level=info msg="Memory available for map entries (0.003% of 67421634560B): 168554086B" subsys=config level=info msg="option bpf-ct-global-tcp-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-ct-global-any-max set by dynamic sizing to 295708" subsys=config level=info msg="option bpf-nat-global-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-neigh-global-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-sock-rev-map-max set by dynamic sizing to 295708" subsys=config level=info msg=" --agent-health-port='9879'" subsys=daemon level=info msg=" --agent-labels=''" subsys=daemon level=info msg=" --agent-liveness-update-interval='1s'" subsys=daemon level=info msg=" --agent-not-ready-taint-key='node.cilium.io/agent-not-ready'" subsys=daemon level=info msg=" --allocator-list-timeout='3m0s'" subsys=daemon level=info msg=" --allow-icmp-frag-needed='true'" subsys=daemon level=info msg=" --allow-localhost='auto'" subsys=daemon level=info msg=" --annotate-k8s-node='false'" subsys=daemon level=info msg=" --api-rate-limit=''" subsys=daemon level=info msg=" --arping-refresh-period='30s'" subsys=daemon level=info msg=" --auto-create-cilium-node-resource='true'" subsys=daemon level=info msg=" --auto-direct-node-routes='false'" subsys=daemon level=info msg=" --bgp-announce-lb-ip='false'" subsys=daemon level=info msg=" --bgp-announce-pod-cidr='false'" subsys=daemon level=info msg=" --bgp-config-path='/var/lib/cilium/bgp/config.yaml'" subsys=daemon level=info msg=" --bpf-auth-map-max='524288'" subsys=daemon level=info msg=" --bpf-ct-global-any-max='262144'" subsys=daemon level=info msg=" --bpf-ct-global-tcp-max='524288'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-any='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp='6h0m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp-fin='10s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp-syn='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-any='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-tcp='6h0m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-tcp-grace='1m0s'" subsys=daemon level=info msg=" --bpf-filter-priority='1'" subsys=daemon level=info msg=" --bpf-fragments-map-max='8192'" subsys=daemon level=info msg=" --bpf-lb-acceleration='disabled'" subsys=daemon level=info msg=" --bpf-lb-affinity-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-algorithm='random'" subsys=daemon level=info msg=" --bpf-lb-dev-ip-addr-inherit=''" subsys=daemon level=info msg=" --bpf-lb-dsr-dispatch='opt'" subsys=daemon level=info msg=" --bpf-lb-dsr-l4-xlate='frontend'" subsys=daemon level=info msg=" --bpf-lb-external-clusterip='false'" subsys=daemon level=info msg=" --bpf-lb-maglev-hash-seed='JLfvgnHc2kaSUFaI'" subsys=daemon level=info msg=" --bpf-lb-maglev-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-maglev-table-size='16381'" subsys=daemon level=info msg=" --bpf-lb-map-max='65536'" subsys=daemon level=info msg=" --bpf-lb-mode='snat'" subsys=daemon level=info msg=" --bpf-lb-rev-nat-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-rss-ipv4-src-cidr=''" subsys=daemon level=info msg=" --bpf-lb-rss-ipv6-src-cidr=''" subsys=daemon level=info msg=" --bpf-lb-service-backend-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-service-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-sock='false'" subsys=daemon level=info msg=" --bpf-lb-sock-hostns-only='false'" subsys=daemon level=info msg=" --bpf-lb-source-range-map-max='0'" subsys=daemon level=info msg=" --bpf-map-dynamic-size-ratio='0.0025'" subsys=daemon level=info msg=" --bpf-map-event-buffers=''" subsys=daemon level=info msg=" --bpf-nat-global-max='524288'" subsys=daemon level=info msg=" --bpf-neigh-global-max='524288'" subsys=daemon level=info msg=" --bpf-policy-map-full-reconciliation-interval='15m0s'" subsys=daemon level=info msg=" --bpf-policy-map-max='16384'" subsys=daemon level=info msg=" --bpf-root='/sys/fs/bpf'" subsys=daemon level=info msg=" --bpf-sock-rev-map-max='262144'" subsys=daemon level=info msg=" --bypass-ip-availability-upon-restore='false'" subsys=daemon level=info msg=" --certificates-directory='/var/run/cilium/certs'" subsys=daemon level=info msg=" --cflags=''" subsys=daemon level=info msg=" --cgroup-root='/run/cilium/cgroupv2'" subsys=daemon level=info msg=" --cilium-endpoint-gc-interval='5m0s'" subsys=daemon level=info msg=" --cluster-health-port='4240'" subsys=daemon level=info msg=" --cluster-id='0'" subsys=daemon level=info msg=" --cluster-name='default'" subsys=daemon level=info msg=" --cluster-pool-ipv4-cidr='10.0.0.0/8'" subsys=daemon level=info msg=" --cluster-pool-ipv4-mask-size='24'" subsys=daemon level=info msg=" --clustermesh-config='/var/lib/cilium/clustermesh/'" subsys=daemon level=info msg=" --clustermesh-ip-identities-sync-timeout='1m0s'" subsys=daemon level=info msg=" --cmdref=''" subsys=daemon level=info msg=" --cni-chaining-mode='none'" subsys=daemon level=info msg=" --cni-chaining-target=''" subsys=daemon level=info msg=" --cni-exclusive='true'" subsys=daemon level=info msg=" --cni-external-routing='false'" subsys=daemon level=info msg=" --cni-log-file='/var/run/cilium/cilium-cni.log'" subsys=daemon level=info msg=" --cnp-node-status-gc-interval='0s'" subsys=daemon level=info msg=" --config=''" subsys=daemon level=info msg=" --config-dir='/tmp/cilium/config-map'" subsys=daemon level=info msg=" --config-sources='config-map:kube-system/cilium-config'" subsys=daemon level=info msg=" --conntrack-gc-interval='0s'" subsys=daemon level=info msg=" --conntrack-gc-max-interval='0s'" subsys=daemon level=info msg=" --crd-wait-timeout='5m0s'" subsys=daemon level=info msg=" --custom-cni-conf='false'" subsys=daemon level=info msg=" --datapath-mode='veth'" subsys=daemon level=info msg=" --debug='false'" subsys=daemon level=info msg=" --debug-verbose=''" subsys=daemon level=info msg=" --derive-masquerade-ip-addr-from-device=''" subsys=daemon level=info msg=" --devices=''" subsys=daemon level=info msg=" --direct-routing-device=''" subsys=daemon level=info msg=" --disable-cnp-status-updates='true'" subsys=daemon level=info msg=" --disable-endpoint-crd='false'" subsys=daemon level=info msg=" --disable-envoy-version-check='false'" subsys=daemon level=info msg=" --disable-iptables-feeder-rules=''" subsys=daemon level=info msg=" --dns-max-ips-per-restored-rule='1000'" subsys=daemon level=info msg=" --dns-policy-unload-on-shutdown='false'" subsys=daemon level=info msg=" --dnsproxy-concurrency-limit='0'" subsys=daemon level=info msg=" --dnsproxy-concurrency-processing-grace-period='0s'" subsys=daemon level=info msg=" --dnsproxy-enable-transparent-mode='true'" subsys=daemon level=info msg=" --dnsproxy-lock-count='128'" subsys=daemon level=info msg=" --dnsproxy-lock-timeout='500ms'" subsys=daemon level=info msg=" --egress-gateway-policy-map-max='16384'" subsys=daemon level=info msg=" --egress-gateway-reconciliation-trigger-interval='1s'" subsys=daemon level=info msg=" --egress-masquerade-interfaces=''" subsys=daemon level=info msg=" --egress-multi-home-ip-rule-compat='false'" subsys=daemon level=info msg=" --enable-auto-protect-node-port-range='true'" subsys=daemon level=info msg=" --enable-bandwidth-manager='false'" subsys=daemon level=info msg=" --enable-bbr='false'" subsys=daemon level=info msg=" --enable-bgp-control-plane='false'" subsys=daemon level=info msg=" --enable-bpf-clock-probe='false'" subsys=daemon level=info msg=" --enable-bpf-masquerade='false'" subsys=daemon level=info msg=" --enable-bpf-tproxy='false'" subsys=daemon level=info msg=" --enable-cilium-api-server-access='*'" subsys=daemon level=info msg=" --enable-cilium-endpoint-slice='false'" subsys=daemon level=info msg=" --enable-cilium-health-api-server-access='*'" subsys=daemon level=info msg=" --enable-custom-calls='false'" subsys=daemon level=info msg=" --enable-endpoint-health-checking='true'" subsys=daemon level=info msg=" --enable-endpoint-routes='false'" subsys=daemon level=info msg=" --enable-envoy-config='false'" subsys=daemon level=info msg=" --enable-external-ips='false'" subsys=daemon level=info msg=" --enable-health-check-nodeport='true'" subsys=daemon level=info msg=" --enable-health-checking='true'" subsys=daemon level=info msg=" --enable-high-scale-ipcache='false'" subsys=daemon level=info msg=" --enable-host-firewall='false'" subsys=daemon level=info msg=" --enable-host-legacy-routing='false'" subsys=daemon level=info msg=" --enable-host-port='false'" subsys=daemon level=info msg=" --enable-hubble='false'" subsys=daemon level=info msg=" --enable-hubble-recorder-api='true'" subsys=daemon level=info msg=" --enable-icmp-rules='true'" subsys=daemon level=info msg=" --enable-identity-mark='true'" subsys=daemon level=info msg=" --enable-ip-masq-agent='false'" subsys=daemon level=info msg=" --enable-ipsec='false'" subsys=daemon level=info msg=" --enable-ipsec-key-watcher='true'" subsys=daemon level=info msg=" --enable-ipv4='true'" subsys=daemon level=info msg=" --enable-ipv4-big-tcp='false'" subsys=daemon level=info msg=" --enable-ipv4-egress-gateway='false'" subsys=daemon level=info msg=" --enable-ipv4-fragment-tracking='true'" subsys=daemon level=info msg=" --enable-ipv4-masquerade='true'" subsys=daemon level=info msg=" --enable-ipv6='false'" subsys=daemon level=info msg=" --enable-ipv6-big-tcp='false'" subsys=daemon level=info msg=" --enable-ipv6-masquerade='true'" subsys=daemon level=info msg=" --enable-ipv6-ndp='false'" subsys=daemon level=info msg=" --enable-k8s='true'" subsys=daemon level=info msg=" --enable-k8s-api-discovery='false'" subsys=daemon level=info msg=" --enable-k8s-endpoint-slice='true'" subsys=daemon level=info msg=" --enable-k8s-event-handover='false'" subsys=daemon level=info msg=" --enable-k8s-networkpolicy='true'" subsys=daemon level=info msg=" --enable-k8s-terminating-endpoint='true'" subsys=daemon level=info msg=" --enable-l2-announcements='false'" subsys=daemon level=info msg=" --enable-l2-neigh-discovery='true'" subsys=daemon level=info msg=" --enable-l2-pod-announcements='false'" subsys=daemon level=info msg=" --enable-l7-proxy='true'" subsys=daemon level=info msg=" --enable-local-node-route='true'" subsys=daemon level=info msg=" --enable-local-redirect-policy='false'" subsys=daemon level=info msg=" --enable-mke='false'" subsys=daemon level=info msg=" --enable-monitor='true'" subsys=daemon level=info msg=" --enable-nat46x64-gateway='false'" subsys=daemon level=info msg=" --enable-node-port='false'" subsys=daemon level=info msg=" --enable-pmtu-discovery='false'" subsys=daemon level=info msg=" --enable-policy='default'" subsys=daemon level=info msg=" --enable-recorder='false'" subsys=daemon level=info msg=" --enable-remote-node-identity='true'" subsys=daemon level=info msg=" --enable-runtime-device-detection='false'" subsys=daemon level=info msg=" --enable-sctp='false'" subsys=daemon level=info msg=" --enable-service-topology='false'" subsys=daemon level=info msg=" --enable-session-affinity='false'" subsys=daemon level=info msg=" --enable-srv6='false'" subsys=daemon level=info msg=" --enable-stale-cilium-endpoint-cleanup='true'" subsys=daemon level=info msg=" --enable-svc-source-range-check='true'" subsys=daemon level=info msg=" --enable-tracing='false'" subsys=daemon level=info msg=" --enable-unreachable-routes='false'" subsys=daemon level=info msg=" --enable-vtep='false'" subsys=daemon level=info msg=" --enable-well-known-identities='false'" subsys=daemon level=info msg=" --enable-wireguard='false'" subsys=daemon level=info msg=" --enable-wireguard-userspace-fallback='false'" subsys=daemon level=info msg=" --enable-xdp-prefilter='false'" subsys=daemon level=info msg=" --enable-xt-socket-fallback='true'" subsys=daemon level=info msg=" --encrypt-interface=''" subsys=daemon level=info msg=" --encrypt-node='false'" subsys=daemon level=info msg=" --endpoint-gc-interval='5m0s'" subsys=daemon level=info msg=" --endpoint-queue-size='25'" subsys=daemon level=info msg=" --endpoint-status=''" subsys=daemon level=info msg=" --envoy-config-timeout='2m0s'" subsys=daemon level=info msg=" --envoy-log=''" subsys=daemon level=info msg=" --exclude-local-address=''" subsys=daemon level=info msg=" --external-envoy-proxy='false'" subsys=daemon level=info msg=" --fixed-identity-mapping=''" subsys=daemon level=info msg=" --fqdn-regex-compile-lru-size='1024'" subsys=daemon level=info msg=" --gops-port='9890'" subsys=daemon level=info msg=" --http-403-msg=''" subsys=daemon level=info msg=" --http-idle-timeout='0'" subsys=daemon level=info msg=" --http-max-grpc-timeout='0'" subsys=daemon level=info msg=" --http-normalize-path='true'" subsys=daemon level=info msg=" --http-request-timeout='3600'" subsys=daemon level=info msg=" --http-retry-count='3'" subsys=daemon level=info msg=" --http-retry-timeout='0'" subsys=daemon level=info msg=" --hubble-disable-tls='false'" subsys=daemon level=info msg=" --hubble-event-buffer-capacity='4095'" subsys=daemon level=info msg=" --hubble-event-queue-size='0'" subsys=daemon level=info msg=" --hubble-export-file-compress='false'" subsys=daemon level=info msg=" --hubble-export-file-max-backups='5'" subsys=daemon level=info msg=" --hubble-export-file-max-size-mb='10'" subsys=daemon level=info msg=" --hubble-export-file-path=''" subsys=daemon level=info msg=" --hubble-listen-address=''" subsys=daemon level=info msg=" --hubble-metrics=''" subsys=daemon level=info msg=" --hubble-metrics-server=''" subsys=daemon level=info msg=" --hubble-monitor-events=''" subsys=daemon level=info msg=" --hubble-prefer-ipv6='false'" subsys=daemon level=info msg=" --hubble-recorder-sink-queue-size='1024'" subsys=daemon level=info msg=" --hubble-recorder-storage-path='/var/run/cilium/pcaps'" subsys=daemon level=info msg=" --hubble-skip-unknown-cgroup-ids='true'" subsys=daemon level=info msg=" --hubble-socket-path='/var/run/cilium/hubble.sock'" subsys=daemon level=info msg=" --hubble-tls-cert-file=''" subsys=daemon level=info msg=" --hubble-tls-client-ca-files=''" subsys=daemon level=info msg=" --hubble-tls-key-file=''" subsys=daemon level=info msg=" --identity-allocation-mode='crd'" subsys=daemon level=info msg=" --identity-change-grace-period='5s'" subsys=daemon level=info msg=" --identity-gc-interval='15m0s'" subsys=daemon level=info msg=" --identity-heartbeat-timeout='30m0s'" subsys=daemon level=info msg=" --identity-restore-grace-period='10m0s'" subsys=daemon level=info msg=" --install-egress-gateway-routes='false'" subsys=daemon level=info msg=" --install-iptables-rules='true'" subsys=daemon level=info msg=" --install-no-conntrack-iptables-rules='false'" subsys=daemon level=info msg=" --ip-allocation-timeout='2m0s'" subsys=daemon level=info msg=" --ip-masq-agent-config-path='/etc/config/ip-masq-agent'" subsys=daemon level=info msg=" --ipam='cluster-pool'" subsys=daemon level=info msg=" --ipam-cilium-node-update-rate='15s'" subsys=daemon level=info msg=" --ipam-multi-pool-pre-allocation='default=8'" subsys=daemon level=info msg=" --ipsec-key-file=''" subsys=daemon level=info msg=" --ipsec-key-rotation-duration='5m0s'" subsys=daemon level=info msg=" --iptables-lock-timeout='5s'" subsys=daemon level=info msg=" --iptables-random-fully='false'" subsys=daemon level=info msg=" --ipv4-native-routing-cidr=''" subsys=daemon level=info msg=" --ipv4-node='auto'" subsys=daemon level=info msg=" --ipv4-pod-subnets=''" subsys=daemon level=info msg=" --ipv4-range='auto'" subsys=daemon level=info msg=" --ipv4-service-loopback-address='169.254.42.1'" subsys=daemon level=info msg=" --ipv4-service-range='auto'" subsys=daemon level=info msg=" --ipv6-cluster-alloc-cidr='f00d::/64'" subsys=daemon level=info msg=" --ipv6-mcast-device=''" subsys=daemon level=info msg=" --ipv6-native-routing-cidr=''" subsys=daemon level=info msg=" --ipv6-node='auto'" subsys=daemon level=info msg=" --ipv6-pod-subnets=''" subsys=daemon level=info msg=" --ipv6-range='auto'" subsys=daemon level=info msg=" --ipv6-service-range='auto'" subsys=daemon level=info msg=" --join-cluster='false'" subsys=daemon level=info msg=" --k8s-api-server=''" subsys=daemon level=info msg=" --k8s-client-burst='10'" subsys=daemon level=info msg=" --k8s-client-qps='5'" subsys=daemon level=info msg=" --k8s-heartbeat-timeout='30s'" subsys=daemon level=info msg=" --k8s-kubeconfig-path=''" subsys=daemon level=info msg=" --k8s-namespace='kube-system'" subsys=daemon level=info msg=" --k8s-require-ipv4-pod-cidr='false'" subsys=daemon level=info msg=" --k8s-require-ipv6-pod-cidr='false'" subsys=daemon level=info msg=" --k8s-service-cache-size='128'" subsys=daemon level=info msg=" --k8s-service-proxy-name=''" subsys=daemon level=info msg=" --k8s-sync-timeout='3m0s'" subsys=daemon level=info msg=" --k8s-watcher-endpoint-selector='metadata.name!=kube-scheduler,metadata.name!=kube-controller-manager,metadata.name!=etcd-operator,metadata.name!=gcp-controller-manager'" subsys=daemon level=info msg=" --keep-config='false'" subsys=daemon level=info msg=" --kube-proxy-replacement='disabled'" subsys=daemon level=info msg=" --kube-proxy-replacement-healthz-bind-address=''" subsys=daemon level=info msg=" --kvstore=''" subsys=daemon level=info msg=" --kvstore-connectivity-timeout='2m0s'" subsys=daemon level=info msg=" --kvstore-lease-ttl='15m0s'" subsys=daemon level=info msg=" --kvstore-max-consecutive-quorum-errors='2'" subsys=daemon level=info msg=" --kvstore-opt=''" subsys=daemon level=info msg=" --kvstore-periodic-sync='5m0s'" subsys=daemon level=info msg=" --l2-announcements-lease-duration='15s'" subsys=daemon level=info msg=" --l2-announcements-renew-deadline='5s'" subsys=daemon level=info msg=" --l2-announcements-retry-period='2s'" subsys=daemon level=info msg=" --l2-pod-announcements-interface=''" subsys=daemon level=info msg=" --label-prefix-file=''" subsys=daemon level=info msg=" --labels=''" subsys=daemon level=info msg=" --lib-dir='/var/lib/cilium'" subsys=daemon level=info msg=" --local-max-addr-scope='252'" subsys=daemon level=info msg=" --local-router-ipv4=''" subsys=daemon level=info msg=" --local-router-ipv6=''" subsys=daemon level=info msg=" --log-driver=''" subsys=daemon level=info msg=" --log-opt=''" subsys=daemon level=info msg=" --log-system-load='false'" subsys=daemon level=info msg=" --max-controller-interval='0'" subsys=daemon level=info msg=" --mesh-auth-enabled='true'" subsys=daemon level=info msg=" --mesh-auth-gc-interval='5m0s'" subsys=daemon level=info msg=" --mesh-auth-mutual-listener-port='0'" subsys=daemon level=info msg=" --mesh-auth-queue-size='1024'" subsys=daemon level=info msg=" --mesh-auth-rotated-identities-queue-size='1024'" subsys=daemon level=info msg=" --mesh-auth-signal-backoff-duration='1s'" subsys=daemon level=info msg=" --mesh-auth-spiffe-trust-domain='spiffe.cilium'" subsys=daemon level=info msg=" --mesh-auth-spire-admin-socket=''" subsys=daemon level=info msg=" --metrics=''" subsys=daemon level=info msg=" --mke-cgroup-mount=''" subsys=daemon level=info msg=" --monitor-aggregation='medium'" subsys=daemon level=info msg=" --monitor-aggregation-flags='all'" subsys=daemon level=info msg=" --monitor-aggregation-interval='5s'" subsys=daemon level=info msg=" --monitor-queue-size='0'" subsys=daemon level=info msg=" --mtu='0'" subsys=daemon level=info msg=" --node-encryption-opt-out-labels='node-role.kubernetes.io/control-plane'" subsys=daemon level=info msg=" --node-port-acceleration='disabled'" subsys=daemon level=info msg=" --node-port-algorithm='random'" subsys=daemon level=info msg=" --node-port-bind-protection='true'" subsys=daemon level=info msg=" --node-port-mode='snat'" subsys=daemon level=info msg=" --node-port-range='30000,32767'" subsys=daemon level=info msg=" --nodes-gc-interval='5m0s'" subsys=daemon level=info msg=" --operator-api-serve-addr='127.0.0.1:9234'" subsys=daemon level=info msg=" --policy-audit-mode='false'" subsys=daemon level=info msg=" --policy-queue-size='100'" subsys=daemon level=info msg=" --policy-trigger-interval='1s'" subsys=daemon level=info msg=" --pprof='false'" subsys=daemon level=info msg=" --pprof-address='localhost'" subsys=daemon level=info msg=" --pprof-port='6060'" subsys=daemon level=info msg=" --preallocate-bpf-maps='false'" subsys=daemon level=info msg=" --prepend-iptables-chains='true'" subsys=daemon level=info msg=" --procfs='/host/proc'" subsys=daemon level=info msg=" --prometheus-serve-addr=':9962'" subsys=daemon level=info msg=" --proxy-connect-timeout='2'" subsys=daemon level=info msg=" --proxy-gid='1337'" subsys=daemon level=info msg=" --proxy-idle-timeout-seconds='60'" subsys=daemon level=info msg=" --proxy-max-connection-duration-seconds='0'" subsys=daemon level=info msg=" --proxy-max-requests-per-connection='0'" subsys=daemon level=info msg=" --proxy-prometheus-port='9964'" subsys=daemon level=info msg=" --read-cni-conf=''" subsys=daemon level=info msg=" --remove-cilium-node-taints='true'" subsys=daemon level=info msg=" --restore='true'" subsys=daemon level=info msg=" --route-metric='0'" subsys=daemon level=info msg=" --routing-mode='tunnel'" subsys=daemon level=info msg=" --set-cilium-is-up-condition='true'" subsys=daemon level=info msg=" --set-cilium-node-taints='true'" subsys=daemon level=info msg=" --sidecar-istio-proxy-image='cilium/istio_proxy'" subsys=daemon level=info msg=" --single-cluster-route='false'" subsys=daemon level=info msg=" --skip-cnp-status-startup-clean='false'" subsys=daemon level=info msg=" --socket-path='/var/run/cilium/cilium.sock'" subsys=daemon level=info msg=" --srv6-encap-mode='reduced'" subsys=daemon level=info msg=" --state-dir='/var/run/cilium'" subsys=daemon level=info msg=" --synchronize-k8s-nodes='true'" subsys=daemon level=info msg=" --tofqdns-dns-reject-response-code='refused'" subsys=daemon level=info msg=" --tofqdns-enable-dns-compression='true'" subsys=daemon level=info msg=" --tofqdns-endpoint-max-ip-per-hostname='50'" subsys=daemon level=info msg=" --tofqdns-idle-connection-grace-period='0s'" subsys=daemon level=info msg=" --tofqdns-max-deferred-connection-deletes='10000'" subsys=daemon level=info msg=" --tofqdns-min-ttl='0'" subsys=daemon level=info msg=" --tofqdns-pre-cache=''" subsys=daemon level=info msg=" --tofqdns-proxy-port='0'" subsys=daemon level=info msg=" --tofqdns-proxy-response-max-delay='100ms'" subsys=daemon level=info msg=" --trace-payloadlen='128'" subsys=daemon level=info msg=" --trace-sock='true'" subsys=daemon level=info msg=" --tunnel=''" subsys=daemon level=info msg=" --tunnel-port='6082'" subsys=daemon level=info msg=" --tunnel-protocol='geneve'" subsys=daemon level=info msg=" --unmanaged-pod-watcher-interval='15'" subsys=daemon level=info msg=" --use-cilium-internal-ip-for-ipsec='false'" subsys=daemon level=info msg=" --version='false'" subsys=daemon level=info msg=" --vlan-bpf-bypass=''" subsys=daemon level=info msg=" --vtep-cidr=''" subsys=daemon level=info msg=" --vtep-endpoint=''" subsys=daemon level=info msg=" --vtep-mac=''" subsys=daemon level=info msg=" --vtep-mask=''" subsys=daemon level=info msg=" --wireguard-encapsulate='false'" subsys=daemon level=info msg=" --write-cni-conf-when-ready='/host/etc/cni/net.d/05-cilium.conflist'" subsys=daemon level=info msg=" _ _ _" subsys=daemon level=info msg=" ___|_| |_|_ _ _____" subsys=daemon level=info msg="| _| | | | | | |" subsys=daemon level=info msg="|___|_|_|_|___|_|_|_|" subsys=daemon level=info msg="Cilium 1.14.8 cf6e022e 2024-03-13T12:23:35-04:00 go version go1.21.8 linux/amd64" subsys=daemon level=info msg="clang (10.0.0) and kernel (5.15.0) versions: OK!" subsys=linux-datapath level=info msg="linking environment: OK!" subsys=linux-datapath level=info msg="Kernel config file not found: if the agent fails to start, check the system requirements at https://docs.cilium.io/en/stable/operations/system_requirements" subsys=probes level=info msg="Detected mounted BPF filesystem at /sys/fs/bpf" subsys=bpf level=info msg="Mounted cgroupv2 filesystem at /run/cilium/cgroupv2" subsys=cgroups level=info msg="Parsing base label prefixes from default label list" subsys=labels-filter level=info msg="Parsing additional label prefixes from user inputs: []" subsys=labels-filter level=info msg="Final label prefixes to be used for identity evaluation:" subsys=labels-filter level=info msg=" - reserved:.*" subsys=labels-filter level=info msg=" - :io\\.kubernetes\\.pod\\.namespace" subsys=labels-filter level=info msg=" - :io\\.cilium\\.k8s\\.namespace\\.labels" subsys=labels-filter level=info msg=" - :app\\.kubernetes\\.io" subsys=labels-filter level=info msg=" - !:io\\.kubernetes" subsys=labels-filter level=info msg=" - !:kubernetes\\.io" subsys=labels-filter level=info msg=" - !:.*beta\\.kubernetes\\.io" subsys=labels-filter level=info msg=" - !:k8s\\.io" subsys=labels-filter level=info msg=" - !:pod-template-generation" subsys=labels-filter level=info msg=" - !:pod-template-hash" subsys=labels-filter level=info msg=" - !:controller-revision-hash" subsys=labels-filter level=info msg=" - !:annotation.*" subsys=labels-filter level=info msg=" - !:etcd_node" subsys=labels-filter level=info msg=Invoked duration="968.575µs" function="pprof.glob..func1 (cell.go:50)" subsys=hive level=info msg=Invoked duration="52.071µs" function="gops.registerGopsHooks (cell.go:38)" subsys=hive level=info msg=Invoked duration=1.020005ms function="metrics.NewRegistry (registry.go:65)" subsys=hive level=info msg=Invoked duration="9.02µs" function="metrics.glob..func1 (cell.go:12)" subsys=hive level=info msg="Spire Delegate API Client is disabled as no socket path is configured" subsys=spire-delegate level=info msg="Mutual authentication handler is disabled as no port is configured" subsys=auth level=info msg=Invoked duration=107.564377ms function="cmd.glob..func4 (daemon_main.go:1607)" subsys=hive level=info msg=Invoked duration="18.421µs" function="gc.registerSignalHandler (cell.go:47)" subsys=hive level=info msg=Invoked duration="22.54µs" function="utime.initUtimeSync (cell.go:29)" subsys=hive level=info msg=Invoked duration="95.653µs" function="agentliveness.newAgentLivenessUpdater (agent_liveness.go:43)" subsys=hive level=info msg=Invoked duration="147.054µs" function="l2responder.NewL2ResponderReconciler (l2responder.go:63)" subsys=hive level=info msg=Invoked duration="149.814µs" function="garp.newGARPProcessor (processor.go:27)" subsys=hive level=info msg=Starting subsys=hive level=info msg="Started gops server" address="127.0.0.1:9890" subsys=gops level=info msg="Start hook executed" duration="657.716µs" function="gops.registerGopsHooks.func1 (cell.go:43)" subsys=hive level=info msg="Start hook executed" duration="2.12µs" function="metrics.NewRegistry.func1 (registry.go:86)" subsys=hive level=info msg="Establishing connection to apiserver" host="https://10.96.0.1:443" subsys=k8s-client level=info msg="Serving prometheus metrics on :9962" subsys=metrics level=info msg="Connected to apiserver" subsys=k8s-client level=info msg="Start hook executed" duration=10.511448ms function="client.(*compositeClientset).onStart" subsys=hive level=info msg="Start hook executed" duration=10.065047ms function="authmap.newAuthMap.func1 (cell.go:27)" subsys=hive level=info msg="Start hook executed" duration="54.902µs" function="configmap.newMap.func1 (cell.go:23)" subsys=hive level=info msg="Start hook executed" duration="65.952µs" function="signalmap.newMap.func1 (cell.go:44)" subsys=hive level=info msg="Start hook executed" duration="269.997µs" function="nodemap.newNodeMap.func1 (cell.go:23)" subsys=hive level=info msg="Start hook executed" duration="91.242µs" function="eventsmap.newEventsMap.func1 (cell.go:35)" subsys=hive level=info msg="Start hook executed" duration="62.072µs" function="*cni.cniConfigManager.Start" subsys=hive level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Wrote CNI configuration file to /host/etc/cni/net.d/05-cilium.conflist" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Start hook executed" duration=49.477882ms function="datapath.newDatapath.func1 (cells.go:113)" subsys=hive level=info msg="Restored 0 node IDs from the BPF map" subsys=linux-datapath level=info msg="Start hook executed" duration="160.514µs" function="datapath.newDatapath.func2 (cells.go:126)" subsys=hive level=info msg="Start hook executed" duration="15.07µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Node].Start" subsys=hive level=info msg="Start hook executed" duration="2.8µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumNode].Start" subsys=hive level=info msg="Using autogenerated IPv4 allocation range" subsys=node v4Prefix=10.132.0.0/16 level=info msg="no local ciliumnode found, will not restore cilium internal ips from k8s" subsys=daemon level=info msg="Start hook executed" duration=103.296904ms function="node.NewLocalNodeStore.func1 (local_node_store.go:76)" subsys=hive level=info msg="Start hook executed" duration="4.901µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Start" subsys=hive level=info msg="Start hook executed" duration=100.862924ms function="*manager.diffStore[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Start" subsys=hive level=info msg="Start hook executed" duration="3.84µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s.Endpoints].Start" subsys=hive level=info msg="Using discoveryv1.EndpointSlice" subsys=k8s level=info msg="Start hook executed" duration=101.221893ms function="*manager.diffStore[*github.com/cilium/cilium/pkg/k8s.Endpoints].Start" subsys=hive level=info msg="Start hook executed" duration="4.84µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Pod].Start" subsys=hive level=info msg="Start hook executed" duration="2.51µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Namespace].Start" subsys=hive level=info msg="Start hook executed" duration="1.76µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumNetworkPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="14.96µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumClusterwideNetworkPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="2.89µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumCIDRGroup].Start" subsys=hive level=info msg="Start hook executed" duration="30.251µs" function="endpointmanager.newDefaultEndpointManager.func1 (cell.go:203)" subsys=hive level=info msg="Start hook executed" duration="25.441µs" function="cmd.newPolicyTrifecta.func1 (policy.go:135)" subsys=hive level=info msg="Start hook executed" duration="76.812µs" function="*manager.manager.Start" subsys=hive level=info msg="Serving cilium node monitor v1.2 API at unix:///var/run/cilium/monitor1_2.sock" subsys=monitor-agent level=info msg="Start hook executed" duration="457.501µs" function="agent.newMonitorAgent.func1 (cell.go:61)" subsys=hive level=info msg="Start hook executed" duration="3.5µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumL2AnnouncementPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="10.14µs" function="*job.group.Start" subsys=hive level=info msg="Start hook executed" duration="441.991µs" function="proxy.newProxy.func1 (cell.go:55)" subsys=hive level=info msg="Envoy: Starting xDS gRPC server listening on /var/run/cilium/envoy/sockets/xds.sock" subsys=envoy-manager level=info msg="Start hook executed" duration=1.263712ms function="signal.provideSignalManager.func1 (cell.go:25)" subsys=hive level=info msg="Datapath signal listener running" subsys=signal level=info msg="Start hook executed" duration="865.611µs" function="auth.registerAuthManager.func1 (cell.go:109)" subsys=hive level=info msg="Start hook executed" duration="3.78µs" function="auth.registerGCJobs.func1 (cell.go:158)" subsys=hive level=info msg="Start hook executed" duration="20.301µs" function="*job.group.Start" subsys=hive level=warning msg="Deprecated value for --kube-proxy-replacement: disabled (use either \"true\", or \"false\")" subsys=daemon level=info msg="Auto-disabling \"enable-node-port\", \"enable-external-ips\", \"bpf-lb-sock\", \"enable-host-port\" features and falling back to \"enable-host-legacy-routing\"" subsys=daemon level=info msg="Inheriting MTU from external network interface" device=ens3 ipAddr=199.204.45.132 mtu=1500 subsys=mtu level=info msg="Removed map pin at /sys/fs/bpf/tc/globals/cilium_ipcache, recreating and re-pinning map cilium_ipcache" file-path=/sys/fs/bpf/tc/globals/cilium_ipcache name=cilium_ipcache subsys=bpf level=info msg="Removed map pin at /sys/fs/bpf/tc/globals/cilium_tunnel_map, recreating and re-pinning map cilium_tunnel_map" file-path=/sys/fs/bpf/tc/globals/cilium_tunnel_map name=cilium_tunnel_map subsys=bpf level=info msg="Restored services from maps" failedServices=0 restoredServices=0 subsys=service level=info msg="Restored backends from maps" failedBackends=0 restoredBackends=0 skippedBackends=0 subsys=service level=info msg="Reading old endpoints..." subsys=daemon level=info msg="No old endpoints found." subsys=daemon level=info msg="Waiting until all Cilium CRDs are available" subsys=k8s level=info msg="All Cilium CRDs have been found and are available" subsys=k8s level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=warning msg="Unable to get node resource" error="ciliumnodes.cilium.io \"instance\" not found" subsys=nodediscovery level=warning msg="Unable to get node resource" error="ciliumnodes.cilium.io \"instance\" not found" subsys=nodediscovery level=info msg="Successfully created CiliumNode resource" subsys=nodediscovery level=warning msg="Unable to create CiliumNode resource, will retry" error="ciliumnodes.cilium.io \"instance\" already exists" subsys=nodediscovery level=info msg="Retrieved node information from cilium node" nodeName=instance subsys=k8s level=warning msg="Waiting for k8s node information" error="required IPv4 PodCIDR not available" subsys=k8s level=info msg="Retrieved node information from cilium node" nodeName=instance subsys=k8s level=info msg="Received own node information from API server" ipAddr.ipv4=199.204.45.132 ipAddr.ipv6="" k8sNodeIP=199.204.45.132 labels="map[beta.kubernetes.io/arch:amd64 beta.kubernetes.io/os:linux kubernetes.io/arch:amd64 kubernetes.io/hostname:instance kubernetes.io/os:linux node-role.kubernetes.io/control-plane: node.kubernetes.io/exclude-from-external-load-balancers:]" nodeName=instance subsys=k8s v4Prefix=10.0.0.0/24 v6Prefix="" level=info msg="k8s mode: Allowing localhost to reach local endpoints" subsys=daemon level=info msg="Detected devices" devices="[]" subsys=linux-datapath level=info msg="Enabling k8s event listener" subsys=k8s-watcher level=info msg="Removing stale endpoint interfaces" subsys=daemon level=info msg="Waiting until local node addressing before starting watchers depending on it" subsys=k8s-watcher level=info msg="Skipping kvstore configuration" subsys=daemon level=info msg="Initializing node addressing" subsys=daemon level=info msg="Initializing cluster-pool IPAM" subsys=ipam v4Prefix=10.0.0.0/24 v6Prefix="" level=info msg="Restoring endpoints..." subsys=daemon level=info msg="Endpoints restored" failed=0 restored=0 subsys=daemon level=info msg="Addressing information:" subsys=daemon level=info msg=" Cluster-Name: default" subsys=daemon level=info msg=" Cluster-ID: 0" subsys=daemon level=info msg=" Local node-name: instance" subsys=daemon level=info msg=" Node-IPv6: " subsys=daemon level=info msg=" External-Node IPv4: 199.204.45.132" subsys=daemon level=info msg=" Internal-Node IPv4: 10.0.0.90" subsys=daemon level=info msg=" IPv4 allocation prefix: 10.0.0.0/24" subsys=daemon level=info msg=" Loopback IPv4: 169.254.42.1" subsys=daemon level=info msg=" Local IPv4 addresses:" subsys=daemon level=info msg=" - 199.204.45.132" subsys=daemon level=info msg=" - 172.17.0.100" subsys=daemon level=info msg=" - 10.96.240.200" subsys=daemon level=info msg="Node updated" clusterName=default nodeName=instance subsys=nodemanager level=info msg="Adding local node to cluster" node="{instance default [{InternalIP 199.204.45.132} {CiliumInternalIP 10.0.0.90}] 10.0.0.0/24 [] [] 10.0.0.130 0 local 0 map[beta.kubernetes.io/arch:amd64 beta.kubernetes.io/os:linux kubernetes.io/arch:amd64 kubernetes.io/hostname:instance kubernetes.io/os:linux node-role.kubernetes.io/control-plane: node.kubernetes.io/exclude-from-external-load-balancers:] map[] 1 }" subsys=nodediscovery level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Waiting until all pre-existing resources have been received" subsys=k8s-watcher level=info msg="Initializing identity allocator" subsys=identity-cache level=info msg="Allocating identities between range" cluster-id=0 max=65535 min=256 subsys=identity-cache level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.forwarding sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.accept_local sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.send_redirects sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.forwarding sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.accept_local sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.send_redirects sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.core.bpf_jit_enable sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.all.