kube-prometheus-stack-admission-patch k8s:release=kube-prometheus-stack]" subsys=allocator level=info msg="Removed endpoint" containerID=7a79df398b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1217 identity=50957 ipv4=10.0.0.180 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-tgxm8 subsys=endpoint level=info msg="Delete endpoint request" containerID=15b6fb9e67 endpointID=3085 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-1ea67afc-8cfe-458d-8efb-5626f143291a subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=15b6fb9e67 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3085 identity=284 ipv4=10.0.0.203 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-1ea67afc-8cfe-458d-8efb-5626f143291a subsys=endpoint level=info msg="Delete endpoint request" containerID=06e471f299 endpointID=3446 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-96013996-c015-4867-be32-cfe4b169c3c3 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=06e471f299 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3446 identity=284 ipv4=10.0.0.205 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-96013996-c015-4867-be32-cfe4b169c3c3 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.4 1c701526-d00a-4798-bbda-af1bbab71a20 default }" containerID=f064139f2b48729fdb5bf11921ca254ab61df422cede3795e48bec35cd04bf26 datapathConfiguration="&{false false false false false }" interface=lxccfbad2e5d850 k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f064139f2b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=237 ipv4=10.0.0.4 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f064139f2b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=237 identityLabels="k8s:alertmanager=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=alertmanager,k8s:app.kubernetes.io/version=0.27.0,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0" ipv4=10.0.0.4 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:alertmanager=kube-prometheus-stack-alertmanager;k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager;k8s:app.kubernetes.io/managed-by=prometheus-operator;k8s:app.kubernetes.io/name=alertmanager;k8s:app.kubernetes.io/version=0.27.0;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager;k8s:io.kubernetes.pod.namespace=monitoring;k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f064139f2b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=237 identity=17855 identityLabels="k8s:alertmanager=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=alertmanager,k8s:app.kubernetes.io/version=0.27.0,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0" ipv4=10.0.0.4 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f064139f2b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=237 identity=17855 ipv4=10.0.0.4 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=f064139f2b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=237 identity=17855 ipv4=10.0.0.4 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=f064139f2b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=237 identity=17855 ipv4=10.0.0.4 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.40 81d6d6f7-a782-4204-a47d-a97ce40d2e7b default }" containerID=54713b8278dacc15b08909845c31f648464aa43a4a957ce95270c4ea7a6d624a datapathConfiguration="&{false false false false false }" interface=lxcebc98bf1d1fa k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=54713b8278 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=271 ipv4=10.0.0.40 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=54713b8278 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=271 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=prometheus,k8s:app.kubernetes.io/version=2.51.2,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus,k8s:io.kubernetes.pod.namespace=monitoring,k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus,k8s:operator.prometheus.io/shard=0,k8s:prometheus=kube-prometheus-stack-prometheus,k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0" ipv4=10.0.0.40 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus;k8s:app.kubernetes.io/managed-by=prometheus-operator;k8s:app.kubernetes.io/name=prometheus;k8s:app.kubernetes.io/version=2.51.2;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus;k8s:io.kubernetes.pod.namespace=monitoring;k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus;k8s:operator.prometheus.io/shard=0;k8s:prometheus=kube-prometheus-stack-prometheus;k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=54713b8278 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=271 identity=26639 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=prometheus,k8s:app.kubernetes.io/version=2.51.2,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus,k8s:io.kubernetes.pod.namespace=monitoring,k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus,k8s:operator.prometheus.io/shard=0,k8s:prometheus=kube-prometheus-stack-prometheus,k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0" ipv4=10.0.0.40 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=54713b8278 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=271 identity=26639 ipv4=10.0.0.40 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=54713b8278 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=271 identity=26639 ipv4=10.0.0.40 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=54713b8278 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=271 identity=26639 ipv4=10.0.0.40 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.208 1e781c89-7910-461c-a05b-e98d7f1665e2 default }" containerID=7789f2c257689ded11faa64423bb4e84487c20bfa585f11408b0c6b8620affca datapathConfiguration="&{false false false false false }" interface=lxc336863b3bf06 k8sPodName=monitoring/loki-gateway-cf54cb88c-lp6bt labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7789f2c257 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=635 ipv4=10.0.0.208 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-lp6bt subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7789f2c257 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=635 identityLabels="k8s:app.kubernetes.io/component=gateway,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.208 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-lp6bt subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=gateway;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7789f2c257 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=635 identity=11167 identityLabels="k8s:app.kubernetes.io/component=gateway,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.208 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-lp6bt oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7789f2c257 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=635 identity=11167 ipv4=10.0.0.208 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-lp6bt subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.164 d929ae7b-800d-4f72-8c40-4185af403bdd default }" containerID=0e3a03d162df988186977212d3816dcca6c4409a32f28d9469bb6efa08488dfd datapathConfiguration="&{false false false false false }" interface=lxc4e82f6988540 k8sPodName=monitoring/loki-chunks-cache-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0e3a03d162 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3317 ipv4=10.0.0.164 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0e3a03d162 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3317 identityLabels="k8s:app.kubernetes.io/component=memcached-chunks-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-chunks-cache,k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0" ipv4=10.0.0.164 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=memcached-chunks-cache;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:name=memcached-chunks-cache;k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0e3a03d162 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3317 identity=3112 identityLabels="k8s:app.kubernetes.io/component=memcached-chunks-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-chunks-cache,k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0" ipv4=10.0.0.164 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0e3a03d162 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3317 identity=3112 ipv4=10.0.0.164 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.196 3bf9530d-5270-43c7-a1d1-60d5b1914dde default }" containerID=f36a37d1e296e2e867fede9a063ac12b7a9cfcbd796cd4b6f1cb50319d8c8d95 datapathConfiguration="&{false false false false false }" interface=lxcdf99723c238c k8sPodName=monitoring/loki-results-cache-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f36a37d1e2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=869 ipv4=10.0.0.196 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f36a37d1e2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=869 identityLabels="k8s:app.kubernetes.io/component=memcached-results-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-results-cache,k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0" ipv4=10.0.0.196 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=memcached-results-cache;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:name=memcached-results-cache;k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f36a37d1e2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=869 identity=7739 identityLabels="k8s:app.kubernetes.io/component=memcached-results-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-results-cache,k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0" ipv4=10.0.0.196 ipv6= k8sPodName=monitoring/loki-results-cache-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f36a37d1e2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=869 identity=7739 ipv4=10.0.0.196 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=7789f2c257 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=635 identity=11167 ipv4=10.0.0.208 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-lp6bt subsys=endpoint level=info msg="Successful endpoint creation" containerID=7789f2c257 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=635 identity=11167 ipv4=10.0.0.208 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-lp6bt subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=0e3a03d162 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3317 identity=3112 ipv4=10.0.0.164 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=0e3a03d162 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3317 identity=3112 ipv4=10.0.0.164 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.169 f63040f3-09ad-4c32-9154-e1bed7d7272b default }" containerID=8b322064ec308b857620213d98e1ce799cb00368a4a32f15d52d6b76586c6df0 datapathConfiguration="&{false false false false false }" interface=lxc05fdf7d31af7 k8sPodName=local-path-storage/helper-pod-create-pvc-e92bc903-7b83-402c-95c2-955b232e3e10 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8b322064ec datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2358 ipv4=10.0.0.169 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e92bc903-7b83-402c-95c2-955b232e3e10 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8b322064ec datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2358 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.169 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e92bc903-7b83-402c-95c2-955b232e3e10 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8b322064ec datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2358 identity=284 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.169 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e92bc903-7b83-402c-95c2-955b232e3e10 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8b322064ec datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2358 identity=284 ipv4=10.0.0.169 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e92bc903-7b83-402c-95c2-955b232e3e10 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f36a37d1e2 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=869 identity=7739 ipv4=10.0.0.196 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=f36a37d1e2 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=869 identity=7739 ipv4=10.0.0.196 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=8b322064ec datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2358 identity=284 ipv4=10.0.0.169 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e92bc903-7b83-402c-95c2-955b232e3e10 subsys=endpoint level=info msg="Successful endpoint creation" containerID=8b322064ec datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2358 identity=284 ipv4=10.0.0.169 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e92bc903-7b83-402c-95c2-955b232e3e10 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.55 15ffc253-648a-4d70-8c5b-433f9a1ac0d7 default }" containerID=85d3bc582cd63db6ef6e961b112bbb8151e04e6e782b91774a1883fe71d9f8ea datapathConfiguration="&{false false false false false }" interface=lxcdb6c4054a1e9 k8sPodName=monitoring/vector-hvp6x labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=85d3bc582c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=547 ipv4=10.0.0.55 ipv6= k8sPodName=monitoring/vector-hvp6x subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=85d3bc582c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=547 identityLabels="k8s:app.kubernetes.io/component=Agent,k8s:app.kubernetes.io/instance=vector,k8s:app.kubernetes.io/name=vector,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=vector,k8s:io.kubernetes.pod.namespace=monitoring,k8s:vector.dev/exclude=true" ipv4=10.0.0.55 ipv6= k8sPodName=monitoring/vector-hvp6x subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=Agent;k8s:app.kubernetes.io/instance=vector;k8s:app.kubernetes.io/name=vector;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=vector;k8s:io.kubernetes.pod.namespace=monitoring;k8s:vector.dev/exclude=true;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=85d3bc582c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=547 identity=17530 identityLabels="k8s:app.kubernetes.io/component=Agent,k8s:app.kubernetes.io/instance=vector,k8s:app.kubernetes.io/name=vector,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=vector,k8s:io.kubernetes.pod.namespace=monitoring,k8s:vector.dev/exclude=true" ipv4=10.0.0.55 ipv6= k8sPodName=monitoring/vector-hvp6x oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=85d3bc582c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=547 identity=17530 ipv4=10.0.0.55 ipv6= k8sPodName=monitoring/vector-hvp6x subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=85d3bc582c datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=547 identity=17530 ipv4=10.0.0.55 ipv6= k8sPodName=monitoring/vector-hvp6x subsys=endpoint level=info msg="Successful endpoint creation" containerID=85d3bc582c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=547 identity=17530 ipv4=10.0.0.55 ipv6= k8sPodName=monitoring/vector-hvp6x subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=8b322064ec endpointID=2358 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-e92bc903-7b83-402c-95c2-955b232e3e10 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=8b322064ec datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2358 identity=284 ipv4=10.0.0.169 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e92bc903-7b83-402c-95c2-955b232e3e10 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.85 be184de8-90d7-4a99-a845-b980d9fbc919 default }" containerID=eaa4b520047220bfa9b19e9246ecf7f3d16aebc7efa1c62b54458297e45b734e datapathConfiguration="&{false false false false false }" interface=lxc822f389d2596 k8sPodName=monitoring/loki-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=eaa4b52004 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=565 ipv4=10.0.0.85 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=eaa4b52004 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=565 identityLabels="k8s:app.kubernetes.io/component=single-binary,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:app.kubernetes.io/part-of=memberlist,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=loki-0" ipv4=10.0.0.85 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=single-binary;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:app.kubernetes.io/part-of=memberlist;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:statefulset.kubernetes.io/pod-name=loki-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=eaa4b52004 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=565 identity=29905 identityLabels="k8s:app.kubernetes.io/component=single-binary,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:app.kubernetes.io/part-of=memberlist,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=loki-0" ipv4=10.0.0.85 ipv6= k8sPodName=monitoring/loki-0 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=eaa4b52004 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=565 identity=29905 ipv4=10.0.0.85 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=eaa4b52004 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=565 identity=29905 ipv4=10.0.0.85 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=eaa4b52004 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=565 identity=29905 ipv4=10.0.0.85 ipv6= k8sPodName=monitoring/loki-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.90 084f2d07-b8ca-4d96-a55d-b63ada6a6888 default }" containerID=a310ec267ab29f732f5d81ac21905b7558647b9ad34769dff95c09fb6fde02c6 datapathConfiguration="&{false false false false false }" interface=lxcfc3d219d18b2 k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-znmhr labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a310ec267a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=544 ipv4=10.0.0.90 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-znmhr subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a310ec267a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=544 identityLabels="k8s:app.kubernetes.io/instance=prometheus-pushgateway,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=prometheus-pushgateway,k8s:app.kubernetes.io/version=v1.8.0,k8s:helm.sh/chart=prometheus-pushgateway-2.13.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.90 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-znmhr subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=a310ec267a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=544 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.90 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-znmhr line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=prometheus-pushgateway;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=prometheus-pushgateway;k8s:app.kubernetes.io/version=v1.8.0;k8s:helm.sh/chart=prometheus-pushgateway-2.13.0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a310ec267a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=544 identity=30160 identityLabels="k8s:app.kubernetes.io/instance=prometheus-pushgateway,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=prometheus-pushgateway,k8s:app.kubernetes.io/version=v1.8.0,k8s:helm.sh/chart=prometheus-pushgateway-2.13.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.90 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-znmhr oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a310ec267a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=544 identity=30160 ipv4=10.0.0.90 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-znmhr subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a310ec267a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=544 identity=30160 ipv4=10.0.0.90 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-znmhr subsys=endpoint level=info msg="Successful endpoint creation" containerID=a310ec267a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=544 identity=30160 ipv4=10.0.0.90 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-znmhr subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.71 c6b097ba-e7a0-410a-934b-4153f6792e7b default }" containerID=c20e491c3a501f5bf226ad3e81743d4e4d3f17bc31526cff25e83d99641b1844 datapathConfiguration="&{false false false false false }" interface=lxcc656a65395a3 k8sPodName=openstack/memcached-memcached-6479589586-8hv98 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c20e491c3a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2825 ipv4=10.0.0.71 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-8hv98 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c20e491c3a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2825 identityLabels="k8s:application=memcached,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=memcached" ipv4=10.0.0.71 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-8hv98 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=memcached;k8s:component=server;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=memcached;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=c20e491c3a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2825 identity=61255 identityLabels="k8s:application=memcached,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=memcached" ipv4=10.0.0.71 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-8hv98 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c20e491c3a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2825 identity=61255 ipv4=10.0.0.71 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-8hv98 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c20e491c3a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2825 identity=61255 ipv4=10.0.0.71 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-8hv98 subsys=endpoint level=info msg="Successful endpoint creation" containerID=c20e491c3a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2825 identity=61255 ipv4=10.0.0.71 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-8hv98 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.174 c623d5ea-590f-448e-bd46-7e9435c8a150 default }" containerID=7f6a092c957bbced80c51efa1346e08f5332634b0e2d60275cffcb1b0afa0977 datapathConfiguration="&{false false false false false }" interface=lxcae8140f3ce69 k8sPodName=local-path-storage/helper-pod-create-pvc-a8bfb866-071c-43bf-a63c-9afff5c9dd1a labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7f6a092c95 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1641 ipv4=10.0.0.174 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a8bfb866-071c-43bf-a63c-9afff5c9dd1a subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7f6a092c95 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1641 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.174 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a8bfb866-071c-43bf-a63c-9afff5c9dd1a subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7f6a092c95 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1641 identity=284 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.174 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a8bfb866-071c-43bf-a63c-9afff5c9dd1a oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7f6a092c95 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1641 identity=284 ipv4=10.0.0.174 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a8bfb866-071c-43bf-a63c-9afff5c9dd1a subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=7f6a092c95 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1641 identity=284 ipv4=10.0.0.174 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a8bfb866-071c-43bf-a63c-9afff5c9dd1a subsys=endpoint level=info msg="Successful endpoint creation" containerID=7f6a092c95 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1641 identity=284 ipv4=10.0.0.174 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a8bfb866-071c-43bf-a63c-9afff5c9dd1a subsys=daemon level=info msg="Delete endpoint request" containerID=7f6a092c95 endpointID=1641 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-a8bfb866-071c-43bf-a63c-9afff5c9dd1a subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=7f6a092c95 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1641 identity=284 ipv4=10.0.0.174 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a8bfb866-071c-43bf-a63c-9afff5c9dd1a subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.168 862d6828-974c-49d1-9cd2-617bcc093c30 default }" containerID=132124c05484d126593f75bf0884b8d8a8e7fe7c5c5c8d3b88a0797a6baee52d