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.fib_multipath_use_neigh sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=kernel.unprivileged_bpf_disabled sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=kernel.timer_migration sysParamValue=0 level=info msg="Setting up BPF datapath" bpfClockSource=ktime bpfInsnSet="" subsys=datapath-loader level=info msg="Iptables rules installed" subsys=iptables level=info msg="Adding new proxy port rules for cilium-dns-egress:45207" id=cilium-dns-egress subsys=proxy level=info msg="Iptables proxy rules installed" subsys=iptables level=info msg="Start hook executed" duration=2.439809133s function="cmd.newDaemonPromise.func1 (daemon_main.go:1663)" subsys=hive level=info msg="Starting IP identity watcher" subsys=ipcache level=info msg="Start hook executed" duration="23.22µs" function="utime.initUtimeSync.func1 (cell.go:33)" subsys=hive level=info msg="Start hook executed" duration="18.661µs" function="*job.group.Start" subsys=hive level=info msg="Initializing daemon" subsys=daemon level=info msg="Validating configured node address ranges" subsys=daemon level=info msg="Start hook executed" duration="85.512µs" function="l2respondermap.newMap.func1 (l2_responder_map4.go:44)" subsys=hive level=info msg="Start hook executed" duration="5.33µs" function="*job.group.Start" subsys=hive level=info msg="Starting connection tracking garbage collector" subsys=daemon level=info msg="Initial scan of connection tracking completed" subsys=ct-gc level=info msg="Regenerating restored endpoints" numRestored=0 subsys=daemon level=info msg="Creating host endpoint" subsys=daemon level=info msg="Deleted orphan backends" orphanBackends=0 subsys=service level=info msg="Finished regenerating restored endpoints" regenerated=0 subsys=daemon total=0 level=info msg="New endpoint" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2514 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2514 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Identity of endpoint changed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2514 identity=1 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,reserved:host" ipv4= ipv6= k8sPodName=/ oldIdentity="no identity" subsys=endpoint level=info msg="Launching Cilium health daemon" subsys=daemon level=info msg="Launching Cilium health endpoint" subsys=daemon level=info msg="Started healthz status API server" address="127.0.0.1:9879" subsys=daemon level=info msg="Processing queued endpoint deletion requests from /var/run/cilium/deleteQueue" subsys=daemon level=info msg="processing 0 queued deletion requests" subsys=daemon level=info msg="Initializing Cilium API" subsys=daemon level=info msg="Daemon initialization completed" bootstrapTime=3.407945016s subsys=daemon level=info msg="Hubble server is disabled" subsys=hubble level=info msg="Serving cilium API at unix:///var/run/cilium/cilium.sock" subsys=daemon level=info msg="Compiled new BPF template" BPFCompilationTime=307.278136ms file-path=/var/run/cilium/state/templates/e13c3fa78cd6308474970a656380c7a47056381dce4d320bd74eeb4d4adfc918/bpf_host.o subsys=datapath-loader level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2514 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.226 64da09fd-eb69-48a6-ad70-2eb5f6bfd1e6 default }" containerID=6c718e931c7fdde736cb6a61fa1a57286ef0bafbb246103458df34454172873f datapathConfiguration="&{false false false false false }" interface=lxcdd3c43ab9e2a k8sPodName=kube-system/coredns-7c96b6546b-k7s8m labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6c718e931c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1897 ipv4=10.0.0.226 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-k7s8m subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6c718e931c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1897 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.226 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-k7s8m subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:kube-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=coredns;k8s:io.kubernetes.pod.namespace=kube-system;k8s:k8s-app=kube-dns;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6c718e931c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1897 identity=7454 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.226 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-k7s8m oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=6c718e931c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1897 identity=7454 ipv4=10.0.0.226 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-k7s8m subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.111 6ee439bc-955a-413f-9bd9-5b9f7946ad73 default }" containerID=4d8b6e1fe41bd652a9094f449d8a5a56cafce44e439d46fd5524bde23a01ef28 datapathConfiguration="&{false false false false false }" interface=lxc9a6b0ea786ff k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-lgmfk labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4d8b6e1fe4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=545 ipv4=10.0.0.111 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-lgmfk subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4d8b6e1fe4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=545 identityLabels="k8s:app=certgen,k8s:batch.kubernetes.io/controller-uid=ec3817e7-76fc-4711-bf76-21de61db99eb,k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen,k8s:controller-uid=ec3817e7-76fc-4711-bf76-21de61db99eb,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen,k8s:io.kubernetes.pod.namespace=envoy-gateway-system,k8s:job-name=envoy-gateway-gateway-helm-certgen" ipv4=10.0.0.111 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-lgmfk subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name:envoy-gateway-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=certgen;k8s:batch.kubernetes.io/controller-uid=ec3817e7-76fc-4711-bf76-21de61db99eb;k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen;k8s:controller-uid=ec3817e7-76fc-4711-bf76-21de61db99eb;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system;k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen;k8s:io.kubernetes.pod.namespace=envoy-gateway-system;k8s:job-name=envoy-gateway-gateway-helm-certgen;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4d8b6e1fe4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=545 identity=38150 identityLabels="k8s:app=certgen,k8s:batch.kubernetes.io/controller-uid=ec3817e7-76fc-4711-bf76-21de61db99eb,k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen,k8s:controller-uid=ec3817e7-76fc-4711-bf76-21de61db99eb,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen,k8s:io.kubernetes.pod.namespace=envoy-gateway-system,k8s:job-name=envoy-gateway-gateway-helm-certgen" ipv4=10.0.0.111 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-lgmfk oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4d8b6e1fe4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=545 identity=38150 ipv4=10.0.0.111 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-lgmfk subsys=endpoint level=info msg="New endpoint" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1144 ipv4=10.0.0.130 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1144 identityLabels="reserved:health" ipv4=10.0.0.130 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Identity of endpoint changed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1144 identity=4 identityLabels="reserved:health" ipv4=10.0.0.130 ipv6= k8sPodName=/ oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Serving cilium health API at unix:///var/run/cilium/health.sock" subsys=health-server level=info msg="Compiled new BPF template" BPFCompilationTime=1.127998322s file-path=/var/run/cilium/state/templates/acc13549f68591cfe63acb29cb6f6b2327a92dbaa5c64d194bf350847abcf1d8/bpf_lxc.o subsys=datapath-loader level=info msg="Rewrote endpoint BPF program" containerID=6c718e931c datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1897 identity=7454 ipv4=10.0.0.226 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-k7s8m subsys=endpoint level=info msg="Successful endpoint creation" containerID=6c718e931c datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1897 identity=7454 ipv4=10.0.0.226 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-k7s8m subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=4d8b6e1fe4 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=545 identity=38150 ipv4=10.0.0.111 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-lgmfk subsys=endpoint level=info msg="Successful endpoint creation" containerID=4d8b6e1fe4 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=545 identity=38150 ipv4=10.0.0.111 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-lgmfk subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1144 identity=4 ipv4=10.0.0.130 ipv6= k8sPodName=/ subsys=endpoint level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=4d8b6e1fe4 endpointID=545 k8sNamespace=envoy-gateway-system k8sPodName=envoy-gateway-gateway-helm-certgen-lgmfk subsys=daemon level=info msg="Releasing key" key="[k8s:app=certgen k8s:batch.kubernetes.io/controller-uid=ec3817e7-76fc-4711-bf76-21de61db99eb k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen k8s:controller-uid=ec3817e7-76fc-4711-bf76-21de61db99eb k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen k8s:io.kubernetes.pod.namespace=envoy-gateway-system k8s:job-name=envoy-gateway-gateway-helm-certgen]" subsys=allocator level=info msg="Removed endpoint" containerID=4d8b6e1fe4 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=545 identity=38150 ipv4=10.0.0.111 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-lgmfk subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.113 34f78d7f-2fe9-4335-999b-c642b130ddaa default }" containerID=9b7bf228e6b22f038582509f1733d73ff4275c5255aa66fb96fca3c16cbc558a datapathConfiguration="&{false false false false false }" interface=lxc9034f8d51863 k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-2rrvw labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9b7bf228e6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2482 ipv4=10.0.0.113 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-2rrvw subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9b7bf228e6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2482 identityLabels="k8s:app.kubernetes.io/instance=envoy-gateway,k8s:app.kubernetes.io/name=gateway-helm,k8s:control-plane=envoy-gateway,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway,k8s:io.kubernetes.pod.namespace=envoy-gateway-system" ipv4=10.0.0.113 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-2rrvw subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name:envoy-gateway-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=envoy-gateway;k8s:app.kubernetes.io/name=gateway-helm;k8s:control-plane=envoy-gateway;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system;k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway;k8s:io.kubernetes.pod.namespace=envoy-gateway-system;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9b7bf228e6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2482 identity=48807 identityLabels="k8s:app.kubernetes.io/instance=envoy-gateway,k8s:app.kubernetes.io/name=gateway-helm,k8s:control-plane=envoy-gateway,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway,k8s:io.kubernetes.pod.namespace=envoy-gateway-system" ipv4=10.0.0.113 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-2rrvw oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9b7bf228e6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2482 identity=48807 ipv4=10.0.0.113 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-2rrvw subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=9b7bf228e6 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2482 identity=48807 ipv4=10.0.0.113 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-2rrvw subsys=endpoint level=info msg="Successful endpoint creation" containerID=9b7bf228e6 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2482 identity=48807 ipv4=10.0.0.113 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-2rrvw subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2514 identity=1 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,k8s:openstack-compute-node=enabled,k8s:openstack-control-plane=enabled,k8s:openvswitch=enabled,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_hostns_02514 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_hostns_02514 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_hostns_02514 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_hostns_02514:pending" subsys=bpf level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_netdev_00005 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_netdev_00005 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005:pending" subsys=bpf level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2514 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.59 c5c6389e-7b27-44d3-a098-a914fa9b50a7 default }" containerID=274c9692ff92788ed29d96750610e2778d7c59c354a6a2a3c71900684df3ce9e datapathConfiguration="&{false false false false false }" interface=lxc5b4e03d1beea k8sPodName=kube-system/coredns-67659f764b-pplmh labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=274c9692ff datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=891 ipv4=10.0.0.59 ipv6= k8sPodName=kube-system/coredns-67659f764b-pplmh subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=274c9692ff datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=891 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.59 ipv6= k8sPodName=kube-system/coredns-67659f764b-pplmh subsys=endpoint level=info msg="Identity of endpoint changed" containerID=274c9692ff datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=891 identity=7454 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.59 ipv6= k8sPodName=kube-system/coredns-67659f764b-pplmh oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=274c9692ff datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=891 identity=7454 ipv4=10.0.0.59 ipv6= k8sPodName=kube-system/coredns-67659f764b-pplmh subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=274c9692ff datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=891 identity=7454 ipv4=10.0.0.59 ipv6= k8sPodName=kube-system/coredns-67659f764b-pplmh subsys=endpoint level=info msg="Successful endpoint creation" containerID=274c9692ff datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=891 identity=7454 ipv4=10.0.0.59 ipv6= k8sPodName=kube-system/coredns-67659f764b-pplmh subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.119 5f779cf8-3885-45a1-aae6-3f6c26412ece default }" containerID=047f63b220758472f97631383ff44586fe7a902454129cb199d04829c3df5215 datapathConfiguration="&{false false false false false }" interface=lxc5bd700c77c24 k8sPodName=kube-system/coredns-67659f764b-b46mz labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=047f63b220 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2598 ipv4=10.0.0.119 ipv6= k8sPodName=kube-system/coredns-67659f764b-b46mz subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=047f63b220 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2598 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.119 ipv6= k8sPodName=kube-system/coredns-67659f764b-b46mz subsys=endpoint level=info msg="Identity of endpoint changed" containerID=047f63b220 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2598 identity=7454 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.119 ipv6= k8sPodName=kube-system/coredns-67659f764b-b46mz oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=047f63b220 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2598 identity=7454 ipv4=10.0.0.119 ipv6= k8sPodName=kube-system/coredns-67659f764b-b46mz subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=047f63b220 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2598 identity=7454 ipv4=10.0.0.119 ipv6= k8sPodName=kube-system/coredns-67659f764b-b46mz subsys=endpoint level=info msg="Successful endpoint creation" containerID=047f63b220 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2598 identity=7454 ipv4=10.0.0.119 ipv6= k8sPodName=kube-system/coredns-67659f764b-b46mz subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.76 a48552a8-a498-4eea-b3db-dc1679cfd09a default }" containerID=1241f8fc30dec9265dc9758bc23840a1f826b71a232a08c978a567923006f524 datapathConfiguration="&{false false false false false }" interface=lxcd870e29945f6 k8sPodName=local-path-storage/local-path-provisioner-679c578f5-8nklk labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1241f8fc30 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2538 ipv4=10.0.0.76 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-8nklk subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1241f8fc30 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2538 identityLabels="k8s:app.kubernetes.io/instance=local-path-provisioner,k8s:app.kubernetes.io/name=local-path-provisioner,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.76 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-8nklk subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:local-path-storage k8s:io.cilium.k8s.namespace.labels.name:local-path-storage]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=1241f8fc30 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2538 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.76 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-8nklk line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=local-path-provisioner;k8s:app.kubernetes.io/name=local-path-provisioner;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1241f8fc30 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2538 identity=28471 identityLabels="k8s:app.kubernetes.io/instance=local-path-provisioner,k8s:app.kubernetes.io/name=local-path-provisioner,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.76 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-8nklk oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1241f8fc30 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2538 identity=28471 ipv4=10.0.0.76 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-8nklk subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=1241f8fc30 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2538 identity=28471 ipv4=10.0.0.76 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-8nklk subsys=endpoint level=info msg="Successful endpoint creation" containerID=1241f8fc30 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2538 identity=28471 ipv4=10.0.0.76 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-8nklk subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=6c718e931c endpointID=1897 k8sNamespace=kube-system k8sPodName=coredns-7c96b6546b-k7s8m subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=coredns k8s:io.kubernetes.pod.namespace=kube-system k8s:k8s-app=kube-dns]" subsys=allocator level=info msg="Removed endpoint" containerID=6c718e931c datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1897 identity=7454 ipv4=10.0.0.226 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-k7s8m subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.198 16bb8c91-acf8-4b9d-9ade-9546aa1fbfb2 default }" containerID=b08783daaf5c29f5594e9d1474a96376a4879b274bada7848c01afa5ecc64050 datapathConfiguration="&{false false false false false }" interface=lxc1c728c666f70 k8sPodName=cert-manager/cert-manager-webhook-548949fc64-bgqg9 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b08783daaf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1009 ipv4=10.0.0.198 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-bgqg9 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b08783daaf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1009 identityLabels="k8s:app.kubernetes.io/component=webhook,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=webhook,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=webhook,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.198 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-bgqg9 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=b08783daaf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1009 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.198 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-bgqg9 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=webhook;k8s:app.kubernetes.io/component=webhook;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=webhook;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b08783daaf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1009 identity=53451 identityLabels="k8s:app.kubernetes.io/component=webhook,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=webhook,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=webhook,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.198 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-bgqg9 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b08783daaf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1009 identity=53451 ipv4=10.0.0.198 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-bgqg9 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.190 cee19819-f3de-441b-aa5e-f29d75452ff0 default }" containerID=c1530beb21a4485bf1359d81fc16aa93bf9d90bb7837184c3f6ae395d1228c58 datapathConfiguration="&{false false false false false }" interface=lxc204171daa333 k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-s8bf9 labels="[]" subsys=daemon sync-build=true level=info msg="Create endpoint request" addressing="&{10.0.0.81 76df0d52-412a-44c5-9ecf-18113b1c9eb8 default }" containerID=6b93049c8bdebaf80491278eaf4093c357887cae9d86c6e2eac3c3fe06d0d41e datapathConfiguration="&{false false false false false }" interface=lxcb99684598960 k8sPodName=cert-manager/cert-manager-75c4c745bc-nrd74 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c1530beb21 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3945 ipv4=10.0.0.190 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-s8bf9 subsys=endpoint level=info msg="New endpoint" containerID=6b93049c8b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1759 ipv4=10.0.0.81 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-nrd74 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c1530beb21 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3945 identityLabels="k8s:app.kubernetes.io/component=cainjector,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cainjector,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cainjector,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.190 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-s8bf9 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Resolving identity labels (blocking)" containerID=6b93049c8b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1759 identityLabels="k8s:app.kubernetes.io/component=controller,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cert-manager,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cert-manager,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.81 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-nrd74 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=cainjector;k8s:app.kubernetes.io/component=cainjector;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=cainjector;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c1530beb21 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3945 identity=52672 identityLabels="k8s:app.kubernetes.io/component=cainjector,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cainjector,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cainjector,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.190 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-s8bf9 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c1530beb21 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3945 identity=52672 ipv4=10.0.0.190 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-s8bf9 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=cert-manager;k8s:app.kubernetes.io/component=controller;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=cert-manager;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6b93049c8b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1759 identity=368 identityLabels="k8s:app.kubernetes.io/component=controller,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cert-manager,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cert-manager,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.81 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-nrd74 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6b93049c8b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1759 identity=368 ipv4=10.0.0.81 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-nrd74 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b08783daaf datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1009 identity=53451 ipv4=10.0.0.198 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-bgqg9 subsys=endpoint level=info msg="Successful endpoint creation" containerID=b08783daaf datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1009 identity=53451 ipv4=10.0.0.198 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-bgqg9 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=c1530beb21 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3945 identity=52672 ipv4=10.0.0.190 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-s8bf9 subsys=endpoint level=info msg="Successful endpoint creation" containerID=c1530beb21 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3945 identity=52672 ipv4=10.0.0.190 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-s8bf9 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=6b93049c8b datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1759 identity=368 ipv4=10.0.0.81 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-nrd74 subsys=endpoint level=info msg="Successful endpoint creation" containerID=6b93049c8b datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1759 identity=368 ipv4=10.0.0.81 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-nrd74 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.203 f1e8efa3-5710-404e-a9a4-4a5d967b1af3 default }" containerID=31c0d49aaef3fd654dab5d8a15a5fb8a45f99acb5844597e82034bf2ed1df69e datapathConfiguration="&{false false false false false }" interface=lxc210f2c49c2df k8sPodName=cert-manager/cert-manager-startupapicheck-8w46t labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=31c0d49aae datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1333 ipv4=10.0.0.203 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-8w46t subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=31c0d49aae datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1333 identityLabels="k8s:app.kubernetes.io/component=startupapicheck,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=startupapicheck,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=startupapicheck,k8s:batch.kubernetes.io/controller-uid=3646eb6f-0f0f-4785-a632-7e7c37ef9599,k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck,k8s:controller-uid=3646eb6f-0f0f-4785-a632-7e7c37ef9599,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck,k8s:io.kubernetes.pod.namespace=cert-manager,k8s:job-name=cert-manager-startupapicheck" ipv4=10.0.0.203 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-8w46t subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=startupapicheck;k8s:app.kubernetes.io/component=startupapicheck;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=startupapicheck;k8s:app.kubernetes.io/version=v1.11.5;k8s:batch.kubernetes.io/controller-uid=3646eb6f-0f0f-4785-a632-7e7c37ef9599;k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck;k8s:controller-uid=3646eb6f-0f0f-4785-a632-7e7c37ef9599;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck;k8s:io.kubernetes.pod.namespace=cert-manager;k8s:job-name=cert-manager-startupapicheck;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=31c0d49aae datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1333 identity=13106 identityLabels="k8s:app.kubernetes.io/component=startupapicheck,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=startupapicheck,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=startupapicheck,k8s:batch.kubernetes.io/controller-uid=3646eb6f-0f0f-4785-a632-7e7c37ef9599,k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck,k8s:controller-uid=3646eb6f-0f0f-4785-a632-7e7c37ef9599,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck,k8s:io.kubernetes.pod.namespace=cert-manager,k8s:job-name=cert-manager-startupapicheck" ipv4=10.0.0.203 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-8w46t oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=31c0d49aae datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1333 identity=13106 ipv4=10.0.0.203 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-8w46t subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=31c0d49aae datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1333 identity=13106 ipv4=10.0.0.203 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-8w46t subsys=endpoint level=info msg="Successful endpoint creation" containerID=31c0d49aae datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1333 identity=13106 ipv4=10.0.0.203 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-8w46t subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=31c0d49aae endpointID=1333 k8sNamespace=cert-manager k8sPodName=cert-manager-startupapicheck-8w46t subsys=daemon level=info msg="Releasing key" key="[k8s:app=startupapicheck k8s:app.kubernetes.io/component=startupapicheck k8s:app.kubernetes.io/instance=cert-manager k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=startupapicheck k8s:app.kubernetes.io/version=v1.11.5 k8s:batch.kubernetes.io/controller-uid=3646eb6f-0f0f-4785-a632-7e7c37ef9599 k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck k8s:controller-uid=3646eb6f-0f0f-4785-a632-7e7c37ef9599 k8s:helm.sh/chart=cert-manager-v1.11.5 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager k8s:io.cilium.k8s.namespace.labels.name=cert-manager k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck k8s:io.kubernetes.pod.namespace=cert-manager k8s:job-name=cert-manager-startupapicheck]" subsys=allocator level=info msg="Removed endpoint" containerID=31c0d49aae datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1333 identity=13106 ipv4=10.0.0.203 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-8w46t subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.158 ccc0608a-180a-4126-9b96-9efe3a382b3d default }" containerID=e8be53334b6e1245246b919641bb00c81fe7ada7555e0dc9645cd522894e09b2 datapathConfiguration="&{false false false false false }" interface=lxc7ebc20fc838d k8sPodName=ingress-nginx/ingress-nginx-admission-create-gmcqj labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e8be53334b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=165 ipv4=10.0.0.158 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-gmcqj subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e8be53334b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=165 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=cf71ed62-55cb-4384-841f-82d90919047e,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create,k8s:controller-uid=cf71ed62-55cb-4384-841f-82d90919047e,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-create" ipv4=10.0.0.158 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-gmcqj subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=admission-webhook;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:batch.kubernetes.io/controller-uid=cf71ed62-55cb-4384-841f-82d90919047e;k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create;k8s:controller-uid=cf71ed62-55cb-4384-841f-82d90919047e;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission;k8s:io.kubernetes.pod.namespace=ingress-nginx;k8s:job-name=ingress-nginx-admission-create;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=e8be53334b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=165 identity=29700 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=cf71ed62-55cb-4384-841f-82d90919047e,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create,k8s:controller-uid=cf71ed62-55cb-4384-841f-82d90919047e,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-create" ipv4=10.0.0.158 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-gmcqj oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e8be53334b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=165 identity=29700 ipv4=10.0.0.158 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-gmcqj subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e8be53334b datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=165 identity=29700 ipv4=10.0.0.158 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-gmcqj subsys=endpoint level=info msg="Successful endpoint creation" containerID=e8be53334b datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=165 identity=29700 ipv4=10.0.0.158 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-gmcqj subsys=daemon level=info msg="Delete endpoint request" containerID=e8be53334b endpointID=165 k8sNamespace=ingress-nginx k8sPodName=ingress-nginx-admission-create-gmcqj subsys=daemon level=info msg="Releasing key" key="[k8s:app.kubernetes.io/component=admission-webhook k8s:app.kubernetes.io/instance=ingress-nginx k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=ingress-nginx k8s:app.kubernetes.io/part-of=ingress-nginx k8s:app.kubernetes.io/version=1.12.1 k8s:batch.kubernetes.io/controller-uid=cf71ed62-55cb-4384-841f-82d90919047e k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create k8s:controller-uid=cf71ed62-55cb-4384-841f-82d90919047e k8s:helm.sh/chart=ingress-nginx-4.12.1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission k8s:io.kubernetes.pod.namespace=ingress-nginx k8s:job-name=ingress-nginx-admission-create]" subsys=allocator level=info msg="Removed endpoint" containerID=e8be53334b datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=165 identity=29700 ipv4=10.0.0.158 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-gmcqj subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.94 9257a4ae-ad35-4b4f-9965-0672562f0f09 default }" containerID=4ddad3e2dbe98e5a5557b4156fb22f73116a7e32868453cb1804966c1d00e6f2 datapathConfiguration="&{false false false false false }" interface=lxcb0c8155b1bfd k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-bnl5m labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4ddad3e2db datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2070 ipv4=10.0.0.94 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-bnl5m subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4ddad3e2db datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2070 identityLabels="k8s:app.kubernetes.io/component=default-backend,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend,k8s:io.kubernetes.pod.namespace=ingress-nginx" ipv4=10.0.0.94 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-bnl5m subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=default-backend;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend;k8s:io.kubernetes.pod.namespace=ingress-nginx;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4ddad3e2db datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2070 identity=38449 identityLabels="k8s:app.kubernetes.io/component=default-backend,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend,k8s:io.kubernetes.pod.namespace=ingress-nginx" ipv4=10.0.0.94 