datapathConfiguration="&{false false false false false }" interface=lxc81fab2bf09a5 k8sPodName=openstack/rabbitmq-keystone-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=132124c054 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1317 ipv4=10.0.0.168 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=132124c054 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1317 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-keystone,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0" ipv4=10.0.0.168 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-keystone;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=132124c054 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1317 identity=5251 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-keystone,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0" ipv4=10.0.0.168 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=132124c054 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1317 identity=5251 ipv4=10.0.0.168 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=132124c054 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1317 identity=5251 ipv4=10.0.0.168 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=132124c054 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1317 identity=5251 ipv4=10.0.0.168 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.129 e900511e-7d6b-42e1-a90e-f56212fcf2c1 default }" containerID=d324b74f0bda4e1086495a464175af96a616e0988c3f52748bd334847b069fca datapathConfiguration="&{false false false false false }" interface=lxc0241f2382a7e k8sPodName=openstack/keystone-api-6dbc8946bb-2r7q5 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d324b74f0b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1210 ipv4=10.0.0.129 ipv6= k8sPodName=openstack/keystone-api-6dbc8946bb-2r7q5 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d324b74f0b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1210 identityLabels="k8s:application=keystone,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=keystone" ipv4=10.0.0.129 ipv6= k8sPodName=openstack/keystone-api-6dbc8946bb-2r7q5 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d324b74f0b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1210 identity=36278 identityLabels="k8s:application=keystone,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=keystone" ipv4=10.0.0.129 ipv6= k8sPodName=openstack/keystone-api-6dbc8946bb-2r7q5 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d324b74f0b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1210 identity=36278 ipv4=10.0.0.129 ipv6= k8sPodName=openstack/keystone-api-6dbc8946bb-2r7q5 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.47 0db0bf38-ec1a-4a95-a903-fb815fd4975d default }" containerID=df2517b54e539f9d7f0daba78e9cda7879ce7c9dd42a5d6f19f8da75724092f9 datapathConfiguration="&{false false false false false }" interface=lxc610d7cfc187c k8sPodName=openstack/keystone-credential-setup-58vbg labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=df2517b54e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1631 ipv4=10.0.0.47 ipv6= k8sPodName=openstack/keystone-credential-setup-58vbg subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=df2517b54e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1631 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=f475307d-71b1-4e08-a042-4c834e4c0f83,k8s:batch.kubernetes.io/job-name=keystone-credential-setup,k8s:component=credential-setup,k8s:controller-uid=f475307d-71b1-4e08-a042-4c834e4c0f83,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-credential-setup,k8s:release_group=keystone" ipv4=10.0.0.47 ipv6= k8sPodName=openstack/keystone-credential-setup-58vbg subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=f475307d-71b1-4e08-a042-4c834e4c0f83;k8s:batch.kubernetes.io/job-name=keystone-credential-setup;k8s:component=credential-setup;k8s:controller-uid=f475307d-71b1-4e08-a042-4c834e4c0f83;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-credential-setup;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=df2517b54e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1631 identity=6812 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=f475307d-71b1-4e08-a042-4c834e4c0f83,k8s:batch.kubernetes.io/job-name=keystone-credential-setup,k8s:component=credential-setup,k8s:controller-uid=f475307d-71b1-4e08-a042-4c834e4c0f83,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-credential-setup,k8s:release_group=keystone" ipv4=10.0.0.47 ipv6= k8sPodName=openstack/keystone-credential-setup-58vbg oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=df2517b54e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1631 identity=6812 ipv4=10.0.0.47 ipv6= k8sPodName=openstack/keystone-credential-setup-58vbg subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d324b74f0b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1210 identity=36278 ipv4=10.0.0.129 ipv6= k8sPodName=openstack/keystone-api-6dbc8946bb-2r7q5 subsys=endpoint level=info msg="Successful endpoint creation" containerID=d324b74f0b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1210 identity=36278 ipv4=10.0.0.129 ipv6= k8sPodName=openstack/keystone-api-6dbc8946bb-2r7q5 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=df2517b54e datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1631 identity=6812 ipv4=10.0.0.47 ipv6= k8sPodName=openstack/keystone-credential-setup-58vbg subsys=endpoint level=info msg="Successful endpoint creation" containerID=df2517b54e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1631 identity=6812 ipv4=10.0.0.47 ipv6= k8sPodName=openstack/keystone-credential-setup-58vbg subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=df2517b54e endpointID=1631 k8sNamespace=openstack k8sPodName=keystone-credential-setup-58vbg subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=f475307d-71b1-4e08-a042-4c834e4c0f83 k8s:batch.kubernetes.io/job-name=keystone-credential-setup k8s:component=credential-setup k8s:controller-uid=f475307d-71b1-4e08-a042-4c834e4c0f83 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-credential-setup k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=df2517b54e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1631 identity=6812 ipv4=10.0.0.47 ipv6= k8sPodName=openstack/keystone-credential-setup-58vbg subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.238 6ce1edc4-89ad-42bd-867e-31305d05732b default }" containerID=bd7427374e9fa3ec0e8b473b75d9f457fc1ebf78e068fc9ed241354643c19e83 datapathConfiguration="&{false false false false false }" interface=lxc495bb1b9b564 k8sPodName=openstack/keystone-db-init-l7xk5 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=bd7427374e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=137 ipv4=10.0.0.238 ipv6= k8sPodName=openstack/keystone-db-init-l7xk5 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=bd7427374e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=137 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=a685bcd5-58fb-4e32-bc68-71a8a585d418,k8s:batch.kubernetes.io/job-name=keystone-db-init,k8s:component=db-init,k8s:controller-uid=a685bcd5-58fb-4e32-bc68-71a8a585d418,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-init,k8s:release_group=keystone" ipv4=10.0.0.238 ipv6= k8sPodName=openstack/keystone-db-init-l7xk5 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=a685bcd5-58fb-4e32-bc68-71a8a585d418;k8s:batch.kubernetes.io/job-name=keystone-db-init;k8s:component=db-init;k8s:controller-uid=a685bcd5-58fb-4e32-bc68-71a8a585d418;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-db-init;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=bd7427374e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=137 identity=16265 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=a685bcd5-58fb-4e32-bc68-71a8a585d418,k8s:batch.kubernetes.io/job-name=keystone-db-init,k8s:component=db-init,k8s:controller-uid=a685bcd5-58fb-4e32-bc68-71a8a585d418,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-init,k8s:release_group=keystone" ipv4=10.0.0.238 ipv6= k8sPodName=openstack/keystone-db-init-l7xk5 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=bd7427374e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=137 identity=16265 ipv4=10.0.0.238 ipv6= k8sPodName=openstack/keystone-db-init-l7xk5 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=bd7427374e datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=137 identity=16265 ipv4=10.0.0.238 ipv6= k8sPodName=openstack/keystone-db-init-l7xk5 subsys=endpoint level=info msg="Successful endpoint creation" containerID=bd7427374e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=137 identity=16265 ipv4=10.0.0.238 ipv6= k8sPodName=openstack/keystone-db-init-l7xk5 subsys=daemon level=info msg="Delete endpoint request" containerID=bd7427374e endpointID=137 k8sNamespace=openstack k8sPodName=keystone-db-init-l7xk5 subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=a685bcd5-58fb-4e32-bc68-71a8a585d418 k8s:batch.kubernetes.io/job-name=keystone-db-init k8s:component=db-init k8s:controller-uid=a685bcd5-58fb-4e32-bc68-71a8a585d418 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-db-init k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=bd7427374e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=137 identity=16265 ipv4=10.0.0.238 ipv6= k8sPodName=openstack/keystone-db-init-l7xk5 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.132 77adb99d-23fa-44a1-a5ec-012ea453d7ed default }" containerID=c48867903b89b2af60c0f596f6cb4cda0d81bf229c9140bfdf7910b36574cf0b datapathConfiguration="&{false false false false false }" interface=lxc1be1fe3ad287 k8sPodName=openstack/keystone-fernet-setup-qcrc8 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c48867903b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3674 ipv4=10.0.0.132 ipv6= k8sPodName=openstack/keystone-fernet-setup-qcrc8 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c48867903b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3674 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=bb539a5a-797f-417b-882f-1b44be1e6f6e,k8s:batch.kubernetes.io/job-name=keystone-fernet-setup,k8s:component=fernet-setup,k8s:controller-uid=bb539a5a-797f-417b-882f-1b44be1e6f6e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-setup,k8s:release_group=keystone" ipv4=10.0.0.132 ipv6= k8sPodName=openstack/keystone-fernet-setup-qcrc8 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=bb539a5a-797f-417b-882f-1b44be1e6f6e;k8s:batch.kubernetes.io/job-name=keystone-fernet-setup;k8s:component=fernet-setup;k8s:controller-uid=bb539a5a-797f-417b-882f-1b44be1e6f6e;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-fernet-setup;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c48867903b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3674 identity=8358 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=bb539a5a-797f-417b-882f-1b44be1e6f6e,k8s:batch.kubernetes.io/job-name=keystone-fernet-setup,k8s:component=fernet-setup,k8s:controller-uid=bb539a5a-797f-417b-882f-1b44be1e6f6e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-setup,k8s:release_group=keystone" ipv4=10.0.0.132 ipv6= k8sPodName=openstack/keystone-fernet-setup-qcrc8 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c48867903b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3674 identity=8358 ipv4=10.0.0.132 ipv6= k8sPodName=openstack/keystone-fernet-setup-qcrc8 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c48867903b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3674 identity=8358 ipv4=10.0.0.132 ipv6= k8sPodName=openstack/keystone-fernet-setup-qcrc8 subsys=endpoint level=info msg="Successful endpoint creation" containerID=c48867903b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3674 identity=8358 ipv4=10.0.0.132 ipv6= k8sPodName=openstack/keystone-fernet-setup-qcrc8 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=c48867903b endpointID=3674 k8sNamespace=openstack k8sPodName=keystone-fernet-setup-qcrc8 subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=bb539a5a-797f-417b-882f-1b44be1e6f6e k8s:batch.kubernetes.io/job-name=keystone-fernet-setup k8s:component=fernet-setup k8s:controller-uid=bb539a5a-797f-417b-882f-1b44be1e6f6e k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-fernet-setup k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=c48867903b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3674 identity=8358 ipv4=10.0.0.132 ipv6= k8sPodName=openstack/keystone-fernet-setup-qcrc8 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.230 4c41fa13-ba7b-47a9-ab1a-b680d7886263 default }" containerID=1cb2b5bc8dc519268ade4636a319304c36ac158561c7d47e071cf85c2047b864 datapathConfiguration="&{false false false false false }" interface=lxc7821141dd123 k8sPodName=openstack/keystone-db-sync-ktjj5 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1cb2b5bc8d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1602 ipv4=10.0.0.230 ipv6= k8sPodName=openstack/keystone-db-sync-ktjj5 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1cb2b5bc8d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1602 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=7610b71c-a4ed-44b7-bd97-d9077a7261ac,k8s:batch.kubernetes.io/job-name=keystone-db-sync,k8s:component=db-sync,k8s:controller-uid=7610b71c-a4ed-44b7-bd97-d9077a7261ac,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-sync,k8s:release_group=keystone" ipv4=10.0.0.230 ipv6= k8sPodName=openstack/keystone-db-sync-ktjj5 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=7610b71c-a4ed-44b7-bd97-d9077a7261ac;k8s:batch.kubernetes.io/job-name=keystone-db-sync;k8s:component=db-sync;k8s:controller-uid=7610b71c-a4ed-44b7-bd97-d9077a7261ac;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-db-sync;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1cb2b5bc8d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1602 identity=7840 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=7610b71c-a4ed-44b7-bd97-d9077a7261ac,k8s:batch.kubernetes.io/job-name=keystone-db-sync,k8s:component=db-sync,k8s:controller-uid=7610b71c-a4ed-44b7-bd97-d9077a7261ac,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-sync,k8s:release_group=keystone" ipv4=10.0.0.230 ipv6= k8sPodName=openstack/keystone-db-sync-ktjj5 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1cb2b5bc8d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1602 identity=7840 ipv4=10.0.0.230 ipv6= k8sPodName=openstack/keystone-db-sync-ktjj5 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=1cb2b5bc8d datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1602 identity=7840 ipv4=10.0.0.230 ipv6= k8sPodName=openstack/keystone-db-sync-ktjj5 subsys=endpoint level=info msg="Successful endpoint creation" containerID=1cb2b5bc8d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1602 identity=7840 ipv4=10.0.0.230 ipv6= k8sPodName=openstack/keystone-db-sync-ktjj5 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=1cb2b5bc8d endpointID=1602 k8sNamespace=openstack k8sPodName=keystone-db-sync-ktjj5 subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=7610b71c-a4ed-44b7-bd97-d9077a7261ac k8s:batch.kubernetes.io/job-name=keystone-db-sync k8s:component=db-sync k8s:controller-uid=7610b71c-a4ed-44b7-bd97-d9077a7261ac k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-db-sync k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=1cb2b5bc8d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1602 identity=7840 ipv4=10.0.0.230 ipv6= k8sPodName=openstack/keystone-db-sync-ktjj5 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.174 e8124acb-a0bb-4f60-bb3d-1eb5d5aa330f default }" containerID=1f81e9b1dd3dd1cc4cfe3879b529bffa5285c74a3b060367981fff831a10ca05 datapathConfiguration="&{false false false false false }" interface=lxc3e3a88e04289 k8sPodName=openstack/keystone-rabbit-init-84jxf labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1f81e9b1dd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=947 ipv4=10.0.0.174 ipv6= k8sPodName=openstack/keystone-rabbit-init-84jxf subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1f81e9b1dd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=947 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=1ca9ce90-9ba0-44f2-8a97-3223abdbfd94,k8s:batch.kubernetes.io/job-name=keystone-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=1ca9ce90-9ba0-44f2-8a97-3223abdbfd94,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-rabbit-init,k8s:release_group=keystone" ipv4=10.0.0.174 ipv6= k8sPodName=openstack/keystone-rabbit-init-84jxf subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=1ca9ce90-9ba0-44f2-8a97-3223abdbfd94;k8s:batch.kubernetes.io/job-name=keystone-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=1ca9ce90-9ba0-44f2-8a97-3223abdbfd94;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-rabbit-init;k8s:release_group=keystone;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=1f81e9b1dd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=947 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.174 ipv6= k8sPodName=openstack/keystone-rabbit-init-84jxf line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=1f81e9b1dd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=947 identity=9829 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=1ca9ce90-9ba0-44f2-8a97-3223abdbfd94,k8s:batch.kubernetes.io/job-name=keystone-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=1ca9ce90-9ba0-44f2-8a97-3223abdbfd94,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-rabbit-init,k8s:release_group=keystone" ipv4=10.0.0.174 ipv6= k8sPodName=openstack/keystone-rabbit-init-84jxf oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1f81e9b1dd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=947 identity=9829 ipv4=10.0.0.174 ipv6= k8sPodName=openstack/keystone-rabbit-init-84jxf subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=1f81e9b1dd datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=947 identity=9829 ipv4=10.0.0.174 ipv6= k8sPodName=openstack/keystone-rabbit-init-84jxf subsys=endpoint level=info msg="Successful endpoint creation" containerID=1f81e9b1dd datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=947 identity=9829 ipv4=10.0.0.174 ipv6= k8sPodName=openstack/keystone-rabbit-init-84jxf subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=1f81e9b1dd endpointID=947 k8sNamespace=openstack k8sPodName=keystone-rabbit-init-84jxf subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=1ca9ce90-9ba0-44f2-8a97-3223abdbfd94 k8s:batch.kubernetes.io/job-name=keystone-rabbit-init k8s:component=rabbit-init k8s:controller-uid=1ca9ce90-9ba0-44f2-8a97-3223abdbfd94 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-rabbit-init k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=1f81e9b1dd datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=947 identity=9829 ipv4=10.0.0.174 ipv6= k8sPodName=openstack/keystone-rabbit-init-84jxf subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.37 19d733ce-8bcf-449c-b0a8-16ffe73ff797 default }" containerID=14d22443d9f31473e26d007d3251f83274091b19f4bc7e36200847a32f33f4ba datapathConfiguration="&{false false false false false }" interface=lxc3894b5cc2ff6 k8sPodName=openstack/keystone-domain-manage-hchnx labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=14d22443d9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=186 ipv4=10.0.0.37 ipv6= k8sPodName=openstack/keystone-domain-manage-hchnx subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=14d22443d9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=186 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=8f0fdfab-a14e-4669-9943-f9cf852d7345,k8s:batch.kubernetes.io/job-name=keystone-domain-manage,k8s:component=domain-manage,k8s:controller-uid=8f0fdfab-a14e-4669-9943-f9cf852d7345,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-domain-manage,k8s:release_group=keystone" ipv4=10.0.0.37 ipv6= k8sPodName=openstack/keystone-domain-manage-hchnx subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=14d22443d9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=186 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.37 ipv6= k8sPodName=openstack/keystone-domain-manage-hchnx line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=8f0fdfab-a14e-4669-9943-f9cf852d7345;k8s:batch.kubernetes.io/job-name=keystone-domain-manage;k8s:component=domain-manage;k8s:controller-uid=8f0fdfab-a14e-4669-9943-f9cf852d7345;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-domain-manage;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=14d22443d9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=186 identity=37632 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=8f0fdfab-a14e-4669-9943-f9cf852d7345,k8s:batch.kubernetes.io/job-name=keystone-domain-manage,k8s:component=domain-manage,k8s:controller-uid=8f0fdfab-a14e-4669-9943-f9cf852d7345,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-domain-manage,k8s:release_group=keystone" ipv4=10.0.0.37 ipv6= k8sPodName=openstack/keystone-domain-manage-hchnx oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=14d22443d9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=186 identity=37632 ipv4=10.0.0.37 ipv6= k8sPodName=openstack/keystone-domain-manage-hchnx subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=14d22443d9 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=186 identity=37632 ipv4=10.0.0.37 ipv6= k8sPodName=openstack/keystone-domain-manage-hchnx subsys=endpoint level=info msg="Successful endpoint creation" containerID=14d22443d9 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=186 identity=37632 ipv4=10.0.0.37 ipv6= k8sPodName=openstack/keystone-domain-manage-hchnx subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=14d22443d9 endpointID=186 k8sNamespace=openstack k8sPodName=keystone-domain-manage-hchnx subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=8f0fdfab-a14e-4669-9943-f9cf852d7345 k8s:batch.kubernetes.io/job-name=keystone-domain-manage k8s:component=domain-manage k8s:controller-uid=8f0fdfab-a14e-4669-9943-f9cf852d7345 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-domain-manage k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=14d22443d9 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=186 identity=37632 ipv4=10.0.0.37 ipv6= k8sPodName=openstack/keystone-domain-manage-hchnx subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.22 7d0ce765-61b6-4140-97e2-a94c3fa5e288 default }" containerID=d5358b454a9db722279853005b69c69813fa2957ceead0f8de1e6b2dc6254b2f datapathConfiguration="&{false false false false false }" interface=lxcf8f204bf85f7 k8sPodName=openstack/keystone-bootstrap-d2sm8 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d5358b454a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=891 ipv4=10.0.0.22 ipv6= k8sPodName=openstack/keystone-bootstrap-d2sm8 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d5358b454a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=891 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=db226883-6ada-48b1-9cba-a97d019de96a,k8s:batch.kubernetes.io/job-name=keystone-bootstrap,k8s:component=bootstrap,k8s:controller-uid=db226883-6ada-48b1-9cba-a97d019de96a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-bootstrap,k8s:release_group=keystone" ipv4=10.0.0.22 ipv6= k8sPodName=openstack/keystone-bootstrap-d2sm8 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=d5358b454a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=891 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.22 ipv6= k8sPodName=openstack/keystone-bootstrap-d2sm8 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=db226883-6ada-48b1-9cba-a97d019de96a;k8s:batch.kubernetes.io/job-name=keystone-bootstrap;k8s:component=bootstrap;k8s:controller-uid=db226883-6ada-48b1-9cba-a97d019de96a;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-bootstrap;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d5358b454a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=891 identity=34307 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=db226883-6ada-48b1-9cba-a97d019de96a,k8s:batch.kubernetes.io/job-name=keystone-bootstrap,k8s:component=bootstrap,k8s:controller-uid=db226883-6ada-48b1-9cba-a97d019de96a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-bootstrap,k8s:release_group=keystone" ipv4=10.0.0.22 ipv6= k8sPodName=openstack/keystone-bootstrap-d2sm8 