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-bnl5m oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4ddad3e2db datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2070 identity=38449 ipv4=10.0.0.94 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-bnl5m subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=4ddad3e2db datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2070 identity=38449 ipv4=10.0.0.94 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-bnl5m subsys=endpoint level=info msg="Successful endpoint creation" containerID=4ddad3e2db datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2070 identity=38449 ipv4=10.0.0.94 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-bnl5m subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.78 8339f483-1474-46c8-a16c-1511bd1cbb95 default }" containerID=528824ae0802184928614648eb89b417593ee6f880248484e176723803c95b10 datapathConfiguration="&{false false false false false }" interface=lxc146744284a18 k8sPodName=ingress-nginx/ingress-nginx-admission-patch-drnr6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=528824ae08 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=312 ipv4=10.0.0.78 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-drnr6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=528824ae08 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=312 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=73c440f2-e21b-4800-baab-cb3fdaceed58,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch,k8s:controller-uid=73c440f2-e21b-4800-baab-cb3fdaceed58,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-patch" ipv4=10.0.0.78 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-drnr6 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=admission-webhook;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:batch.kubernetes.io/controller-uid=73c440f2-e21b-4800-baab-cb3fdaceed58;k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch;k8s:controller-uid=73c440f2-e21b-4800-baab-cb3fdaceed58;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission;k8s:io.kubernetes.pod.namespace=ingress-nginx;k8s:job-name=ingress-nginx-admission-patch;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=528824ae08 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=312 identity=24423 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=73c440f2-e21b-4800-baab-cb3fdaceed58,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch,k8s:controller-uid=73c440f2-e21b-4800-baab-cb3fdaceed58,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-patch" ipv4=10.0.0.78 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-drnr6 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=528824ae08 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=312 identity=24423 ipv4=10.0.0.78 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-drnr6 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=528824ae08 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=312 identity=24423 ipv4=10.0.0.78 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-drnr6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=528824ae08 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=312 identity=24423 ipv4=10.0.0.78 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-drnr6 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=528824ae08 endpointID=312 k8sNamespace=ingress-nginx k8sPodName=ingress-nginx-admission-patch-drnr6 subsys=daemon level=info msg="Releasing key" key="[k8s:app.kubernetes.io/component=admission-webhook k8s:app.kubernetes.io/instance=ingress-nginx k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=ingress-nginx k8s:app.kubernetes.io/part-of=ingress-nginx k8s:app.kubernetes.io/version=1.12.1 k8s:batch.kubernetes.io/controller-uid=73c440f2-e21b-4800-baab-cb3fdaceed58 k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch k8s:controller-uid=73c440f2-e21b-4800-baab-cb3fdaceed58 k8s:helm.sh/chart=ingress-nginx-4.12.1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission k8s:io.kubernetes.pod.namespace=ingress-nginx k8s:job-name=ingress-nginx-admission-patch]" subsys=allocator level=info msg="Removed endpoint" containerID=528824ae08 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=312 identity=24423 ipv4=10.0.0.78 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-drnr6 subsys=endpoint level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"rabbitmq-operator\",\"k8s:app.kubernetes.io/instance\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/name\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/part-of\":\"rabbitmq\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=rabbitmq-cluster-operator k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=3dc5f6e5-368f-4336-83cc-93fdbcc40416] Description:}]" policyAddRequest=141457f9-4b2a-4d2f-a5c0-f71eaee4a441 subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=141457f9-4b2a-4d2f-a5c0-f71eaee4a441 policyRevision=2 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=rabbitmq-cluster-operator subsys=k8s-watcher level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"messaging-topology-operator\",\"k8s:app.kubernetes.io/instance\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/name\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/part-of\":\"rabbitmq\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:9443 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=rabbitmq-messaging-topology-operator k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=2b34aea0-2588-46f9-b3cc-60de058ae5f0] Description:}]" policyAddRequest=2675e535-34a3-4952-aca9-c945b13f4791 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=rabbitmq-messaging-topology-operator subsys=k8s-watcher level=info msg="Policy imported via API, recalculating..." policyAddRequest=2675e535-34a3-4952-aca9-c945b13f4791 policyRevision=3 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.82 741043a5-63ed-4f41-91aa-19a2be942379 default }" containerID=35819b1ec30f2c67ce1d4ac387aa1ac31fd98857365e52bf1634fd2916130859 datapathConfiguration="&{false false false false false }" interface=lxc4cee2016f9b3 k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-nrw42 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=35819b1ec3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1942 ipv4=10.0.0.82 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-nrw42 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=35819b1ec3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1942 identityLabels="k8s:app.kubernetes.io/component=rabbitmq-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=2.16.1,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.82 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-nrw42 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=35819b1ec3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1942 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.82 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-nrw42 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq-operator;k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=rabbitmq-cluster-operator;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:app.kubernetes.io/version=2.16.1;k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=35819b1ec3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1942 identity=6024 identityLabels="k8s:app.kubernetes.io/component=rabbitmq-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=2.16.1,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.82 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-nrw42 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=35819b1ec3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1942 identity=6024 ipv4=10.0.0.82 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-nrw42 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=35819b1ec3 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=1942 identity=6024 ipv4=10.0.0.82 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-nrw42 subsys=endpoint level=info msg="Successful endpoint creation" containerID=35819b1ec3 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=1942 identity=6024 ipv4=10.0.0.82 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-nrw42 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.48 25b6c859-4206-43cb-a942-faa03cb0cf9f default }" containerID=b7d84b88a77b9cc3a3764768720b25d8239d0576f1d8a7b9ac4e0a27b18d37bf datapathConfiguration="&{false false false false false }" interface=lxc0c9503577f9b k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-jd9jp labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b7d84b88a7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2605 ipv4=10.0.0.48 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-jd9jp subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b7d84b88a7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2605 identityLabels="k8s:app.kubernetes.io/component=messaging-topology-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=1.17.4,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.48 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-jd9jp subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=messaging-topology-operator;k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=rabbitmq-cluster-operator;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:app.kubernetes.io/version=1.17.4;k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b7d84b88a7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2605 identity=59436 identityLabels="k8s:app.kubernetes.io/component=messaging-topology-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=1.17.4,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.48 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-jd9jp oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b7d84b88a7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2605 identity=59436 ipv4=10.0.0.48 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-jd9jp subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b7d84b88a7 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=2605 identity=59436 ipv4=10.0.0.48 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-jd9jp subsys=endpoint level=info msg="Successful endpoint creation" containerID=b7d84b88a7 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=2605 identity=59436 ipv4=10.0.0.48 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-jd9jp subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.120 86f71176-66d2-4902-8a60-072892e33cd3 default }" containerID=18cce867d4eccbe059a00b9e7b1a2e248b52751d40fb8a3962ddccfbca31bfdd datapathConfiguration="&{false false false false false }" interface=lxcd6a4311b7f30 k8sPodName=openstack/pxc-operator-69cb5bbdb9-h4pxf labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=18cce867d4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1346 ipv4=10.0.0.120 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-h4pxf subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=18cce867d4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1346 identityLabels="k8s:app.kubernetes.io/component=operator,k8s:app.kubernetes.io/instance=pxc-operator,k8s:app.kubernetes.io/name=pxc-operator,k8s:app.kubernetes.io/part-of=pxc-operator,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.120 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-h4pxf subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=18cce867d4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1346 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.120 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-h4pxf line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=operator;k8s:app.kubernetes.io/instance=pxc-operator;k8s:app.kubernetes.io/name=pxc-operator;k8s:app.kubernetes.io/part-of=pxc-operator;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=18cce867d4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1346 identity=27328 identityLabels="k8s:app.kubernetes.io/component=operator,k8s:app.kubernetes.io/instance=pxc-operator,k8s:app.kubernetes.io/name=pxc-operator,k8s:app.kubernetes.io/part-of=pxc-operator,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.120 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-h4pxf oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=18cce867d4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1346 identity=27328 ipv4=10.0.0.120 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-h4pxf subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=18cce867d4 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=1346 identity=27328 ipv4=10.0.0.120 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-h4pxf subsys=endpoint level=info msg="Successful endpoint creation" containerID=18cce867d4 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=1346 identity=27328 ipv4=10.0.0.120 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-h4pxf subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.11 2a4f9694-4609-4f41-8c15-69fa20ced4e8 default }" containerID=500ed12e084edd225da37236fe0d7c80f6449815eb325ec584017426be28b0ae datapathConfiguration="&{false false false false false }" interface=lxcb67b5dbf9006 k8sPodName=openstack/percona-xtradb-haproxy-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=500ed12e08 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1855 ipv4=10.0.0.11 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=500ed12e08 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1855 identityLabels="k8s:app.kubernetes.io/component=haproxy,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0" ipv4=10.0.0.11 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=haproxy;k8s:app.kubernetes.io/instance=percona-xtradb;k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator;k8s:app.kubernetes.io/name=percona-xtradb-cluster;k8s:app.kubernetes.io/part-of=percona-xtradb-cluster;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=500ed12e08 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1855 identity=42436 identityLabels="k8s:app.kubernetes.io/component=haproxy,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0" ipv4=10.0.0.11 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=500ed12e08 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1855 identity=42436 ipv4=10.0.0.11 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=500ed12e08 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=1855 identity=42436 ipv4=10.0.0.11 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=500ed12e08 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=1855 identity=42436 ipv4=10.0.0.11 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.121 62d1b821-b7dd-4ba3-8394-cc00a4b13ffc default }" containerID=36fd6af118e9a3306feebe4d231ec333bfcda3c162acace3a63e912143144784 datapathConfiguration="&{false false false false false }" interface=lxc3798078fb2c2 k8sPodName=local-path-storage/helper-pod-create-pvc-a3093891-e327-43bf-a32f-24c50516f064 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=36fd6af118 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2152 ipv4=10.0.0.121 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a3093891-e327-43bf-a32f-24c50516f064 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=36fd6af118 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2152 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.121 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a3093891-e327-43bf-a32f-24c50516f064 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:local-path-storage k8s:io.cilium.k8s.namespace.labels.name:local-path-storage]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=36fd6af118 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2152 identity=302 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.121 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a3093891-e327-43bf-a32f-24c50516f064 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=36fd6af118 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2152 identity=302 ipv4=10.0.0.121 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a3093891-e327-43bf-a32f-24c50516f064 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=36fd6af118 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=2152 identity=302 ipv4=10.0.0.121 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a3093891-e327-43bf-a32f-24c50516f064 subsys=endpoint level=info msg="Successful endpoint creation" containerID=36fd6af118 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=2152 identity=302 ipv4=10.0.0.121 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a3093891-e327-43bf-a32f-24c50516f064 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=36fd6af118 endpointID=2152 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-a3093891-e327-43bf-a32f-24c50516f064 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=36fd6af118 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=2152 identity=302 ipv4=10.0.0.121 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a3093891-e327-43bf-a32f-24c50516f064 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.75 e0f0caa8-d111-43b3-a062-ba8b5e9edbf6 default }" containerID=ae88bb40050427b3d362340e181a8c225c2d7299ebdb7ae68abde97130ddbea7 datapathConfiguration="&{false false false false false }" interface=lxcb3091b3b6f82 k8sPodName=openstack/percona-xtradb-pxc-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ae88bb4005 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=520 ipv4=10.0.0.75 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ae88bb4005 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=520 identityLabels="k8s:app.kubernetes.io/component=pxc,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0" ipv4=10.0.0.75 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=pxc;k8s:app.kubernetes.io/instance=percona-xtradb;k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator;k8s:app.kubernetes.io/name=percona-xtradb-cluster;k8s:app.kubernetes.io/part-of=percona-xtradb-cluster;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ae88bb4005 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=520 identity=2532 identityLabels="k8s:app.kubernetes.io/component=pxc,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0" ipv4=10.0.0.75 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=ae88bb4005 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=520 identity=2532 ipv4=10.0.0.75 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ae88bb4005 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=520 identity=2532 ipv4=10.0.0.75 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=ae88bb4005 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=520 identity=2532 ipv4=10.0.0.75 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/instance\":\"valkey\",\"k8s:app.kubernetes.io/name\":\"valkey\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:6379 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:} {Ports:[{Port:26379 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:} {IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:9121 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=valkey k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=88aa85ea-e41c-4be2-8311-1c78f8fff0ad] Description:}]" policyAddRequest=45a339b5-451f-4986-8845-f09e821def2f subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=45a339b5-451f-4986-8845-f09e821def2f policyRevision=4 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=valkey subsys=k8s-watcher level=info msg="Create endpoint request" addressing="&{10.0.0.77 952a33ca-172c-4521-90b5-f55e43410e67 default }" containerID=15d71b39a81d8f09a7cef628892445f9fc2e0290c4eabc1e8aa889456e1db7cf datapathConfiguration="&{false false false false false }" interface=lxcafab9c9ec6b9 k8sPodName=local-path-storage/helper-pod-create-pvc-3d41c8ef-9530-44e7-aa7f-203c8ce3203a labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=15d71b39a8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=763 ipv4=10.0.0.77 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-3d41c8ef-9530-44e7-aa7f-203c8ce3203a subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=15d71b39a8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=763 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.77 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-3d41c8ef-9530-44e7-aa7f-203c8ce3203a subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=15d71b39a8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=763 identity=302 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.77 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-3d41c8ef-9530-44e7-aa7f-203c8ce3203a oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=15d71b39a8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=763 identity=302 ipv4=10.0.0.77 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-3d41c8ef-9530-44e7-aa7f-203c8ce3203a subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=15d71b39a8 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=763 identity=302 ipv4=10.0.0.77 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-3d41c8ef-9530-44e7-aa7f-203c8ce3203a subsys=endpoint level=info msg="Successful endpoint creation" containerID=15d71b39a8 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=763 identity=302 ipv4=10.0.0.77 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-3d41c8ef-9530-44e7-aa7f-203c8ce3203a subsys=daemon level=info msg="Delete endpoint request" containerID=15d71b39a8 endpointID=763 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-3d41c8ef-9530-44e7-aa7f-203c8ce3203a subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=15d71b39a8 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=763 identity=302 ipv4=10.0.0.77 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-3d41c8ef-9530-44e7-aa7f-203c8ce3203a subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.35 f378266f-adaa-488e-8c00-353843b9f2bd default }" containerID=913fee8166e0b68f9d3ed4953e4b659e7b7e9ac87e0aa2ce8eec0807cc0d7785 datapathConfiguration="&{false false false false false }" interface=lxcb2c143f85b18 k8sPodName=openstack/valkey-node-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=913fee8166 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=349 ipv4=10.0.0.35 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=913fee8166 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=349 identityLabels="k8s:app.kubernetes.io/component=node,k8s:app.kubernetes.io/instance=valkey,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=valkey,k8s:app.kubernetes.io/version=8.0.2,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=valkey-2.4.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=valkey,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=valkey-node-0" ipv4=10.0.0.35 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=913fee8166 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=349 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.35 ipv6= k8sPodName=openstack/valkey-node-0 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=node;k8s:app.kubernetes.io/instance=valkey;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=valkey;k8s:app.kubernetes.io/version=8.0.2;k8s:apps.kubernetes.io/pod-index=0;k8s:helm.sh/chart=valkey-2.4.6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=valkey;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=valkey-node-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=913fee8166 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=349 identity=18805 identityLabels="k8s:app.kubernetes.io/component=node,k8s:app.kubernetes.io/instance=valkey,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=valkey,k8s:app.kubernetes.io/version=8.0.2,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=valkey-2.4.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=valkey,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=valkey-node-0" ipv4=10.0.0.35 ipv6= k8sPodName=openstack/valkey-node-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=913fee8166 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=349 identity=18805 ipv4=10.0.0.35 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=913fee8166 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=349 identity=18805 ipv4=10.0.0.35 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=913fee8166 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=349 identity=18805 ipv4=10.0.0.35 ipv6= k8sPodName=openstack/valkey-node-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"keycloak\",\"k8s:app.kubernetes.io/instance\":\"keycloak\",\"k8s:app.kubernetes.io/name\":\"keycloak\",\"k8s:io.kubernetes.pod.namespace\":\"auth-system\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:7800 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:} {Ports:[{Port:8080 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=keycloak k8s:io.cilium.k8s.policy.namespace=auth-system k8s:io.cilium.k8s.policy.uid=6a8f81f1-1dc5-4b42-a64b-9abd4288007f] Description:}]" policyAddRequest=a31fa110-1457-4d36-aeb9-adfe857bec84 subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=a31fa110-1457-4d36-aeb9-adfe857bec84 policyRevision=5 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=keycloak subsys=k8s-watcher level=info msg="Create endpoint request" addressing="&{10.0.0.37 16225f40-96bb-43fc-ac31-133c152b9d9e default }" containerID=1346e10712bb3e2104285261eb882564bb414a23bb66a3945271fa3415fab939 datapathConfiguration="&{false false false false false }" interface=lxc307257e0eb6f k8sPodName=auth-system/keycloak-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1346e10712 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2215 ipv4=10.0.0.37 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1346e10712 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2215 identityLabels="k8s:app.kubernetes.io/component=keycloak,k8s:app.kubernetes.io/instance=keycloak,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=keycloak,k8s:app.kubernetes.io/version=24.0.5,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=keycloak-21.4.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system,k8s:io.cilium.k8s.namespace.labels.name=auth-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keycloak,k8s:io.kubernetes.pod.namespace=auth-system,k8s:statefulset.kubernetes.io/pod-name=keycloak-0" ipv4=10.0.0.37 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:auth-system k8s:io.cilium.k8s.namespace.labels.name:auth-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=keycloak;k8s:app.kubernetes.io/instance=keycloak;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=keycloak;k8s:app.kubernetes.io/version=24.0.5;k8s:apps.kubernetes.io/pod-index=0;k8s:helm.sh/chart=keycloak-21.4.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system;k8s:io.cilium.k8s.namespace.labels.name=auth-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keycloak;k8s:io.kubernetes.pod.namespace=auth-system;k8s:statefulset.kubernetes.io/pod-name=keycloak-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1346e10712 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2215 identity=33983 identityLabels="k8s:app.kubernetes.io/component=keycloak,k8s:app.kubernetes.io/instance=keycloak,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=keycloak,k8s:app.kubernetes.io/version=24.0.5,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=keycloak-21.4.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system,k8s:io.cilium.k8s.namespace.labels.name=auth-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keycloak,k8s:io.kubernetes.pod.namespace=auth-system,k8s:statefulset.kubernetes.io/pod-name=keycloak-0" ipv4=10.0.0.37 ipv6= k8sPodName=auth-system/keycloak-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1346e10712 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2215 identity=33983 ipv4=10.0.0.37 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=1346e10712 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2215 identity=33983 ipv4=10.0.0.37 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=1346e10712 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2215 identity=33983 ipv4=10.0.0.37 ipv6= k8sPodName=auth-system/keycloak-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Conntrack garbage collector interval recalculated" deleteRatio=0.010077508893908856 newInterval=7m30s subsys=map-ct level=info msg="Create endpoint request" addressing="&{10.0.0.193 739f65b8-5476-403d-ad57-43454cfbee69 default }" containerID=efb6ed8f41812f4faf04edc81b0e51a42c9e4233e0a27a4ef285e668bca6e5bf datapathConfiguration="&{false false false false false }" interface=lxc3093c14a44db k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-j6dbb labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=efb6ed8f41 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2038 ipv4=10.0.0.193 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-j6dbb subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=efb6ed8f41 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2038 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=gc" ipv4=10.0.0.193 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-j6dbb subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=gc;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=efb6ed8f41 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2038 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.193 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-j6dbb line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=efb6ed8f41 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2038 identity=64955 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=gc" ipv4=10.0.0.193 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-j6dbb oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=efb6ed8f41 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2038 identity=64955 ipv4=10.0.0.193 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-j6dbb subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.139 4170d269-3d23-4cfc-9144-115df13f92dc default }" containerID=5752f1e6ac06fea225c1863556d9d95c77878a4a0242a73fd36e1baf9acc821e datapathConfiguration="&{false false false false false }" interface=lxca5ad0426de28 k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-22fwz labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5752f1e6ac datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1095 ipv4=10.0.0.139 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-22fwz subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5752f1e6ac datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1095 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=master" ipv4=10.0.0.139 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-22fwz subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Create endpoint request" addressing="&{10.0.0.167 7cdbb43d-cfae-4ce5-aded-18b337677f87 default }" containerID=60adf686751e3db41173393ae146863a33a5116abd090bfe14da1f0c5e2bfb54 datapathConfiguration="&{false false false false false }" interface=lxcb98223f9f231 k8sPodName=monitoring/node-feature-discovery-worker-dfpbt labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=60adf68675 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1719 ipv4=10.0.0.167 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-dfpbt subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=60adf68675 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1719 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=worker" ipv4=10.0.0.167 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-dfpbt subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=master;" subsys=allocator level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Identity of endpoint changed" containerID=5752f1e6ac datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1095 identity=31982 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=master" ipv4=10.0.0.139 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-22fwz oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5752f1e6ac datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1095 identity=31982 ipv4=10.0.0.139 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-22fwz subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=worker;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=60adf68675 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1719 identity=62269 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=worker" ipv4=10.0.0.167 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-dfpbt oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=60adf68675 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1719 identity=62269 ipv4=10.0.0.167 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-dfpbt subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=efb6ed8f41 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2038 identity=64955 ipv4=10.0.0.193 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-j6dbb subsys=endpoint level=info msg="Successful endpoint creation" containerID=efb6ed8f41 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2038 identity=64955 ipv4=10.0.0.193 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-j6dbb subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=5752f1e6ac datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1095 identity=31982 ipv4=10.0.0.139 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-22fwz subsys=endpoint level=info msg="Successful endpoint creation" containerID=5752f1e6ac datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1095 identity=31982 ipv4=10.0.0.139 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-22fwz subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=60adf68675 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1719 identity=62269 ipv4=10.0.0.167 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-dfpbt subsys=endpoint level=info msg="Successful endpoint creation" containerID=60adf68675 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1719 identity=62269 ipv4=10.0.0.167 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-dfpbt subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.83 4b3bf83c-008f-4aaf-b1df-116382403272 default }" containerID=3ff30ef16bb478b98e88b417f17d6841a1b810e2ec5c2213a2fb09df64e67cc5 datapathConfiguration="&{false false false false false }" interface=lxcd7bce2f7f20b k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-jhkjq labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3ff30ef16b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1550 ipv4=10.0.0.83 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-jhkjq subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3ff30ef16b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1550 identityLabels="k8s:app=secretgen-controller,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa,k8s:io.kubernetes.pod.namespace=secretgen-controller" ipv4=10.0.0.83 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-jhkjq subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:secretgen-controller]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=secretgen-controller;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa;k8s:io.kubernetes.pod.namespace=secretgen-controller;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3ff30ef16b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1550 identity=21532 identityLabels="k8s:app=secretgen-controller,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa,k8s:io.kubernetes.pod.namespace=secretgen-controller" ipv4=10.0.0.83 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-jhkjq oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3ff30ef16b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1550 identity=21532 ipv4=10.0.0.83 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-jhkjq subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=3ff30ef16b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1550 identity=21532 ipv4=10.0.0.83 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-jhkjq subsys=endpoint level=info msg="Successful endpoint creation" containerID=3ff30ef16b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1550 identity=21532 ipv4=10.0.0.83 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-jhkjq subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2514 