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d5358b454a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=891 identity=34307 ipv4=10.0.0.22 ipv6= k8sPodName=openstack/keystone-bootstrap-d2sm8 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d5358b454a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=891 identity=34307 ipv4=10.0.0.22 ipv6= k8sPodName=openstack/keystone-bootstrap-d2sm8 subsys=endpoint level=info msg="Successful endpoint creation" containerID=d5358b454a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=891 identity=34307 ipv4=10.0.0.22 ipv6= k8sPodName=openstack/keystone-bootstrap-d2sm8 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=d5358b454a endpointID=891 k8sNamespace=openstack k8sPodName=keystone-bootstrap-d2sm8 subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=db226883-6ada-48b1-9cba-a97d019de96a k8s:batch.kubernetes.io/job-name=keystone-bootstrap k8s:component=bootstrap k8s:controller-uid=db226883-6ada-48b1-9cba-a97d019de96a k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-bootstrap k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=d5358b454a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=891 identity=34307 ipv4=10.0.0.22 ipv6= k8sPodName=openstack/keystone-bootstrap-d2sm8 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.76 eee08dc9-d1dc-441b-a32e-bef45dbecf1a default }" containerID=1bc67c71e84acb5afed0266ac7f9610a1c967b5e3963794bbe7411e037389a8d datapathConfiguration="&{false false false false false }" interface=lxc33404a3a1054 k8sPodName=local-path-storage/helper-pod-create-pvc-8215ec5d-fc56-4639-839a-9576b66dc2f0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1bc67c71e8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1023 ipv4=10.0.0.76 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-8215ec5d-fc56-4639-839a-9576b66dc2f0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1bc67c71e8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1023 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.76 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-8215ec5d-fc56-4639-839a-9576b66dc2f0 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1bc67c71e8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1023 identity=284 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.76 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-8215ec5d-fc56-4639-839a-9576b66dc2f0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1bc67c71e8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1023 identity=284 ipv4=10.0.0.76 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-8215ec5d-fc56-4639-839a-9576b66dc2f0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=1bc67c71e8 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1023 identity=284 ipv4=10.0.0.76 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-8215ec5d-fc56-4639-839a-9576b66dc2f0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=1bc67c71e8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1023 identity=284 ipv4=10.0.0.76 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-8215ec5d-fc56-4639-839a-9576b66dc2f0 subsys=daemon level=info msg="Delete endpoint request" containerID=1bc67c71e8 endpointID=1023 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-8215ec5d-fc56-4639-839a-9576b66dc2f0 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=1bc67c71e8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1023 identity=284 ipv4=10.0.0.76 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-8215ec5d-fc56-4639-839a-9576b66dc2f0 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.92 eb653513-f762-47e5-a01a-3ebba4343e20 default }" containerID=146891c17987ef01593e5c14be7c06ebbbb9276bc1cb71d485ce0b05b85a7310 datapathConfiguration="&{false false false false false }" interface=lxc70c131f7bdb2 k8sPodName=openstack/rabbitmq-barbican-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=146891c179 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1070 ipv4=10.0.0.92 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=146891c179 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1070 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-barbican,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0" ipv4=10.0.0.92 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-barbican;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=146891c179 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1070 identity=14335 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-barbican,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0" ipv4=10.0.0.92 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=146891c179 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1070 identity=14335 ipv4=10.0.0.92 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=146891c179 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1070 identity=14335 ipv4=10.0.0.92 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=146891c179 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1070 identity=14335 ipv4=10.0.0.92 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.38 4486de0b-5a07-4dff-b31c-ca39e30390ec default }" containerID=7a0f8ef50bb68a58238f667625fca4db9aff480d4ec5cca2edb52ad51231b51d datapathConfiguration="&{false false false false false }" interface=lxcc22b0fd99d87 k8sPodName=openstack/barbican-api-546df9887f-tzfcw labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7a0f8ef50b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=536 ipv4=10.0.0.38 ipv6= k8sPodName=openstack/barbican-api-546df9887f-tzfcw subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7a0f8ef50b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=536 identityLabels="k8s:application=barbican,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=barbican" ipv4=10.0.0.38 ipv6= k8sPodName=openstack/barbican-api-546df9887f-tzfcw subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7a0f8ef50b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=536 identity=53545 identityLabels="k8s:application=barbican,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=barbican" ipv4=10.0.0.38 ipv6= k8sPodName=openstack/barbican-api-546df9887f-tzfcw oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=7a0f8ef50b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=536 identity=53545 ipv4=10.0.0.38 ipv6= k8sPodName=openstack/barbican-api-546df9887f-tzfcw subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.22 c027042a-f5aa-4f50-8950-8e57ddf079c1 default }" containerID=1dfc6d7ce4f6f76d20ca3aff4a8ca03e969fb9c3976ac2fe33949db9bb4107d2 datapathConfiguration="&{false false false false false }" interface=lxc2d826aebd99e k8sPodName=openstack/barbican-db-init-hlhwr labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1dfc6d7ce4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1078 ipv4=10.0.0.22 ipv6= k8sPodName=openstack/barbican-db-init-hlhwr subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1dfc6d7ce4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1078 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=6762c81e-1d94-47b3-b87f-a1444e96f26c,k8s:batch.kubernetes.io/job-name=barbican-db-init,k8s:component=db-init,k8s:controller-uid=6762c81e-1d94-47b3-b87f-a1444e96f26c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-init,k8s:release_group=barbican" ipv4=10.0.0.22 ipv6= k8sPodName=openstack/barbican-db-init-hlhwr subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=6762c81e-1d94-47b3-b87f-a1444e96f26c;k8s:batch.kubernetes.io/job-name=barbican-db-init;k8s:component=db-init;k8s:controller-uid=6762c81e-1d94-47b3-b87f-a1444e96f26c;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-db-init;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1dfc6d7ce4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1078 identity=48827 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=6762c81e-1d94-47b3-b87f-a1444e96f26c,k8s:batch.kubernetes.io/job-name=barbican-db-init,k8s:component=db-init,k8s:controller-uid=6762c81e-1d94-47b3-b87f-a1444e96f26c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-init,k8s:release_group=barbican" ipv4=10.0.0.22 ipv6= k8sPodName=openstack/barbican-db-init-hlhwr oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1dfc6d7ce4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1078 identity=48827 ipv4=10.0.0.22 ipv6= k8sPodName=openstack/barbican-db-init-hlhwr subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=7a0f8ef50b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=536 identity=53545 ipv4=10.0.0.38 ipv6= k8sPodName=openstack/barbican-api-546df9887f-tzfcw subsys=endpoint level=info msg="Successful endpoint creation" containerID=7a0f8ef50b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=536 identity=53545 ipv4=10.0.0.38 ipv6= k8sPodName=openstack/barbican-api-546df9887f-tzfcw subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=1dfc6d7ce4 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1078 identity=48827 ipv4=10.0.0.22 ipv6= k8sPodName=openstack/barbican-db-init-hlhwr subsys=endpoint level=info msg="Successful endpoint creation" containerID=1dfc6d7ce4 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1078 identity=48827 ipv4=10.0.0.22 ipv6= k8sPodName=openstack/barbican-db-init-hlhwr subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=1dfc6d7ce4 endpointID=1078 k8sNamespace=openstack k8sPodName=barbican-db-init-hlhwr subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=6762c81e-1d94-47b3-b87f-a1444e96f26c k8s:batch.kubernetes.io/job-name=barbican-db-init k8s:component=db-init k8s:controller-uid=6762c81e-1d94-47b3-b87f-a1444e96f26c k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-db-init k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=1dfc6d7ce4 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1078 identity=48827 ipv4=10.0.0.22 ipv6= k8sPodName=openstack/barbican-db-init-hlhwr subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.120 3ce5d788-4149-4eb7-9310-3c4999bbf18a default }" containerID=49294bb5a2c44466333abd0ddb6ca3fcb81f9039bbc268ad1f1b106d96f5ceb5 datapathConfiguration="&{false false false false false }" interface=lxcbfc34dbd1070 k8sPodName=openstack/barbican-db-sync-hf4zn labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=49294bb5a2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=804 ipv4=10.0.0.120 ipv6= k8sPodName=openstack/barbican-db-sync-hf4zn subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=49294bb5a2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=804 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=b6d40fdf-a099-4376-ba0e-7ead6f9b15fe,k8s:batch.kubernetes.io/job-name=barbican-db-sync,k8s:component=db-sync,k8s:controller-uid=b6d40fdf-a099-4376-ba0e-7ead6f9b15fe,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-sync,k8s:release_group=barbican" ipv4=10.0.0.120 ipv6= k8sPodName=openstack/barbican-db-sync-hf4zn subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=b6d40fdf-a099-4376-ba0e-7ead6f9b15fe;k8s:batch.kubernetes.io/job-name=barbican-db-sync;k8s:component=db-sync;k8s:controller-uid=b6d40fdf-a099-4376-ba0e-7ead6f9b15fe;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-db-sync;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=49294bb5a2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=804 identity=56145 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=b6d40fdf-a099-4376-ba0e-7ead6f9b15fe,k8s:batch.kubernetes.io/job-name=barbican-db-sync,k8s:component=db-sync,k8s:controller-uid=b6d40fdf-a099-4376-ba0e-7ead6f9b15fe,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-sync,k8s:release_group=barbican" ipv4=10.0.0.120 ipv6= k8sPodName=openstack/barbican-db-sync-hf4zn oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=49294bb5a2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=804 identity=56145 ipv4=10.0.0.120 ipv6= k8sPodName=openstack/barbican-db-sync-hf4zn subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=49294bb5a2 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=804 identity=56145 ipv4=10.0.0.120 ipv6= k8sPodName=openstack/barbican-db-sync-hf4zn subsys=endpoint level=info msg="Successful endpoint creation" containerID=49294bb5a2 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=804 identity=56145 ipv4=10.0.0.120 ipv6= k8sPodName=openstack/barbican-db-sync-hf4zn subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Conntrack garbage collector interval recalculated" deleteRatio=0.036120091441557214 newInterval=11m15s subsys=map-ct level=info msg="Delete endpoint request" containerID=49294bb5a2 endpointID=804 k8sNamespace=openstack k8sPodName=barbican-db-sync-hf4zn subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=b6d40fdf-a099-4376-ba0e-7ead6f9b15fe k8s:batch.kubernetes.io/job-name=barbican-db-sync k8s:component=db-sync k8s:controller-uid=b6d40fdf-a099-4376-ba0e-7ead6f9b15fe k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-db-sync k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=49294bb5a2 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=804 identity=56145 ipv4=10.0.0.120 ipv6= k8sPodName=openstack/barbican-db-sync-hf4zn subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.8 392db509-e743-4d94-b1d7-59ed3a99971b default }" containerID=1bd6236091441728d01465574a784d3e53063ae26f081747656324b33ee8b38e datapathConfiguration="&{false false false false false }" interface=lxc8522088f6ba2 k8sPodName=openstack/barbican-rabbit-init-x567p labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1bd6236091 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1225 ipv4=10.0.0.8 ipv6= k8sPodName=openstack/barbican-rabbit-init-x567p subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1bd6236091 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1225 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=3473b56e-5b66-4d82-a3a8-77f19ceabc4b,k8s:batch.kubernetes.io/job-name=barbican-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=3473b56e-5b66-4d82-a3a8-77f19ceabc4b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-rabbit-init,k8s:release_group=barbican" ipv4=10.0.0.8 ipv6= k8sPodName=openstack/barbican-rabbit-init-x567p subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=1bd6236091 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1225 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.8 ipv6= k8sPodName=openstack/barbican-rabbit-init-x567p line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=3473b56e-5b66-4d82-a3a8-77f19ceabc4b;k8s:batch.kubernetes.io/job-name=barbican-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=3473b56e-5b66-4d82-a3a8-77f19ceabc4b;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-rabbit-init;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1bd6236091 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1225 identity=9721 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=3473b56e-5b66-4d82-a3a8-77f19ceabc4b,k8s:batch.kubernetes.io/job-name=barbican-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=3473b56e-5b66-4d82-a3a8-77f19ceabc4b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-rabbit-init,k8s:release_group=barbican" ipv4=10.0.0.8 ipv6= k8sPodName=openstack/barbican-rabbit-init-x567p oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1bd6236091 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1225 identity=9721 ipv4=10.0.0.8 ipv6= k8sPodName=openstack/barbican-rabbit-init-x567p subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=1bd6236091 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1225 identity=9721 ipv4=10.0.0.8 ipv6= k8sPodName=openstack/barbican-rabbit-init-x567p subsys=endpoint level=info msg="Successful endpoint creation" containerID=1bd6236091 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1225 identity=9721 ipv4=10.0.0.8 ipv6= k8sPodName=openstack/barbican-rabbit-init-x567p subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=1bd6236091 endpointID=1225 k8sNamespace=openstack k8sPodName=barbican-rabbit-init-x567p subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=3473b56e-5b66-4d82-a3a8-77f19ceabc4b k8s:batch.kubernetes.io/job-name=barbican-rabbit-init k8s:component=rabbit-init k8s:controller-uid=3473b56e-5b66-4d82-a3a8-77f19ceabc4b k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-rabbit-init k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=1bd6236091 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1225 identity=9721 ipv4=10.0.0.8 ipv6= k8sPodName=openstack/barbican-rabbit-init-x567p subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.139 d6148522-c216-4c54-92de-3fef55213e11 default }" containerID=de5de843d8adf67f8e4fd30b93d159faca13f90140c5df6275c9133c9c0c59a4 datapathConfiguration="&{false false false false false }" interface=lxcaac8f3aee02c k8sPodName=openstack/barbican-ks-service-49nmb labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=de5de843d8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1937 ipv4=10.0.0.139 ipv6= k8sPodName=openstack/barbican-ks-service-49nmb subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=de5de843d8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1937 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=11436374-9533-4e58-b2ee-1fac43e36eaf,k8s:batch.kubernetes.io/job-name=barbican-ks-service,k8s:component=ks-service,k8s:controller-uid=11436374-9533-4e58-b2ee-1fac43e36eaf,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-service,k8s:release_group=barbican" ipv4=10.0.0.139 ipv6= k8sPodName=openstack/barbican-ks-service-49nmb subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=11436374-9533-4e58-b2ee-1fac43e36eaf;k8s:batch.kubernetes.io/job-name=barbican-ks-service;k8s:component=ks-service;k8s:controller-uid=11436374-9533-4e58-b2ee-1fac43e36eaf;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-service;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=de5de843d8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1937 identity=37150 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=11436374-9533-4e58-b2ee-1fac43e36eaf,k8s:batch.kubernetes.io/job-name=barbican-ks-service,k8s:component=ks-service,k8s:controller-uid=11436374-9533-4e58-b2ee-1fac43e36eaf,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-service,k8s:release_group=barbican" ipv4=10.0.0.139 ipv6= k8sPodName=openstack/barbican-ks-service-49nmb oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=de5de843d8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1937 identity=37150 ipv4=10.0.0.139 ipv6= k8sPodName=openstack/barbican-ks-service-49nmb subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=de5de843d8 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1937 identity=37150 ipv4=10.0.0.139 ipv6= k8sPodName=openstack/barbican-ks-service-49nmb subsys=endpoint level=info msg="Successful endpoint creation" containerID=de5de843d8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1937 identity=37150 ipv4=10.0.0.139 ipv6= k8sPodName=openstack/barbican-ks-service-49nmb subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=de5de843d8 endpointID=1937 k8sNamespace=openstack k8sPodName=barbican-ks-service-49nmb subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=11436374-9533-4e58-b2ee-1fac43e36eaf k8s:batch.kubernetes.io/job-name=barbican-ks-service k8s:component=ks-service k8s:controller-uid=11436374-9533-4e58-b2ee-1fac43e36eaf k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-service k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=de5de843d8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1937 identity=37150 ipv4=10.0.0.139 ipv6= k8sPodName=openstack/barbican-ks-service-49nmb subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.231 a04be1dc-31a2-48fc-9b2f-2e2f8d1ecc5d default }" containerID=4bd8c1ec82df6ccdcac5b3d86da3f7f3adb9b241ae578a5cffe090fb4729d90f datapathConfiguration="&{false false false false false }" interface=lxc2a58e7567c2e k8sPodName=openstack/barbican-ks-endpoints-cvn9t labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4bd8c1ec82 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2006 ipv4=10.0.0.231 ipv6= k8sPodName=openstack/barbican-ks-endpoints-cvn9t subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4bd8c1ec82 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2006 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=22df61b6-08ef-4be8-8bea-97bfed8dc312,k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=22df61b6-08ef-4be8-8bea-97bfed8dc312,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-endpoints,k8s:release_group=barbican" ipv4=10.0.0.231 ipv6= k8sPodName=openstack/barbican-ks-endpoints-cvn9t subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=22df61b6-08ef-4be8-8bea-97bfed8dc312;k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=22df61b6-08ef-4be8-8bea-97bfed8dc312;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-endpoints;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4bd8c1ec82 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2006 identity=4737 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=22df61b6-08ef-4be8-8bea-97bfed8dc312,k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=22df61b6-08ef-4be8-8bea-97bfed8dc312,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-endpoints,k8s:release_group=barbican" ipv4=10.0.0.231 ipv6= k8sPodName=openstack/barbican-ks-endpoints-cvn9t oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4bd8c1ec82 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2006 identity=4737 ipv4=10.0.0.231 ipv6= k8sPodName=openstack/barbican-ks-endpoints-cvn9t subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=4bd8c1ec82 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2006 identity=4737 ipv4=10.0.0.231 ipv6= k8sPodName=openstack/barbican-ks-endpoints-cvn9t subsys=endpoint level=info msg="Successful endpoint creation" containerID=4bd8c1ec82 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2006 identity=4737 ipv4=10.0.0.231 ipv6= k8sPodName=openstack/barbican-ks-endpoints-cvn9t subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=4bd8c1ec82 endpointID=2006 k8sNamespace=openstack k8sPodName=barbican-ks-endpoints-cvn9t subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=22df61b6-08ef-4be8-8bea-97bfed8dc312 k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=22df61b6-08ef-4be8-8bea-97bfed8dc312 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-endpoints k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=4bd8c1ec82 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2006 identity=4737 ipv4=10.0.0.231 ipv6= k8sPodName=openstack/barbican-ks-endpoints-cvn9t subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.119 dea0cd0b-32c1-47f5-8ae0-309a4da5c9cc default }" containerID=92e176a9a0332889770e8c6d33547102e9df354c028f363b29ee7da2e93707a0 datapathConfiguration="&{false false false false false }" interface=lxcc8cd7715115c k8sPodName=openstack/barbican-ks-user-z6lx9 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=92e176a9a0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=297 ipv4=10.0.0.119 ipv6= k8sPodName=openstack/barbican-ks-user-z6lx9 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=92e176a9a0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=297 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=fe1ce19d-8f37-4e00-bab7-1b9a61e540a0,k8s:batch.kubernetes.io/job-name=barbican-ks-user,k8s:component=ks-user,k8s:controller-uid=fe1ce19d-8f37-4e00-bab7-1b9a61e540a0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-user,k8s:release_group=barbican" ipv4=10.0.0.119 ipv6= k8sPodName=openstack/barbican-ks-user-z6lx9 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=92e176a9a0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=297 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.119 ipv6= k8sPodName=openstack/barbican-ks-user-z6lx9 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=fe1ce19d-8f37-4e00-bab7-1b9a61e540a0;k8s:batch.kubernetes.io/job-name=barbican-ks-user;k8s:component=ks-user;k8s:controller-uid=fe1ce19d-8f37-4e00-bab7-1b9a61e540a0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-user;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=92e176a9a0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=297 identity=19771 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=fe1ce19d-8f37-4e00-bab7-1b9a61e540a0,k8s:batch.kubernetes.io/job-name=barbican-ks-user,k8s:component=ks-user,k8s:controller-uid=fe1ce19d-8f37-4e00-bab7-1b9a61e540a0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-user,k8s:release_group=barbican" ipv4=10.0.0.119 