identity=1 identityLabels="k8s:feature.node.kubernetes.io/cpu-cpuid.ADX=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AESNI=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AVX2=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AVX=true,k8s:feature.node.kubernetes.io/cpu-cpuid.CLZERO=true,k8s:feature.node.kubernetes.io/cpu-cpuid.CMPXCHG8=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FMA3=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FXSR=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FXSROPT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.HYPERVISOR=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IA32_ARCH_CAP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IBPB=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IBRS=true,k8s:feature.node.kubernetes.io/cpu-cpuid.LAHF=true,k8s:feature.node.kubernetes.io/cpu-cpuid.MOVBE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.NRIPS=true,k8s:feature.node.kubernetes.io/cpu-cpuid.OSXSAVE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SHA=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SPEC_CTRL_SSBD=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SSE4A=true,k8s:feature.node.kubernetes.io/cpu-cpuid.STIBP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SVM=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SVMNP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SYSCALL=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SYSEE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.TOPEXT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.WBNOINVD=true,k8s:feature.node.kubernetes.io/cpu-cpuid.X87=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XGETBV1=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVEC=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVEOPT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVES=true,k8s:feature.node.kubernetes.io/cpu-hardware_multithreading=false,k8s:feature.node.kubernetes.io/cpu-model.family=23,k8s:feature.node.kubernetes.io/cpu-model.id=49,k8s:feature.node.kubernetes.io/cpu-model.vendor_id=AMD,k8s:feature.node.kubernetes.io/kernel-config.NO_HZ=true,k8s:feature.node.kubernetes.io/kernel-config.NO_HZ_IDLE=true,k8s:feature.node.kubernetes.io/kernel-version.full=5.15.0-176-generic,k8s:feature.node.kubernetes.io/kernel-version.major=5,k8s:feature.node.kubernetes.io/kernel-version.minor=15,k8s:feature.node.kubernetes.io/kernel-version.revision=0,k8s:feature.node.kubernetes.io/pci-0300_1af4.present=true,k8s:feature.node.kubernetes.io/system-os_release.ID=ubuntu,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID.major=22,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID.minor=04,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID=22.04,k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,k8s:openstack-compute-node=enabled,k8s:openstack-control-plane=enabled,k8s:openvswitch=enabled,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_hostns_02514 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_hostns_02514 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_hostns_02514 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_hostns_02514:pending" subsys=bpf level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_netdev_00005 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_netdev_00005 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005:pending" subsys=bpf level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2514 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.95 387f9125-612d-4b0e-a2b4-f7b88163c910 default }" containerID=d008bc8af5011c525b5fe34e76139298b26fccee69ed31a0bb4cdef4be10ae5b datapathConfiguration="&{false false false false false }" interface=lxcc2c523e3074d k8sPodName=monitoring/kube-prometheus-stack-admission-create-7zfm8 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d008bc8af5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2810 ipv4=10.0.0.95 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-7zfm8 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d008bc8af5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2810 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-create,k8s:batch.kubernetes.io/controller-uid=00f7fcd1-2b07-4df5-867e-2c8fd5156f6a,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=00f7fcd1-2b07-4df5-867e-2c8fd5156f6a,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-create,k8s:release=kube-prometheus-stack" ipv4=10.0.0.95 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-7zfm8 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=d008bc8af5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2810 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.95 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-7zfm8 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-admission-create;k8s:app.kubernetes.io/component=prometheus-operator-webhook;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:batch.kubernetes.io/controller-uid=00f7fcd1-2b07-4df5-867e-2c8fd5156f6a;k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create;k8s:chart=kube-prometheus-stack-60.2.0;k8s:controller-uid=00f7fcd1-2b07-4df5-867e-2c8fd5156f6a;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission;k8s:io.kubernetes.pod.namespace=monitoring;k8s:job-name=kube-prometheus-stack-admission-create;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d008bc8af5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2810 identity=22355 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-create,k8s:batch.kubernetes.io/controller-uid=00f7fcd1-2b07-4df5-867e-2c8fd5156f6a,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=00f7fcd1-2b07-4df5-867e-2c8fd5156f6a,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-create,k8s:release=kube-prometheus-stack" ipv4=10.0.0.95 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-7zfm8 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d008bc8af5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2810 identity=22355 ipv4=10.0.0.95 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-7zfm8 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d008bc8af5 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2810 identity=22355 ipv4=10.0.0.95 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-7zfm8 subsys=endpoint level=info msg="Successful endpoint creation" containerID=d008bc8af5 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2810 identity=22355 ipv4=10.0.0.95 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-7zfm8 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=d008bc8af5 endpointID=2810 k8sNamespace=monitoring k8sPodName=kube-prometheus-stack-admission-create-7zfm8 subsys=daemon level=info msg="Releasing key" key="[k8s:app=kube-prometheus-stack-admission-create k8s:app.kubernetes.io/component=prometheus-operator-webhook k8s:app.kubernetes.io/instance=kube-prometheus-stack k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator k8s:app.kubernetes.io/part-of=kube-prometheus-stack k8s:app.kubernetes.io/version=60.2.0 k8s:batch.kubernetes.io/controller-uid=00f7fcd1-2b07-4df5-867e-2c8fd5156f6a k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create k8s:chart=kube-prometheus-stack-60.2.0 k8s:controller-uid=00f7fcd1-2b07-4df5-867e-2c8fd5156f6a k8s:heritage=Helm k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring k8s:io.cilium.k8s.namespace.labels.name=monitoring k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission k8s:io.kubernetes.pod.namespace=monitoring k8s:job-name=kube-prometheus-stack-admission-create k8s:release=kube-prometheus-stack]" subsys=allocator level=info msg="Removed endpoint" containerID=d008bc8af5 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2810 identity=22355 ipv4=10.0.0.95 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-7zfm8 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.197 e96b6e3d-2afa-4cee-b79f-8fed7e090495 default }" containerID=9c20732c26785c8695e1d13f6b802fe937cf85969c08b27df9e690b21f8da8c4 datapathConfiguration="&{false false false false false }" interface=lxc1c72b8c93e87 k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-svlxx labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9c20732c26 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3815 ipv4=10.0.0.197 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-svlxx subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9c20732c26 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3815 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-operator,k8s:chart=kube-prometheus-stack-60.2.0,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.197 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-svlxx subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Create endpoint request" addressing="&{10.0.0.7 b0370d00-eec7-4c07-b7c3-3a18b8c87555 default }" containerID=13a886c1312c8ebf660a922ed17658bfbe4f7a653c8e5bc2335b22ee75ffb947 datapathConfiguration="&{false false false false false }" interface=lxcda837357554e k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-xn298 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=13a886c131 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3152 ipv4=10.0.0.7 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-xn298 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=13a886c131 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3152 identityLabels="k8s:app.kubernetes.io/component=metrics,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-state-metrics,k8s:app.kubernetes.io/part-of=kube-state-metrics,k8s:app.kubernetes.io/version=2.12.0,k8s:helm.sh/chart=kube-state-metrics-5.20.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.7 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-xn298 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=13a886c131 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3152 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.7 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-xn298 line=611 subsys=endpoint level=info msg="Invalid state transition skipped" containerID=9c20732c26 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3815 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.197 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-svlxx line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-operator;k8s:app.kubernetes.io/component=prometheus-operator;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:chart=kube-prometheus-stack-60.2.0;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator;k8s:io.kubernetes.pod.namespace=monitoring;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9c20732c26 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3815 identity=5606 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-operator,k8s:chart=kube-prometheus-stack-60.2.0,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.197 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-svlxx oldIdentity="no identity" subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Waiting for endpoint to be generated" containerID=9c20732c26 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3815 identity=5606 ipv4=10.0.0.197 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-svlxx subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=metrics;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-state-metrics;k8s:app.kubernetes.io/part-of=kube-state-metrics;k8s:app.kubernetes.io/version=2.12.0;k8s:helm.sh/chart=kube-state-metrics-5.20.0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics;k8s:io.kubernetes.pod.namespace=monitoring;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=13a886c131 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3152 identity=2257 identityLabels="k8s:app.kubernetes.io/component=metrics,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-state-metrics,k8s:app.kubernetes.io/part-of=kube-state-metrics,k8s:app.kubernetes.io/version=2.12.0,k8s:helm.sh/chart=kube-state-metrics-5.20.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.7 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-xn298 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=13a886c131 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3152 identity=2257 ipv4=10.0.0.7 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-xn298 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.53 e2d3d81d-eb72-4ad9-b046-5ff53bf165f0 default }" containerID=075c2a2caf0ebbcfc91406f021b80975bef65e01214d7aaf3026d82c93ff108f datapathConfiguration="&{false false false false false }" interface=lxccad6f4688aed k8sPodName=monitoring/kube-prometheus-stack-grafana-7dc47c96d7-69nwp labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=075c2a2caf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1798 ipv4=10.0.0.53 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-7dc47c96d7-69nwp subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=075c2a2caf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1798 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/name=grafana,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.53 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-7dc47c96d7-69nwp subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/name=grafana;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=075c2a2caf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1798 identity=40449 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/name=grafana,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.53 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-7dc47c96d7-69nwp oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=075c2a2caf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1798 identity=40449 ipv4=10.0.0.53 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-7dc47c96d7-69nwp subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=9c20732c26 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3815 identity=5606 ipv4=10.0.0.197 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-svlxx subsys=endpoint level=info msg="Successful endpoint creation" containerID=9c20732c26 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3815 identity=5606 ipv4=10.0.0.197 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-svlxx subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=13a886c131 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3152 identity=2257 ipv4=10.0.0.7 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-xn298 subsys=endpoint level=info msg="Successful endpoint creation" containerID=13a886c131 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3152 identity=2257 ipv4=10.0.0.7 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-xn298 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=075c2a2caf datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1798 identity=40449 ipv4=10.0.0.53 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-7dc47c96d7-69nwp subsys=endpoint level=info msg="Successful endpoint creation" containerID=075c2a2caf datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1798 identity=40449 ipv4=10.0.0.53 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-7dc47c96d7-69nwp subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.153 1253f4e0-7296-4371-99d4-ceb82cdb0101 default }" containerID=dba874520512ed99bf3fd1752e49d886add9d753f57f6a48e68d24fe00c4487d datapathConfiguration="&{false false false false false }" interface=lxcf1113fe42da6 k8sPodName=monitoring/kube-prometheus-stack-admission-patch-sd6vk labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=dba8745205 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4050 ipv4=10.0.0.153 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-sd6vk subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=dba8745205 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4050 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-patch,k8s:batch.kubernetes.io/controller-uid=a1794649-e007-4513-a807-44e7b47dc675,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=a1794649-e007-4513-a807-44e7b47dc675,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-patch,k8s:release=kube-prometheus-stack" ipv4=10.0.0.153 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-sd6vk subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-admission-patch;k8s:app.kubernetes.io/component=prometheus-operator-webhook;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:batch.kubernetes.io/controller-uid=a1794649-e007-4513-a807-44e7b47dc675;k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch;k8s:chart=kube-prometheus-stack-60.2.0;k8s:controller-uid=a1794649-e007-4513-a807-44e7b47dc675;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission;k8s:io.kubernetes.pod.namespace=monitoring;k8s:job-name=kube-prometheus-stack-admission-patch;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=dba8745205 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4050 identity=12229 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-patch,k8s:batch.kubernetes.io/controller-uid=a1794649-e007-4513-a807-44e7b47dc675,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=a1794649-e007-4513-a807-44e7b47dc675,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-patch,k8s:release=kube-prometheus-stack" ipv4=10.0.0.153 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-sd6vk oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=dba8745205 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4050 identity=12229 ipv4=10.0.0.153 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-sd6vk subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=dba8745205 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=4050 identity=12229 ipv4=10.0.0.153 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-sd6vk subsys=endpoint level=info msg="Successful endpoint creation" containerID=dba8745205 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=4050 identity=12229 ipv4=10.0.0.153 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-sd6vk subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.172 6440beb3-26ce-40eb-a8b0-3db12bdef014 default }" containerID=7b11aea75e2059fc7ab5b6599d3eab6ed616d8c42a1436e3bb39dbfdac843206 datapathConfiguration="&{false false false false false }" interface=lxcffff9eaa506e k8sPodName=local-path-storage/helper-pod-create-pvc-fe794793-6be8-403d-9af4-b21d1b2b0b1d labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7b11aea75e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=452 ipv4=10.0.0.172 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-fe794793-6be8-403d-9af4-b21d1b2b0b1d subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7b11aea75e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=452 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.172 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-fe794793-6be8-403d-9af4-b21d1b2b0b1d subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7b11aea75e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=452 identity=302 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.172 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-fe794793-6be8-403d-9af4-b21d1b2b0b1d oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7b11aea75e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=452 identity=302 ipv4=10.0.0.172 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-fe794793-6be8-403d-9af4-b21d1b2b0b1d subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=7b11aea75e datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=452 identity=302 ipv4=10.0.0.172 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-fe794793-6be8-403d-9af4-b21d1b2b0b1d subsys=endpoint level=info msg="Successful endpoint creation" containerID=7b11aea75e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=452 identity=302 ipv4=10.0.0.172 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-fe794793-6be8-403d-9af4-b21d1b2b0b1d subsys=daemon level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.100 950a5d23-c179-4a38-94a4-89a418779d52 default }" containerID=4275f8f9ea296483e0eb335d4acad76d53f5612306d0ec24466cccd6bbcb47e2 datapathConfiguration="&{false false false false false }" interface=lxcb430a8d0dc78 k8sPodName=local-path-storage/helper-pod-create-pvc-97a75c80-baf1-4340-b417-b8da9ba2387f labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4275f8f9ea datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2611 ipv4=10.0.0.100 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-97a75c80-baf1-4340-b417-b8da9ba2387f subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4275f8f9ea datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2611 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.100 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-97a75c80-baf1-4340-b417-b8da9ba2387f subsys=endpoint level=info msg="Identity of endpoint changed" containerID=4275f8f9ea datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2611 identity=302 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.100 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-97a75c80-baf1-4340-b417-b8da9ba2387f oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4275f8f9ea datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2611 identity=302 ipv4=10.0.0.100 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-97a75c80-baf1-4340-b417-b8da9ba2387f subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=4275f8f9ea datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2611 identity=302 ipv4=10.0.0.100 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-97a75c80-baf1-4340-b417-b8da9ba2387f subsys=endpoint level=info msg="Successful endpoint creation" containerID=4275f8f9ea datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2611 identity=302 ipv4=10.0.0.100 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-97a75c80-baf1-4340-b417-b8da9ba2387f subsys=daemon level=info msg="Delete endpoint request" containerID=dba8745205 endpointID=4050 k8sNamespace=monitoring k8sPodName=kube-prometheus-stack-admission-patch-sd6vk subsys=daemon level=info msg="Releasing key" key="[k8s:app=kube-prometheus-stack-admission-patch k8s:app.kubernetes.io/component=prometheus-operator-webhook k8s:app.kubernetes.io/instance=kube-prometheus-stack k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator k8s:app.kubernetes.io/part-of=kube-prometheus-stack k8s:app.kubernetes.io/version=60.2.0 k8s:batch.kubernetes.io/controller-uid=a1794649-e007-4513-a807-44e7b47dc675 k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch k8s:chart=kube-prometheus-stack-60.2.0 k8s:controller-uid=a1794649-e007-4513-a807-44e7b47dc675 k8s:heritage=Helm k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring k8s:io.cilium.k8s.namespace.labels.name=monitoring k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission k8s:io.kubernetes.pod.namespace=monitoring k8s:job-name=kube-prometheus-stack-admission-patch k8s:release=kube-prometheus-stack]" subsys=allocator level=info msg="Removed endpoint" containerID=dba8745205 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=4050 identity=12229 ipv4=10.0.0.153 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-sd6vk subsys=endpoint level=info msg="Delete endpoint request" containerID=7b11aea75e endpointID=452 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-fe794793-6be8-403d-9af4-b21d1b2b0b1d subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=7b11aea75e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=452 identity=302 ipv4=10.0.0.172 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-fe794793-6be8-403d-9af4-b21d1b2b0b1d subsys=endpoint level=info msg="Delete endpoint request" containerID=4275f8f9ea endpointID=2611 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-97a75c80-baf1-4340-b417-b8da9ba2387f subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=4275f8f9ea datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2611 identity=302 ipv4=10.0.0.100 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-97a75c80-baf1-4340-b417-b8da9ba2387f subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.204 3c5f4398-991c-4816-9ff2-b286db0848ef default }" containerID=de7b2b55c5566f9aed3ecd29e0b4040fdff730663ddc103b033cf32efff251a6 datapathConfiguration="&{false false false false false }" interface=lxc5041e4242861 k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=de7b2b55c5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2152 ipv4=10.0.0.204 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=de7b2b55c5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2152 identityLabels="k8s:alertmanager=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=alertmanager,k8s:app.kubernetes.io/version=0.27.0,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0" ipv4=10.0.0.204 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:alertmanager=kube-prometheus-stack-alertmanager;k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager;k8s:app.kubernetes.io/managed-by=prometheus-operator;k8s:app.kubernetes.io/name=alertmanager;k8s:app.kubernetes.io/version=0.27.0;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager;k8s:io.kubernetes.pod.namespace=monitoring;k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=de7b2b55c5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2152 identity=6300 identityLabels="k8s:alertmanager=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=alertmanager,k8s:app.kubernetes.io/version=0.27.0,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0" ipv4=10.0.0.204 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=de7b2b55c5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2152 identity=6300 ipv4=10.0.0.204 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=de7b2b55c5 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2152 identity=6300 ipv4=10.0.0.204 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=de7b2b55c5 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2152 identity=6300 ipv4=10.0.0.204 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.19 368e506b-845e-4fea-aa3f-5c833eb64d92 default }" containerID=e3b54aecf687c27331cb4dfb11811162be7340206e6ff4fc9337a335e8e8432b datapathConfiguration="&{false false false false false }" interface=lxcd0e37bd0a05d k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e3b54aecf6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3190 ipv4=10.0.0.19 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e3b54aecf6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3190 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=prometheus,k8s:app.kubernetes.io/version=2.51.2,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus,k8s:io.kubernetes.pod.namespace=monitoring,k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus,k8s:operator.prometheus.io/shard=0,k8s:prometheus=kube-prometheus-stack-prometheus,k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0" ipv4=10.0.0.19 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=e3b54aecf6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3190 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.19 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus;k8s:app.kubernetes.io/managed-by=prometheus-operator;k8s:app.kubernetes.io/name=prometheus;k8s:app.kubernetes.io/version=2.51.2;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus;k8s:io.kubernetes.pod.namespace=monitoring;k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus;k8s:operator.prometheus.io/shard=0;k8s:prometheus=kube-prometheus-stack-prometheus;k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e3b54aecf6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3190 identity=22443 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=prometheus,k8s:app.kubernetes.io/version=2.51.2,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus,k8s:io.kubernetes.pod.namespace=monitoring,k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus,k8s:operator.prometheus.io/shard=0,k8s:prometheus=kube-prometheus-stack-prometheus,k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0" ipv4=10.0.0.19 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e3b54aecf6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3190 identity=22443 ipv4=10.0.0.19 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e3b54aecf6 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3190 identity=22443 ipv4=10.0.0.19 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=e3b54aecf6 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3190 identity=22443 ipv4=10.0.0.19 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.155 1cdda9be-82f8-4a27-943f-b0eb37b5e9d7 default }" containerID=b790775530c3a63f48bc9292479827b407c0d9fad49610e2a7f7be461f0443d2 datapathConfiguration="&{false false false false false }" interface=lxc723ff9306353 k8sPodName=monitoring/loki-gateway-cf54cb88c-p69f7 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b790775530 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=265 ipv4=10.0.0.155 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-p69f7 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.128 07ca56a5-1f27-4472-92c5-c47c00d8575a default }" containerID=4c1145f1a6746181a8ad90bb06b3b7bf5af6a98053f727419f3bdf26a2f8db88 datapathConfiguration="&{false false false false false }" interface=lxcd81c0316e172 k8sPodName=monitoring/loki-results-cache-0 labels="[]" subsys=daemon sync-build=true level=info msg="Resolving identity labels (blocking)" containerID=b790775530 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=265 identityLabels="k8s:app.kubernetes.io/component=gateway,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.155 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-p69f7 subsys=endpoint level=info msg="New endpoint" containerID=4c1145f1a6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1195 ipv4=10.0.0.128 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Resolving identity labels (blocking)" containerID=4c1145f1a6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1195 identityLabels="k8s:app.kubernetes.io/component=memcached-results-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-results-cache,k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0" ipv4=10.0.0.128 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=gateway;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b790775530 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=265 identity=6855 identityLabels="k8s:app.kubernetes.io/component=gateway,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.155 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-p69f7 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b790775530 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=265 identity=6855 ipv4=10.0.0.155 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-p69f7 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=memcached-results-cache;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:name=memcached-results-cache;k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4c1145f1a6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1195 identity=12766 identityLabels="k8s:app.kubernetes.io/component=memcached-results-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-results-cache,k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0" ipv4=10.0.0.128 ipv6= k8sPodName=monitoring/loki-results-cache-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4c1145f1a6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1195 identity=12766 ipv4=10.0.0.128 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.151 a0ed6c66-a091-47b6-8f4e-a82c0fd151e6 default }" containerID=1641102a7378fd4c16fa69f02695f3e38ec872230efd4f5711fad23986160daf datapathConfiguration="&{false false false false false }" interface=lxc0618f7598dda k8sPodName=monitoring/loki-chunks-cache-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1641102a73 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1419 ipv4=10.0.0.151 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1641102a73 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1419 identityLabels="k8s:app.kubernetes.io/component=memcached-chunks-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-chunks-cache,k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0" ipv4=10.0.0.151 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=memcached-chunks-cache;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:name=memcached-chunks-cache;k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1641102a73 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1419 identity=45367 identityLabels="k8s:app.kubernetes.io/component=memcached-chunks-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-chunks-cache,k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0" ipv4=10.0.0.151 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1641102a73 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1419 identity=45367 ipv4=10.0.0.151 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=4c1145f1a6 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1195 identity=12766 ipv4=10.0.0.128 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=4c1145f1a6 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1195 identity=12766 ipv4=10.0.0.128 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=b790775530 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=265 identity=6855 ipv4=10.0.0.155 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-p69f7 subsys=endpoint level=info msg="Successful endpoint creation" containerID=b790775530 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=265 identity=6855 ipv4=10.0.0.155 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-p69f7 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=1641102a73 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1419 identity=45367 ipv4=10.0.0.151 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=1641102a73 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1419 identity=45367 ipv4=10.0.0.151 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.18 17437763-b963-4375-b676-d457bcb92b65 default }" containerID=85c51f7fa003311b4af2f340571a2acdc606ef6a09d2fddf0ee287c3df489986 datapathConfiguration="&{false false false false false }" interface=lxcad87dc7cf374 k8sPodName=local-path-storage/helper-pod-create-pvc-ede80fce-798d-4870-99fb-52747b685c36 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=85c51f7fa0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1635 ipv4=10.0.0.18 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-ede80fce-798d-4870-99fb-52747b685c36 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=85c51f7fa0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1635 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.18 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-ede80fce-798d-4870-99fb-52747b685c36 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=85c51f7fa0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1635 identity=302 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.18 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-ede80fce-798d-4870-99fb-52747b685c36 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=85c51f7fa0 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1635 identity=302 ipv4=10.0.0.18 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-ede80fce-798d-4870-99fb-52747b685c36 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=85c51f7fa0 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1635 identity=302 ipv4=10.0.0.18 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-ede80fce-798d-4870-99fb-52747b685c36 subsys=endpoint level=info msg="Successful endpoint creation" containerID=85c51f7fa0 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1635 identity=302 ipv4=10.0.0.18 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-ede80fce-798d-4870-99fb-52747b685c36 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.191 08a2014b-78e8-4295-91f4-57d71fc74927 default }" containerID=3fbc676df9ccfe3628cec228a664433b4a57919281d91d8157eda464eea0364f datapathConfiguration="&{false false false false false }" interface=lxc390cf0a8c0f0 k8sPodName=monitoring/vector-8czqv labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3fbc676df9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3050 ipv4=10.0.0.191 ipv6= k8sPodName=monitoring/vector-8czqv subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3fbc676df9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3050 identityLabels="k8s:app.kubernetes.io/component=Agent,k8s:app.kubernetes.io/instance=vector,k8s:app.kubernetes.io/name=vector,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=vector,k8s:io.kubernetes.pod.namespace=monitoring,k8s:vector.dev/exclude=true" ipv4=10.0.0.191 ipv6= k8sPodName=monitoring/vector-8czqv subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=Agent;k8s:app.kubernetes.io/instance=vector;k8s:app.kubernetes.io/name=vector;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=vector;k8s:io.kubernetes.pod.namespace=monitoring;k8s:vector.dev/exclude=true;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3fbc676df9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3050 identity=44741 identityLabels="k8s:app.kubernetes.io/component=Agent,k8s:app.kubernetes.io/instance=vector,k8s:app.kubernetes.io/name=vector,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=vector,k8s:io.kubernetes.pod.namespace=monitoring,k8s:vector.dev/exclude=true" ipv4=10.0.0.191 ipv6= k8sPodName=monitoring/vector-8czqv oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=3fbc676df9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3050 identity=44741 ipv4=10.0.0.191 ipv6= k8sPodName=monitoring/vector-8czqv subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=3fbc676df9 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3050 identity=44741 ipv4=10.0.0.191 ipv6= k8sPodName=monitoring/vector-8czqv subsys=endpoint level=info msg="Successful endpoint creation" containerID=3fbc676df9 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3050 identity=44741 ipv4=10.0.0.191 ipv6= k8sPodName=monitoring/vector-8czqv subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=85c51f7fa0 endpointID=1635 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-ede80fce-798d-4870-99fb-52747b685c36 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=85c51f7fa0 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1635 identity=302 ipv4=10.0.0.18 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-ede80fce-798d-4870-99fb-52747b685c36 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.225 e931a27b-d044-449a-99b7-d6c409982254 default }" containerID=273144dad8e7d1e72dd9cb29489a34c98afd13227ae185f77efd9d0904a63f5c datapathConfiguration="&{false false false false false }" interface=lxc04cda7974f36 k8sPodName=monitoring/loki-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=273144dad8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=395 ipv4=10.0.0.225 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=273144dad8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=395 identityLabels="k8s:app.kubernetes.io/component=single-binary,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:app.kubernetes.io/part-of=memberlist,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=loki-0" ipv4=10.0.0.225 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=single-binary;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:app.kubernetes.io/part-of=memberlist;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:statefulset.kubernetes.io/pod-name=loki-0;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=273144dad8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=395 identity=49027 identityLabels="k8s:app.kubernetes.io/component=single-binary,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:app.kubernetes.io/part-of=memberlist,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=loki-0" ipv4=10.0.0.225 ipv6= k8sPodName=monitoring/loki-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=273144dad8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=395 identity=49027 ipv4=10.0.0.225 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=273144dad8 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=395 identity=49027 ipv4=10.0.0.225 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=273144dad8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=395 identity=49027 ipv4=10.0.0.225 ipv6= k8sPodName=monitoring/loki-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.192 df724d11-e831-4648-85fc-02763479124a default }" containerID=c7f3b5c7e321e2f069195580274cf2acfbe72f2982aa74bf5107f003c98a1677 datapathConfiguration="&{false false false false false }" interface=lxc1019149afc37 k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-cj8b4 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c7f3b5c7e3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=57 ipv4=10.0.0.192 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-cj8b4 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c7f3b5c7e3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=57 identityLabels="k8s:app.kubernetes.io/instance=prometheus-pushgateway,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=prometheus-pushgateway,k8s:app.kubernetes.io/version=v1.8.0,k8s:helm.sh/chart=prometheus-pushgateway-2.13.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.192 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-cj8b4 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=prometheus-pushgateway;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=prometheus-pushgateway;k8s:app.kubernetes.io/version=v1.8.0;k8s:helm.sh/chart=prometheus-pushgateway-2.13.0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c7f3b5c7e3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=57 identity=6648 identityLabels="k8s:app.kubernetes.io/instance=prometheus-pushgateway,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=prometheus-pushgateway,k8s:app.kubernetes.io/version=v1.8.0,k8s:helm.sh/chart=prometheus-pushgateway-2.13.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.192 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-cj8b4 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c7f3b5c7e3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=57 identity=6648 ipv4=10.0.0.192 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-cj8b4 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c7f3b5c7e3 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=57 identity=6648 ipv4=10.0.0.192 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-cj8b4 subsys=endpoint level=info msg="Successful endpoint creation" containerID=c7f3b5c7e3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=57 identity=6648 ipv4=10.0.0.192 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-cj8b4 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.67 ab40eb41-6c0e-4f3a-b151-0ec5bc8cb340 default }" containerID=817175f041a15b33dc9c04ab686043502e08eaa6cd51217b79ea2c8f7c9a263a datapathConfiguration="&{false false false false false }" interface=lxc852eb261dda4 k8sPodName=openstack/memcached-memcached-6479589586-ft7pb labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=817175f041 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2040 ipv4=10.0.0.67 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-ft7pb subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=817175f041 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2040 identityLabels="k8s:application=memcached,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=memcached" ipv4=10.0.0.67 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-ft7pb subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=memcached;k8s:component=server;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=memcached;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=817175f041 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2040 identity=54932 identityLabels="k8s:application=memcached,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=memcached" ipv4=10.0.0.67 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-ft7pb oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=817175f041 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2040 identity=54932 ipv4=10.0.0.67 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-ft7pb subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=817175f041 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2040 identity=54932 ipv4=10.0.0.67 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-ft7pb subsys=endpoint level=info msg="Successful endpoint creation" containerID=817175f041 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2040 identity=54932 ipv4=10.0.0.67 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-ft7pb subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.129 5fdafa43-2526-4c7e-8a55-4a6f68c26c61 default }" containerID=9a14bd45227f03fbe5f21fa9684f1de1cfea3f0e444f14270a291929887784ad datapathConfiguration="&{false false false false false }" interface=lxc42db44cfe25d k8sPodName=local-path-storage/helper-pod-create-pvc-e4d7be4e-d6b7-4d2f-9991-67d78f30d270 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9a14bd4522 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4011 ipv4=10.0.0.129 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e4d7be4e-d6b7-4d2f-9991-67d78f30d270 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9a14bd4522 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4011 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.129 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e4d7be4e-d6b7-4d2f-9991-67d78f30d270 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9a14bd4522 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4011 identity=302 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.129 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e4d7be4e-d6b7-4d2f-9991-67d78f30d270 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9a14bd4522 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4011 identity=302 ipv4=10.0.0.129 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e4d7be4e-d6b7-4d2f-9991-67d78f30d270 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=9a14bd4522 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=4011 identity=302 ipv4=10.0.0.129 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e4d7be4e-d6b7-4d2f-9991-67d78f30d270 subsys=endpoint level=info msg="Successful endpoint creation" containerID=9a14bd4522 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=4011 identity=302 ipv4=10.0.0.129 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e4d7be4e-d6b7-4d2f-9991-67d78f30d270 subsys=daemon level=info msg="Delete endpoint request" containerID=9a14bd4522 endpointID=4011 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-e4d7be4e-d6b7-4d2f-9991-67d78f30d270 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=9a14bd4522 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=4011 identity=302 ipv4=10.0.0.129 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e4d7be4e-d6b7-4d2f-9991-67d78f30d270 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.43 0b580ebe-94db-4c1d-825b-e093624b1f8a default }" containerID=174c35fe21542c231c5dbabf975822b2eaa4bf6ff46bf18adc6630b2d9137b78 datapathConfiguration="&{false false false false false }" interface=lxc40ebedd762b7 k8sPodName=openstack/rabbitmq-keystone-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=174c35fe21 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2336 ipv4=10.0.0.43 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=174c35fe21 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2336 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-keystone,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0" ipv4=10.0.0.43 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-keystone;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=174c35fe21 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2336 identity=5110 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-keystone,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0" ipv4=10.0.0.43 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=174c35fe21 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2336 identity=5110 ipv4=10.0.0.43 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=174c35fe21 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2336 identity=5110 ipv4=10.0.0.43 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=174c35fe21 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2336 identity=5110 ipv4=10.0.0.43 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.3 5c886874-c602-4ea9-bc21-144c2c6b6593 default }" containerID=819463562410e7aa9c3e486a65ecfb2579c4eeb712475eb5b51bc0c3f4eb0ed5 datapathConfiguration="&{false false false false false }" interface=lxc370c9ed16626 k8sPodName=openstack/keystone-api-64df4898b8-lqkb6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8194635624 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1431 ipv4=10.0.0.3 ipv6= k8sPodName=openstack/keystone-api-64df4898b8-lqkb6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8194635624 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1431 identityLabels="k8s:application=keystone,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=keystone" ipv4=10.0.0.3 ipv6= k8sPodName=openstack/keystone-api-64df4898b8-lqkb6 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=8194635624 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1431 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.3 ipv6= k8sPodName=openstack/keystone-api-64df4898b8-lqkb6 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8194635624 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1431 identity=13014 identityLabels="k8s:application=keystone,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=keystone" ipv4=10.0.0.3 ipv6= k8sPodName=openstack/keystone-api-64df4898b8-lqkb6 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8194635624 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1431 identity=13014 ipv4=10.0.0.3 ipv6= k8sPodName=openstack/keystone-api-64df4898b8-lqkb6 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.171 921d67a5-4898-4178-a177-52a160f9703a default }" containerID=afe98220015869769b98126840a55187bfe61e4984a264cfb9f23c0d65218ab7 datapathConfiguration="&{false false false false false }" interface=lxc4321136d6d1b k8sPodName=openstack/keystone-credential-setup-q8x9n labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=afe9822001 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=905 ipv4=10.0.0.171 ipv6= k8sPodName=openstack/keystone-credential-setup-q8x9n subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=afe9822001 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=905 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=01ba9eae-3448-488d-873a-e8d3b239a4de,k8s:batch.kubernetes.io/job-name=keystone-credential-setup,k8s:component=credential-setup,k8s:controller-uid=01ba9eae-3448-488d-873a-e8d3b239a4de,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-credential-setup,k8s:release_group=keystone" ipv4=10.0.0.171 ipv6= k8sPodName=openstack/keystone-credential-setup-q8x9n subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=01ba9eae-3448-488d-873a-e8d3b239a4de;k8s:batch.kubernetes.io/job-name=keystone-credential-setup;k8s:component=credential-setup;k8s:controller-uid=01ba9eae-3448-488d-873a-e8d3b239a4de;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-credential-setup;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=afe9822001 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=905 identity=3450 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=01ba9eae-3448-488d-873a-e8d3b239a4de,k8s:batch.kubernetes.io/job-name=keystone-credential-setup,k8s:component=credential-setup,k8s:controller-uid=01ba9eae-3448-488d-873a-e8d3b239a4de,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-credential-setup,k8s:release_group=keystone" ipv4=10.0.0.171 ipv6= k8sPodName=openstack/keystone-credential-setup-q8x9n oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=afe9822001 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=905 identity=3450 ipv4=10.0.0.171 ipv6= k8sPodName=openstack/keystone-credential-setup-q8x9n subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=8194635624 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1431 identity=13014 ipv4=10.0.0.3 ipv6= k8sPodName=openstack/keystone-api-64df4898b8-lqkb6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=8194635624 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1431 identity=13014 ipv4=10.0.0.3 ipv6= k8sPodName=openstack/keystone-api-64df4898b8-lqkb6 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=afe9822001 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=905 identity=3450 ipv4=10.0.0.171 ipv6= k8sPodName=openstack/keystone-credential-setup-q8x9n subsys=endpoint level=info msg="Successful endpoint creation" containerID=afe9822001 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=905 identity=3450 ipv4=10.0.0.171 ipv6= k8sPodName=openstack/keystone-credential-setup-q8x9n subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=afe9822001 endpointID=905 k8sNamespace=openstack k8sPodName=keystone-credential-setup-q8x9n subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=01ba9eae-3448-488d-873a-e8d3b239a4de k8s:batch.kubernetes.io/job-name=keystone-credential-setup k8s:component=credential-setup k8s:controller-uid=01ba9eae-3448-488d-873a-e8d3b239a4de k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-credential-setup k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=afe9822001 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=905 identity=3450 ipv4=10.0.0.171 ipv6= k8sPodName=openstack/keystone-credential-setup-q8x9n subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.108 9c171aba-9a7c-4189-a557-706045e48465 default }" containerID=1e6d5f27bce4211dfff0e78e0b784070c6f11149ce1b7a5d7754285952bd19bb datapathConfiguration="&{false false false false false }" interface=lxc054fac9ab23d k8sPodName=openstack/keystone-db-init-r2qpw labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1e6d5f27bc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2767 ipv4=10.0.0.108 ipv6= k8sPodName=openstack/keystone-db-init-r2qpw subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1e6d5f27bc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2767 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=c81c17f7-7a91-46f6-8631-7807c9935aff,k8s:batch.kubernetes.io/job-name=keystone-db-init,k8s:component=db-init,k8s:controller-uid=c81c17f7-7a91-46f6-8631-7807c9935aff,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-init,k8s:release_group=keystone" ipv4=10.0.0.108 ipv6= k8sPodName=openstack/keystone-db-init-r2qpw subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=1e6d5f27bc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2767 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.108 ipv6= k8sPodName=openstack/keystone-db-init-r2qpw line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=c81c17f7-7a91-46f6-8631-7807c9935aff;k8s:batch.kubernetes.io/job-name=keystone-db-init;k8s:component=db-init;k8s:controller-uid=c81c17f7-7a91-46f6-8631-7807c9935aff;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-db-init;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1e6d5f27bc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2767 identity=12171 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=c81c17f7-7a91-46f6-8631-7807c9935aff,k8s:batch.kubernetes.io/job-name=keystone-db-init,k8s:component=db-init,k8s:controller-uid=c81c17f7-7a91-46f6-8631-7807c9935aff,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-init,k8s:release_group=keystone" ipv4=10.0.0.108 ipv6= k8sPodName=openstack/keystone-db-init-r2qpw oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1e6d5f27bc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2767 identity=12171 ipv4=10.0.0.108 ipv6= k8sPodName=openstack/keystone-db-init-r2qpw subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=1e6d5f27bc datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2767 identity=12171 ipv4=10.0.0.108 ipv6= k8sPodName=openstack/keystone-db-init-r2qpw subsys=endpoint level=info msg="Successful endpoint creation" containerID=1e6d5f27bc datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2767 identity=12171 ipv4=10.0.0.108 ipv6= k8sPodName=openstack/keystone-db-init-r2qpw subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=1e6d5f27bc endpointID=2767 k8sNamespace=openstack k8sPodName=keystone-db-init-r2qpw subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=c81c17f7-7a91-46f6-8631-7807c9935aff k8s:batch.kubernetes.io/job-name=keystone-db-init k8s:component=db-init k8s:controller-uid=c81c17f7-7a91-46f6-8631-7807c9935aff k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-db-init k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=1e6d5f27bc datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2767 identity=12171 ipv4=10.0.0.108 ipv6= k8sPodName=openstack/keystone-db-init-r2qpw subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.186 3dedf887-a30e-43c1-b71f-463933701eed default }" containerID=3557c12fe212530cf416d1e5099da294f12491bef55383854949c38870a65ba5 datapathConfiguration="&{false false false false false }" interface=lxcf761481da14e k8sPodName=openstack/keystone-fernet-setup-58jcg labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3557c12fe2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=416 ipv4=10.0.0.186 ipv6= k8sPodName=openstack/keystone-fernet-setup-58jcg subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3557c12fe2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=416 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=8086da5b-f504-4d1b-a26f-3122a9319858,k8s:batch.kubernetes.io/job-name=keystone-fernet-setup,k8s:component=fernet-setup,k8s:controller-uid=8086da5b-f504-4d1b-a26f-3122a9319858,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-setup,k8s:release_group=keystone" ipv4=10.0.0.186 ipv6= k8sPodName=openstack/keystone-fernet-setup-58jcg subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=8086da5b-f504-4d1b-a26f-3122a9319858;k8s:batch.kubernetes.io/job-name=keystone-fernet-setup;k8s:component=fernet-setup;k8s:controller-uid=8086da5b-f504-4d1b-a26f-3122a9319858;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-fernet-setup;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3557c12fe2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=416 identity=15588 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=8086da5b-f504-4d1b-a26f-3122a9319858,k8s:batch.kubernetes.io/job-name=keystone-fernet-setup,k8s:component=fernet-setup,k8s:controller-uid=8086da5b-f504-4d1b-a26f-3122a9319858,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-setup,k8s:release_group=keystone" ipv4=10.0.0.186 ipv6= k8sPodName=openstack/keystone-fernet-setup-58jcg oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3557c12fe2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=416 identity=15588 ipv4=10.0.0.186 ipv6= k8sPodName=openstack/keystone-fernet-setup-58jcg subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=3557c12fe2 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=416 identity=15588 ipv4=10.0.0.186 ipv6= k8sPodName=openstack/keystone-fernet-setup-58jcg subsys=endpoint level=info msg="Successful endpoint creation" containerID=3557c12fe2 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=416 identity=15588 ipv4=10.0.0.186 ipv6= k8sPodName=openstack/keystone-fernet-setup-58jcg subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=3557c12fe2 endpointID=416 k8sNamespace=openstack k8sPodName=keystone-fernet-setup-58jcg subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=8086da5b-f504-4d1b-a26f-3122a9319858 k8s:batch.kubernetes.io/job-name=keystone-fernet-setup k8s:component=fernet-setup k8s:controller-uid=8086da5b-f504-4d1b-a26f-3122a9319858 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-fernet-setup k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=3557c12fe2 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=416 identity=15588 ipv4=10.0.0.186 ipv6= k8sPodName=openstack/keystone-fernet-setup-58jcg subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.84 af7ccb42-ebd4-4486-92a3-c856db6c6ecb default }" containerID=5c154ae84eaa6ccd2c62178ab02b5453e3d7d3a9bac291e8248ae0310f81cc44 datapathConfiguration="&{false false false false false }" interface=lxccf4448b980ae k8sPodName=openstack/keystone-db-sync-kk5v8 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5c154ae84e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3075 ipv4=10.0.0.84 ipv6= k8sPodName=openstack/keystone-db-sync-kk5v8 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5c154ae84e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3075 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=d278abd8-9c37-4658-b2fa-2516d9529515,k8s:batch.kubernetes.io/job-name=keystone-db-sync,k8s:component=db-sync,k8s:controller-uid=d278abd8-9c37-4658-b2fa-2516d9529515,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-sync,k8s:release_group=keystone" ipv4=10.0.0.84 ipv6= k8sPodName=openstack/keystone-db-sync-kk5v8 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=d278abd8-9c37-4658-b2fa-2516d9529515;k8s:batch.kubernetes.io/job-name=keystone-db-sync;k8s:component=db-sync;k8s:controller-uid=d278abd8-9c37-4658-b2fa-2516d9529515;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-db-sync;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5c154ae84e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3075 identity=8468 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=d278abd8-9c37-4658-b2fa-2516d9529515,k8s:batch.kubernetes.io/job-name=keystone-db-sync,k8s:component=db-sync,k8s:controller-uid=d278abd8-9c37-4658-b2fa-2516d9529515,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-sync,k8s:release_group=keystone" ipv4=10.0.0.84 ipv6= k8sPodName=openstack/keystone-db-sync-kk5v8 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=5c154ae84e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3075 identity=8468 ipv4=10.0.0.84 ipv6= k8sPodName=openstack/keystone-db-sync-kk5v8 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=5c154ae84e datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3075 identity=8468 ipv4=10.0.0.84 ipv6= k8sPodName=openstack/keystone-db-sync-kk5v8 subsys=endpoint level=info msg="Successful endpoint creation" containerID=5c154ae84e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3075 identity=8468 ipv4=10.0.0.84 ipv6= k8sPodName=openstack/keystone-db-sync-kk5v8 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=5c154ae84e endpointID=3075 k8sNamespace=openstack k8sPodName=keystone-db-sync-kk5v8 subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=d278abd8-9c37-4658-b2fa-2516d9529515 k8s:batch.kubernetes.io/job-name=keystone-db-sync k8s:component=db-sync k8s:controller-uid=d278abd8-9c37-4658-b2fa-2516d9529515 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-db-sync k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=5c154ae84e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3075 identity=8468 ipv4=10.0.0.84 ipv6= k8sPodName=openstack/keystone-db-sync-kk5v8 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.22 701c5b3f-495a-45ff-923b-12dbaf87da4e default }" containerID=83a19496068b48e3d15f02e5fd1614d7d8295e6ecd8ad6d50381a6189c1aa66b datapathConfiguration="&{false false false false false }" interface=lxcfafe6f167fa7 k8sPodName=openstack/keystone-rabbit-init-hcfp8 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=83a1949606 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=598 ipv4=10.0.0.22 ipv6= k8sPodName=openstack/keystone-rabbit-init-hcfp8 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=83a1949606 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=598 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=ef6d97f9-d445-4ae1-adcd-804a6ec0ae82,k8s:batch.kubernetes.io/job-name=keystone-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=ef6d97f9-d445-4ae1-adcd-804a6ec0ae82,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-rabbit-init,k8s:release_group=keystone" ipv4=10.0.0.22 ipv6= k8sPodName=openstack/keystone-rabbit-init-hcfp8 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=ef6d97f9-d445-4ae1-adcd-804a6ec0ae82;k8s:batch.kubernetes.io/job-name=keystone-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=ef6d97f9-d445-4ae1-adcd-804a6ec0ae82;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-rabbit-init;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=83a1949606 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=598 identity=56566 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=ef6d97f9-d445-4ae1-adcd-804a6ec0ae82,k8s:batch.kubernetes.io/job-name=keystone-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=ef6d97f9-d445-4ae1-adcd-804a6ec0ae82,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-rabbit-init,k8s:release_group=keystone" ipv4=10.0.0.22 ipv6= k8sPodName=openstack/keystone-rabbit-init-hcfp8 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=83a1949606 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=598 identity=56566 ipv4=10.0.0.22 ipv6= k8sPodName=openstack/keystone-rabbit-init-hcfp8 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=83a1949606 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=598 identity=56566 ipv4=10.0.0.22 ipv6= k8sPodName=openstack/keystone-rabbit-init-hcfp8 subsys=endpoint level=info msg="Successful endpoint creation" containerID=83a1949606 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=598 identity=56566 ipv4=10.0.0.22 ipv6= k8sPodName=openstack/keystone-rabbit-init-hcfp8 subsys=daemon level=info msg="Delete endpoint request" containerID=83a1949606 endpointID=598 k8sNamespace=openstack k8sPodName=keystone-rabbit-init-hcfp8 subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=ef6d97f9-d445-4ae1-adcd-804a6ec0ae82 k8s:batch.kubernetes.io/job-name=keystone-rabbit-init k8s:component=rabbit-init k8s:controller-uid=ef6d97f9-d445-4ae1-adcd-804a6ec0ae82 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-rabbit-init k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=83a1949606 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=598 identity=56566 ipv4=10.0.0.22 ipv6= k8sPodName=openstack/keystone-rabbit-init-hcfp8 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.79 04d6f470-18cf-42c4-8eaf-6d5a08a86936 default }" containerID=4ec6d8374a7957bcc12c707b237b79f91e9b9379a7c4581cc43ccd00fc43f8d8 datapathConfiguration="&{false false false false false }" interface=lxcbed0c3fc1448 k8sPodName=openstack/keystone-domain-manage-q7hn6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4ec6d8374a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=777 ipv4=10.0.0.79 ipv6= k8sPodName=openstack/keystone-domain-manage-q7hn6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4ec6d8374a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=777 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=dce6ae1f-05d3-4545-927c-985014856c93,k8s:batch.kubernetes.io/job-name=keystone-domain-manage,k8s:component=domain-manage,k8s:controller-uid=dce6ae1f-05d3-4545-927c-985014856c93,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-domain-manage,k8s:release_group=keystone" ipv4=10.0.0.79 ipv6= k8sPodName=openstack/keystone-domain-manage-q7hn6 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=dce6ae1f-05d3-4545-927c-985014856c93;k8s:batch.kubernetes.io/job-name=keystone-domain-manage;k8s:component=domain-manage;k8s:controller-uid=dce6ae1f-05d3-4545-927c-985014856c93;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-domain-manage;k8s:release_group=keystone;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=4ec6d8374a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=777 identity=21187 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=dce6ae1f-05d3-4545-927c-985014856c93,k8s:batch.kubernetes.io/job-name=keystone-domain-manage,k8s:component=domain-manage,k8s:controller-uid=dce6ae1f-05d3-4545-927c-985014856c93,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-domain-manage,k8s:release_group=keystone" ipv4=10.0.0.79 ipv6= k8sPodName=openstack/keystone-domain-manage-q7hn6 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4ec6d8374a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=777 identity=21187 ipv4=10.0.0.79 ipv6= k8sPodName=openstack/keystone-domain-manage-q7hn6 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=4ec6d8374a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=777 identity=21187 ipv4=10.0.0.79 ipv6= k8sPodName=openstack/keystone-domain-manage-q7hn6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=4ec6d8374a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=777 identity=21187 ipv4=10.0.0.79 ipv6= k8sPodName=openstack/keystone-domain-manage-q7hn6 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=4ec6d8374a endpointID=777 k8sNamespace=openstack k8sPodName=keystone-domain-manage-q7hn6 subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=dce6ae1f-05d3-4545-927c-985014856c93 k8s:batch.kubernetes.io/job-name=keystone-domain-manage k8s:component=domain-manage k8s:controller-uid=dce6ae1f-05d3-4545-927c-985014856c93 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-domain-manage k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=4ec6d8374a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=777 identity=21187 ipv4=10.0.0.79 ipv6= k8sPodName=openstack/keystone-domain-manage-q7hn6 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.213 91c524d7-2865-4694-84e7-02133793f9c5 default }" containerID=d39364d365c2d9b0c36c08da2367f66ccf3fe7e59c795bcdb06721b56a1eabe2 datapathConfiguration="&{false false false false false }" interface=lxc34da2370f92b k8sPodName=openstack/keystone-bootstrap-tr9l6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d39364d365 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3587 ipv4=10.0.0.213 ipv6= k8sPodName=openstack/keystone-bootstrap-tr9l6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d39364d365 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3587 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=61e2bdf5-646f-474c-a651-64c738fb2252,k8s:batch.kubernetes.io/job-name=keystone-bootstrap,k8s:component=bootstrap,k8s:controller-uid=61e2bdf5-646f-474c-a651-64c738fb2252,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-bootstrap,k8s:release_group=keystone" ipv4=10.0.0.213 ipv6= k8sPodName=openstack/keystone-bootstrap-tr9l6 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=d39364d365 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3587 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.213 ipv6= k8sPodName=openstack/keystone-bootstrap-tr9l6 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=61e2bdf5-646f-474c-a651-64c738fb2252;k8s:batch.kubernetes.io/job-name=keystone-bootstrap;k8s:component=bootstrap;k8s:controller-uid=61e2bdf5-646f-474c-a651-64c738fb2252;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-bootstrap;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d39364d365 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3587 identity=35479 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=61e2bdf5-646f-474c-a651-64c738fb2252,k8s:batch.kubernetes.io/job-name=keystone-bootstrap,k8s:component=bootstrap,k8s:controller-uid=61e2bdf5-646f-474c-a651-64c738fb2252,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-bootstrap,k8s:release_group=keystone" ipv4=10.0.0.213 ipv6= k8sPodName=openstack/keystone-bootstrap-tr9l6 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d39364d365 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3587 identity=35479 ipv4=10.0.0.213 ipv6= k8sPodName=openstack/keystone-bootstrap-tr9l6 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d39364d365 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3587 identity=35479 ipv4=10.0.0.213 ipv6= k8sPodName=openstack/keystone-bootstrap-tr9l6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=d39364d365 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3587 identity=35479 ipv4=10.0.0.213 ipv6= k8sPodName=openstack/keystone-bootstrap-tr9l6 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=d39364d365 endpointID=3587 k8sNamespace=openstack k8sPodName=keystone-bootstrap-tr9l6 subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=61e2bdf5-646f-474c-a651-64c738fb2252 k8s:batch.kubernetes.io/job-name=keystone-bootstrap k8s:component=bootstrap k8s:controller-uid=61e2bdf5-646f-474c-a651-64c738fb2252 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-bootstrap k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=d39364d365 