ipv6= k8sPodName=openstack/barbican-ks-user-z6lx9 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=92e176a9a0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=297 identity=19771 ipv4=10.0.0.119 ipv6= k8sPodName=openstack/barbican-ks-user-z6lx9 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=92e176a9a0 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=297 identity=19771 ipv4=10.0.0.119 ipv6= k8sPodName=openstack/barbican-ks-user-z6lx9 subsys=endpoint level=info msg="Successful endpoint creation" containerID=92e176a9a0 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=297 identity=19771 ipv4=10.0.0.119 ipv6= k8sPodName=openstack/barbican-ks-user-z6lx9 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=92e176a9a0 endpointID=297 k8sNamespace=openstack k8sPodName=barbican-ks-user-z6lx9 subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=fe1ce19d-8f37-4e00-bab7-1b9a61e540a0 k8s:batch.kubernetes.io/job-name=barbican-ks-user k8s:component=ks-user k8s:controller-uid=fe1ce19d-8f37-4e00-bab7-1b9a61e540a0 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-user k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=92e176a9a0 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=297 identity=19771 ipv4=10.0.0.119 ipv6= k8sPodName=openstack/barbican-ks-user-z6lx9 subsys=endpoint level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Create endpoint request" addressing="&{10.0.0.209 61e95ec5-4003-433b-a579-bf583df8bf58 default }" containerID=a276d3a8404c894750004d17900758c167b7488f38f49972323c58e06be2f8e9 datapathConfiguration="&{false false false false false }" interface=lxcb6c81dbff93f k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-bqzfn labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a276d3a840 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=281 ipv4=10.0.0.209 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-bqzfn subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a276d3a840 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=281 identityLabels="k8s:app=rook-ceph-operator,k8s:helm.sh/chart=rook-ceph-v1.15.9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph,k8s:io.cilium.k8s.namespace.labels.name=rook-ceph,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system,k8s:io.kubernetes.pod.namespace=rook-ceph" ipv4=10.0.0.209 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-bqzfn subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:rook-ceph k8s:io.cilium.k8s.namespace.labels.name:rook-ceph]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-operator;k8s:helm.sh/chart=rook-ceph-v1.15.9;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph;k8s:io.cilium.k8s.namespace.labels.name=rook-ceph;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system;k8s:io.kubernetes.pod.namespace=rook-ceph;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a276d3a840 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=281 identity=39743 identityLabels="k8s:app=rook-ceph-operator,k8s:helm.sh/chart=rook-ceph-v1.15.9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph,k8s:io.cilium.k8s.namespace.labels.name=rook-ceph,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system,k8s:io.kubernetes.pod.namespace=rook-ceph" ipv4=10.0.0.209 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-bqzfn oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a276d3a840 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=281 identity=39743 ipv4=10.0.0.209 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-bqzfn subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=a276d3a840 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=281 identity=39743 ipv4=10.0.0.209 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-bqzfn subsys=endpoint level=info msg="Successful endpoint creation" containerID=a276d3a840 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=281 identity=39743 ipv4=10.0.0.209 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-bqzfn subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.11 deeb35f4-3005-4d7c-bf6c-98097c7b0c6f default }" containerID=40f118f5fb535892d5bfe28e6bcebddddfc3e77518500586bbf5ef38d892e343 datapathConfiguration="&{false false false false false }" interface=lxcc04b9cd482b6 k8sPodName=openstack/rook-ceph-detect-version-gqxdq labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=40f118f5fb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1104 ipv4=10.0.0.11 ipv6= k8sPodName=openstack/rook-ceph-detect-version-gqxdq subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=40f118f5fb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1104 identityLabels="k8s:app=rook-ceph-detect-version,k8s:batch.kubernetes.io/controller-uid=c69fbff6-90dc-4dcf-96be-cf7f85f8b939,k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version,k8s:controller-uid=c69fbff6-90dc-4dcf-96be-cf7f85f8b939,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=rook-ceph-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.11 ipv6= k8sPodName=openstack/rook-ceph-detect-version-gqxdq subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-detect-version;k8s:batch.kubernetes.io/controller-uid=c69fbff6-90dc-4dcf-96be-cf7f85f8b939;k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version;k8s:controller-uid=c69fbff6-90dc-4dcf-96be-cf7f85f8b939;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=rook-ceph-detect-version;k8s:rook-version=v1.15.9;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=40f118f5fb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1104 identity=7333 identityLabels="k8s:app=rook-ceph-detect-version,k8s:batch.kubernetes.io/controller-uid=c69fbff6-90dc-4dcf-96be-cf7f85f8b939,k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version,k8s:controller-uid=c69fbff6-90dc-4dcf-96be-cf7f85f8b939,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=rook-ceph-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.11 ipv6= k8sPodName=openstack/rook-ceph-detect-version-gqxdq oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=40f118f5fb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1104 identity=7333 ipv4=10.0.0.11 ipv6= k8sPodName=openstack/rook-ceph-detect-version-gqxdq subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=40f118f5fb datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1104 identity=7333 ipv4=10.0.0.11 ipv6= k8sPodName=openstack/rook-ceph-detect-version-gqxdq subsys=endpoint level=info msg="Successful endpoint creation" containerID=40f118f5fb datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1104 identity=7333 ipv4=10.0.0.11 ipv6= k8sPodName=openstack/rook-ceph-detect-version-gqxdq subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=40f118f5fb endpointID=1104 k8sNamespace=openstack k8sPodName=rook-ceph-detect-version-gqxdq subsys=daemon level=info msg="Releasing key" key="[k8s:app=rook-ceph-detect-version k8s:batch.kubernetes.io/controller-uid=c69fbff6-90dc-4dcf-96be-cf7f85f8b939 k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version k8s:controller-uid=c69fbff6-90dc-4dcf-96be-cf7f85f8b939 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=rook-ceph-detect-version k8s:rook-version=v1.15.9]" subsys=allocator level=info msg="Removed endpoint" containerID=40f118f5fb datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1104 identity=7333 ipv4=10.0.0.11 ipv6= k8sPodName=openstack/rook-ceph-detect-version-gqxdq subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.22 ff5411b4-bae2-43e4-b178-240c58dc2f78 default }" containerID=4c0621b6027f491b4be0c05e3a93551fa7943dc34d482ee4b540317621f2289c datapathConfiguration="&{false false false false false }" interface=lxc094a77edb991 k8sPodName=openstack/ceph-object-controller-detect-version-6nb62 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4c0621b602 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1870 ipv4=10.0.0.22 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-6nb62 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4c0621b602 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1870 identityLabels="k8s:app=ceph-object-controller-detect-version,k8s:batch.kubernetes.io/controller-uid=8ef43bb3-bd11-47a1-bd5e-6485f3be05f8,k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version,k8s:controller-uid=8ef43bb3-bd11-47a1-bd5e-6485f3be05f8,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=ceph-object-controller-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.22 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-6nb62 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=ceph-object-controller-detect-version;k8s:batch.kubernetes.io/controller-uid=8ef43bb3-bd11-47a1-bd5e-6485f3be05f8;k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version;k8s:controller-uid=8ef43bb3-bd11-47a1-bd5e-6485f3be05f8;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=ceph-object-controller-detect-version;k8s:rook-version=v1.15.9;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4c0621b602 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1870 identity=4933 identityLabels="k8s:app=ceph-object-controller-detect-version,k8s:batch.kubernetes.io/controller-uid=8ef43bb3-bd11-47a1-bd5e-6485f3be05f8,k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version,k8s:controller-uid=8ef43bb3-bd11-47a1-bd5e-6485f3be05f8,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=ceph-object-controller-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.22 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-6nb62 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4c0621b602 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1870 identity=4933 ipv4=10.0.0.22 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-6nb62 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=4c0621b602 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1870 identity=4933 ipv4=10.0.0.22 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-6nb62 subsys=endpoint level=info msg="Successful endpoint creation" containerID=4c0621b602 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1870 identity=4933 ipv4=10.0.0.22 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-6nb62 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=4c0621b602 endpointID=1870 k8sNamespace=openstack k8sPodName=ceph-object-controller-detect-version-6nb62 subsys=daemon level=info msg="Releasing key" key="[k8s:app=ceph-object-controller-detect-version k8s:batch.kubernetes.io/controller-uid=8ef43bb3-bd11-47a1-bd5e-6485f3be05f8 k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version k8s:controller-uid=8ef43bb3-bd11-47a1-bd5e-6485f3be05f8 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=ceph-object-controller-detect-version k8s:rook-version=v1.15.9]" subsys=allocator level=info msg="Removed endpoint" containerID=4c0621b602 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1870 identity=4933 ipv4=10.0.0.22 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-6nb62 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.169 8769a4ac-e842-42da-9382-9ab22edb82de default }" containerID=a6b6282a67e310f62ce0a80870289deb1d5e53229c376a1c5a320fb18f37c32a datapathConfiguration="&{false false false false false }" interface=lxc4af492ab225e k8sPodName=local-path-storage/helper-pod-create-pvc-4e9aecb8-c762-43a1-b2b2-154f3cb83233 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a6b6282a67 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=405 ipv4=10.0.0.169 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-4e9aecb8-c762-43a1-b2b2-154f3cb83233 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a6b6282a67 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=405 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.169 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-4e9aecb8-c762-43a1-b2b2-154f3cb83233 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a6b6282a67 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=405 identity=284 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.169 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-4e9aecb8-c762-43a1-b2b2-154f3cb83233 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a6b6282a67 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=405 identity=284 ipv4=10.0.0.169 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-4e9aecb8-c762-43a1-b2b2-154f3cb83233 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a6b6282a67 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=405 identity=284 ipv4=10.0.0.169 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-4e9aecb8-c762-43a1-b2b2-154f3cb83233 subsys=endpoint level=info msg="Successful endpoint creation" containerID=a6b6282a67 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=405 identity=284 ipv4=10.0.0.169 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-4e9aecb8-c762-43a1-b2b2-154f3cb83233 subsys=daemon level=info msg="Delete endpoint request" containerID=a6b6282a67 endpointID=405 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-4e9aecb8-c762-43a1-b2b2-154f3cb83233 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=a6b6282a67 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=405 identity=284 ipv4=10.0.0.169 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-4e9aecb8-c762-43a1-b2b2-154f3cb83233 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.227 d4058465-3ce1-40f5-85fa-1150c770aee9 default }" containerID=516f6c7c7e13a91b84d7b47447dfd74d1bf381d4044c6851b85a99cd0efc8198 datapathConfiguration="&{false false false false false }" interface=lxcbcd0386f756e k8sPodName=openstack/rabbitmq-glance-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=516f6c7c7e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2363 ipv4=10.0.0.227 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=516f6c7c7e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2363 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-glance,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0" ipv4=10.0.0.227 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-glance;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=516f6c7c7e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2363 identity=61922 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-glance,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0" ipv4=10.0.0.227 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=516f6c7c7e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2363 identity=61922 ipv4=10.0.0.227 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=516f6c7c7e datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2363 identity=61922 ipv4=10.0.0.227 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=516f6c7c7e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2363 identity=61922 ipv4=10.0.0.227 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.119 a82cd7c5-4f41-4118-8df2-659c8e25ca18 default }" containerID=ac5f8acb68e4a9c1c992596446e5c7099bc03e5343f27d6e2d88c6041ba5a325 datapathConfiguration="&{false false false false false }" interface=lxc96544537da1a k8sPodName=openstack/glance-db-init-kst8q labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ac5f8acb68 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=247 ipv4=10.0.0.119 ipv6= k8sPodName=openstack/glance-db-init-kst8q subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ac5f8acb68 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=247 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=131e01bb-270b-4fce-85ad-b6069ace73be,k8s:batch.kubernetes.io/job-name=glance-db-init,k8s:component=db-init,k8s:controller-uid=131e01bb-270b-4fce-85ad-b6069ace73be,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-init,k8s:release_group=glance" ipv4=10.0.0.119 ipv6= k8sPodName=openstack/glance-db-init-kst8q subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=ac5f8acb68 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=247 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.119 ipv6= k8sPodName=openstack/glance-db-init-kst8q line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=131e01bb-270b-4fce-85ad-b6069ace73be;k8s:batch.kubernetes.io/job-name=glance-db-init;k8s:component=db-init;k8s:controller-uid=131e01bb-270b-4fce-85ad-b6069ace73be;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-db-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ac5f8acb68 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=247 identity=18897 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=131e01bb-270b-4fce-85ad-b6069ace73be,k8s:batch.kubernetes.io/job-name=glance-db-init,k8s:component=db-init,k8s:controller-uid=131e01bb-270b-4fce-85ad-b6069ace73be,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-init,k8s:release_group=glance" ipv4=10.0.0.119 ipv6= k8sPodName=openstack/glance-db-init-kst8q oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ac5f8acb68 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=247 identity=18897 ipv4=10.0.0.119 ipv6= k8sPodName=openstack/glance-db-init-kst8q subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ac5f8acb68 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=247 identity=18897 ipv4=10.0.0.119 ipv6= k8sPodName=openstack/glance-db-init-kst8q subsys=endpoint level=info msg="Successful endpoint creation" containerID=ac5f8acb68 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=247 identity=18897 ipv4=10.0.0.119 ipv6= k8sPodName=openstack/glance-db-init-kst8q subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.131 ded9c1e9-6a1f-4ac3-85ab-d735fd538bb0 default }" containerID=b997c7dfde1000d22788d0b67a7f6b072f0542413e980288ba4ca355aaadccad datapathConfiguration="&{false false false false false }" interface=lxcf22cf9881222 k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-7kzrl labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b997c7dfde datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3432 ipv4=10.0.0.131 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-7kzrl subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b997c7dfde datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3432 identityLabels="k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io,k8s:app.kubernetes.io/created-by=rook-ceph-operator,k8s:app.kubernetes.io/instance=ceph,k8s:app.kubernetes.io/managed-by=rook-ceph-operator,k8s:app.kubernetes.io/name=ceph-rgw,k8s:app.kubernetes.io/part-of=ceph,k8s:app=rook-ceph-rgw,k8s:ceph_daemon_id=ceph,k8s:ceph_daemon_type=rgw,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw,k8s:io.kubernetes.pod.namespace=openstack,k8s:rgw=ceph,k8s:rook.io/operator-namespace=rook-ceph,k8s:rook_cluster=openstack,k8s:rook_object_store=ceph" ipv4=10.0.0.131 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-7kzrl subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-rgw;k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io;k8s:app.kubernetes.io/created-by=rook-ceph-operator;k8s:app.kubernetes.io/instance=ceph;k8s:app.kubernetes.io/managed-by=rook-ceph-operator;k8s:app.kubernetes.io/name=ceph-rgw;k8s:app.kubernetes.io/part-of=ceph;k8s:ceph_daemon_id=ceph;k8s:ceph_daemon_type=rgw;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw;k8s:io.kubernetes.pod.namespace=openstack;k8s:rgw=ceph;k8s:rook.io/operator-namespace=rook-ceph;k8s:rook_cluster=openstack;k8s:rook_object_store=ceph;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b997c7dfde datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3432 identity=53831 identityLabels="k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io,k8s:app.kubernetes.io/created-by=rook-ceph-operator,k8s:app.kubernetes.io/instance=ceph,k8s:app.kubernetes.io/managed-by=rook-ceph-operator,k8s:app.kubernetes.io/name=ceph-rgw,k8s:app.kubernetes.io/part-of=ceph,k8s:app=rook-ceph-rgw,k8s:ceph_daemon_id=ceph,k8s:ceph_daemon_type=rgw,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw,k8s:io.kubernetes.pod.namespace=openstack,k8s:rgw=ceph,k8s:rook.io/operator-namespace=rook-ceph,k8s:rook_cluster=openstack,k8s:rook_object_store=ceph" ipv4=10.0.0.131 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-7kzrl oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b997c7dfde datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3432 identity=53831 ipv4=10.0.0.131 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-7kzrl subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.102 9ddad581-839b-4a1e-9925-187a1fc9da84 default }" containerID=54bf2eb4d905b882623ca75b8109dc123d5c4b4d2b37f641db05bc3389d3c1f4 datapathConfiguration="&{false false false false false }" interface=lxcd9423a887818 k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-7twq2 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=54bf2eb4d9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1119 ipv4=10.0.0.102 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-7twq2 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=54bf2eb4d9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1119 identityLabels="k8s:app=rook-ceph-crashcollector,k8s:ceph-version=18.2.7-0,k8s:ceph_daemon_id=crash,k8s:crashcollector=crash,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default,k8s:io.kubernetes.pod.namespace=openstack,k8s:node_name=instance,k8s:rook_cluster=openstack" ipv4=10.0.0.102 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-7twq2 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-crashcollector;k8s:ceph-version=18.2.7-0;k8s:ceph_daemon_id=crash;k8s:crashcollector=crash;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default;k8s:io.kubernetes.pod.namespace=openstack;k8s:node_name=instance;k8s:rook_cluster=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=54bf2eb4d9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1119 identity=13057 identityLabels="k8s:app=rook-ceph-crashcollector,k8s:ceph-version=18.2.7-0,k8s:ceph_daemon_id=crash,k8s:crashcollector=crash,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default,k8s:io.kubernetes.pod.namespace=openstack,k8s:node_name=instance,k8s:rook_cluster=openstack" ipv4=10.0.0.102 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-7twq2 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=54bf2eb4d9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1119 identity=13057 ipv4=10.0.0.102 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-7twq2 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b997c7dfde datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3432 identity=53831 ipv4=10.0.0.131 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-7kzrl subsys=endpoint level=info msg="Successful endpoint creation" containerID=b997c7dfde datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3432 identity=53831 ipv4=10.0.0.131 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-7kzrl subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=54bf2eb4d9 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1119 identity=13057 ipv4=10.0.0.102 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-7twq2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=54bf2eb4d9 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1119 identity=13057 ipv4=10.0.0.102 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-7twq2 subsys=daemon level=info msg="Delete endpoint request" containerID=ac5f8acb68 endpointID=247 k8sNamespace=openstack k8sPodName=glance-db-init-kst8q subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=131e01bb-270b-4fce-85ad-b6069ace73be k8s:batch.kubernetes.io/job-name=glance-db-init k8s:component=db-init k8s:controller-uid=131e01bb-270b-4fce-85ad-b6069ace73be k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-db-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=ac5f8acb68 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=247 identity=18897 ipv4=10.0.0.119 ipv6= k8sPodName=openstack/glance-db-init-kst8q subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.183 c7fd72d0-7f6a-49f3-8e8b-dd198ca60222 default }" containerID=e62540090b8d64cb00c23aaaabaaf24ab52f73786e6b9e26ea9806729b683564 datapathConfiguration="&{false false false false false }" interface=lxc379697c9ab40 k8sPodName=openstack/glance-db-sync-bccjt labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e62540090b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1185 ipv4=10.0.0.183 ipv6= k8sPodName=openstack/glance-db-sync-bccjt subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e62540090b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1185 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=b7e86c98-0e6a-4c8f-93d1-f6a4dbd023cf,k8s:batch.kubernetes.io/job-name=glance-db-sync,k8s:component=db-sync,k8s:controller-uid=b7e86c98-0e6a-4c8f-93d1-f6a4dbd023cf,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-sync,k8s:release_group=glance" ipv4=10.0.0.183 ipv6= k8sPodName=openstack/glance-db-sync-bccjt subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=b7e86c98-0e6a-4c8f-93d1-f6a4dbd023cf;k8s:batch.kubernetes.io/job-name=glance-db-sync;k8s:component=db-sync;k8s:controller-uid=b7e86c98-0e6a-4c8f-93d1-f6a4dbd023cf;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-db-sync;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e62540090b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1185 identity=3453 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=b7e86c98-0e6a-4c8f-93d1-f6a4dbd023cf,k8s:batch.kubernetes.io/job-name=glance-db-sync,k8s:component=db-sync,k8s:controller-uid=b7e86c98-0e6a-4c8f-93d1-f6a4dbd023cf,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-sync,k8s:release_group=glance" ipv4=10.0.0.183 ipv6= k8sPodName=openstack/glance-db-sync-bccjt oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e62540090b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1185 identity=3453 ipv4=10.0.0.183 ipv6= k8sPodName=openstack/glance-db-sync-bccjt subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=e62540090b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1185 identity=3453 ipv4=10.0.0.183 ipv6= k8sPodName=openstack/glance-db-sync-bccjt subsys=endpoint level=info msg="Successful endpoint creation" containerID=e62540090b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1185 identity=3453 ipv4=10.0.0.183 ipv6= k8sPodName=openstack/glance-db-sync-bccjt subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=e62540090b endpointID=1185 k8sNamespace=openstack k8sPodName=glance-db-sync-bccjt subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=b7e86c98-0e6a-4c8f-93d1-f6a4dbd023cf k8s:batch.kubernetes.io/job-name=glance-db-sync k8s:component=db-sync k8s:controller-uid=b7e86c98-0e6a-4c8f-93d1-f6a4dbd023cf k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-db-sync k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=e62540090b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1185 identity=3453 ipv4=10.0.0.183 ipv6= k8sPodName=openstack/glance-db-sync-bccjt subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.29 d614f8d4-0270-4bc7-80c3-043a79a0b062 default }" containerID=68f74abb37b36c5e546d43271664614ca75174853bb80bad5e8d3de2783ebae4 datapathConfiguration="&{false false false false false }" interface=lxc86b566ad1a93 k8sPodName=openstack/glance-rabbit-init-f7hmw labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=68f74abb37 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=236 ipv4=10.0.0.29 ipv6= k8sPodName=openstack/glance-rabbit-init-f7hmw subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=68f74abb37 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=236 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=1d1c80fd-ce47-4077-be81-e57cfbb6f592,k8s:batch.kubernetes.io/job-name=glance-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=1d1c80fd-ce47-4077-be81-e57cfbb6f592,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-rabbit-init,k8s:release_group=glance" ipv4=10.0.0.29 ipv6= k8sPodName=openstack/glance-rabbit-init-f7hmw subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=1d1c80fd-ce47-4077-be81-e57cfbb6f592;k8s:batch.kubernetes.io/job-name=glance-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=1d1c80fd-ce47-4077-be81-e57cfbb6f592;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-rabbit-init;k8s:release_group=glance;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=68f74abb37 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=236 identity=13577 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=1d1c80fd-ce47-4077-be81-e57cfbb6f592,k8s:batch.kubernetes.io/job-name=glance-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=1d1c80fd-ce47-4077-be81-e57cfbb6f592,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-rabbit-init,k8s:release_group=glance" ipv4=10.0.0.29 ipv6= k8sPodName=openstack/glance-rabbit-init-f7hmw oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=68f74abb37 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=236 identity=13577 ipv4=10.0.0.29 ipv6= k8sPodName=openstack/glance-rabbit-init-f7hmw subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=68f74abb37 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=236 identity=13577 ipv4=10.0.0.29 ipv6= k8sPodName=openstack/glance-rabbit-init-f7hmw subsys=endpoint level=info msg="Successful endpoint creation" containerID=68f74abb37 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=236 identity=13577 ipv4=10.0.0.29 ipv6= k8sPodName=openstack/glance-rabbit-init-f7hmw subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=68f74abb37 endpointID=236 k8sNamespace=openstack k8sPodName=glance-rabbit-init-f7hmw subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=1d1c80fd-ce47-4077-be81-e57cfbb6f592 k8s:batch.kubernetes.io/job-name=glance-rabbit-init k8s:component=rabbit-init k8s:controller-uid=1d1c80fd-ce47-4077-be81-e57cfbb6f592 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-rabbit-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=68f74abb37 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=236 identity=13577 ipv4=10.0.0.29 ipv6= k8sPodName=openstack/glance-rabbit-init-f7hmw subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.248 81ab4ce4-cd2b-4f8b-84c7-eb0cc712239e default }" containerID=a3cbdd690a16c923c6dad72c6958b980d076e967771afa277e8e245e6b98f1f7 datapathConfiguration="&{false false false false false }" interface=lxc33ee157c708b k8sPodName=openstack/glance-ks-service-q26j6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a3cbdd690a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=212 ipv4=10.0.0.248 ipv6= k8sPodName=openstack/glance-ks-service-q26j6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a3cbdd690a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=212 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=02c7925b-92cb-4839-abe4-41387a826ece,k8s:batch.kubernetes.io/job-name=glance-ks-service,k8s:component=ks-service,k8s:controller-uid=02c7925b-92cb-4839-abe4-41387a826ece,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-service,k8s:release_group=glance" ipv4=10.0.0.248 ipv6= k8sPodName=openstack/glance-ks-service-q26j6 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=02c7925b-92cb-4839-abe4-41387a826ece;k8s:batch.kubernetes.io/job-name=glance-ks-service;k8s:component=ks-service;k8s:controller-uid=02c7925b-92cb-4839-abe4-41387a826ece;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-service;k8s:release_group=glance;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=a3cbdd690a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=212 identity=8206 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=02c7925b-92cb-4839-abe4-41387a826ece,k8s:batch.kubernetes.io/job-name=glance-ks-service,k8s:component=ks-service,k8s:controller-uid=02c7925b-92cb-4839-abe4-41387a826ece,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-service,k8s:release_group=glance" ipv4=10.0.0.248 ipv6= k8sPodName=openstack/glance-ks-service-q26j6 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a3cbdd690a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=212 identity=8206 ipv4=10.0.0.248 ipv6= k8sPodName=openstack/glance-ks-service-q26j6 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a3cbdd690a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=212 identity=8206 ipv4=10.0.0.248 ipv6= k8sPodName=openstack/glance-ks-service-q26j6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=a3cbdd690a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=212 identity=8206 ipv4=10.0.0.248 ipv6= k8sPodName=openstack/glance-ks-service-q26j6 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=a3cbdd690a endpointID=212 k8sNamespace=openstack k8sPodName=glance-ks-service-q26j6 subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=02c7925b-92cb-4839-abe4-41387a826ece k8s:batch.kubernetes.io/job-name=glance-ks-service k8s:component=ks-service k8s:controller-uid=02c7925b-92cb-4839-abe4-41387a826ece k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-service k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=a3cbdd690a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=212 identity=8206 ipv4=10.0.0.248 ipv6= k8sPodName=openstack/glance-ks-service-q26j6 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.122 85929606-7204-45fb-9530-5e7963881d13 default }" containerID=e51a1c0a43869e1338e205c1fe16e0836dff639fa717075d6f3e5a79e8cf5e55 datapathConfiguration="&{false false false false false }" interface=lxcd4e62b5f0763 k8sPodName=openstack/glance-ks-endpoints-j72xm labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e51a1c0a43 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=718 ipv4=10.0.0.122 ipv6= k8sPodName=openstack/glance-ks-endpoints-j72xm subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e51a1c0a43 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=718 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=5f85a5c7-a2dd-4eef-8e2d-6106307b7f45,k8s:batch.kubernetes.io/job-name=glance-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=5f85a5c7-a2dd-4eef-8e2d-6106307b7f45,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-endpoints,k8s:release_group=glance" ipv4=10.0.0.122 ipv6= k8sPodName=openstack/glance-ks-endpoints-j72xm subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=e51a1c0a43 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=718 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.122 ipv6= k8sPodName=openstack/glance-ks-endpoints-j72xm line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=5f85a5c7-a2dd-4eef-8e2d-6106307b7f45;k8s:batch.kubernetes.io/job-name=glance-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=5f85a5c7-a2dd-4eef-8e2d-6106307b7f45;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-endpoints;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e51a1c0a43 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=718 identity=45302 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=5f85a5c7-a2dd-4eef-8e2d-6106307b7f45,k8s:batch.kubernetes.io/job-name=glance-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=5f85a5c7-a2dd-4eef-8e2d-6106307b7f45,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-endpoints,k8s:release_group=glance" ipv4=10.0.0.122 ipv6= k8sPodName=openstack/glance-ks-endpoints-j72xm oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e51a1c0a43 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=718 identity=45302 ipv4=10.0.0.122 ipv6= k8sPodName=openstack/glance-ks-endpoints-j72xm subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e51a1c0a43 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=718 identity=45302 ipv4=10.0.0.122 ipv6= k8sPodName=openstack/glance-ks-endpoints-j72xm subsys=endpoint level=info msg="Successful endpoint creation" containerID=e51a1c0a43 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=718 identity=45302 ipv4=10.0.0.122 ipv6= k8sPodName=openstack/glance-ks-endpoints-j72xm subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=e51a1c0a43 endpointID=718 k8sNamespace=openstack k8sPodName=glance-ks-endpoints-j72xm subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=5f85a5c7-a2dd-4eef-8e2d-6106307b7f45 k8s:batch.kubernetes.io/job-name=glance-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=5f85a5c7-a2dd-4eef-8e2d-6106307b7f45 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-endpoints k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=e51a1c0a43 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=718 identity=45302 ipv4=10.0.0.122 ipv6= k8sPodName=openstack/glance-ks-endpoints-j72xm subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.154 ff1c6d9d-6659-4a58-87ab-a94f97f4c554 default }" containerID=819e02797b227f9af0ab65b9633a227aff03781e9d4d54bbac9957476a5620d7 datapathConfiguration="&{false false false false false }" interface=lxceb1e25e5ad12 k8sPodName=openstack/glance-ks-user-5h6w7 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=819e02797b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=853 ipv4=10.0.0.154 ipv6= k8sPodName=openstack/glance-ks-user-5h6w7 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=819e02797b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=853 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=bf8f4cf0-a051-45a0-86cf-1a0aa277f09b,k8s:batch.kubernetes.io/job-name=glance-ks-user,k8s:component=ks-user,k8s:controller-uid=bf8f4cf0-a051-45a0-86cf-1a0aa277f09b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-user,k8s:release_group=glance" ipv4=10.0.0.154 ipv6= k8sPodName=openstack/glance-ks-user-5h6w7 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=bf8f4cf0-a051-45a0-86cf-1a0aa277f09b;k8s:batch.kubernetes.io/job-name=glance-ks-user;k8s:component=ks-user;k8s:controller-uid=bf8f4cf0-a051-45a0-86cf-1a0aa277f09b;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-user;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=819e02797b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=853 identity=2891 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=bf8f4cf0-a051-45a0-86cf-1a0aa277f09b,k8s:batch.kubernetes.io/job-name=glance-ks-user,k8s:component=ks-user,k8s:controller-uid=bf8f4cf0-a051-45a0-86cf-1a0aa277f09b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-user,k8s:release_group=glance" ipv4=10.0.0.154 ipv6= k8sPodName=openstack/glance-ks-user-5h6w7 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=819e02797b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=853 identity=2891 ipv4=10.0.0.154 ipv6= k8sPodName=openstack/glance-ks-user-5h6w7 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=819e02797b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=853 identity=2891 ipv4=10.0.0.154 ipv6= k8sPodName=openstack/glance-ks-user-5h6w7 subsys=endpoint level=info msg="Successful endpoint creation" containerID=819e02797b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=853 identity=2891 ipv4=10.0.0.154 ipv6= k8sPodName=openstack/glance-ks-user-5h6w7 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=819e02797b endpointID=853 k8sNamespace=openstack k8sPodName=glance-ks-user-5h6w7 subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=bf8f4cf0-a051-45a0-86cf-1a0aa277f09b k8s:batch.kubernetes.io/job-name=glance-ks-user k8s:component=ks-user k8s:controller-uid=bf8f4cf0-a051-45a0-86cf-1a0aa277f09b k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-user k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=819e02797b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=853 identity=2891 ipv4=10.0.0.154 ipv6= k8sPodName=openstack/glance-ks-user-5h6w7 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.12 20a4e4ed-51df-4645-aaaa-d3e4e7021986 default }" containerID=9111f9863f3d8e8a846edc4179e80f4e43d78c7d50142f7fe50f2fe2274d4c39 datapathConfiguration="&{false false false false false }" interface=lxccf536cfa7665 k8sPodName=openstack/glance-metadefs-load-vp9gg labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9111f9863f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1623 ipv4=10.0.0.12 ipv6= k8sPodName=openstack/glance-metadefs-load-vp9gg subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9111f9863f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1623 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=3a648a70-8f1f-44f4-b9a4-645fe659f913,k8s:batch.kubernetes.io/job-name=glance-metadefs-load,k8s:component=metadefs_load,k8s:controller-uid=3a648a70-8f1f-44f4-b9a4-645fe659f913,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-metadefs-load,k8s:release_group=glance" ipv4=10.0.0.12 ipv6= k8sPodName=openstack/glance-metadefs-load-vp9gg subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=3a648a70-8f1f-44f4-b9a4-645fe659f913;k8s:batch.kubernetes.io/job-name=glance-metadefs-load;k8s:component=metadefs_load;k8s:controller-uid=3a648a70-8f1f-44f4-b9a4-645fe659f913;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-metadefs-load;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9111f9863f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1623 identity=45108 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=3a648a70-8f1f-44f4-b9a4-645fe659f913,k8s:batch.kubernetes.io/job-name=glance-metadefs-load,k8s:component=metadefs_load,k8s:controller-uid=3a648a70-8f1f-44f4-b9a4-645fe659f913,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-metadefs-load,k8s:release_group=glance" ipv4=10.0.0.12 ipv6= k8sPodName=openstack/glance-metadefs-load-vp9gg oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9111f9863f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1623 identity=45108 ipv4=10.0.0.12 ipv6= k8sPodName=openstack/glance-metadefs-load-vp9gg subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=9111f9863f datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1623 identity=45108 ipv4=10.0.0.12 ipv6= k8sPodName=openstack/glance-metadefs-load-vp9gg subsys=endpoint level=info msg="Successful endpoint creation" containerID=9111f9863f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1623 identity=45108 ipv4=10.0.0.12 ipv6= k8sPodName=openstack/glance-metadefs-load-vp9gg subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=9111f9863f endpointID=1623 k8sNamespace=openstack k8sPodName=glance-metadefs-load-vp9gg subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=3a648a70-8f1f-44f4-b9a4-645fe659f913 k8s:batch.kubernetes.io/job-name=glance-metadefs-load k8s:component=metadefs_load k8s:controller-uid=3a648a70-8f1f-44f4-b9a4-645fe659f913 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-metadefs-load k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=9111f9863f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1623 identity=45108 ipv4=10.0.0.12 ipv6= k8sPodName=openstack/glance-metadefs-load-vp9gg subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.132 30eace85-6e77-466f-abd6-a346ed0affb7 default }" containerID=94f10745e5cebdcf88bd923842e72b5df30355768b5ee608695b9e87bcc76a53 datapathConfiguration="&{false false false false false }" interface=lxcba26d07e2a60 k8sPodName=openstack/glance-storage-init-vn48w labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=94f10745e5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3997 ipv4=10.0.0.132 ipv6= k8sPodName=openstack/glance-storage-init-vn48w subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=94f10745e5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3997 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=2ad771b3-47d9-4618-aaa7-961ff41ef2ce,k8s:batch.kubernetes.io/job-name=glance-storage-init,k8s:component=storage-init,k8s:controller-uid=2ad771b3-47d9-4618-aaa7-961ff41ef2ce,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-storage-init,k8s:release_group=glance" ipv4=10.0.0.132 ipv6= k8sPodName=openstack/glance-storage-init-vn48w subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=2ad771b3-47d9-4618-aaa7-961ff41ef2ce;k8s:batch.kubernetes.io/job-name=glance-storage-init;k8s:component=storage-init;k8s:controller-uid=2ad771b3-47d9-4618-aaa7-961ff41ef2ce;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-storage-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=94f10745e5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3997 identity=57356 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=2ad771b3-47d9-4618-aaa7-961ff41ef2ce,k8s:batch.kubernetes.io/job-name=glance-storage-init,k8s:component=storage-init,k8s:controller-uid=2ad771b3-47d9-4618-aaa7-961ff41ef2ce,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-storage-init,k8s:release_group=glance" ipv4=10.0.0.132 ipv6= k8sPodName=openstack/glance-storage-init-vn48w oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=94f10745e5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3997 identity=57356 ipv4=10.0.0.132 ipv6= k8sPodName=openstack/glance-storage-init-vn48w subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=94f10745e5 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3997 identity=57356 ipv4=10.0.0.132 ipv6= k8sPodName=openstack/glance-storage-init-vn48w subsys=endpoint level=info msg="Successful endpoint creation" containerID=94f10745e5 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3997 identity=57356 ipv4=10.0.0.132 ipv6= k8sPodName=openstack/glance-storage-init-vn48w subsys=daemon level=info msg="Delete endpoint request" containerID=94f10745e5 endpointID=3997 k8sNamespace=openstack k8sPodName=glance-storage-init-vn48w subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=2ad771b3-47d9-4618-aaa7-961ff41ef2ce k8s:batch.kubernetes.io/job-name=glance-storage-init k8s:component=storage-init k8s:controller-uid=2ad771b3-47d9-4618-aaa7-961ff41ef2ce k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-storage-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=94f10745e5 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3997 identity=57356 ipv4=10.0.0.132 ipv6= k8sPodName=openstack/glance-storage-init-vn48w subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.146 23485c88-4b7c-4d24-a361-29211532e95c default }" containerID=34dff51f7243a2df926ff7488feff1ee6b1d542c5a01865a31007a77e20a74ae datapathConfiguration="&{false false false false false }" interface=lxc07cdaffca009 k8sPodName=openstack/glance-api-99cc6b875-pjzv6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=34dff51f72 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=409 ipv4=10.0.0.146 ipv6= k8sPodName=openstack/glance-api-99cc6b875-pjzv6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=34dff51f72 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=409 identityLabels="k8s:application=glance,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=glance" ipv4=10.0.0.146 ipv6= k8sPodName=openstack/glance-api-99cc6b875-pjzv6 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=34dff51f72 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=409 identity=509 identityLabels="k8s:application=glance,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=glance" ipv4=10.0.0.146 ipv6= k8sPodName=openstack/glance-api-99cc6b875-pjzv6 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=34dff51f72 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=409 identity=509 ipv4=10.0.0.146 ipv6= k8sPodName=openstack/glance-api-99cc6b875-pjzv6 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=34dff51f72 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=409 identity=509 ipv4=10.0.0.146 ipv6= k8sPodName=openstack/glance-api-99cc6b875-pjzv6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=34dff51f72 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=409 identity=509 ipv4=10.0.0.146 ipv6= k8sPodName=openstack/glance-api-99cc6b875-pjzv6 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.97 bb821f7c-428e-4572-bbab-50c91fce82f4 default }" containerID=28c65f1ab11d3769e2c738a62ad647766784e9cfecbbfda44d766637b1893870 datapathConfiguration="&{false false false false false }" interface=lxc113a939ee80e k8sPodName=openstack/staffeln-conductor-6b5899dc5-j5n8k labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=28c65f1ab1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1446 ipv4=10.0.0.97 ipv6= k8sPodName=openstack/staffeln-conductor-6b5899dc5-j5n8k subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=28c65f1ab1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1446 identityLabels="k8s:application=staffeln,k8s:component=conductor,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.97 ipv6= k8sPodName=openstack/staffeln-conductor-6b5899dc5-j5n8k subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:component=conductor;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=staffeln;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=28c65f1ab1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1446 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.97 ipv6= k8sPodName=openstack/staffeln-conductor-6b5899dc5-j5n8k line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=28c65f1ab1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1446 identity=19327 identityLabels="k8s:application=staffeln,k8s:component=conductor,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.97 