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3587 identity=35479 ipv4=10.0.0.213 ipv6= k8sPodName=openstack/keystone-bootstrap-tr9l6 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.217 e9efb94f-e0b7-41da-b1d7-2161df450ead default }" containerID=31e4266e8044fee671db797d377f6ac34707f96727e870307e61c1f2af65cc8f datapathConfiguration="&{false false false false false }" interface=lxc186a299d48f2 k8sPodName=local-path-storage/helper-pod-create-pvc-4d686299-99f0-4e5d-b900-5c5c041050df labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=31e4266e80 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3549 ipv4=10.0.0.217 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-4d686299-99f0-4e5d-b900-5c5c041050df subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=31e4266e80 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3549 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.217 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-4d686299-99f0-4e5d-b900-5c5c041050df subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=31e4266e80 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3549 identity=302 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.217 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-4d686299-99f0-4e5d-b900-5c5c041050df oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=31e4266e80 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3549 identity=302 ipv4=10.0.0.217 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-4d686299-99f0-4e5d-b900-5c5c041050df subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=31e4266e80 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3549 identity=302 ipv4=10.0.0.217 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-4d686299-99f0-4e5d-b900-5c5c041050df subsys=endpoint level=info msg="Successful endpoint creation" containerID=31e4266e80 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3549 identity=302 ipv4=10.0.0.217 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-4d686299-99f0-4e5d-b900-5c5c041050df subsys=daemon level=info msg="Delete endpoint request" containerID=31e4266e80 endpointID=3549 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-4d686299-99f0-4e5d-b900-5c5c041050df subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=31e4266e80 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3549 identity=302 ipv4=10.0.0.217 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-4d686299-99f0-4e5d-b900-5c5c041050df subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.70 4b430027-04b0-43ba-82b0-ce5b0fd1927e default }" containerID=1ec6914882e88c474000a934f7bc7453d3fb65d243f87e173baeb5383479727a datapathConfiguration="&{false false false false false }" interface=lxc5fd0ca2c31a9 k8sPodName=openstack/rabbitmq-barbican-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1ec6914882 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1893 ipv4=10.0.0.70 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1ec6914882 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1893 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-barbican,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0" ipv4=10.0.0.70 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-barbican;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1ec6914882 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1893 identity=9664 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-barbican,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0" ipv4=10.0.0.70 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1ec6914882 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1893 identity=9664 ipv4=10.0.0.70 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=1ec6914882 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1893 identity=9664 ipv4=10.0.0.70 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=1ec6914882 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1893 identity=9664 ipv4=10.0.0.70 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Conntrack garbage collector interval recalculated" deleteRatio=0.035085286837014895 newInterval=11m15s subsys=map-ct level=info msg="Create endpoint request" addressing="&{10.0.0.248 196e3774-3776-4c31-ad0a-dc032e9318a9 default }" containerID=4bb8a88aea070c42f90e1020805eff613137a3e408f0a21453e56f33bdaaf24e datapathConfiguration="&{false false false false false }" interface=lxc778a2acc2973 k8sPodName=openstack/barbican-api-54b959f86b-2d5jm labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4bb8a88aea datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2571 ipv4=10.0.0.248 ipv6= k8sPodName=openstack/barbican-api-54b959f86b-2d5jm subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4bb8a88aea datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2571 identityLabels="k8s:application=barbican,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=barbican" ipv4=10.0.0.248 ipv6= k8sPodName=openstack/barbican-api-54b959f86b-2d5jm subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4bb8a88aea datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2571 identity=9537 identityLabels="k8s:application=barbican,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=barbican" ipv4=10.0.0.248 ipv6= k8sPodName=openstack/barbican-api-54b959f86b-2d5jm oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=4bb8a88aea datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2571 identity=9537 ipv4=10.0.0.248 ipv6= k8sPodName=openstack/barbican-api-54b959f86b-2d5jm subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.13 85f14807-9f12-4dd1-a398-8e180ce6800a default }" containerID=ea48662738d3addf260058a853a63c04c5b13c9dbf2f26742fd5d6f9e93deddb datapathConfiguration="&{false false false false false }" interface=lxce379debc3306 k8sPodName=openstack/barbican-db-init-xldc6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ea48662738 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1395 ipv4=10.0.0.13 ipv6= k8sPodName=openstack/barbican-db-init-xldc6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ea48662738 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1395 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=b16e745c-0760-4421-8b8e-bcb81c8ef574,k8s:batch.kubernetes.io/job-name=barbican-db-init,k8s:component=db-init,k8s:controller-uid=b16e745c-0760-4421-8b8e-bcb81c8ef574,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-init,k8s:release_group=barbican" ipv4=10.0.0.13 ipv6= k8sPodName=openstack/barbican-db-init-xldc6 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=b16e745c-0760-4421-8b8e-bcb81c8ef574;k8s:batch.kubernetes.io/job-name=barbican-db-init;k8s:component=db-init;k8s:controller-uid=b16e745c-0760-4421-8b8e-bcb81c8ef574;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-db-init;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ea48662738 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1395 identity=28577 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=b16e745c-0760-4421-8b8e-bcb81c8ef574,k8s:batch.kubernetes.io/job-name=barbican-db-init,k8s:component=db-init,k8s:controller-uid=b16e745c-0760-4421-8b8e-bcb81c8ef574,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-init,k8s:release_group=barbican" ipv4=10.0.0.13 ipv6= k8sPodName=openstack/barbican-db-init-xldc6 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ea48662738 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1395 identity=28577 ipv4=10.0.0.13 ipv6= k8sPodName=openstack/barbican-db-init-xldc6 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=4bb8a88aea datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2571 identity=9537 ipv4=10.0.0.248 ipv6= k8sPodName=openstack/barbican-api-54b959f86b-2d5jm subsys=endpoint level=info msg="Successful endpoint creation" containerID=4bb8a88aea datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2571 identity=9537 ipv4=10.0.0.248 ipv6= k8sPodName=openstack/barbican-api-54b959f86b-2d5jm subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=ea48662738 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1395 identity=28577 ipv4=10.0.0.13 ipv6= k8sPodName=openstack/barbican-db-init-xldc6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=ea48662738 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1395 identity=28577 ipv4=10.0.0.13 ipv6= k8sPodName=openstack/barbican-db-init-xldc6 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=ea48662738 endpointID=1395 k8sNamespace=openstack k8sPodName=barbican-db-init-xldc6 subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=b16e745c-0760-4421-8b8e-bcb81c8ef574 k8s:batch.kubernetes.io/job-name=barbican-db-init k8s:component=db-init k8s:controller-uid=b16e745c-0760-4421-8b8e-bcb81c8ef574 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-db-init k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=ea48662738 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1395 identity=28577 ipv4=10.0.0.13 ipv6= k8sPodName=openstack/barbican-db-init-xldc6 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.194 222a6137-aab5-420c-b362-862021dd277e default }" containerID=c9c28a4a73e5ebd6134330b1391134f7aeaaa7d05852da4eabf365c4c71ab38e datapathConfiguration="&{false false false false false }" interface=lxcf8bbf4006791 k8sPodName=openstack/barbican-db-sync-rp997 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c9c28a4a73 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=336 ipv4=10.0.0.194 ipv6= k8sPodName=openstack/barbican-db-sync-rp997 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c9c28a4a73 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=336 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=8cd6970b-9ffc-4ea0-8fa1-b7e0c270e09a,k8s:batch.kubernetes.io/job-name=barbican-db-sync,k8s:component=db-sync,k8s:controller-uid=8cd6970b-9ffc-4ea0-8fa1-b7e0c270e09a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-sync,k8s:release_group=barbican" ipv4=10.0.0.194 ipv6= k8sPodName=openstack/barbican-db-sync-rp997 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=c9c28a4a73 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=336 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.194 ipv6= k8sPodName=openstack/barbican-db-sync-rp997 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=8cd6970b-9ffc-4ea0-8fa1-b7e0c270e09a;k8s:batch.kubernetes.io/job-name=barbican-db-sync;k8s:component=db-sync;k8s:controller-uid=8cd6970b-9ffc-4ea0-8fa1-b7e0c270e09a;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-db-sync;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c9c28a4a73 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=336 identity=4171 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=8cd6970b-9ffc-4ea0-8fa1-b7e0c270e09a,k8s:batch.kubernetes.io/job-name=barbican-db-sync,k8s:component=db-sync,k8s:controller-uid=8cd6970b-9ffc-4ea0-8fa1-b7e0c270e09a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-sync,k8s:release_group=barbican" ipv4=10.0.0.194 ipv6= k8sPodName=openstack/barbican-db-sync-rp997 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c9c28a4a73 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=336 identity=4171 ipv4=10.0.0.194 ipv6= k8sPodName=openstack/barbican-db-sync-rp997 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c9c28a4a73 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=336 identity=4171 ipv4=10.0.0.194 ipv6= k8sPodName=openstack/barbican-db-sync-rp997 subsys=endpoint level=info msg="Successful endpoint creation" containerID=c9c28a4a73 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=336 identity=4171 ipv4=10.0.0.194 ipv6= k8sPodName=openstack/barbican-db-sync-rp997 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=c9c28a4a73 endpointID=336 k8sNamespace=openstack k8sPodName=barbican-db-sync-rp997 subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=8cd6970b-9ffc-4ea0-8fa1-b7e0c270e09a k8s:batch.kubernetes.io/job-name=barbican-db-sync k8s:component=db-sync k8s:controller-uid=8cd6970b-9ffc-4ea0-8fa1-b7e0c270e09a k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-db-sync k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=c9c28a4a73 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=336 identity=4171 ipv4=10.0.0.194 ipv6= k8sPodName=openstack/barbican-db-sync-rp997 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.77 bc648196-55a0-4d20-a0b3-de18d32a58e5 default }" containerID=6e65419d12d321dbca77dd2398a1ece61df0d1a39cabb3f552526f6014cfc6d8 datapathConfiguration="&{false false false false false }" interface=lxc4fd88f1e6916 k8sPodName=openstack/barbican-rabbit-init-5ljqn labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6e65419d12 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1640 ipv4=10.0.0.77 ipv6= k8sPodName=openstack/barbican-rabbit-init-5ljqn subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6e65419d12 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1640 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=3fed329f-0db4-4373-943c-ac00af1030cf,k8s:batch.kubernetes.io/job-name=barbican-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=3fed329f-0db4-4373-943c-ac00af1030cf,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-rabbit-init,k8s:release_group=barbican" ipv4=10.0.0.77 ipv6= k8sPodName=openstack/barbican-rabbit-init-5ljqn subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=3fed329f-0db4-4373-943c-ac00af1030cf;k8s:batch.kubernetes.io/job-name=barbican-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=3fed329f-0db4-4373-943c-ac00af1030cf;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-rabbit-init;k8s:release_group=barbican;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=6e65419d12 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1640 identity=18318 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=3fed329f-0db4-4373-943c-ac00af1030cf,k8s:batch.kubernetes.io/job-name=barbican-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=3fed329f-0db4-4373-943c-ac00af1030cf,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-rabbit-init,k8s:release_group=barbican" ipv4=10.0.0.77 ipv6= k8sPodName=openstack/barbican-rabbit-init-5ljqn oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6e65419d12 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1640 identity=18318 ipv4=10.0.0.77 ipv6= k8sPodName=openstack/barbican-rabbit-init-5ljqn subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=6e65419d12 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1640 identity=18318 ipv4=10.0.0.77 ipv6= k8sPodName=openstack/barbican-rabbit-init-5ljqn subsys=endpoint level=info msg="Successful endpoint creation" containerID=6e65419d12 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1640 identity=18318 ipv4=10.0.0.77 ipv6= k8sPodName=openstack/barbican-rabbit-init-5ljqn subsys=daemon level=info msg="Delete endpoint request" containerID=6e65419d12 endpointID=1640 k8sNamespace=openstack k8sPodName=barbican-rabbit-init-5ljqn subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=3fed329f-0db4-4373-943c-ac00af1030cf k8s:batch.kubernetes.io/job-name=barbican-rabbit-init k8s:component=rabbit-init k8s:controller-uid=3fed329f-0db4-4373-943c-ac00af1030cf k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-rabbit-init k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=6e65419d12 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1640 identity=18318 ipv4=10.0.0.77 ipv6= k8sPodName=openstack/barbican-rabbit-init-5ljqn subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.115 4ad73932-3e3d-4052-bef5-e7c3fa1cebc2 default }" containerID=9e851281a60ecf612aa1b71a645b33785d2d127fc8a6d9aec7b9534bb1f037d3 datapathConfiguration="&{false false false false false }" interface=lxc21e633a2b55e k8sPodName=openstack/barbican-ks-service-vz4kl labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9e851281a6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=380 ipv4=10.0.0.115 ipv6= k8sPodName=openstack/barbican-ks-service-vz4kl subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9e851281a6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=380 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=a73cc57a-d7ac-44b8-a853-a9734401fbd6,k8s:batch.kubernetes.io/job-name=barbican-ks-service,k8s:component=ks-service,k8s:controller-uid=a73cc57a-d7ac-44b8-a853-a9734401fbd6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-service,k8s:release_group=barbican" ipv4=10.0.0.115 ipv6= k8sPodName=openstack/barbican-ks-service-vz4kl subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=9e851281a6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=380 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.115 ipv6= k8sPodName=openstack/barbican-ks-service-vz4kl line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=a73cc57a-d7ac-44b8-a853-a9734401fbd6;k8s:batch.kubernetes.io/job-name=barbican-ks-service;k8s:component=ks-service;k8s:controller-uid=a73cc57a-d7ac-44b8-a853-a9734401fbd6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-service;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9e851281a6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=380 identity=6917 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=a73cc57a-d7ac-44b8-a853-a9734401fbd6,k8s:batch.kubernetes.io/job-name=barbican-ks-service,k8s:component=ks-service,k8s:controller-uid=a73cc57a-d7ac-44b8-a853-a9734401fbd6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-service,k8s:release_group=barbican" ipv4=10.0.0.115 ipv6= k8sPodName=openstack/barbican-ks-service-vz4kl oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9e851281a6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=380 identity=6917 ipv4=10.0.0.115 ipv6= k8sPodName=openstack/barbican-ks-service-vz4kl subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=9e851281a6 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=380 identity=6917 ipv4=10.0.0.115 ipv6= k8sPodName=openstack/barbican-ks-service-vz4kl subsys=endpoint level=info msg="Successful endpoint creation" containerID=9e851281a6 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=380 identity=6917 ipv4=10.0.0.115 ipv6= k8sPodName=openstack/barbican-ks-service-vz4kl subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=9e851281a6 endpointID=380 k8sNamespace=openstack k8sPodName=barbican-ks-service-vz4kl subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=a73cc57a-d7ac-44b8-a853-a9734401fbd6 k8s:batch.kubernetes.io/job-name=barbican-ks-service k8s:component=ks-service k8s:controller-uid=a73cc57a-d7ac-44b8-a853-a9734401fbd6 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-service k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=9e851281a6 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=380 identity=6917 ipv4=10.0.0.115 ipv6= k8sPodName=openstack/barbican-ks-service-vz4kl subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.133 8fd5a455-fdf1-45b7-ae15-5490a680e6a1 default }" containerID=f060aa33f1c99a0e7a6b2525a653c00f21c8dd3e1ac2fd1ecdf01279e69c8a98 datapathConfiguration="&{false false false false false }" interface=lxca3ad6eb2503f k8sPodName=openstack/barbican-ks-endpoints-fxxj2 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f060aa33f1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3990 ipv4=10.0.0.133 ipv6= k8sPodName=openstack/barbican-ks-endpoints-fxxj2 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f060aa33f1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3990 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=972b2db9-910c-432c-82ba-09677f17cd49,k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=972b2db9-910c-432c-82ba-09677f17cd49,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-endpoints,k8s:release_group=barbican" ipv4=10.0.0.133 ipv6= k8sPodName=openstack/barbican-ks-endpoints-fxxj2 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=972b2db9-910c-432c-82ba-09677f17cd49;k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=972b2db9-910c-432c-82ba-09677f17cd49;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-endpoints;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f060aa33f1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3990 identity=9452 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=972b2db9-910c-432c-82ba-09677f17cd49,k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=972b2db9-910c-432c-82ba-09677f17cd49,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-endpoints,k8s:release_group=barbican" ipv4=10.0.0.133 ipv6= k8sPodName=openstack/barbican-ks-endpoints-fxxj2 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f060aa33f1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3990 identity=9452 ipv4=10.0.0.133 ipv6= k8sPodName=openstack/barbican-ks-endpoints-fxxj2 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=f060aa33f1 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3990 identity=9452 ipv4=10.0.0.133 ipv6= k8sPodName=openstack/barbican-ks-endpoints-fxxj2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=f060aa33f1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3990 identity=9452 ipv4=10.0.0.133 ipv6= k8sPodName=openstack/barbican-ks-endpoints-fxxj2 subsys=daemon level=info msg="Delete endpoint request" containerID=f060aa33f1 endpointID=3990 k8sNamespace=openstack k8sPodName=barbican-ks-endpoints-fxxj2 subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=972b2db9-910c-432c-82ba-09677f17cd49 k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=972b2db9-910c-432c-82ba-09677f17cd49 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-endpoints k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=f060aa33f1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3990 identity=9452 ipv4=10.0.0.133 ipv6= k8sPodName=openstack/barbican-ks-endpoints-fxxj2 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.62 0d096cb0-5ceb-4251-b752-62576f2fcbce default }" containerID=2b45ece00587a8f41688426ffd7f6513ef9b622289d8a14e3c27b1375ac6ee87 datapathConfiguration="&{false false false false false }" interface=lxcc00c1d885f0a k8sPodName=openstack/barbican-ks-user-25xgn labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2b45ece005 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1278 ipv4=10.0.0.62 ipv6= k8sPodName=openstack/barbican-ks-user-25xgn subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2b45ece005 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1278 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=b547d50f-afde-4655-ba2c-bf87456a2d31,k8s:batch.kubernetes.io/job-name=barbican-ks-user,k8s:component=ks-user,k8s:controller-uid=b547d50f-afde-4655-ba2c-bf87456a2d31,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-user,k8s:release_group=barbican" ipv4=10.0.0.62 ipv6= k8sPodName=openstack/barbican-ks-user-25xgn subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=b547d50f-afde-4655-ba2c-bf87456a2d31;k8s:batch.kubernetes.io/job-name=barbican-ks-user;k8s:component=ks-user;k8s:controller-uid=b547d50f-afde-4655-ba2c-bf87456a2d31;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-user;k8s:release_group=barbican;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=2b45ece005 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1278 identity=5149 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=b547d50f-afde-4655-ba2c-bf87456a2d31,k8s:batch.kubernetes.io/job-name=barbican-ks-user,k8s:component=ks-user,k8s:controller-uid=b547d50f-afde-4655-ba2c-bf87456a2d31,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-user,k8s:release_group=barbican" ipv4=10.0.0.62 ipv6= k8sPodName=openstack/barbican-ks-user-25xgn oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2b45ece005 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1278 identity=5149 ipv4=10.0.0.62 ipv6= k8sPodName=openstack/barbican-ks-user-25xgn subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=2b45ece005 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1278 identity=5149 ipv4=10.0.0.62 ipv6= k8sPodName=openstack/barbican-ks-user-25xgn subsys=endpoint level=info msg="Successful endpoint creation" containerID=2b45ece005 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1278 identity=5149 ipv4=10.0.0.62 ipv6= k8sPodName=openstack/barbican-ks-user-25xgn subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=2b45ece005 endpointID=1278 k8sNamespace=openstack k8sPodName=barbican-ks-user-25xgn subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=b547d50f-afde-4655-ba2c-bf87456a2d31 k8s:batch.kubernetes.io/job-name=barbican-ks-user k8s:component=ks-user k8s:controller-uid=b547d50f-afde-4655-ba2c-bf87456a2d31 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-user k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=2b45ece005 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1278 identity=5149 ipv4=10.0.0.62 ipv6= k8sPodName=openstack/barbican-ks-user-25xgn subsys=endpoint level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Create endpoint request" addressing="&{10.0.0.33 0ddc7a19-46ed-4fcf-99c5-f19184ba289c default }" containerID=833d5bbfdb8bcadc06274799121babdd9c2a98fb5c399f0a50fd4b21cb8efce1 datapathConfiguration="&{false false false false false }" interface=lxc4d8435d2d83c k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-fqkvp labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=833d5bbfdb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1863 ipv4=10.0.0.33 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-fqkvp subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=833d5bbfdb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1863 identityLabels="k8s:app=rook-ceph-operator,k8s:helm.sh/chart=rook-ceph-v1.15.9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph,k8s:io.cilium.k8s.namespace.labels.name=rook-ceph,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system,k8s:io.kubernetes.pod.namespace=rook-ceph" ipv4=10.0.0.33 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-fqkvp subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:rook-ceph k8s:io.cilium.k8s.namespace.labels.name:rook-ceph]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-operator;k8s:helm.sh/chart=rook-ceph-v1.15.9;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph;k8s:io.cilium.k8s.namespace.labels.name=rook-ceph;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system;k8s:io.kubernetes.pod.namespace=rook-ceph;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=833d5bbfdb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1863 identity=10136 identityLabels="k8s:app=rook-ceph-operator,k8s:helm.sh/chart=rook-ceph-v1.15.9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph,k8s:io.cilium.k8s.namespace.labels.name=rook-ceph,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system,k8s:io.kubernetes.pod.namespace=rook-ceph" ipv4=10.0.0.33 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-fqkvp oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=833d5bbfdb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1863 identity=10136 ipv4=10.0.0.33 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-fqkvp subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=833d5bbfdb datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1863 identity=10136 ipv4=10.0.0.33 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-fqkvp subsys=endpoint level=info msg="Successful endpoint creation" containerID=833d5bbfdb datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1863 identity=10136 ipv4=10.0.0.33 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-fqkvp subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.10 d7d3679d-805d-4f43-b49f-1850482720b3 default }" containerID=22a9440efdb5bb35ddce99ec2d89454749e30b736962a03381046c626e45afa9 datapathConfiguration="&{false false false false false }" interface=lxc7aee86780214 k8sPodName=openstack/rook-ceph-detect-version-62s67 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=22a9440efd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=470 ipv4=10.0.0.10 ipv6= k8sPodName=openstack/rook-ceph-detect-version-62s67 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=22a9440efd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=470 identityLabels="k8s:app=rook-ceph-detect-version,k8s:batch.kubernetes.io/controller-uid=c1e49771-42c8-4837-a5fa-3a638958acfd,k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version,k8s:controller-uid=c1e49771-42c8-4837-a5fa-3a638958acfd,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=rook-ceph-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.10 ipv6= k8sPodName=openstack/rook-ceph-detect-version-62s67 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-detect-version;k8s:batch.kubernetes.io/controller-uid=c1e49771-42c8-4837-a5fa-3a638958acfd;k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version;k8s:controller-uid=c1e49771-42c8-4837-a5fa-3a638958acfd;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=rook-ceph-detect-version;k8s:rook-version=v1.15.9;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=22a9440efd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=470 identity=27798 identityLabels="k8s:app=rook-ceph-detect-version,k8s:batch.kubernetes.io/controller-uid=c1e49771-42c8-4837-a5fa-3a638958acfd,k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version,k8s:controller-uid=c1e49771-42c8-4837-a5fa-3a638958acfd,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=rook-ceph-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.10 ipv6= k8sPodName=openstack/rook-ceph-detect-version-62s67 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=22a9440efd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=470 identity=27798 ipv4=10.0.0.10 ipv6= k8sPodName=openstack/rook-ceph-detect-version-62s67 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=22a9440efd datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=470 identity=27798 ipv4=10.0.0.10 ipv6= k8sPodName=openstack/rook-ceph-detect-version-62s67 subsys=endpoint level=info msg="Successful endpoint creation" containerID=22a9440efd datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=470 identity=27798 ipv4=10.0.0.10 ipv6= k8sPodName=openstack/rook-ceph-detect-version-62s67 subsys=daemon level=info msg="Delete endpoint request" containerID=22a9440efd endpointID=470 k8sNamespace=openstack k8sPodName=rook-ceph-detect-version-62s67 subsys=daemon level=info msg="Releasing key" key="[k8s:app=rook-ceph-detect-version k8s:batch.kubernetes.io/controller-uid=c1e49771-42c8-4837-a5fa-3a638958acfd k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version k8s:controller-uid=c1e49771-42c8-4837-a5fa-3a638958acfd k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=rook-ceph-detect-version k8s:rook-version=v1.15.9]" subsys=allocator level=info msg="Removed endpoint" containerID=22a9440efd datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=470 identity=27798 ipv4=10.0.0.10 ipv6= k8sPodName=openstack/rook-ceph-detect-version-62s67 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.122 76e4e3bf-f056-4e08-bfcb-952d668027e6 default }" containerID=23467d37105cd4f96d52b04559e6fca546b1e178b1df43728f183e636a4fb4b2 datapathConfiguration="&{false false false false false }" interface=lxcef471c250c9d k8sPodName=openstack/ceph-object-controller-detect-version-4v7tl labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=23467d3710 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2988 ipv4=10.0.0.122 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-4v7tl subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=23467d3710 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2988 identityLabels="k8s:app=ceph-object-controller-detect-version,k8s:batch.kubernetes.io/controller-uid=0e5da55f-8eec-4b1d-9972-7c8d97112a19,k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version,k8s:controller-uid=0e5da55f-8eec-4b1d-9972-7c8d97112a19,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=ceph-object-controller-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.122 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-4v7tl subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=ceph-object-controller-detect-version;k8s:batch.kubernetes.io/controller-uid=0e5da55f-8eec-4b1d-9972-7c8d97112a19;k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version;k8s:controller-uid=0e5da55f-8eec-4b1d-9972-7c8d97112a19;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=ceph-object-controller-detect-version;k8s:rook-version=v1.15.9;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=23467d3710 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2988 identity=7667 identityLabels="k8s:app=ceph-object-controller-detect-version,k8s:batch.kubernetes.io/controller-uid=0e5da55f-8eec-4b1d-9972-7c8d97112a19,k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version,k8s:controller-uid=0e5da55f-8eec-4b1d-9972-7c8d97112a19,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=ceph-object-controller-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.122 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-4v7tl oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=23467d3710 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2988 identity=7667 ipv4=10.0.0.122 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-4v7tl subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=23467d3710 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2988 identity=7667 ipv4=10.0.0.122 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-4v7tl subsys=endpoint level=info msg="Successful endpoint creation" containerID=23467d3710 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2988 identity=7667 ipv4=10.0.0.122 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-4v7tl subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=23467d3710 endpointID=2988 k8sNamespace=openstack k8sPodName=ceph-object-controller-detect-version-4v7tl subsys=daemon level=info msg="Releasing key" key="[k8s:app=ceph-object-controller-detect-version k8s:batch.kubernetes.io/controller-uid=0e5da55f-8eec-4b1d-9972-7c8d97112a19 k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version k8s:controller-uid=0e5da55f-8eec-4b1d-9972-7c8d97112a19 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=ceph-object-controller-detect-version k8s:rook-version=v1.15.9]" subsys=allocator level=info msg="Removed endpoint" containerID=23467d3710 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2988 identity=7667 ipv4=10.0.0.122 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-4v7tl subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.182 1e670a79-c533-4941-84a4-5891ed93e233 default }" containerID=66b83da73cdef42bdfdd275ddbac1d02474d02f2f58526b64dd80a32f7934d8e datapathConfiguration="&{false false false false false }" interface=lxc7fc0ae77a349 k8sPodName=local-path-storage/helper-pod-create-pvc-acdc2d4d-90e0-44c7-a99d-88acd49f6d7b labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=66b83da73c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3512 ipv4=10.0.0.182 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-acdc2d4d-90e0-44c7-a99d-88acd49f6d7b subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=66b83da73c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3512 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.182 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-acdc2d4d-90e0-44c7-a99d-88acd49f6d7b subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=66b83da73c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3512 identity=302 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.182 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-acdc2d4d-90e0-44c7-a99d-88acd49f6d7b oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=66b83da73c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3512 identity=302 ipv4=10.0.0.182 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-acdc2d4d-90e0-44c7-a99d-88acd49f6d7b subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=66b83da73c datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3512 identity=302 ipv4=10.0.0.182 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-acdc2d4d-90e0-44c7-a99d-88acd49f6d7b subsys=endpoint level=info msg="Successful endpoint creation" containerID=66b83da73c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3512 identity=302 ipv4=10.0.0.182 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-acdc2d4d-90e0-44c7-a99d-88acd49f6d7b subsys=daemon level=info msg="Delete endpoint request" containerID=66b83da73c endpointID=3512 