ipv6= k8sPodName=openstack/staffeln-conductor-6b5899dc5-j5n8k oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=28c65f1ab1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1446 identity=19327 ipv4=10.0.0.97 ipv6= k8sPodName=openstack/staffeln-conductor-6b5899dc5-j5n8k subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.204 f1f9657f-433b-48d0-a62d-e8fc8262f9e3 default }" containerID=5f1d0ba87177dbc08e0c81b88c852fa13ed8e991dc1a291f75f3662cb688d1d9 datapathConfiguration="&{false false false false false }" interface=lxc0e4e055ab478 k8sPodName=openstack/staffeln-api-744bc675dd-hvrmj labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5f1d0ba871 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2388 ipv4=10.0.0.204 ipv6= k8sPodName=openstack/staffeln-api-744bc675dd-hvrmj subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5f1d0ba871 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2388 identityLabels="k8s:application=staffeln,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.204 ipv6= k8sPodName=openstack/staffeln-api-744bc675dd-hvrmj subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5f1d0ba871 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2388 identity=23928 identityLabels="k8s:application=staffeln,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.204 ipv6= k8sPodName=openstack/staffeln-api-744bc675dd-hvrmj oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5f1d0ba871 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2388 identity=23928 ipv4=10.0.0.204 ipv6= k8sPodName=openstack/staffeln-api-744bc675dd-hvrmj subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.37 d6a8327a-83b8-46de-b3b2-9cc4dbb822ed default }" containerID=12b9f7cd3f0b16efaaa294f431c65efae0e1244f4b29279bde6ab59abc07952f datapathConfiguration="&{false false false false false }" interface=lxc08f91a614d5b k8sPodName=openstack/staffeln-db-init-btc2c labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=12b9f7cd3f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3810 ipv4=10.0.0.37 ipv6= k8sPodName=openstack/staffeln-db-init-btc2c subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=12b9f7cd3f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3810 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=138e2b98-5f53-4a07-aeba-72e03e350cf2,k8s:batch.kubernetes.io/job-name=staffeln-db-init,k8s:component=db-init,k8s:controller-uid=138e2b98-5f53-4a07-aeba-72e03e350cf2,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-init,k8s:release_group=staffeln" ipv4=10.0.0.37 ipv6= k8sPodName=openstack/staffeln-db-init-btc2c subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:batch.kubernetes.io/controller-uid=138e2b98-5f53-4a07-aeba-72e03e350cf2;k8s:batch.kubernetes.io/job-name=staffeln-db-init;k8s:component=db-init;k8s:controller-uid=138e2b98-5f53-4a07-aeba-72e03e350cf2;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=staffeln-db-init;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=12b9f7cd3f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3810 identity=11770 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=138e2b98-5f53-4a07-aeba-72e03e350cf2,k8s:batch.kubernetes.io/job-name=staffeln-db-init,k8s:component=db-init,k8s:controller-uid=138e2b98-5f53-4a07-aeba-72e03e350cf2,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-init,k8s:release_group=staffeln" ipv4=10.0.0.37 ipv6= k8sPodName=openstack/staffeln-db-init-btc2c oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=12b9f7cd3f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3810 identity=11770 ipv4=10.0.0.37 ipv6= k8sPodName=openstack/staffeln-db-init-btc2c subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=28c65f1ab1 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1446 identity=19327 ipv4=10.0.0.97 ipv6= k8sPodName=openstack/staffeln-conductor-6b5899dc5-j5n8k subsys=endpoint level=info msg="Successful endpoint creation" containerID=28c65f1ab1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1446 identity=19327 ipv4=10.0.0.97 ipv6= k8sPodName=openstack/staffeln-conductor-6b5899dc5-j5n8k subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=5f1d0ba871 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2388 identity=23928 ipv4=10.0.0.204 ipv6= k8sPodName=openstack/staffeln-api-744bc675dd-hvrmj subsys=endpoint level=info msg="Successful endpoint creation" containerID=5f1d0ba871 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2388 identity=23928 ipv4=10.0.0.204 ipv6= k8sPodName=openstack/staffeln-api-744bc675dd-hvrmj subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=12b9f7cd3f datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3810 identity=11770 ipv4=10.0.0.37 ipv6= k8sPodName=openstack/staffeln-db-init-btc2c subsys=endpoint level=info msg="Successful endpoint creation" containerID=12b9f7cd3f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3810 identity=11770 ipv4=10.0.0.37 ipv6= k8sPodName=openstack/staffeln-db-init-btc2c subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=12b9f7cd3f endpointID=3810 k8sNamespace=openstack k8sPodName=staffeln-db-init-btc2c subsys=daemon level=info msg="Releasing key" key="[k8s:application=staffeln k8s:batch.kubernetes.io/controller-uid=138e2b98-5f53-4a07-aeba-72e03e350cf2 k8s:batch.kubernetes.io/job-name=staffeln-db-init k8s:component=db-init k8s:controller-uid=138e2b98-5f53-4a07-aeba-72e03e350cf2 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=staffeln-db-init k8s:release_group=staffeln]" subsys=allocator level=info msg="Removed endpoint" containerID=12b9f7cd3f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3810 identity=11770 ipv4=10.0.0.37 ipv6= k8sPodName=openstack/staffeln-db-init-btc2c subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.6 99717dc3-e3b5-4e4b-82b3-68897a532f0a default }" containerID=df03e303166fc873619c5fdd7b760d5acf8e6819ea4e9fd6aa02ccfe97ff122a datapathConfiguration="&{false false false false false }" interface=lxc4a8fd02aaa5c k8sPodName=openstack/staffeln-db-sync-4qkgn labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=df03e30316 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1275 ipv4=10.0.0.6 ipv6= k8sPodName=openstack/staffeln-db-sync-4qkgn subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=df03e30316 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1275 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=9e8574a7-3546-455c-b06f-dfa3f7ca759c,k8s:batch.kubernetes.io/job-name=staffeln-db-sync,k8s:component=db-sync,k8s:controller-uid=9e8574a7-3546-455c-b06f-dfa3f7ca759c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-sync,k8s:release_group=staffeln" ipv4=10.0.0.6 ipv6= k8sPodName=openstack/staffeln-db-sync-4qkgn subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:batch.kubernetes.io/controller-uid=9e8574a7-3546-455c-b06f-dfa3f7ca759c;k8s:batch.kubernetes.io/job-name=staffeln-db-sync;k8s:component=db-sync;k8s:controller-uid=9e8574a7-3546-455c-b06f-dfa3f7ca759c;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=staffeln-db-sync;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=df03e30316 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1275 identity=3804 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=9e8574a7-3546-455c-b06f-dfa3f7ca759c,k8s:batch.kubernetes.io/job-name=staffeln-db-sync,k8s:component=db-sync,k8s:controller-uid=9e8574a7-3546-455c-b06f-dfa3f7ca759c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-sync,k8s:release_group=staffeln" ipv4=10.0.0.6 ipv6= k8sPodName=openstack/staffeln-db-sync-4qkgn oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=df03e30316 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1275 identity=3804 ipv4=10.0.0.6 ipv6= k8sPodName=openstack/staffeln-db-sync-4qkgn subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=df03e30316 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1275 identity=3804 ipv4=10.0.0.6 ipv6= k8sPodName=openstack/staffeln-db-sync-4qkgn subsys=endpoint level=info msg="Successful endpoint creation" containerID=df03e30316 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1275 identity=3804 ipv4=10.0.0.6 ipv6= k8sPodName=openstack/staffeln-db-sync-4qkgn subsys=daemon level=info msg="Delete endpoint request" containerID=df03e30316 endpointID=1275 k8sNamespace=openstack k8sPodName=staffeln-db-sync-4qkgn subsys=daemon level=info msg="Releasing key" key="[k8s:application=staffeln k8s:batch.kubernetes.io/controller-uid=9e8574a7-3546-455c-b06f-dfa3f7ca759c k8s:batch.kubernetes.io/job-name=staffeln-db-sync k8s:component=db-sync k8s:controller-uid=9e8574a7-3546-455c-b06f-dfa3f7ca759c k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=staffeln-db-sync k8s:release_group=staffeln]" subsys=allocator level=info msg="Removed endpoint" containerID=df03e30316 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1275 identity=3804 ipv4=10.0.0.6 ipv6= k8sPodName=openstack/staffeln-db-sync-4qkgn subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.219 dd06293e-71c8-4346-9eb8-2fd313304fb9 default }" containerID=0c4e57c9a2f10ea5a6f2c19c2894e860ef6ba639954da8bf9c2b9c31ef1c626d datapathConfiguration="&{false false false false false }" interface=lxc803489976af2 k8sPodName=local-path-storage/helper-pod-create-pvc-8dae4797-3be0-4955-a89e-91497f5baba1 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0c4e57c9a2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1578 ipv4=10.0.0.219 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-8dae4797-3be0-4955-a89e-91497f5baba1 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0c4e57c9a2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1578 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.219 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-8dae4797-3be0-4955-a89e-91497f5baba1 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0c4e57c9a2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1578 identity=284 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.219 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-8dae4797-3be0-4955-a89e-91497f5baba1 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0c4e57c9a2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1578 identity=284 ipv4=10.0.0.219 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-8dae4797-3be0-4955-a89e-91497f5baba1 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=0c4e57c9a2 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1578 identity=284 ipv4=10.0.0.219 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-8dae4797-3be0-4955-a89e-91497f5baba1 subsys=endpoint level=info msg="Successful endpoint creation" containerID=0c4e57c9a2 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1578 identity=284 ipv4=10.0.0.219 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-8dae4797-3be0-4955-a89e-91497f5baba1 subsys=daemon level=info msg="Delete endpoint request" containerID=0c4e57c9a2 endpointID=1578 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-8dae4797-3be0-4955-a89e-91497f5baba1 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=0c4e57c9a2 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1578 identity=284 ipv4=10.0.0.219 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-8dae4797-3be0-4955-a89e-91497f5baba1 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.148 604f89dd-2097-4697-a8e9-f0b90dbc2425 default }" containerID=e729f0131132d2ef6c5d1462274417f3e372d514d9529712c8da98252de407d8 datapathConfiguration="&{false false false false false }" interface=lxcc30eda82e69d k8sPodName=openstack/rabbitmq-cinder-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e729f01311 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=735 ipv4=10.0.0.148 ipv6= k8sPodName=openstack/rabbitmq-cinder-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e729f01311 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=735 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-cinder,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cinder-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-cinder-server-0" ipv4=10.0.0.148 ipv6= k8sPodName=openstack/rabbitmq-cinder-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=e729f01311 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=735 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.148 ipv6= k8sPodName=openstack/rabbitmq-cinder-server-0 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-cinder;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cinder-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-cinder-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e729f01311 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=735 identity=1763 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-cinder,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cinder-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-cinder-server-0" ipv4=10.0.0.148 ipv6= k8sPodName=openstack/rabbitmq-cinder-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e729f01311 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=735 identity=1763 ipv4=10.0.0.148 ipv6= k8sPodName=openstack/rabbitmq-cinder-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e729f01311 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=735 identity=1763 ipv4=10.0.0.148 ipv6= k8sPodName=openstack/rabbitmq-cinder-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=e729f01311 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=735 identity=1763 ipv4=10.0.0.148 ipv6= k8sPodName=openstack/rabbitmq-cinder-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.250 bda07f11-b0c5-4e9d-8192-9f64fd558da4 default }" containerID=89549797439d97fb26bea152637047a3b5516a2f0ef4851a599649600609be9a datapathConfiguration="&{false false false false false }" interface=lxc0bb1f42e7c87 k8sPodName=openstack/cinder-api-64cd8c84fb-jk7kx labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8954979743 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1690 ipv4=10.0.0.250 ipv6= k8sPodName=openstack/cinder-api-64cd8c84fb-jk7kx subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8954979743 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1690 identityLabels="k8s:application=cinder,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=cinder" ipv4=10.0.0.250 ipv6= k8sPodName=openstack/cinder-api-64cd8c84fb-jk7kx subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Create endpoint request" addressing="&{10.0.0.235 7008318d-5cb5-4675-9745-2c23a9d26d8d default }" containerID=d9b7a0ba58dd24f4e0d9356759dfb8a984bda5a6813a1c83a5291ad662625c06 datapathConfiguration="&{false false false false false }" interface=lxcc34304a570f0 k8sPodName=openstack/cinder-scheduler-574d697fd8-67hcn labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d9b7a0ba58 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=529 ipv4=10.0.0.235 ipv6= k8sPodName=openstack/cinder-scheduler-574d697fd8-67hcn subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d9b7a0ba58 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=529 identityLabels="k8s:application=cinder,k8s:component=scheduler,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-scheduler,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=cinder" ipv4=10.0.0.235 ipv6= k8sPodName=openstack/cinder-scheduler-574d697fd8-67hcn subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8954979743 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1690 identity=36657 identityLabels="k8s:application=cinder,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=cinder" ipv4=10.0.0.250 ipv6= k8sPodName=openstack/cinder-api-64cd8c84fb-jk7kx oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8954979743 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1690 identity=36657 ipv4=10.0.0.250 ipv6= k8sPodName=openstack/cinder-api-64cd8c84fb-jk7kx subsys=endpoint level=info msg="Invalid state transition skipped" containerID=d9b7a0ba58 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=529 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.235 ipv6= k8sPodName=openstack/cinder-scheduler-574d697fd8-67hcn line=611 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:component=scheduler;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-scheduler;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d9b7a0ba58 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=529 identity=20522 identityLabels="k8s:application=cinder,k8s:component=scheduler,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-scheduler,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=cinder" ipv4=10.0.0.235 ipv6= k8sPodName=openstack/cinder-scheduler-574d697fd8-67hcn oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d9b7a0ba58 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=529 identity=20522 ipv4=10.0.0.235 ipv6= k8sPodName=openstack/cinder-scheduler-574d697fd8-67hcn subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.100 3150f620-13db-4692-b3f4-affaea3d2505 default }" containerID=496b5becd3da39a871708da8cf704f095eaee7f6013827cac3196be837f16d2e datapathConfiguration="&{false false false false false }" interface=lxcfa5abc3e82c0 k8sPodName=openstack/cinder-db-init-g8vnr labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=496b5becd3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3202 ipv4=10.0.0.100 ipv6= k8sPodName=openstack/cinder-db-init-g8vnr subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=496b5becd3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3202 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=2eee35b7-e541-429f-8629-c12f3c835172,k8s:batch.kubernetes.io/job-name=cinder-db-init,k8s:component=db-init,k8s:controller-uid=2eee35b7-e541-429f-8629-c12f3c835172,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-db-init,k8s:release_group=cinder" ipv4=10.0.0.100 ipv6= k8sPodName=openstack/cinder-db-init-g8vnr subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=2eee35b7-e541-429f-8629-c12f3c835172;k8s:batch.kubernetes.io/job-name=cinder-db-init;k8s:component=db-init;k8s:controller-uid=2eee35b7-e541-429f-8629-c12f3c835172;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-db-init;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=496b5becd3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3202 identity=44208 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=2eee35b7-e541-429f-8629-c12f3c835172,k8s:batch.kubernetes.io/job-name=cinder-db-init,k8s:component=db-init,k8s:controller-uid=2eee35b7-e541-429f-8629-c12f3c835172,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-db-init,k8s:release_group=cinder" ipv4=10.0.0.100 ipv6= k8sPodName=openstack/cinder-db-init-g8vnr oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=496b5becd3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3202 identity=44208 ipv4=10.0.0.100 ipv6= k8sPodName=openstack/cinder-db-init-g8vnr subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=8954979743 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1690 identity=36657 ipv4=10.0.0.250 ipv6= k8sPodName=openstack/cinder-api-64cd8c84fb-jk7kx subsys=endpoint level=info msg="Successful endpoint creation" containerID=8954979743 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1690 identity=36657 ipv4=10.0.0.250 ipv6= k8sPodName=openstack/cinder-api-64cd8c84fb-jk7kx subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=d9b7a0ba58 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=529 identity=20522 ipv4=10.0.0.235 ipv6= k8sPodName=openstack/cinder-scheduler-574d697fd8-67hcn subsys=endpoint level=info msg="Successful endpoint creation" containerID=d9b7a0ba58 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=529 identity=20522 ipv4=10.0.0.235 ipv6= k8sPodName=openstack/cinder-scheduler-574d697fd8-67hcn subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=496b5becd3 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3202 identity=44208 ipv4=10.0.0.100 ipv6= k8sPodName=openstack/cinder-db-init-g8vnr subsys=endpoint level=info msg="Successful endpoint creation" containerID=496b5becd3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3202 identity=44208 ipv4=10.0.0.100 ipv6= k8sPodName=openstack/cinder-db-init-g8vnr subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=496b5becd3 endpointID=3202 k8sNamespace=openstack k8sPodName=cinder-db-init-g8vnr subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=2eee35b7-e541-429f-8629-c12f3c835172 k8s:batch.kubernetes.io/job-name=cinder-db-init k8s:component=db-init k8s:controller-uid=2eee35b7-e541-429f-8629-c12f3c835172 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-db-init k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=496b5becd3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3202 identity=44208 ipv4=10.0.0.100 ipv6= k8sPodName=openstack/cinder-db-init-g8vnr subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.177 7671b86e-e9bb-4d30-a44e-0df9d578bc60 default }" containerID=f09d1bfc9024346a091788c62a3a20c9c15ace833418053ce500549b8dad5f58 datapathConfiguration="&{false false false false false }" interface=lxcef454d032541 k8sPodName=openstack/cinder-db-sync-8zp9k labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f09d1bfc90 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1772 ipv4=10.0.0.177 ipv6= k8sPodName=openstack/cinder-db-sync-8zp9k subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f09d1bfc90 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1772 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=45722eff-7759-4d21-8b3c-30fb0d9d8136,k8s:batch.kubernetes.io/job-name=cinder-db-sync,k8s:component=db-sync,k8s:controller-uid=45722eff-7759-4d21-8b3c-30fb0d9d8136,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-db-sync,k8s:release_group=cinder" ipv4=10.0.0.177 ipv6= k8sPodName=openstack/cinder-db-sync-8zp9k subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=45722eff-7759-4d21-8b3c-30fb0d9d8136;k8s:batch.kubernetes.io/job-name=cinder-db-sync;k8s:component=db-sync;k8s:controller-uid=45722eff-7759-4d21-8b3c-30fb0d9d8136;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-db-sync;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f09d1bfc90 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1772 identity=8049 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=45722eff-7759-4d21-8b3c-30fb0d9d8136,k8s:batch.kubernetes.io/job-name=cinder-db-sync,k8s:component=db-sync,k8s:controller-uid=45722eff-7759-4d21-8b3c-30fb0d9d8136,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-db-sync,k8s:release_group=cinder" ipv4=10.0.0.177 ipv6= k8sPodName=openstack/cinder-db-sync-8zp9k oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=f09d1bfc90 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1772 identity=8049 ipv4=10.0.0.177 ipv6= k8sPodName=openstack/cinder-db-sync-8zp9k subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f09d1bfc90 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1772 identity=8049 ipv4=10.0.0.177 ipv6= k8sPodName=openstack/cinder-db-sync-8zp9k subsys=endpoint level=info msg="Successful endpoint creation" containerID=f09d1bfc90 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1772 identity=8049 ipv4=10.0.0.177 ipv6= k8sPodName=openstack/cinder-db-sync-8zp9k subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=f09d1bfc90 endpointID=1772 k8sNamespace=openstack k8sPodName=cinder-db-sync-8zp9k subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=45722eff-7759-4d21-8b3c-30fb0d9d8136 k8s:batch.kubernetes.io/job-name=cinder-db-sync k8s:component=db-sync k8s:controller-uid=45722eff-7759-4d21-8b3c-30fb0d9d8136 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-db-sync k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=f09d1bfc90 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1772 identity=8049 ipv4=10.0.0.177 ipv6= k8sPodName=openstack/cinder-db-sync-8zp9k subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.246 02094a6d-c309-410a-aae3-11cf033105d6 default }" containerID=accbf0649747894ab478919adfbaa8e5ceb5b3941f04ed79c135eff65b552a7d datapathConfiguration="&{false false false false false }" interface=lxc2ef94e50ac34 k8sPodName=openstack/cinder-rabbit-init-tdrc9 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=accbf06497 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=746 ipv4=10.0.0.246 ipv6= k8sPodName=openstack/cinder-rabbit-init-tdrc9 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=accbf06497 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=746 