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-acdc2d4d-90e0-44c7-a99d-88acd49f6d7b subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=66b83da73c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3512 identity=302 ipv4=10.0.0.182 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-acdc2d4d-90e0-44c7-a99d-88acd49f6d7b subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.95 604a9424-fdd9-4e69-8d7d-ca1bac70bc20 default }" containerID=c1cec50d425b79249876f6761f8f23163a50c0fafcf3bd29e91a69905787d0b7 datapathConfiguration="&{false false false false false }" interface=lxce059c9685354 k8sPodName=openstack/rabbitmq-glance-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c1cec50d42 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=778 ipv4=10.0.0.95 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c1cec50d42 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=778 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-glance,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0" ipv4=10.0.0.95 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-glance;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c1cec50d42 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=778 identity=23537 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-glance,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0" ipv4=10.0.0.95 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c1cec50d42 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=778 identity=23537 ipv4=10.0.0.95 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=c1cec50d42 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=778 identity=23537 ipv4=10.0.0.95 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=c1cec50d42 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=778 identity=23537 ipv4=10.0.0.95 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.244 03a832d1-68f2-48fe-abe6-1f5daf70a0f0 default }" containerID=891b91d0285c15f5b5bae9bf43b67def1995f19fc49bbaaa7ac9772ee0dda945 datapathConfiguration="&{false false false false false }" interface=lxcb9e27b467999 k8sPodName=openstack/glance-db-init-zlz9h labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=891b91d028 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=925 ipv4=10.0.0.244 ipv6= k8sPodName=openstack/glance-db-init-zlz9h subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=891b91d028 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=925 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=eecf36fa-2802-44d8-940d-07dc06fec8dd,k8s:batch.kubernetes.io/job-name=glance-db-init,k8s:component=db-init,k8s:controller-uid=eecf36fa-2802-44d8-940d-07dc06fec8dd,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-init,k8s:release_group=glance" ipv4=10.0.0.244 ipv6= k8sPodName=openstack/glance-db-init-zlz9h subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=eecf36fa-2802-44d8-940d-07dc06fec8dd;k8s:batch.kubernetes.io/job-name=glance-db-init;k8s:component=db-init;k8s:controller-uid=eecf36fa-2802-44d8-940d-07dc06fec8dd;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-db-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=891b91d028 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=925 identity=19889 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=eecf36fa-2802-44d8-940d-07dc06fec8dd,k8s:batch.kubernetes.io/job-name=glance-db-init,k8s:component=db-init,k8s:controller-uid=eecf36fa-2802-44d8-940d-07dc06fec8dd,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-init,k8s:release_group=glance" ipv4=10.0.0.244 ipv6= k8sPodName=openstack/glance-db-init-zlz9h oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=891b91d028 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=925 identity=19889 ipv4=10.0.0.244 ipv6= k8sPodName=openstack/glance-db-init-zlz9h subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=891b91d028 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=925 identity=19889 ipv4=10.0.0.244 ipv6= k8sPodName=openstack/glance-db-init-zlz9h subsys=endpoint level=info msg="Successful endpoint creation" containerID=891b91d028 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=925 identity=19889 ipv4=10.0.0.244 ipv6= k8sPodName=openstack/glance-db-init-zlz9h subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.13 25482bab-edab-4c3b-acc6-fc2f40652871 default }" containerID=445c4f820f8d2a7dd35558f068f4ab4de9f9311f862e98d26dd948447e1eaea5 datapathConfiguration="&{false false false false false }" interface=lxc560b603a1aa4 k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-kvp7v labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=445c4f820f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1280 ipv4=10.0.0.13 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-kvp7v subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=445c4f820f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1280 identityLabels="k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io,k8s:app.kubernetes.io/created-by=rook-ceph-operator,k8s:app.kubernetes.io/instance=ceph,k8s:app.kubernetes.io/managed-by=rook-ceph-operator,k8s:app.kubernetes.io/name=ceph-rgw,k8s:app.kubernetes.io/part-of=ceph,k8s:app=rook-ceph-rgw,k8s:ceph_daemon_id=ceph,k8s:ceph_daemon_type=rgw,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw,k8s:io.kubernetes.pod.namespace=openstack,k8s:rgw=ceph,k8s:rook.io/operator-namespace=rook-ceph,k8s:rook_cluster=openstack,k8s:rook_object_store=ceph" ipv4=10.0.0.13 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-kvp7v subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=445c4f820f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1280 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.13 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-kvp7v line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=rook-ceph-rgw;k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io;k8s:app.kubernetes.io/created-by=rook-ceph-operator;k8s:app.kubernetes.io/instance=ceph;k8s:app.kubernetes.io/managed-by=rook-ceph-operator;k8s:app.kubernetes.io/name=ceph-rgw;k8s:app.kubernetes.io/part-of=ceph;k8s:ceph_daemon_id=ceph;k8s:ceph_daemon_type=rgw;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw;k8s:io.kubernetes.pod.namespace=openstack;k8s:rgw=ceph;k8s:rook.io/operator-namespace=rook-ceph;k8s:rook_cluster=openstack;k8s:rook_object_store=ceph;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=445c4f820f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1280 identity=7558 identityLabels="k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io,k8s:app.kubernetes.io/created-by=rook-ceph-operator,k8s:app.kubernetes.io/instance=ceph,k8s:app.kubernetes.io/managed-by=rook-ceph-operator,k8s:app.kubernetes.io/name=ceph-rgw,k8s:app.kubernetes.io/part-of=ceph,k8s:app=rook-ceph-rgw,k8s:ceph_daemon_id=ceph,k8s:ceph_daemon_type=rgw,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw,k8s:io.kubernetes.pod.namespace=openstack,k8s:rgw=ceph,k8s:rook.io/operator-namespace=rook-ceph,k8s:rook_cluster=openstack,k8s:rook_object_store=ceph" ipv4=10.0.0.13 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-kvp7v oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=445c4f820f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1280 identity=7558 ipv4=10.0.0.13 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-kvp7v subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.122 0d11897b-e108-4843-ac02-f26bd3e726ac default }" containerID=862ee1bedd3460f430c2bca78d8ca031eb49d2ec110d36150a73f6386bc35535 datapathConfiguration="&{false false false false false }" interface=lxca7039de654f9 k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-9h26b labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=862ee1bedd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=354 ipv4=10.0.0.122 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-9h26b subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=862ee1bedd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=354 identityLabels="k8s:app=rook-ceph-crashcollector,k8s:ceph-version=18.2.7-0,k8s:ceph_daemon_id=crash,k8s:crashcollector=crash,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default,k8s:io.kubernetes.pod.namespace=openstack,k8s:node_name=instance,k8s:rook_cluster=openstack" ipv4=10.0.0.122 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-9h26b subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-crashcollector;k8s:ceph-version=18.2.7-0;k8s:ceph_daemon_id=crash;k8s:crashcollector=crash;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default;k8s:io.kubernetes.pod.namespace=openstack;k8s:node_name=instance;k8s:rook_cluster=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=862ee1bedd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=354 identity=23678 identityLabels="k8s:app=rook-ceph-crashcollector,k8s:ceph-version=18.2.7-0,k8s:ceph_daemon_id=crash,k8s:crashcollector=crash,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default,k8s:io.kubernetes.pod.namespace=openstack,k8s:node_name=instance,k8s:rook_cluster=openstack" ipv4=10.0.0.122 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-9h26b oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=862ee1bedd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=354 identity=23678 ipv4=10.0.0.122 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-9h26b subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=445c4f820f datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1280 identity=7558 ipv4=10.0.0.13 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-kvp7v subsys=endpoint level=info msg="Successful endpoint creation" containerID=445c4f820f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1280 identity=7558 ipv4=10.0.0.13 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-kvp7v subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=862ee1bedd datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=354 identity=23678 ipv4=10.0.0.122 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-9h26b subsys=endpoint level=info msg="Successful endpoint creation" containerID=862ee1bedd datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=354 identity=23678 ipv4=10.0.0.122 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-9h26b subsys=daemon level=info msg="Delete endpoint request" containerID=891b91d028 endpointID=925 k8sNamespace=openstack k8sPodName=glance-db-init-zlz9h subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=eecf36fa-2802-44d8-940d-07dc06fec8dd k8s:batch.kubernetes.io/job-name=glance-db-init k8s:component=db-init k8s:controller-uid=eecf36fa-2802-44d8-940d-07dc06fec8dd k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-db-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=891b91d028 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=925 identity=19889 ipv4=10.0.0.244 ipv6= k8sPodName=openstack/glance-db-init-zlz9h subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.247 0ea9d747-56af-47cc-a4d7-5a8cf7fe9e09 default }" containerID=3ceefbbeb833acc5bf357b48f2f83f92ee69002230d8dece2f5cad5bb4db43be datapathConfiguration="&{false false false false false }" interface=lxcd0e11f9d41ef k8sPodName=openstack/glance-db-sync-sn7gf labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3ceefbbeb8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2588 ipv4=10.0.0.247 ipv6= k8sPodName=openstack/glance-db-sync-sn7gf subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3ceefbbeb8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2588 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=ba0c132e-21fb-46ea-b21c-8cf4fc0ae19a,k8s:batch.kubernetes.io/job-name=glance-db-sync,k8s:component=db-sync,k8s:controller-uid=ba0c132e-21fb-46ea-b21c-8cf4fc0ae19a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-sync,k8s:release_group=glance" ipv4=10.0.0.247 ipv6= k8sPodName=openstack/glance-db-sync-sn7gf subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=ba0c132e-21fb-46ea-b21c-8cf4fc0ae19a;k8s:batch.kubernetes.io/job-name=glance-db-sync;k8s:component=db-sync;k8s:controller-uid=ba0c132e-21fb-46ea-b21c-8cf4fc0ae19a;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-db-sync;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3ceefbbeb8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2588 identity=17762 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=ba0c132e-21fb-46ea-b21c-8cf4fc0ae19a,k8s:batch.kubernetes.io/job-name=glance-db-sync,k8s:component=db-sync,k8s:controller-uid=ba0c132e-21fb-46ea-b21c-8cf4fc0ae19a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-sync,k8s:release_group=glance" ipv4=10.0.0.247 ipv6= k8sPodName=openstack/glance-db-sync-sn7gf oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3ceefbbeb8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2588 identity=17762 ipv4=10.0.0.247 ipv6= k8sPodName=openstack/glance-db-sync-sn7gf subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=3ceefbbeb8 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2588 identity=17762 ipv4=10.0.0.247 ipv6= k8sPodName=openstack/glance-db-sync-sn7gf subsys=endpoint level=info msg="Successful endpoint creation" containerID=3ceefbbeb8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2588 identity=17762 ipv4=10.0.0.247 ipv6= k8sPodName=openstack/glance-db-sync-sn7gf subsys=daemon level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=3ceefbbeb8 endpointID=2588 k8sNamespace=openstack k8sPodName=glance-db-sync-sn7gf subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=ba0c132e-21fb-46ea-b21c-8cf4fc0ae19a k8s:batch.kubernetes.io/job-name=glance-db-sync k8s:component=db-sync k8s:controller-uid=ba0c132e-21fb-46ea-b21c-8cf4fc0ae19a k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-db-sync k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=3ceefbbeb8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2588 identity=17762 ipv4=10.0.0.247 ipv6= k8sPodName=openstack/glance-db-sync-sn7gf subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.171 75fdbb26-0316-44f1-819c-845a449f6ef3 default }" containerID=b426a0490d55014c306a0aba9e410c87734fd9232042c53fc50d8c6cd68aa884 datapathConfiguration="&{false false false false false }" interface=lxcbe3a9e3420c2 k8sPodName=openstack/glance-rabbit-init-c4c8g labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b426a0490d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1531 ipv4=10.0.0.171 ipv6= k8sPodName=openstack/glance-rabbit-init-c4c8g subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b426a0490d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1531 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=f876f397-52d8-45fd-9a7d-57b8a5a6a0ad,k8s:batch.kubernetes.io/job-name=glance-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=f876f397-52d8-45fd-9a7d-57b8a5a6a0ad,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-rabbit-init,k8s:release_group=glance" ipv4=10.0.0.171 ipv6= k8sPodName=openstack/glance-rabbit-init-c4c8g subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=b426a0490d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1531 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.171 ipv6= k8sPodName=openstack/glance-rabbit-init-c4c8g line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=f876f397-52d8-45fd-9a7d-57b8a5a6a0ad;k8s:batch.kubernetes.io/job-name=glance-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=f876f397-52d8-45fd-9a7d-57b8a5a6a0ad;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-rabbit-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b426a0490d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1531 identity=12848 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=f876f397-52d8-45fd-9a7d-57b8a5a6a0ad,k8s:batch.kubernetes.io/job-name=glance-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=f876f397-52d8-45fd-9a7d-57b8a5a6a0ad,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-rabbit-init,k8s:release_group=glance" ipv4=10.0.0.171 ipv6= k8sPodName=openstack/glance-rabbit-init-c4c8g oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b426a0490d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1531 identity=12848 ipv4=10.0.0.171 ipv6= k8sPodName=openstack/glance-rabbit-init-c4c8g subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b426a0490d datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1531 identity=12848 ipv4=10.0.0.171 ipv6= k8sPodName=openstack/glance-rabbit-init-c4c8g subsys=endpoint level=info msg="Successful endpoint creation" containerID=b426a0490d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1531 identity=12848 ipv4=10.0.0.171 ipv6= k8sPodName=openstack/glance-rabbit-init-c4c8g subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=b426a0490d endpointID=1531 k8sNamespace=openstack k8sPodName=glance-rabbit-init-c4c8g subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=f876f397-52d8-45fd-9a7d-57b8a5a6a0ad k8s:batch.kubernetes.io/job-name=glance-rabbit-init k8s:component=rabbit-init k8s:controller-uid=f876f397-52d8-45fd-9a7d-57b8a5a6a0ad k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-rabbit-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=b426a0490d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1531 identity=12848 ipv4=10.0.0.171 ipv6= k8sPodName=openstack/glance-rabbit-init-c4c8g subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.160 ecf42a68-9a46-4d81-8f5a-82eef6f9a472 default }" containerID=5c6d567d60ae04c185a1d9662902da62661676fb32b8539aa34dac0306cb0201 datapathConfiguration="&{false false false false false }" interface=lxc31fb9df2f662 k8sPodName=openstack/glance-ks-service-lcjgz labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5c6d567d60 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2592 ipv4=10.0.0.160 ipv6= k8sPodName=openstack/glance-ks-service-lcjgz subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5c6d567d60 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2592 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=2113f2f9-1bb8-4770-8861-ddc9f21b4729,k8s:batch.kubernetes.io/job-name=glance-ks-service,k8s:component=ks-service,k8s:controller-uid=2113f2f9-1bb8-4770-8861-ddc9f21b4729,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-service,k8s:release_group=glance" ipv4=10.0.0.160 ipv6= k8sPodName=openstack/glance-ks-service-lcjgz subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=2113f2f9-1bb8-4770-8861-ddc9f21b4729;k8s:batch.kubernetes.io/job-name=glance-ks-service;k8s:component=ks-service;k8s:controller-uid=2113f2f9-1bb8-4770-8861-ddc9f21b4729;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-service;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5c6d567d60 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2592 identity=7769 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=2113f2f9-1bb8-4770-8861-ddc9f21b4729,k8s:batch.kubernetes.io/job-name=glance-ks-service,k8s:component=ks-service,k8s:controller-uid=2113f2f9-1bb8-4770-8861-ddc9f21b4729,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-service,k8s:release_group=glance" ipv4=10.0.0.160 ipv6= k8sPodName=openstack/glance-ks-service-lcjgz oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5c6d567d60 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2592 identity=7769 ipv4=10.0.0.160 ipv6= k8sPodName=openstack/glance-ks-service-lcjgz subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=5c6d567d60 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2592 identity=7769 ipv4=10.0.0.160 ipv6= k8sPodName=openstack/glance-ks-service-lcjgz subsys=endpoint level=info msg="Successful endpoint creation" containerID=5c6d567d60 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2592 identity=7769 ipv4=10.0.0.160 ipv6= k8sPodName=openstack/glance-ks-service-lcjgz subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=5c6d567d60 endpointID=2592 k8sNamespace=openstack k8sPodName=glance-ks-service-lcjgz subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=2113f2f9-1bb8-4770-8861-ddc9f21b4729 k8s:batch.kubernetes.io/job-name=glance-ks-service k8s:component=ks-service k8s:controller-uid=2113f2f9-1bb8-4770-8861-ddc9f21b4729 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-service k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=5c6d567d60 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2592 identity=7769 ipv4=10.0.0.160 ipv6= k8sPodName=openstack/glance-ks-service-lcjgz subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.142 bbcd42bf-37c5-4dff-a64e-212b0ce9e74f default }" containerID=d9081d2741f204d2e4628c37c6d5d0024dd0056fb6cd9460a6ec354f4df9dbe1 datapathConfiguration="&{false false false false false }" interface=lxc51a24f2ad734 k8sPodName=openstack/glance-ks-endpoints-5f4xk labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d9081d2741 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2857 ipv4=10.0.0.142 ipv6= k8sPodName=openstack/glance-ks-endpoints-5f4xk subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d9081d2741 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2857 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=7fd04ada-804e-4322-bd09-a63de0d91667,k8s:batch.kubernetes.io/job-name=glance-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=7fd04ada-804e-4322-bd09-a63de0d91667,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-endpoints,k8s:release_group=glance" ipv4=10.0.0.142 ipv6= k8sPodName=openstack/glance-ks-endpoints-5f4xk subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=7fd04ada-804e-4322-bd09-a63de0d91667;k8s:batch.kubernetes.io/job-name=glance-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=7fd04ada-804e-4322-bd09-a63de0d91667;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-endpoints;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d9081d2741 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2857 identity=63104 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=7fd04ada-804e-4322-bd09-a63de0d91667,k8s:batch.kubernetes.io/job-name=glance-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=7fd04ada-804e-4322-bd09-a63de0d91667,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-endpoints,k8s:release_group=glance" ipv4=10.0.0.142 ipv6= k8sPodName=openstack/glance-ks-endpoints-5f4xk oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d9081d2741 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2857 identity=63104 ipv4=10.0.0.142 ipv6= k8sPodName=openstack/glance-ks-endpoints-5f4xk subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=d9081d2741 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2857 identity=63104 ipv4=10.0.0.142 ipv6= k8sPodName=openstack/glance-ks-endpoints-5f4xk subsys=endpoint level=info msg="Successful endpoint creation" containerID=d9081d2741 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2857 identity=63104 ipv4=10.0.0.142 ipv6= k8sPodName=openstack/glance-ks-endpoints-5f4xk subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=d9081d2741 endpointID=2857 k8sNamespace=openstack k8sPodName=glance-ks-endpoints-5f4xk subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=7fd04ada-804e-4322-bd09-a63de0d91667 k8s:batch.kubernetes.io/job-name=glance-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=7fd04ada-804e-4322-bd09-a63de0d91667 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-endpoints k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=d9081d2741 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2857 identity=63104 ipv4=10.0.0.142 ipv6= k8sPodName=openstack/glance-ks-endpoints-5f4xk subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.199 f4bee22f-8d70-447c-af98-f0eb9ea0a131 default }" containerID=1ec051db51075091fbf376daed76d90f4d4531fca2f6a88d35eca71b46768620 datapathConfiguration="&{false false false false false }" interface=lxcb69bd6f7b039 k8sPodName=openstack/glance-ks-user-7pgg9 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1ec051db51 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=48 ipv4=10.0.0.199 ipv6= k8sPodName=openstack/glance-ks-user-7pgg9 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1ec051db51 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=48 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=8a957437-4bbb-4da5-83cb-1f21ab8b7787,k8s:batch.kubernetes.io/job-name=glance-ks-user,k8s:component=ks-user,k8s:controller-uid=8a957437-4bbb-4da5-83cb-1f21ab8b7787,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-user,k8s:release_group=glance" ipv4=10.0.0.199 ipv6= k8sPodName=openstack/glance-ks-user-7pgg9 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=1ec051db51 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=48 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.199 ipv6= k8sPodName=openstack/glance-ks-user-7pgg9 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=8a957437-4bbb-4da5-83cb-1f21ab8b7787;k8s:batch.kubernetes.io/job-name=glance-ks-user;k8s:component=ks-user;k8s:controller-uid=8a957437-4bbb-4da5-83cb-1f21ab8b7787;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-user;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1ec051db51 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=48 identity=14054 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=8a957437-4bbb-4da5-83cb-1f21ab8b7787,k8s:batch.kubernetes.io/job-name=glance-ks-user,k8s:component=ks-user,k8s:controller-uid=8a957437-4bbb-4da5-83cb-1f21ab8b7787,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-user,k8s:release_group=glance" ipv4=10.0.0.199 ipv6= k8sPodName=openstack/glance-ks-user-7pgg9 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1ec051db51 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=48 identity=14054 ipv4=10.0.0.199 ipv6= k8sPodName=openstack/glance-ks-user-7pgg9 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=1ec051db51 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=48 identity=14054 ipv4=10.0.0.199 ipv6= k8sPodName=openstack/glance-ks-user-7pgg9 subsys=endpoint level=info msg="Successful endpoint creation" containerID=1ec051db51 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=48 identity=14054 ipv4=10.0.0.199 ipv6= k8sPodName=openstack/glance-ks-user-7pgg9 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=1ec051db51 endpointID=48 k8sNamespace=openstack k8sPodName=glance-ks-user-7pgg9 subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=8a957437-4bbb-4da5-83cb-1f21ab8b7787 k8s:batch.kubernetes.io/job-name=glance-ks-user k8s:component=ks-user k8s:controller-uid=8a957437-4bbb-4da5-83cb-1f21ab8b7787 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-user k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=1ec051db51 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=48 identity=14054 ipv4=10.0.0.199 ipv6= k8sPodName=openstack/glance-ks-user-7pgg9 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.239 ffadb8f2-97a0-45ab-aa98-b6bf50ede810 default }" containerID=6e49209426778434c2ca14d4c9b5d259fbe878d98bcdd000a127011b71775ec1 datapathConfiguration="&{false false false false false }" interface=lxc1f959dccc2e8 k8sPodName=openstack/glance-metadefs-load-b2qzx labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6e49209426 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2756 ipv4=10.0.0.239 ipv6= k8sPodName=openstack/glance-metadefs-load-b2qzx subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6e49209426 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2756 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=067d521f-b410-41b6-883b-d5f0803e261d,k8s:batch.kubernetes.io/job-name=glance-metadefs-load,k8s:component=metadefs_load,k8s:controller-uid=067d521f-b410-41b6-883b-d5f0803e261d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-metadefs-load,k8s:release_group=glance" ipv4=10.0.0.239 ipv6= k8sPodName=openstack/glance-metadefs-load-b2qzx subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=067d521f-b410-41b6-883b-d5f0803e261d;k8s:batch.kubernetes.io/job-name=glance-metadefs-load;k8s:component=metadefs_load;k8s:controller-uid=067d521f-b410-41b6-883b-d5f0803e261d;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-metadefs-load;k8s:release_group=glance;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=6e49209426 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2756 identity=2210 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=067d521f-b410-41b6-883b-d5f0803e261d,k8s:batch.kubernetes.io/job-name=glance-metadefs-load,k8s:component=metadefs_load,k8s:controller-uid=067d521f-b410-41b6-883b-d5f0803e261d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-metadefs-load,k8s:release_group=glance" ipv4=10.0.0.239 ipv6= k8sPodName=openstack/glance-metadefs-load-b2qzx oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6e49209426 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2756 identity=2210 ipv4=10.0.0.239 ipv6= k8sPodName=openstack/glance-metadefs-load-b2qzx subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=6e49209426 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2756 identity=2210 ipv4=10.0.0.239 ipv6= k8sPodName=openstack/glance-metadefs-load-b2qzx subsys=endpoint level=info msg="Successful endpoint creation" containerID=6e49209426 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2756 identity=2210 ipv4=10.0.0.239 ipv6= k8sPodName=openstack/glance-metadefs-load-b2qzx subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=6e49209426 endpointID=2756 k8sNamespace=openstack k8sPodName=glance-metadefs-load-b2qzx subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=067d521f-b410-41b6-883b-d5f0803e261d k8s:batch.kubernetes.io/job-name=glance-metadefs-load k8s:component=metadefs_load k8s:controller-uid=067d521f-b410-41b6-883b-d5f0803e261d k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-metadefs-load k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=6e49209426 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2756 identity=2210 ipv4=10.0.0.239 ipv6= k8sPodName=openstack/glance-metadefs-load-b2qzx subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.111 7d0a4eb6-6049-4265-af64-e08b7341434a default }" containerID=d60485d55b48c37a5ef8c27d1f41feafa5613bcca881e2b78149468313f6cab6 datapathConfiguration="&{false false false false false }" interface=lxc9fb051c50c91 k8sPodName=openstack/glance-storage-init-5hq4m labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d60485d55b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1019 ipv4=10.0.0.111 ipv6= k8sPodName=openstack/glance-storage-init-5hq4m subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d60485d55b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1019 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=41ed3a59-6aa7-45f2-818a-04070123a255,k8s:batch.kubernetes.io/job-name=glance-storage-init,k8s:component=storage-init,k8s:controller-uid=41ed3a59-6aa7-45f2-818a-04070123a255,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-storage-init,k8s:release_group=glance" ipv4=10.0.0.111 ipv6= k8sPodName=openstack/glance-storage-init-5hq4m subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=41ed3a59-6aa7-45f2-818a-04070123a255;k8s:batch.kubernetes.io/job-name=glance-storage-init;k8s:component=storage-init;k8s:controller-uid=41ed3a59-6aa7-45f2-818a-04070123a255;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-storage-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d60485d55b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1019 identity=14518 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=41ed3a59-6aa7-45f2-818a-04070123a255,k8s:batch.kubernetes.io/job-name=glance-storage-init,k8s:component=storage-init,k8s:controller-uid=41ed3a59-6aa7-45f2-818a-04070123a255,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-storage-init,k8s:release_group=glance" ipv4=10.0.0.111 ipv6= k8sPodName=openstack/glance-storage-init-5hq4m oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d60485d55b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1019 identity=14518 ipv4=10.0.0.111 ipv6= k8sPodName=openstack/glance-storage-init-5hq4m subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d60485d55b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1019 identity=14518 ipv4=10.0.0.111 ipv6= k8sPodName=openstack/glance-storage-init-5hq4m subsys=endpoint level=info msg="Successful endpoint creation" containerID=d60485d55b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1019 identity=14518 ipv4=10.0.0.111 ipv6= k8sPodName=openstack/glance-storage-init-5hq4m subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=d60485d55b endpointID=1019 k8sNamespace=openstack k8sPodName=glance-storage-init-5hq4m subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=41ed3a59-6aa7-45f2-818a-04070123a255 k8s:batch.kubernetes.io/job-name=glance-storage-init k8s:component=storage-init k8s:controller-uid=41ed3a59-6aa7-45f2-818a-04070123a255 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-storage-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=d60485d55b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1019 identity=14518 ipv4=10.0.0.111 ipv6= k8sPodName=openstack/glance-storage-init-5hq4m subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.127 c3eb5cdf-7f8f-4366-831f-10830cc165d8 default }" containerID=a6d5675df5aab390b175621a53d0dbcc11b542898d1c00da0c8194738ebadd27 datapathConfiguration="&{false false false false false }" interface=lxc73ef8795d691 k8sPodName=openstack/glance-api-99cf465d5-nn8kd labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a6d5675df5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2056 ipv4=10.0.0.127 ipv6= k8sPodName=openstack/glance-api-99cf465d5-nn8kd subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a6d5675df5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2056 identityLabels="k8s:application=glance,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=glance" ipv4=10.0.0.127 ipv6= k8sPodName=openstack/glance-api-99cf465d5-nn8kd subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a6d5675df5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2056 identity=35326 identityLabels="k8s:application=glance,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=glance" ipv4=10.0.0.127 ipv6= k8sPodName=openstack/glance-api-99cf465d5-nn8kd oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a6d5675df5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2056 identity=35326 ipv4=10.0.0.127 ipv6= k8sPodName=openstack/glance-api-99cf465d5-nn8kd subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=a6d5675df5 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2056 identity=35326 ipv4=10.0.0.127 ipv6= k8sPodName=openstack/glance-api-99cf465d5-nn8kd subsys=endpoint level=info msg="Successful endpoint creation" containerID=a6d5675df5 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2056 identity=35326 ipv4=10.0.0.127 ipv6= k8sPodName=openstack/glance-api-99cf465d5-nn8kd subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.223 af77c720-5be5-4bb5-b975-3a355b6b7e7f default }" containerID=caa94dc6f2e23e63fa124ea5deee598add29257ba7c5fbfd24266f481cb07390 datapathConfiguration="&{false false false false false }" interface=lxcb5831742339c k8sPodName=openstack/staffeln-api-6f6c4897f-hm2rm labels="[]" subsys=daemon sync-build=true level=info msg="Create endpoint request" addressing="&{10.0.0.60 364a8110-ba2b-423c-995e-890809cf678c default }" containerID=734bf1d767329d29ec83a45f562beac5b541b6dda71c25b25eb02f69d10cd276 datapathConfiguration="&{false false false false false }" interface=lxcdcba493f5fe8 k8sPodName=openstack/staffeln-conductor-7d9d6c668-hhhtr labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=caa94dc6f2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1754 ipv4=10.0.0.223 ipv6= k8sPodName=openstack/staffeln-api-6f6c4897f-hm2rm subsys=endpoint level=info msg="New endpoint" containerID=734bf1d767 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2776 ipv4=10.0.0.60 ipv6= k8sPodName=openstack/staffeln-conductor-7d9d6c668-hhhtr subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=caa94dc6f2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1754 identityLabels="k8s:application=staffeln,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.223 ipv6= k8sPodName=openstack/staffeln-api-6f6c4897f-hm2rm subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Resolving identity labels (blocking)" containerID=734bf1d767 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2776 identityLabels="k8s:application=staffeln,k8s:component=conductor,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.60 