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=d09a2f12-440c-4104-9ccc-61e556e5622e,k8s:batch.kubernetes.io/job-name=cinder-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=d09a2f12-440c-4104-9ccc-61e556e5622e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-rabbit-init,k8s:release_group=cinder" ipv4=10.0.0.246 ipv6= k8sPodName=openstack/cinder-rabbit-init-tdrc9 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=d09a2f12-440c-4104-9ccc-61e556e5622e;k8s:batch.kubernetes.io/job-name=cinder-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=d09a2f12-440c-4104-9ccc-61e556e5622e;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-rabbit-init;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=accbf06497 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=746 identity=6000 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=d09a2f12-440c-4104-9ccc-61e556e5622e,k8s:batch.kubernetes.io/job-name=cinder-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=d09a2f12-440c-4104-9ccc-61e556e5622e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-rabbit-init,k8s:release_group=cinder" ipv4=10.0.0.246 ipv6= k8sPodName=openstack/cinder-rabbit-init-tdrc9 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=accbf06497 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=746 identity=6000 ipv4=10.0.0.246 ipv6= k8sPodName=openstack/cinder-rabbit-init-tdrc9 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=accbf06497 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=746 identity=6000 ipv4=10.0.0.246 ipv6= k8sPodName=openstack/cinder-rabbit-init-tdrc9 subsys=endpoint level=info msg="Successful endpoint creation" containerID=accbf06497 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=746 identity=6000 ipv4=10.0.0.246 ipv6= k8sPodName=openstack/cinder-rabbit-init-tdrc9 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=accbf06497 endpointID=746 k8sNamespace=openstack k8sPodName=cinder-rabbit-init-tdrc9 subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=d09a2f12-440c-4104-9ccc-61e556e5622e k8s:batch.kubernetes.io/job-name=cinder-rabbit-init k8s:component=rabbit-init k8s:controller-uid=d09a2f12-440c-4104-9ccc-61e556e5622e k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-rabbit-init k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=accbf06497 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=746 identity=6000 ipv4=10.0.0.246 ipv6= k8sPodName=openstack/cinder-rabbit-init-tdrc9 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.169 4fb0ab04-6f6e-44c6-9b34-f3e111e23612 default }" containerID=085bd53d1c1cc76a39055c1f3fc66aaa0a2da493e4b3ce5c99127daf60f4c9d2 datapathConfiguration="&{false false false false false }" interface=lxc122c20445ea9 k8sPodName=openstack/cinder-ks-service-wndmh labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=085bd53d1c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2919 ipv4=10.0.0.169 ipv6= k8sPodName=openstack/cinder-ks-service-wndmh subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=085bd53d1c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2919 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=bbf0e023-ed7e-4dda-89b3-4e3a1f18b102,k8s:batch.kubernetes.io/job-name=cinder-ks-service,k8s:component=ks-service,k8s:controller-uid=bbf0e023-ed7e-4dda-89b3-4e3a1f18b102,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-ks-service,k8s:release_group=cinder" ipv4=10.0.0.169 ipv6= k8sPodName=openstack/cinder-ks-service-wndmh subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=bbf0e023-ed7e-4dda-89b3-4e3a1f18b102;k8s:batch.kubernetes.io/job-name=cinder-ks-service;k8s:component=ks-service;k8s:controller-uid=bbf0e023-ed7e-4dda-89b3-4e3a1f18b102;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-ks-service;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=085bd53d1c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2919 identity=1977 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=bbf0e023-ed7e-4dda-89b3-4e3a1f18b102,k8s:batch.kubernetes.io/job-name=cinder-ks-service,k8s:component=ks-service,k8s:controller-uid=bbf0e023-ed7e-4dda-89b3-4e3a1f18b102,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-ks-service,k8s:release_group=cinder" ipv4=10.0.0.169 ipv6= k8sPodName=openstack/cinder-ks-service-wndmh oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=085bd53d1c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2919 identity=1977 ipv4=10.0.0.169 ipv6= k8sPodName=openstack/cinder-ks-service-wndmh subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=085bd53d1c datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2919 identity=1977 ipv4=10.0.0.169 ipv6= k8sPodName=openstack/cinder-ks-service-wndmh subsys=endpoint level=info msg="Successful endpoint creation" containerID=085bd53d1c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2919 identity=1977 ipv4=10.0.0.169 ipv6= k8sPodName=openstack/cinder-ks-service-wndmh subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=085bd53d1c endpointID=2919 k8sNamespace=openstack k8sPodName=cinder-ks-service-wndmh subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=bbf0e023-ed7e-4dda-89b3-4e3a1f18b102 k8s:batch.kubernetes.io/job-name=cinder-ks-service k8s:component=ks-service k8s:controller-uid=bbf0e023-ed7e-4dda-89b3-4e3a1f18b102 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-ks-service k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=085bd53d1c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2919 identity=1977 ipv4=10.0.0.169 ipv6= k8sPodName=openstack/cinder-ks-service-wndmh subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.13 abaadb85-f422-4289-b6d0-6a70b7a9746a default }" containerID=d6467a37b7ce7c5474e353b5736849ae145d63246fb16ee62f2ed11316e777db datapathConfiguration="&{false false false false false }" interface=lxcb6d96a4322cf k8sPodName=openstack/cinder-ks-endpoints-278l5 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d6467a37b7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4 ipv4=10.0.0.13 ipv6= k8sPodName=openstack/cinder-ks-endpoints-278l5 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d6467a37b7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=869b69c9-5d02-47fe-9ee3-5b2467e4e4ee,k8s:batch.kubernetes.io/job-name=cinder-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=869b69c9-5d02-47fe-9ee3-5b2467e4e4ee,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-ks-endpoints,k8s:release_group=cinder" ipv4=10.0.0.13 ipv6= k8sPodName=openstack/cinder-ks-endpoints-278l5 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=869b69c9-5d02-47fe-9ee3-5b2467e4e4ee;k8s:batch.kubernetes.io/job-name=cinder-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=869b69c9-5d02-47fe-9ee3-5b2467e4e4ee;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-ks-endpoints;k8s:release_group=cinder;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=d6467a37b7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4 identity=15147 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=869b69c9-5d02-47fe-9ee3-5b2467e4e4ee,k8s:batch.kubernetes.io/job-name=cinder-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=869b69c9-5d02-47fe-9ee3-5b2467e4e4ee,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-ks-endpoints,k8s:release_group=cinder" ipv4=10.0.0.13 ipv6= k8sPodName=openstack/cinder-ks-endpoints-278l5 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d6467a37b7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4 identity=15147 ipv4=10.0.0.13 ipv6= k8sPodName=openstack/cinder-ks-endpoints-278l5 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d6467a37b7 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=4 identity=15147 ipv4=10.0.0.13 ipv6= k8sPodName=openstack/cinder-ks-endpoints-278l5 subsys=endpoint level=info msg="Successful endpoint creation" containerID=d6467a37b7 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=4 identity=15147 ipv4=10.0.0.13 ipv6= k8sPodName=openstack/cinder-ks-endpoints-278l5 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=d6467a37b7 endpointID=4 k8sNamespace=openstack k8sPodName=cinder-ks-endpoints-278l5 subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=869b69c9-5d02-47fe-9ee3-5b2467e4e4ee k8s:batch.kubernetes.io/job-name=cinder-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=869b69c9-5d02-47fe-9ee3-5b2467e4e4ee k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-ks-endpoints k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=d6467a37b7 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=4 identity=15147 ipv4=10.0.0.13 ipv6= k8sPodName=openstack/cinder-ks-endpoints-278l5 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.58 087fba03-3bd8-4e8e-98b0-34b33cab912d default }" containerID=7ed096765a70b681965b086aed447229d30cdfb6ab73c3cdf419f6f5f66f09aa datapathConfiguration="&{false false false false false }" interface=lxcd493f8267908 k8sPodName=openstack/cinder-ks-user-lbncm labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7ed096765a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1799 ipv4=10.0.0.58 ipv6= k8sPodName=openstack/cinder-ks-user-lbncm subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7ed096765a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1799 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=f84529d5-ccbb-4c53-8f54-bd1e2b0e304a,k8s:batch.kubernetes.io/job-name=cinder-ks-user,k8s:component=ks-user,k8s:controller-uid=f84529d5-ccbb-4c53-8f54-bd1e2b0e304a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-ks-user,k8s:release_group=cinder" ipv4=10.0.0.58 ipv6= k8sPodName=openstack/cinder-ks-user-lbncm subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=f84529d5-ccbb-4c53-8f54-bd1e2b0e304a;k8s:batch.kubernetes.io/job-name=cinder-ks-user;k8s:component=ks-user;k8s:controller-uid=f84529d5-ccbb-4c53-8f54-bd1e2b0e304a;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-ks-user;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7ed096765a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1799 identity=2453 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=f84529d5-ccbb-4c53-8f54-bd1e2b0e304a,k8s:batch.kubernetes.io/job-name=cinder-ks-user,k8s:component=ks-user,k8s:controller-uid=f84529d5-ccbb-4c53-8f54-bd1e2b0e304a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-ks-user,k8s:release_group=cinder" ipv4=10.0.0.58 ipv6= k8sPodName=openstack/cinder-ks-user-lbncm oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7ed096765a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1799 identity=2453 ipv4=10.0.0.58 ipv6= k8sPodName=openstack/cinder-ks-user-lbncm subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=7ed096765a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1799 identity=2453 ipv4=10.0.0.58 ipv6= k8sPodName=openstack/cinder-ks-user-lbncm subsys=endpoint level=info msg="Successful endpoint creation" containerID=7ed096765a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1799 identity=2453 ipv4=10.0.0.58 ipv6= k8sPodName=openstack/cinder-ks-user-lbncm subsys=daemon level=info msg="Delete endpoint request" containerID=7ed096765a endpointID=1799 k8sNamespace=openstack k8sPodName=cinder-ks-user-lbncm subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=f84529d5-ccbb-4c53-8f54-bd1e2b0e304a k8s:batch.kubernetes.io/job-name=cinder-ks-user k8s:component=ks-user k8s:controller-uid=f84529d5-ccbb-4c53-8f54-bd1e2b0e304a k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-ks-user k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=7ed096765a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1799 identity=2453 ipv4=10.0.0.58 ipv6= k8sPodName=openstack/cinder-ks-user-lbncm subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.20 08cae180-1118-41a8-9f22-3a44a8d86a83 default }" containerID=7f0286f356333a93439c57251b4475d24da850032faa2d655239d7d81eed3cf6 datapathConfiguration="&{false false false false false }" interface=lxc9f2b11f4f46b k8sPodName=openstack/cinder-backup-storage-init-pf75w labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7f0286f356 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=906 ipv4=10.0.0.20 ipv6= k8sPodName=openstack/cinder-backup-storage-init-pf75w subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7f0286f356 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=906 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=d34c9269-92a5-4e31-978c-8b26ee12a65a,k8s:batch.kubernetes.io/job-name=cinder-backup-storage-init,k8s:component=storage-init,k8s:controller-uid=d34c9269-92a5-4e31-978c-8b26ee12a65a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-backup-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-backup-storage-init,k8s:release_group=cinder" ipv4=10.0.0.20 ipv6= k8sPodName=openstack/cinder-backup-storage-init-pf75w subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=d34c9269-92a5-4e31-978c-8b26ee12a65a;k8s:batch.kubernetes.io/job-name=cinder-backup-storage-init;k8s:component=storage-init;k8s:controller-uid=d34c9269-92a5-4e31-978c-8b26ee12a65a;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-backup-storage-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-backup-storage-init;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7f0286f356 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=906 identity=33646 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=d34c9269-92a5-4e31-978c-8b26ee12a65a,k8s:batch.kubernetes.io/job-name=cinder-backup-storage-init,k8s:component=storage-init,k8s:controller-uid=d34c9269-92a5-4e31-978c-8b26ee12a65a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-backup-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-backup-storage-init,k8s:release_group=cinder" ipv4=10.0.0.20 ipv6= k8sPodName=openstack/cinder-backup-storage-init-pf75w oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=7f0286f356 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=906 identity=33646 ipv4=10.0.0.20 ipv6= k8sPodName=openstack/cinder-backup-storage-init-pf75w subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=7f0286f356 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=906 identity=33646 ipv4=10.0.0.20 ipv6= k8sPodName=openstack/cinder-backup-storage-init-pf75w subsys=endpoint level=info msg="Successful endpoint creation" containerID=7f0286f356 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=906 identity=33646 ipv4=10.0.0.20 ipv6= k8sPodName=openstack/cinder-backup-storage-init-pf75w subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=7f0286f356 endpointID=906 k8sNamespace=openstack k8sPodName=cinder-backup-storage-init-pf75w subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=d34c9269-92a5-4e31-978c-8b26ee12a65a k8s:batch.kubernetes.io/job-name=cinder-backup-storage-init k8s:component=storage-init k8s:controller-uid=d34c9269-92a5-4e31-978c-8b26ee12a65a k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-backup-storage-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-backup-storage-init k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=7f0286f356 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=906 identity=33646 ipv4=10.0.0.20 ipv6= k8sPodName=openstack/cinder-backup-storage-init-pf75w subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.186 ffb0765f-bc42-42e9-9b53-7f3b200eefdd default }" containerID=1dca861302e920ea1cc8e7c96392103c8d4766b654fcabaef4446e37a675d10a datapathConfiguration="&{false false false false false }" interface=lxce46794dcc36f k8sPodName=openstack/cinder-create-internal-tenant-wqwhw labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1dca861302 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1359 ipv4=10.0.0.186 ipv6= k8sPodName=openstack/cinder-create-internal-tenant-wqwhw subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1dca861302 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1359 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=cd34e7fa-6673-459d-882b-ffef1e8b4e1a,k8s:batch.kubernetes.io/job-name=cinder-create-internal-tenant,k8s:component=create-internal-tenant,k8s:controller-uid=cd34e7fa-6673-459d-882b-ffef1e8b4e1a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-create-internal-tenant,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-create-internal-tenant,k8s:release_group=cinder" ipv4=10.0.0.186 ipv6= k8sPodName=openstack/cinder-create-internal-tenant-wqwhw subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=1dca861302 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1359 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.186 ipv6= k8sPodName=openstack/cinder-create-internal-tenant-wqwhw line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=cd34e7fa-6673-459d-882b-ffef1e8b4e1a;k8s:batch.kubernetes.io/job-name=cinder-create-internal-tenant;k8s:component=create-internal-tenant;k8s:controller-uid=cd34e7fa-6673-459d-882b-ffef1e8b4e1a;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-create-internal-tenant;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-create-internal-tenant;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1dca861302 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1359 identity=35241 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=cd34e7fa-6673-459d-882b-ffef1e8b4e1a,k8s:batch.kubernetes.io/job-name=cinder-create-internal-tenant,k8s:component=create-internal-tenant,k8s:controller-uid=cd34e7fa-6673-459d-882b-ffef1e8b4e1a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-create-internal-tenant,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-create-internal-tenant,k8s:release_group=cinder" ipv4=10.0.0.186 ipv6= k8sPodName=openstack/cinder-create-internal-tenant-wqwhw oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1dca861302 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1359 identity=35241 ipv4=10.0.0.186 ipv6= k8sPodName=openstack/cinder-create-internal-tenant-wqwhw subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=1dca861302 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1359 identity=35241 ipv4=10.0.0.186 ipv6= k8sPodName=openstack/cinder-create-internal-tenant-wqwhw subsys=endpoint level=info msg="Successful endpoint creation" containerID=1dca861302 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1359 identity=35241 ipv4=10.0.0.186 ipv6= k8sPodName=openstack/cinder-create-internal-tenant-wqwhw subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=1dca861302 endpointID=1359 k8sNamespace=openstack k8sPodName=cinder-create-internal-tenant-wqwhw subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=cd34e7fa-6673-459d-882b-ffef1e8b4e1a k8s:batch.kubernetes.io/job-name=cinder-create-internal-tenant k8s:component=create-internal-tenant k8s:controller-uid=cd34e7fa-6673-459d-882b-ffef1e8b4e1a k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-create-internal-tenant k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-create-internal-tenant k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=1dca861302 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1359 identity=35241 ipv4=10.0.0.186 ipv6= k8sPodName=openstack/cinder-create-internal-tenant-wqwhw subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.242 dfb5bae6-343e-4a27-bf95-1739fc6ed259 default }" containerID=93fb441c3d36b6b11a0a0946edd22d8e9e7213c8e71bf5879f2c4609d3b530af datapathConfiguration="&{false false false false false }" interface=lxc8ffdd208cb14 k8sPodName=openstack/cinder-storage-init-q6htg labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=93fb441c3d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3582 ipv4=10.0.0.242 ipv6= k8sPodName=openstack/cinder-storage-init-q6htg subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=93fb441c3d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3582 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=ab136477-d0db-495b-b1f4-53908e9b8ff0,k8s:batch.kubernetes.io/job-name=cinder-storage-init,k8s:component=storage-init,k8s:controller-uid=ab136477-d0db-495b-b1f4-53908e9b8ff0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-storage-init,k8s:release_group=cinder" ipv4=10.0.0.242 ipv6= k8sPodName=openstack/cinder-storage-init-q6htg subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=93fb441c3d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3582 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.242 ipv6= k8sPodName=openstack/cinder-storage-init-q6htg line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=ab136477-d0db-495b-b1f4-53908e9b8ff0;k8s:batch.kubernetes.io/job-name=cinder-storage-init;k8s:component=storage-init;k8s:controller-uid=ab136477-d0db-495b-b1f4-53908e9b8ff0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-storage-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-storage-init;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=93fb441c3d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3582 identity=2798 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=ab136477-d0db-495b-b1f4-53908e9b8ff0,k8s:batch.kubernetes.io/job-name=cinder-storage-init,k8s:component=storage-init,k8s:controller-uid=ab136477-d0db-495b-b1f4-53908e9b8ff0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-storage-init,k8s:release_group=cinder" ipv4=10.0.0.242 ipv6= k8sPodName=openstack/cinder-storage-init-q6htg oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=93fb441c3d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3582 identity=2798 ipv4=10.0.0.242 ipv6= k8sPodName=openstack/cinder-storage-init-q6htg subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=93fb441c3d datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3582 identity=2798 ipv4=10.0.0.242 ipv6= k8sPodName=openstack/cinder-storage-init-q6htg subsys=endpoint level=info msg="Successful endpoint creation" containerID=93fb441c3d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3582 identity=2798 ipv4=10.0.0.242 ipv6= k8sPodName=openstack/cinder-storage-init-q6htg subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=93fb441c3d endpointID=3582 k8sNamespace=openstack k8sPodName=cinder-storage-init-q6htg subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=ab136477-d0db-495b-b1f4-53908e9b8ff0 k8s:batch.kubernetes.io/job-name=cinder-storage-init k8s:component=storage-init k8s:controller-uid=ab136477-d0db-495b-b1f4-53908e9b8ff0 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-storage-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-storage-init k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=93fb441c3d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3582 identity=2798 ipv4=10.0.0.242 ipv6= k8sPodName=openstack/cinder-storage-init-q6htg subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.132 dce205c6-e38e-4941-bcb2-d06a643ddb9b default }" containerID=627c20b456d5d07cdf829be70fb5c7d41a5394c81de5224516bc030ebc6c2b12 datapathConfiguration="&{false false false false false }" interface=lxc6dce75299c97 k8sPodName=openstack/cinder-bootstrap-jjhsr labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=627c20b456 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3731 ipv4=10.0.0.132 ipv6= k8sPodName=openstack/cinder-bootstrap-jjhsr subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=627c20b456 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3731 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=03e8be67-9e72-42aa-b814-a8f75c1a0bd7,k8s:batch.kubernetes.io/job-name=cinder-bootstrap,k8s:component=bootstrap,k8s:controller-uid=03e8be67-9e72-42aa-b814-a8f75c1a0bd7,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-bootstrap,k8s:release_group=cinder" ipv4=10.0.0.132 ipv6= k8sPodName=openstack/cinder-bootstrap-jjhsr subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=03e8be67-9e72-42aa-b814-a8f75c1a0bd7;k8s:batch.kubernetes.io/job-name=cinder-bootstrap;k8s:component=bootstrap;k8s:controller-uid=03e8be67-9e72-42aa-b814-a8f75c1a0bd7;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-bootstrap;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-bootstrap;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=627c20b456 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3731 identity=40056 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=03e8be67-9e72-42aa-b814-a8f75c1a0bd7,k8s:batch.kubernetes.io/job-name=cinder-bootstrap,k8s:component=bootstrap,k8s:controller-uid=03e8be67-9e72-42aa-b814-a8f75c1a0bd7,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-bootstrap,k8s:release_group=cinder" ipv4=10.0.0.132 ipv6= k8sPodName=openstack/cinder-bootstrap-jjhsr oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=627c20b456 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3731 identity=40056 ipv4=10.0.0.132 ipv6= k8sPodName=openstack/cinder-bootstrap-jjhsr subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=627c20b456 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3731 identity=40056 ipv4=10.0.0.132 ipv6= k8sPodName=openstack/cinder-bootstrap-jjhsr subsys=endpoint level=info msg="Successful endpoint creation" containerID=627c20b456 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3731 identity=40056 ipv4=10.0.0.132 ipv6= k8sPodName=openstack/cinder-bootstrap-jjhsr subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.91 ea892849-8b58-47c9-8efe-2868b6f77cda default }" containerID=ccd39eaf15b4b5bd55b4e527e906af61bb57dcc006b8c23555f8e916d2cc1a76 datapathConfiguration="&{false false false false false }" interface=lxc7164d1c1d66f k8sPodName=openstack/cinder-backup-5859cc785b-dpkm2 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ccd39eaf15 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1211 ipv4=10.0.0.91 ipv6= k8sPodName=openstack/cinder-backup-5859cc785b-dpkm2 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ccd39eaf15 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1211 identityLabels="k8s:application=cinder,k8s:component=backup,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-backup,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=cinder" ipv4=10.0.0.91 ipv6= k8sPodName=openstack/cinder-backup-5859cc785b-dpkm2 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:component=backup;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-backup;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ccd39eaf15 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1211 identity=37037 identityLabels="k8s:application=cinder,k8s:component=backup,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-backup,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=cinder" ipv4=10.0.0.91 ipv6= k8sPodName=openstack/cinder-backup-5859cc785b-dpkm2 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ccd39eaf15 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1211 identity=37037 ipv4=10.0.0.91 ipv6= k8sPodName=openstack/cinder-backup-5859cc785b-dpkm2 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.190 0562cf1b-03f7-47e5-940f-a9c6e5d483d0 default }" containerID=27c0b6fc4147ef116b4c5eeeedb384262e8bc1eadc295e8430791b3daf416eeb datapathConfiguration="&{false false false false false }" interface=lxcf11482ef4980 k8sPodName=openstack/cinder-volume-75bdccd9d9-95nxr labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=27c0b6fc41 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1171 ipv4=10.0.0.190 ipv6= k8sPodName=openstack/cinder-volume-75bdccd9d9-95nxr subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=27c0b6fc41 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1171 identityLabels="k8s:application=cinder,k8s:component=volume,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-volume,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=cinder" ipv4=10.0.0.190 ipv6= k8sPodName=openstack/cinder-volume-75bdccd9d9-95nxr subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:component=volume;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-volume;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=27c0b6fc41 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1171 identity=61827 identityLabels="k8s:application=cinder,k8s:component=volume,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-volume,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=cinder" ipv4=10.0.0.190 ipv6= k8sPodName=openstack/cinder-volume-75bdccd9d9-95nxr oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=27c0b6fc41 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1171 identity=61827 ipv4=10.0.0.190 ipv6= k8sPodName=openstack/cinder-volume-75bdccd9d9-95nxr subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ccd39eaf15 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1211 identity=37037 ipv4=10.0.0.91 ipv6= k8sPodName=openstack/cinder-backup-5859cc785b-dpkm2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=ccd39eaf15 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1211 identity=37037 ipv4=10.0.0.91 ipv6= k8sPodName=openstack/cinder-backup-5859cc785b-dpkm2 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=27c0b6fc41 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1171 identity=61827 ipv4=10.0.0.190 ipv6= k8sPodName=openstack/cinder-volume-75bdccd9d9-95nxr subsys=endpoint level=info msg="Successful endpoint creation" containerID=27c0b6fc41 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1171 identity=61827 ipv4=10.0.0.190 ipv6= k8sPodName=openstack/cinder-volume-75bdccd9d9-95nxr subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=627c20b456 endpointID=3731 k8sNamespace=openstack k8sPodName=cinder-bootstrap-jjhsr subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=03e8be67-9e72-42aa-b814-a8f75c1a0bd7 k8s:batch.kubernetes.io/job-name=cinder-bootstrap k8s:component=bootstrap k8s:controller-uid=03e8be67-9e72-42aa-b814-a8f75c1a0bd7 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-bootstrap k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-bootstrap k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=627c20b456 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3731 identity=40056 ipv4=10.0.0.132 ipv6= k8sPodName=openstack/cinder-bootstrap-jjhsr subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.68 4a35e9a2-f4db-45d7-b610-2389fefac542 default }" containerID=8b4b885971dc81e2f0dfe86eee14b5fd055426554f2e608ec89e64705261ee5b datapathConfiguration="&{false false false false false }" interface=lxcee6c14ab8254 k8sPodName=openstack/placement-api-64bc55f87b-w9v4w labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8b4b885971 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=648 ipv4=10.0.0.68 ipv6= k8sPodName=openstack/placement-api-64bc55f87b-w9v4w subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8b4b885971 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=648 identityLabels="k8s:application=placement,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=placement" ipv4=10.0.0.68 ipv6= k8sPodName=openstack/placement-api-64bc55f87b-w9v4w subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=placement;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=placement-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=placement;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=8b4b885971 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=648 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.68 ipv6= k8sPodName=openstack/placement-api-64bc55f87b-w9v4w line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=8b4b885971 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=648 identity=27077 identityLabels="k8s:application=placement,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=placement" ipv4=10.0.0.68 ipv6= k8sPodName=openstack/placement-api-64bc55f87b-w9v4w oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8b4b885971 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=648 identity=27077 ipv4=10.0.0.68 ipv6= k8sPodName=openstack/placement-api-64bc55f87b-w9v4w subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.17 dfe87e3a-d2df-4873-af65-3eae7ba4be09 default }" containerID=ee4facaeac9cd6ac974a5af4f2278de5a71d83cfa42f0bc93d0ba87a49548c0b datapathConfiguration="&{false false false false false }" interface=lxc593fba91be3c k8sPodName=openstack/placement-db-init-6mnwg labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ee4facaeac datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1802 ipv4=10.0.0.17 ipv6= k8sPodName=openstack/placement-db-init-6mnwg subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ee4facaeac datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1802 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=cb208516-0293-474e-a32c-c6ee61edf047,k8s:batch.kubernetes.io/job-name=placement-db-init,k8s:component=db-init,k8s:controller-uid=cb208516-0293-474e-a32c-c6ee61edf047,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-db-init,k8s:release_group=placement" ipv4=10.0.0.17 ipv6= k8sPodName=openstack/placement-db-init-6mnwg subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=placement;k8s:batch.kubernetes.io/controller-uid=cb208516-0293-474e-a32c-c6ee61edf047;k8s:batch.kubernetes.io/job-name=placement-db-init;k8s:component=db-init;k8s:controller-uid=cb208516-0293-474e-a32c-c6ee61edf047;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=placement-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=placement-db-init;k8s:release_group=placement;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ee4facaeac datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1802 identity=33509 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=cb208516-0293-474e-a32c-c6ee61edf047,k8s:batch.kubernetes.io/job-name=placement-db-init,k8s:component=db-init,k8s:controller-uid=cb208516-0293-474e-a32c-c6ee61edf047,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-db-init,k8s:release_group=placement" ipv4=10.0.0.17 ipv6= k8sPodName=openstack/placement-db-init-6mnwg oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ee4facaeac datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1802 identity=33509 ipv4=10.0.0.17 ipv6= k8sPodName=openstack/placement-db-init-6mnwg subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=8b4b885971 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=648 identity=27077 ipv4=10.0.0.68 ipv6= k8sPodName=openstack/placement-api-64bc55f87b-w9v4w subsys=endpoint level=info msg="Successful endpoint creation" containerID=8b4b885971 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=648 identity=27077 ipv4=10.0.0.68 ipv6= k8sPodName=openstack/placement-api-64bc55f87b-w9v4w subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=ee4facaeac datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1802 identity=33509 ipv4=10.0.0.17 ipv6= k8sPodName=openstack/placement-db-init-6mnwg subsys=endpoint level=info msg="Successful endpoint creation" containerID=ee4facaeac datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1802 identity=33509 ipv4=10.0.0.17 ipv6= k8sPodName=openstack/placement-db-init-6mnwg subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=ee4facaeac endpointID=1802 k8sNamespace=openstack k8sPodName=placement-db-init-6mnwg subsys=daemon level=info msg="Releasing key" key="[k8s:application=placement k8s:batch.kubernetes.io/controller-uid=cb208516-0293-474e-a32c-c6ee61edf047 k8s:batch.kubernetes.io/job-name=placement-db-init k8s:component=db-init k8s:controller-uid=cb208516-0293-474e-a32c-c6ee61edf047 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=placement-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=placement-db-init k8s:release_group=placement]" subsys=allocator level=info msg="Removed endpoint" containerID=ee4facaeac datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1802 identity=33509 ipv4=10.0.0.17 ipv6= k8sPodName=openstack/placement-db-init-6mnwg subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.20 9251b3f9-5d2f-4bb3-b6e8-b7faf0c88d28 default }" containerID=94e4b0462667845caaa074d36d98fbb17a139437d5f90ae606fca3679ca5e704 datapathConfiguration="&{false false false false false }" interface=lxccc804523b31d k8sPodName=openstack/placement-db-sync-z7kgt labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=94e4b04626 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1039 ipv4=10.0.0.20 ipv6= k8sPodName=openstack/placement-db-sync-z7kgt subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=94e4b04626 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1039 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=20538558-e578-4dd7-b855-55097f83a6af,k8s:batch.kubernetes.io/job-name=placement-db-sync,k8s:component=db-sync,k8s:controller-uid=20538558-e578-4dd7-b855-55097f83a6af,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-db-sync,k8s:release_group=placement" ipv4=10.0.0.20 ipv6= k8sPodName=openstack/placement-db-sync-z7kgt subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=placement;k8s:batch.kubernetes.io/controller-uid=20538558-e578-4dd7-b855-55097f83a6af;k8s:batch.kubernetes.io/job-name=placement-db-sync;k8s:component=db-sync;k8s:controller-uid=20538558-e578-4dd7-b855-55097f83a6af;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=placement-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=placement-db-sync;k8s:release_group=placement;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=94e4b04626 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1039 identity=13744 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=20538558-e578-4dd7-b855-55097f83a6af,k8s:batch.kubernetes.io/job-name=placement-db-sync,k8s:component=db-sync,k8s:controller-uid=20538558-e578-4dd7-b855-55097f83a6af,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-db-sync,k8s:release_group=placement" ipv4=10.0.0.20 ipv6= k8sPodName=openstack/placement-db-sync-z7kgt oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=94e4b04626 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1039 identity=13744 ipv4=10.0.0.20 ipv6= k8sPodName=openstack/placement-db-sync-z7kgt subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=94e4b04626 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1039 identity=13744 ipv4=10.0.0.20 ipv6= k8sPodName=openstack/placement-db-sync-z7kgt subsys=endpoint level=info msg="Successful endpoint creation" containerID=94e4b04626 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1039 identity=13744 ipv4=10.0.0.20 ipv6= k8sPodName=openstack/placement-db-sync-z7kgt subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=94e4b04626 endpointID=1039 k8sNamespace=openstack k8sPodName=placement-db-sync-z7kgt subsys=daemon level=info msg="Releasing key" key="[k8s:application=placement k8s:batch.kubernetes.io/controller-uid=20538558-e578-4dd7-b855-55097f83a6af k8s:batch.kubernetes.io/job-name=placement-db-sync k8s:component=db-sync k8s:controller-uid=20538558-e578-4dd7-b855-55097f83a6af k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=placement-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=placement-db-sync k8s:release_group=placement]" subsys=allocator level=info msg="Removed endpoint" containerID=94e4b04626 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1039 identity=13744 ipv4=10.0.0.20 ipv6= k8sPodName=openstack/placement-db-sync-z7kgt subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.197 c0df84a8-d069-45f3-a083-223ddd52bbee default }" containerID=ff15c4cda292196e096920e4341720a3942c49814f54262416b543660a73e2bf datapathConfiguration="&{false false false false false }" interface=lxc39c7e652b39f k8sPodName=openstack/placement-ks-service-gvmq8 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ff15c4cda2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=127 ipv4=10.0.0.197 ipv6= k8sPodName=openstack/placement-ks-service-gvmq8 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ff15c4cda2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=127 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=afb8c33b-42cf-41ba-aff8-9282a8f3a4e4,k8s:batch.kubernetes.io/job-name=placement-ks-service,k8s:component=ks-service,k8s:controller-uid=afb8c33b-42cf-41ba-aff8-9282a8f3a4e4,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-ks-service,k8s:release_group=placement" ipv4=10.0.0.197 ipv6= k8sPodName=openstack/placement-ks-service-gvmq8 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=placement;k8s:batch.kubernetes.io/controller-uid=afb8c33b-42cf-41ba-aff8-9282a8f3a4e4;k8s:batch.kubernetes.io/job-name=placement-ks-service;k8s:component=ks-service;k8s:controller-uid=afb8c33b-42cf-41ba-aff8-9282a8f3a4e4;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=placement-ks-service;k8s:release_group=placement;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ff15c4cda2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=127 identity=5563 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=afb8c33b-42cf-41ba-aff8-9282a8f3a4e4,k8s:batch.kubernetes.io/job-name=placement-ks-service,k8s:component=ks-service,k8s:controller-uid=afb8c33b-42cf-41ba-aff8-9282a8f3a4e4,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-ks-service,k8s:release_group=placement" ipv4=10.0.0.197 ipv6= k8sPodName=openstack/placement-ks-service-gvmq8 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ff15c4cda2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=127 identity=5563 ipv4=10.0.0.197 ipv6= k8sPodName=openstack/placement-ks-service-gvmq8 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ff15c4cda2 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=127 identity=5563 ipv4=10.0.0.197 ipv6= k8sPodName=openstack/placement-ks-service-gvmq8 subsys=endpoint level=info msg="Successful endpoint creation" containerID=ff15c4cda2 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=127 identity=5563 ipv4=10.0.0.197 ipv6= k8sPodName=openstack/placement-ks-service-gvmq8 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=ff15c4cda2 endpointID=127 k8sNamespace=openstack k8sPodName=placement-ks-service-gvmq8 subsys=daemon level=info msg="Releasing key" key="[k8s:application=placement k8s:batch.kubernetes.io/controller-uid=afb8c33b-42cf-41ba-aff8-9282a8f3a4e4 k8s:batch.kubernetes.io/job-name=placement-ks-service k8s:component=ks-service k8s:controller-uid=afb8c33b-42cf-41ba-aff8-9282a8f3a4e4 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=placement-ks-service k8s:release_group=placement]" subsys=allocator level=info msg="Removed endpoint" containerID=ff15c4cda2 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=127 identity=5563 ipv4=10.0.0.197 ipv6= k8sPodName=openstack/placement-ks-service-gvmq8 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.135 e1ce6dcf-7b60-4d12-8ec4-7647b41ceaa4 default }" containerID=ac4be91b8788d9beb1bfc5652f0e880ce7ffa200b1ce07829e949c45e348aa23 datapathConfiguration="&{false false false false false }" interface=lxc0e0c90ed53f6 k8sPodName=openstack/placement-ks-user-jphcd labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ac4be91b87 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=958 ipv4=10.0.0.135 ipv6= k8sPodName=openstack/placement-ks-user-jphcd subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ac4be91b87 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=958 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=ceffe02b-62e6-4175-91d4-df202e5cf55b,k8s:batch.kubernetes.io/job-name=placement-ks-user,k8s:component=ks-user,k8s:controller-uid=ceffe02b-62e6-4175-91d4-df202e5cf55b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-ks-user,k8s:release_group=placement" ipv4=10.0.0.135 ipv6= k8sPodName=openstack/placement-ks-user-jphcd subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=placement;k8s:batch.kubernetes.io/controller-uid=ceffe02b-62e6-4175-91d4-df202e5cf55b;k8s:batch.kubernetes.io/job-name=placement-ks-user;k8s:component=ks-user;k8s:controller-uid=ceffe02b-62e6-4175-91d4-df202e5cf55b;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=placement-ks-user;k8s:release_group=placement;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=ac4be91b87 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=958 identity=15677 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=ceffe02b-62e6-4175-91d4-df202e5cf55b,k8s:batch.kubernetes.io/job-name=placement-ks-user,k8s:component=ks-user,k8s:controller-uid=ceffe02b-62e6-4175-91d4-df202e5cf55b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-ks-user,k8s:release_group=placement" ipv4=10.0.0.135 ipv6= k8sPodName=openstack/placement-ks-user-jphcd oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ac4be91b87 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=958 identity=15677 ipv4=10.0.0.135 ipv6= k8sPodName=openstack/placement-ks-user-jphcd subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ac4be91b87 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=958 identity=15677 ipv4=10.0.0.135 ipv6= k8sPodName=openstack/placement-ks-user-jphcd subsys=endpoint level=info msg="Successful endpoint creation" containerID=ac4be91b87 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=958 identity=15677 ipv4=10.0.0.135 ipv6= k8sPodName=openstack/placement-ks-user-jphcd subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=ac4be91b87 endpointID=958 k8sNamespace=openstack k8sPodName=placement-ks-user-jphcd subsys=daemon level=info msg="Releasing key" key="[k8s:application=placement k8s:batch.kubernetes.io/controller-uid=ceffe02b-62e6-4175-91d4-df202e5cf55b k8s:batch.kubernetes.io/job-name=placement-ks-user k8s:component=ks-user k8s:controller-uid=ceffe02b-62e6-4175-91d4-df202e5cf55b k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=placement-ks-user k8s:release_group=placement]" subsys=allocator level=info msg="Removed endpoint" containerID=ac4be91b87 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=958 identity=15677 ipv4=10.0.0.135 ipv6= k8sPodName=openstack/placement-ks-user-jphcd subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.105 ab087663-6d3f-4115-be2b-4d2f1d58dbe3 default }" containerID=c147a48f851e12f21e3cb5cc56581241635ffea2759300c5df146b69f857bf51 datapathConfiguration="&{false false false false false }" interface=lxc48327411065e k8sPodName=openstack/placement-ks-endpoints-jjj5z labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c147a48f85 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=472 ipv4=10.0.0.105 ipv6= k8sPodName=openstack/placement-ks-endpoints-jjj5z subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c147a48f85 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=472 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=c72d5b18-0e5f-4faf-93d4-d2d3b1e0e2f1,k8s:batch.kubernetes.io/job-name=placement-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=c72d5b18-0e5f-4faf-93d4-d2d3b1e0e2f1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-ks-endpoints,k8s:release_group=placement" ipv4=10.0.0.105 ipv6= k8sPodName=openstack/placement-ks-endpoints-jjj5z subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=placement;k8s:batch.kubernetes.io/controller-uid=c72d5b18-0e5f-4faf-93d4-d2d3b1e0e2f1;k8s:batch.kubernetes.io/job-name=placement-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=c72d5b18-0e5f-4faf-93d4-d2d3b1e0e2f1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=placement-ks-endpoints;k8s:release_group=placement;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=c147a48f85 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=472 identity=6496 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=c72d5b18-0e5f-4faf-93d4-d2d3b1e0e2f1,k8s:batch.kubernetes.io/job-name=placement-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=c72d5b18-0e5f-4faf-93d4-d2d3b1e0e2f1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-ks-endpoints,k8s:release_group=placement" ipv4=10.0.0.105 ipv6= k8sPodName=openstack/placement-ks-endpoints-jjj5z oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c147a48f85 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=472 identity=6496 ipv4=10.0.0.105 ipv6= k8sPodName=openstack/placement-ks-endpoints-jjj5z subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c147a48f85 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=472 identity=6496 ipv4=10.0.0.105 ipv6= k8sPodName=openstack/placement-ks-endpoints-jjj5z subsys=endpoint level=info msg="Successful endpoint creation" containerID=c147a48f85 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=472 identity=6496 ipv4=10.0.0.105 ipv6= k8sPodName=openstack/placement-ks-endpoints-jjj5z subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=c147a48f85 endpointID=472 k8sNamespace=openstack k8sPodName=placement-ks-endpoints-jjj5z subsys=daemon level=info msg="Releasing key" key="[k8s:application=placement k8s:batch.kubernetes.io/controller-uid=c72d5b18-0e5f-4faf-93d4-d2d3b1e0e2f1 k8s:batch.kubernetes.io/job-name=placement-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=c72d5b18-0e5f-4faf-93d4-d2d3b1e0e2f1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=placement-ks-endpoints k8s:release_group=placement]" subsys=allocator level=info msg="Removed endpoint" containerID=c147a48f85 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=472 identity=6496 ipv4=10.0.0.105 ipv6= k8sPodName=openstack/placement-ks-endpoints-jjj5z subsys=endpoint