ipv6= k8sPodName=openstack/staffeln-conductor-7d9d6c668-hhhtr subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=staffeln;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=734bf1d767 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2776 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.60 ipv6= k8sPodName=openstack/staffeln-conductor-7d9d6c668-hhhtr line=611 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Identity of endpoint changed" containerID=caa94dc6f2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1754 identity=22987 identityLabels="k8s:application=staffeln,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.223 ipv6= k8sPodName=openstack/staffeln-api-6f6c4897f-hm2rm oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=caa94dc6f2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1754 identity=22987 ipv4=10.0.0.223 ipv6= k8sPodName=openstack/staffeln-api-6f6c4897f-hm2rm subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:component=conductor;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=734bf1d767 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2776 identity=7081 identityLabels="k8s:application=staffeln,k8s:component=conductor,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.60 ipv6= k8sPodName=openstack/staffeln-conductor-7d9d6c668-hhhtr oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=734bf1d767 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2776 identity=7081 ipv4=10.0.0.60 ipv6= k8sPodName=openstack/staffeln-conductor-7d9d6c668-hhhtr subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.132 5f0a93b9-b391-4455-921f-3be9512ff67d default }" containerID=1be3dbb6ecbae3bf3fb0eeefc8aa4a07f5a160a4f2e70d15322aa90f044c7e96 datapathConfiguration="&{false false false false false }" interface=lxce204dcc52e5b k8sPodName=openstack/staffeln-db-init-7z496 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1be3dbb6ec datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=888 ipv4=10.0.0.132 ipv6= k8sPodName=openstack/staffeln-db-init-7z496 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1be3dbb6ec datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=888 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=11060f3a-2ea3-4f3b-8f0a-ef1be1577def,k8s:batch.kubernetes.io/job-name=staffeln-db-init,k8s:component=db-init,k8s:controller-uid=11060f3a-2ea3-4f3b-8f0a-ef1be1577def,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-init,k8s:release_group=staffeln" ipv4=10.0.0.132 ipv6= k8sPodName=openstack/staffeln-db-init-7z496 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:batch.kubernetes.io/controller-uid=11060f3a-2ea3-4f3b-8f0a-ef1be1577def;k8s:batch.kubernetes.io/job-name=staffeln-db-init;k8s:component=db-init;k8s:controller-uid=11060f3a-2ea3-4f3b-8f0a-ef1be1577def;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=staffeln-db-init;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1be3dbb6ec datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=888 identity=15052 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=11060f3a-2ea3-4f3b-8f0a-ef1be1577def,k8s:batch.kubernetes.io/job-name=staffeln-db-init,k8s:component=db-init,k8s:controller-uid=11060f3a-2ea3-4f3b-8f0a-ef1be1577def,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-init,k8s:release_group=staffeln" ipv4=10.0.0.132 ipv6= k8sPodName=openstack/staffeln-db-init-7z496 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1be3dbb6ec datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=888 identity=15052 ipv4=10.0.0.132 ipv6= k8sPodName=openstack/staffeln-db-init-7z496 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=caa94dc6f2 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1754 identity=22987 ipv4=10.0.0.223 ipv6= k8sPodName=openstack/staffeln-api-6f6c4897f-hm2rm subsys=endpoint level=info msg="Successful endpoint creation" containerID=caa94dc6f2 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1754 identity=22987 ipv4=10.0.0.223 ipv6= k8sPodName=openstack/staffeln-api-6f6c4897f-hm2rm subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=1be3dbb6ec datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=888 identity=15052 ipv4=10.0.0.132 ipv6= k8sPodName=openstack/staffeln-db-init-7z496 subsys=endpoint level=info msg="Successful endpoint creation" containerID=1be3dbb6ec datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=888 identity=15052 ipv4=10.0.0.132 ipv6= k8sPodName=openstack/staffeln-db-init-7z496 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=734bf1d767 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2776 identity=7081 ipv4=10.0.0.60 ipv6= k8sPodName=openstack/staffeln-conductor-7d9d6c668-hhhtr subsys=endpoint level=info msg="Successful endpoint creation" containerID=734bf1d767 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2776 identity=7081 ipv4=10.0.0.60 ipv6= k8sPodName=openstack/staffeln-conductor-7d9d6c668-hhhtr subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=1be3dbb6ec endpointID=888 k8sNamespace=openstack k8sPodName=staffeln-db-init-7z496 subsys=daemon level=info msg="Releasing key" key="[k8s:application=staffeln k8s:batch.kubernetes.io/controller-uid=11060f3a-2ea3-4f3b-8f0a-ef1be1577def k8s:batch.kubernetes.io/job-name=staffeln-db-init k8s:component=db-init k8s:controller-uid=11060f3a-2ea3-4f3b-8f0a-ef1be1577def k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=staffeln-db-init k8s:release_group=staffeln]" subsys=allocator level=info msg="Removed endpoint" containerID=1be3dbb6ec datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=888 identity=15052 ipv4=10.0.0.132 ipv6= k8sPodName=openstack/staffeln-db-init-7z496 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.183 54c2187e-b25a-4932-b07b-9d23a91e6534 default }" containerID=59ed4d56e64d3665459a779b1288bcec69a532bb7455b0ea0902ecafcafcc1dc datapathConfiguration="&{false false false false false }" interface=lxc6ec22c30eab6 k8sPodName=openstack/staffeln-db-sync-8cdqx labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=59ed4d56e6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2108 ipv4=10.0.0.183 ipv6= k8sPodName=openstack/staffeln-db-sync-8cdqx subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=59ed4d56e6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2108 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=24c15234-17d2-49c7-99d6-73cf7d0e3c59,k8s:batch.kubernetes.io/job-name=staffeln-db-sync,k8s:component=db-sync,k8s:controller-uid=24c15234-17d2-49c7-99d6-73cf7d0e3c59,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-sync,k8s:release_group=staffeln" ipv4=10.0.0.183 ipv6= k8sPodName=openstack/staffeln-db-sync-8cdqx subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:batch.kubernetes.io/controller-uid=24c15234-17d2-49c7-99d6-73cf7d0e3c59;k8s:batch.kubernetes.io/job-name=staffeln-db-sync;k8s:component=db-sync;k8s:controller-uid=24c15234-17d2-49c7-99d6-73cf7d0e3c59;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=staffeln-db-sync;k8s:release_group=staffeln;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=59ed4d56e6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2108 identity=9229 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=24c15234-17d2-49c7-99d6-73cf7d0e3c59,k8s:batch.kubernetes.io/job-name=staffeln-db-sync,k8s:component=db-sync,k8s:controller-uid=24c15234-17d2-49c7-99d6-73cf7d0e3c59,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-sync,k8s:release_group=staffeln" ipv4=10.0.0.183 ipv6= k8sPodName=openstack/staffeln-db-sync-8cdqx oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=59ed4d56e6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2108 identity=9229 ipv4=10.0.0.183 ipv6= k8sPodName=openstack/staffeln-db-sync-8cdqx subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=59ed4d56e6 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2108 identity=9229 ipv4=10.0.0.183 ipv6= k8sPodName=openstack/staffeln-db-sync-8cdqx subsys=endpoint level=info msg="Successful endpoint creation" containerID=59ed4d56e6 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2108 identity=9229 ipv4=10.0.0.183 ipv6= k8sPodName=openstack/staffeln-db-sync-8cdqx subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=59ed4d56e6 endpointID=2108 k8sNamespace=openstack k8sPodName=staffeln-db-sync-8cdqx subsys=daemon level=info msg="Releasing key" key="[k8s:application=staffeln k8s:batch.kubernetes.io/controller-uid=24c15234-17d2-49c7-99d6-73cf7d0e3c59 k8s:batch.kubernetes.io/job-name=staffeln-db-sync k8s:component=db-sync k8s:controller-uid=24c15234-17d2-49c7-99d6-73cf7d0e3c59 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=staffeln-db-sync k8s:release_group=staffeln]" subsys=allocator level=info msg="Removed endpoint" containerID=59ed4d56e6 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2108 identity=9229 ipv4=10.0.0.183 ipv6= k8sPodName=openstack/staffeln-db-sync-8cdqx subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.84 731eb2e0-ab62-433b-99ad-625d0eb49fdb default }" containerID=162ee62ecc44912ba49b71d95bad32920e99ac7b915a0efb6ec6edc4a3955932 datapathConfiguration="&{false false false false false }" interface=lxcb3d5cb74c7ab k8sPodName=local-path-storage/helper-pod-create-pvc-056c2755-0ff5-4b02-bf7f-9a626e86e432 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=162ee62ecc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=347 ipv4=10.0.0.84 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-056c2755-0ff5-4b02-bf7f-9a626e86e432 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=162ee62ecc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=347 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.84 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-056c2755-0ff5-4b02-bf7f-9a626e86e432 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=162ee62ecc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=347 identity=302 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.84 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-056c2755-0ff5-4b02-bf7f-9a626e86e432 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=162ee62ecc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=347 identity=302 ipv4=10.0.0.84 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-056c2755-0ff5-4b02-bf7f-9a626e86e432 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=162ee62ecc datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=347 identity=302 ipv4=10.0.0.84 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-056c2755-0ff5-4b02-bf7f-9a626e86e432 subsys=endpoint level=info msg="Successful endpoint creation" containerID=162ee62ecc datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=347 identity=302 ipv4=10.0.0.84 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-056c2755-0ff5-4b02-bf7f-9a626e86e432 subsys=daemon level=info msg="Delete endpoint request" containerID=162ee62ecc endpointID=347 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-056c2755-0ff5-4b02-bf7f-9a626e86e432 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=162ee62ecc datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=347 identity=302 ipv4=10.0.0.84 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-056c2755-0ff5-4b02-bf7f-9a626e86e432 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.38 0050420c-48c6-4689-b407-6366486b593b default }" containerID=78042049bf8ec28786bebfdf510b58a683cd701de869754515e724155193e6f5 datapathConfiguration="&{false false false false false }" interface=lxc4d9eed6758f0 k8sPodName=openstack/rabbitmq-cinder-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=78042049bf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3512 ipv4=10.0.0.38 ipv6= k8sPodName=openstack/rabbitmq-cinder-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=78042049bf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3512 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-cinder,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cinder-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-cinder-server-0" ipv4=10.0.0.38 ipv6= k8sPodName=openstack/rabbitmq-cinder-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-cinder;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cinder-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-cinder-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=78042049bf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3512 identity=778 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-cinder,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cinder-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-cinder-server-0" ipv4=10.0.0.38 ipv6= k8sPodName=openstack/rabbitmq-cinder-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=78042049bf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3512 identity=778 ipv4=10.0.0.38 ipv6= k8sPodName=openstack/rabbitmq-cinder-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=78042049bf datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3512 identity=778 ipv4=10.0.0.38 ipv6= k8sPodName=openstack/rabbitmq-cinder-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=78042049bf datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3512 identity=778 ipv4=10.0.0.38 ipv6= k8sPodName=openstack/rabbitmq-cinder-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.194 ae375caf-40e1-4ff4-89ad-ed9edb0ce741 default }" containerID=54ff7b32a318231ab8e06f27b8e2279244ae68ce8ab2415c3865be672aa7fe73 datapathConfiguration="&{false false false false false }" interface=lxc779b69458f00 k8sPodName=openstack/cinder-scheduler-6d8ddf6cb9-4gwp4 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=54ff7b32a3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2222 ipv4=10.0.0.194 ipv6= k8sPodName=openstack/cinder-scheduler-6d8ddf6cb9-4gwp4 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=54ff7b32a3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2222 identityLabels="k8s:application=cinder,k8s:component=scheduler,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-scheduler,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=cinder" ipv4=10.0.0.194 ipv6= k8sPodName=openstack/cinder-scheduler-6d8ddf6cb9-4gwp4 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:component=scheduler;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-scheduler;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=cinder;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=54ff7b32a3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2222 identity=4966 identityLabels="k8s:application=cinder,k8s:component=scheduler,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-scheduler,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=cinder" ipv4=10.0.0.194 ipv6= k8sPodName=openstack/cinder-scheduler-6d8ddf6cb9-4gwp4 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=54ff7b32a3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2222 identity=4966 ipv4=10.0.0.194 ipv6= k8sPodName=openstack/cinder-scheduler-6d8ddf6cb9-4gwp4 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.62 d96005af-2d80-4627-b723-7adb81c69141 default }" containerID=98b14dbdbe6895e703cd5d0d1f29c2aeaab0a4fedbe38a9a6bb15daa4dad5f28 datapathConfiguration="&{false false false false false }" interface=lxc95515ba61e92 k8sPodName=openstack/cinder-api-84448db98c-qmql5 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=98b14dbdbe datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3431 ipv4=10.0.0.62 ipv6= k8sPodName=openstack/cinder-api-84448db98c-qmql5 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=98b14dbdbe datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3431 identityLabels="k8s:application=cinder,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=cinder" ipv4=10.0.0.62 ipv6= k8sPodName=openstack/cinder-api-84448db98c-qmql5 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=98b14dbdbe datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3431 identity=24878 identityLabels="k8s:application=cinder,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=cinder" ipv4=10.0.0.62 ipv6= k8sPodName=openstack/cinder-api-84448db98c-qmql5 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=98b14dbdbe datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3431 identity=24878 ipv4=10.0.0.62 ipv6= k8sPodName=openstack/cinder-api-84448db98c-qmql5 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=54ff7b32a3 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2222 identity=4966 ipv4=10.0.0.194 ipv6= k8sPodName=openstack/cinder-scheduler-6d8ddf6cb9-4gwp4 subsys=endpoint level=info msg="Successful endpoint creation" containerID=54ff7b32a3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2222 identity=4966 ipv4=10.0.0.194 ipv6= k8sPodName=openstack/cinder-scheduler-6d8ddf6cb9-4gwp4 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.207 46f9801e-8c0f-475e-bdf9-78040a42abb9 default }" containerID=bf0037ed0c44de5f9e15f41bf22b3e1eb684ca07d33491569419dd72d6ae6d72 datapathConfiguration="&{false false false false false }" interface=lxcffcef13faaef k8sPodName=openstack/cinder-db-init-lrnp7 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=bf0037ed0c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1601 ipv4=10.0.0.207 ipv6= k8sPodName=openstack/cinder-db-init-lrnp7 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=bf0037ed0c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1601 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=c8eee10a-07cc-43d8-8ccc-04de13fd81cc,k8s:batch.kubernetes.io/job-name=cinder-db-init,k8s:component=db-init,k8s:controller-uid=c8eee10a-07cc-43d8-8ccc-04de13fd81cc,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-db-init,k8s:release_group=cinder" ipv4=10.0.0.207 ipv6= k8sPodName=openstack/cinder-db-init-lrnp7 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=c8eee10a-07cc-43d8-8ccc-04de13fd81cc;k8s:batch.kubernetes.io/job-name=cinder-db-init;k8s:component=db-init;k8s:controller-uid=c8eee10a-07cc-43d8-8ccc-04de13fd81cc;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-db-init;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=bf0037ed0c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1601 identity=7075 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=c8eee10a-07cc-43d8-8ccc-04de13fd81cc,k8s:batch.kubernetes.io/job-name=cinder-db-init,k8s:component=db-init,k8s:controller-uid=c8eee10a-07cc-43d8-8ccc-04de13fd81cc,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-db-init,k8s:release_group=cinder" ipv4=10.0.0.207 ipv6= k8sPodName=openstack/cinder-db-init-lrnp7 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=bf0037ed0c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1601 identity=7075 ipv4=10.0.0.207 ipv6= k8sPodName=openstack/cinder-db-init-lrnp7 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=98b14dbdbe datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3431 identity=24878 ipv4=10.0.0.62 ipv6= k8sPodName=openstack/cinder-api-84448db98c-qmql5 subsys=endpoint level=info msg="Successful endpoint creation" containerID=98b14dbdbe datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3431 identity=24878 ipv4=10.0.0.62 ipv6= k8sPodName=openstack/cinder-api-84448db98c-qmql5 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=bf0037ed0c datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1601 identity=7075 ipv4=10.0.0.207 ipv6= k8sPodName=openstack/cinder-db-init-lrnp7 subsys=endpoint level=info msg="Successful endpoint creation" containerID=bf0037ed0c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1601 identity=7075 ipv4=10.0.0.207 ipv6= k8sPodName=openstack/cinder-db-init-lrnp7 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=bf0037ed0c endpointID=1601 k8sNamespace=openstack k8sPodName=cinder-db-init-lrnp7 subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=c8eee10a-07cc-43d8-8ccc-04de13fd81cc k8s:batch.kubernetes.io/job-name=cinder-db-init k8s:component=db-init k8s:controller-uid=c8eee10a-07cc-43d8-8ccc-04de13fd81cc k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-db-init k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=bf0037ed0c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1601 identity=7075 ipv4=10.0.0.207 ipv6= k8sPodName=openstack/cinder-db-init-lrnp7 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.109 4b8d06d0-b6e4-4f49-a2e6-4fcc265e0e4c default }" containerID=bb9397b5c7272afdfe5c6987c3b489a946d1dcdb4d0c1a984b9a84d54b7d4a01 datapathConfiguration="&{false false false false false }" interface=lxcefd0b0f6bb85 k8sPodName=openstack/cinder-db-sync-lcpvq labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=bb9397b5c7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=634 ipv4=10.0.0.109 ipv6= k8sPodName=openstack/cinder-db-sync-lcpvq subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=bb9397b5c7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=634 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=fab0066a-2933-44d6-9605-878ad5ffd724,k8s:batch.kubernetes.io/job-name=cinder-db-sync,k8s:component=db-sync,k8s:controller-uid=fab0066a-2933-44d6-9605-878ad5ffd724,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-db-sync,k8s:release_group=cinder" ipv4=10.0.0.109 ipv6= k8sPodName=openstack/cinder-db-sync-lcpvq subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=fab0066a-2933-44d6-9605-878ad5ffd724;k8s:batch.kubernetes.io/job-name=cinder-db-sync;k8s:component=db-sync;k8s:controller-uid=fab0066a-2933-44d6-9605-878ad5ffd724;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-db-sync;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=bb9397b5c7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=634 identity=11139 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=fab0066a-2933-44d6-9605-878ad5ffd724,k8s:batch.kubernetes.io/job-name=cinder-db-sync,k8s:component=db-sync,k8s:controller-uid=fab0066a-2933-44d6-9605-878ad5ffd724,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-db-sync,k8s:release_group=cinder" ipv4=10.0.0.109 ipv6= k8sPodName=openstack/cinder-db-sync-lcpvq oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=bb9397b5c7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=634 identity=11139 ipv4=10.0.0.109 ipv6= k8sPodName=openstack/cinder-db-sync-lcpvq subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=bb9397b5c7 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=634 identity=11139 ipv4=10.0.0.109 ipv6= k8sPodName=openstack/cinder-db-sync-lcpvq subsys=endpoint level=info msg="Successful endpoint creation" containerID=bb9397b5c7 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=634 identity=11139 ipv4=10.0.0.109 ipv6= k8sPodName=openstack/cinder-db-sync-lcpvq subsys=daemon level=info msg="Delete endpoint request" containerID=bb9397b5c7 endpointID=634 k8sNamespace=openstack k8sPodName=cinder-db-sync-lcpvq subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=fab0066a-2933-44d6-9605-878ad5ffd724 k8s:batch.kubernetes.io/job-name=cinder-db-sync k8s:component=db-sync k8s:controller-uid=fab0066a-2933-44d6-9605-878ad5ffd724 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-db-sync k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=bb9397b5c7 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=634 identity=11139 ipv4=10.0.0.109 ipv6= k8sPodName=openstack/cinder-db-sync-lcpvq subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.235 46b403c9-302f-41c8-8775-00e91c5023db default }" containerID=f41f14e0fd8261f818ed1bd903089ba5ebafc8d9eeb42fef2f9b63ade681beee datapathConfiguration="&{false false false false false }" interface=lxc8a989c5fde42 k8sPodName=openstack/cinder-rabbit-init-4htbv labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f41f14e0fd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2601 ipv4=10.0.0.235 ipv6= k8sPodName=openstack/cinder-rabbit-init-4htbv subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f41f14e0fd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2601 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=0d49e70a-5c3f-42bb-954e-0c80fb2858fa,k8s:batch.kubernetes.io/job-name=cinder-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=0d49e70a-5c3f-42bb-954e-0c80fb2858fa,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-rabbit-init,k8s:release_group=cinder" ipv4=10.0.0.235 ipv6= k8sPodName=openstack/cinder-rabbit-init-4htbv subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=0d49e70a-5c3f-42bb-954e-0c80fb2858fa;k8s:batch.kubernetes.io/job-name=cinder-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=0d49e70a-5c3f-42bb-954e-0c80fb2858fa;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-rabbit-init;k8s:release_group=cinder;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=f41f14e0fd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2601 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.235 ipv6= k8sPodName=openstack/cinder-rabbit-init-4htbv line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=f41f14e0fd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2601 identity=22438 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=0d49e70a-5c3f-42bb-954e-0c80fb2858fa,k8s:batch.kubernetes.io/job-name=cinder-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=0d49e70a-5c3f-42bb-954e-0c80fb2858fa,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-rabbit-init,k8s:release_group=cinder" ipv4=10.0.0.235 ipv6= k8sPodName=openstack/cinder-rabbit-init-4htbv oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f41f14e0fd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2601 identity=22438 ipv4=10.0.0.235 ipv6= k8sPodName=openstack/cinder-rabbit-init-4htbv subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f41f14e0fd datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2601 identity=22438 ipv4=10.0.0.235 ipv6= k8sPodName=openstack/cinder-rabbit-init-4htbv subsys=endpoint level=info msg="Successful endpoint creation" containerID=f41f14e0fd datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2601 identity=22438 ipv4=10.0.0.235 ipv6= k8sPodName=openstack/cinder-rabbit-init-4htbv subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=f41f14e0fd endpointID=2601 k8sNamespace=openstack k8sPodName=cinder-rabbit-init-4htbv subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=0d49e70a-5c3f-42bb-954e-0c80fb2858fa k8s:batch.kubernetes.io/job-name=cinder-rabbit-init k8s:component=rabbit-init k8s:controller-uid=0d49e70a-5c3f-42bb-954e-0c80fb2858fa k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-rabbit-init k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=f41f14e0fd datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2601 identity=22438 ipv4=10.0.0.235 ipv6= k8sPodName=openstack/cinder-rabbit-init-4htbv subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.136 23ba28ad-c5ad-4abd-9911-0c0074b43c31 default }" containerID=2b324844dd5a32935ea949fd5390e70867a439143673c15a437280a146f3df5d datapathConfiguration="&{false false false false false }" interface=lxc21d29b6342f6 k8sPodName=openstack/cinder-ks-service-ghf9g labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2b324844dd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=923 ipv4=10.0.0.136 ipv6= k8sPodName=openstack/cinder-ks-service-ghf9g subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2b324844dd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=923 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=9bd4624c-841a-400c-b5ee-17e979467196,k8s:batch.kubernetes.io/job-name=cinder-ks-service,k8s:component=ks-service,k8s:controller-uid=9bd4624c-841a-400c-b5ee-17e979467196,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-ks-service,k8s:release_group=cinder" ipv4=10.0.0.136 ipv6= k8sPodName=openstack/cinder-ks-service-ghf9g subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=9bd4624c-841a-400c-b5ee-17e979467196;k8s:batch.kubernetes.io/job-name=cinder-ks-service;k8s:component=ks-service;k8s:controller-uid=9bd4624c-841a-400c-b5ee-17e979467196;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-ks-service;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2b324844dd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=923 identity=16345 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=9bd4624c-841a-400c-b5ee-17e979467196,k8s:batch.kubernetes.io/job-name=cinder-ks-service,k8s:component=ks-service,k8s:controller-uid=9bd4624c-841a-400c-b5ee-17e979467196,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-ks-service,k8s:release_group=cinder" ipv4=10.0.0.136 ipv6= k8sPodName=openstack/cinder-ks-service-ghf9g oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2b324844dd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=923 identity=16345 ipv4=10.0.0.136 ipv6= k8sPodName=openstack/cinder-ks-service-ghf9g subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=2b324844dd datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=923 identity=16345 ipv4=10.0.0.136 ipv6= k8sPodName=openstack/cinder-ks-service-ghf9g subsys=endpoint level=info msg="Successful endpoint creation" containerID=2b324844dd datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=923 identity=16345 ipv4=10.0.0.136 ipv6= k8sPodName=openstack/cinder-ks-service-ghf9g subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=2b324844dd endpointID=923 k8sNamespace=openstack k8sPodName=cinder-ks-service-ghf9g subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=9bd4624c-841a-400c-b5ee-17e979467196 k8s:batch.kubernetes.io/job-name=cinder-ks-service k8s:component=ks-service k8s:controller-uid=9bd4624c-841a-400c-b5ee-17e979467196 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-ks-service k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=2b324844dd datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=923 identity=16345 ipv4=10.0.0.136 ipv6= k8sPodName=openstack/cinder-ks-service-ghf9g subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.64 057a5002-cd91-4bdf-bcf9-441ed18020ff default }" containerID=bad48a5d36fdde730a15cc2d9620d85964da006e297668d91f3bc22dc2614221 datapathConfiguration="&{false false false false false }" interface=lxc97e99ae14b96 k8sPodName=openstack/cinder-ks-endpoints-7vt5r labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=bad48a5d36 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2360 ipv4=10.0.0.64 ipv6= k8sPodName=openstack/cinder-ks-endpoints-7vt5r subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=bad48a5d36 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2360 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=b4b90414-9798-4b1c-97aa-539576ab80be,k8s:batch.kubernetes.io/job-name=cinder-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=b4b90414-9798-4b1c-97aa-539576ab80be,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-ks-endpoints,k8s:release_group=cinder" ipv4=10.0.0.64 ipv6= k8sPodName=openstack/cinder-ks-endpoints-7vt5r subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=b4b90414-9798-4b1c-97aa-539576ab80be;k8s:batch.kubernetes.io/job-name=cinder-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=b4b90414-9798-4b1c-97aa-539576ab80be;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-ks-endpoints;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=bad48a5d36 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2360 identity=1952 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=b4b90414-9798-4b1c-97aa-539576ab80be,k8s:batch.kubernetes.io/job-name=cinder-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=b4b90414-9798-4b1c-97aa-539576ab80be,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-ks-endpoints,k8s:release_group=cinder" ipv4=10.0.0.64 ipv6= k8sPodName=openstack/cinder-ks-endpoints-7vt5r oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=bad48a5d36 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2360 identity=1952 ipv4=10.0.0.64 ipv6= k8sPodName=openstack/cinder-ks-endpoints-7vt5r subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=bad48a5d36 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2360 identity=1952 ipv4=10.0.0.64 ipv6= k8sPodName=openstack/cinder-ks-endpoints-7vt5r subsys=endpoint level=info msg="Successful endpoint creation" containerID=bad48a5d36 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2360 identity=1952 ipv4=10.0.0.64 ipv6= k8sPodName=openstack/cinder-ks-endpoints-7vt5r subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=bad48a5d36 endpointID=2360 k8sNamespace=openstack k8sPodName=cinder-ks-endpoints-7vt5r subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=b4b90414-9798-4b1c-97aa-539576ab80be k8s:batch.kubernetes.io/job-name=cinder-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=b4b90414-9798-4b1c-97aa-539576ab80be k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-ks-endpoints k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=bad48a5d36 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2360 identity=1952 ipv4=10.0.0.64 ipv6= k8sPodName=openstack/cinder-ks-endpoints-7vt5r subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.39 5338b53e-ba21-4d06-be59-ae05c61d0fa0 default }" containerID=77edcbe287ad1dce0f40c82e6ca0317d8e6e00c9ae42b98c14e7991425fab386 datapathConfiguration="&{false false false false false }" interface=lxcb338309ebc4c k8sPodName=openstack/cinder-ks-user-7m72x labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=77edcbe287 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1 ipv4=10.0.0.39 ipv6= k8sPodName=openstack/cinder-ks-user-7m72x subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=77edcbe287 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=75600eff-bf98-49a9-a406-37ec2662476c,k8s:batch.kubernetes.io/job-name=cinder-ks-user,k8s:component=ks-user,k8s:controller-uid=75600eff-bf98-49a9-a406-37ec2662476c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-ks-user,k8s:release_group=cinder" ipv4=10.0.0.39 ipv6= k8sPodName=openstack/cinder-ks-user-7m72x subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=77edcbe287 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.39 ipv6= k8sPodName=openstack/cinder-ks-user-7m72x line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=75600eff-bf98-49a9-a406-37ec2662476c;k8s:batch.kubernetes.io/job-name=cinder-ks-user;k8s:component=ks-user;k8s:controller-uid=75600eff-bf98-49a9-a406-37ec2662476c;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-ks-user;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=77edcbe287 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1 identity=16854 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=75600eff-bf98-49a9-a406-37ec2662476c,k8s:batch.kubernetes.io/job-name=cinder-ks-user,k8s:component=ks-user,k8s:controller-uid=75600eff-bf98-49a9-a406-37ec2662476c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-ks-user,k8s:release_group=cinder" ipv4=10.0.0.39 ipv6= k8sPodName=openstack/cinder-ks-user-7m72x oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=77edcbe287 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1 identity=16854 ipv4=10.0.0.39 ipv6= k8sPodName=openstack/cinder-ks-user-7m72x subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=77edcbe287 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1 identity=16854 ipv4=10.0.0.39 ipv6= k8sPodName=openstack/cinder-ks-user-7m72x subsys=endpoint level=info msg="Successful endpoint creation" containerID=77edcbe287 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1 identity=16854 ipv4=10.0.0.39 ipv6= k8sPodName=openstack/cinder-ks-user-7m72x subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=77edcbe287 endpointID=1 k8sNamespace=openstack k8sPodName=cinder-ks-user-7m72x subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=75600eff-bf98-49a9-a406-37ec2662476c k8s:batch.kubernetes.io/job-name=cinder-ks-user k8s:component=ks-user k8s:controller-uid=75600eff-bf98-49a9-a406-37ec2662476c k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-ks-user k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=77edcbe287 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1 identity=16854 ipv4=10.0.0.39 ipv6= k8sPodName=openstack/cinder-ks-user-7m72x subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.154 5fd7273c-1161-48e2-b144-76b076deb6c0 default }" containerID=f56502604303f714ffaf05a7039dd2f1c9fb4491a78bd834b1b81c2225f9af6e datapathConfiguration="&{false false false false false }" interface=lxc364f7fcf87f1 k8sPodName=openstack/cinder-backup-storage-init-ptngd labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f565026043 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=277 ipv4=10.0.0.154 ipv6= k8sPodName=openstack/cinder-backup-storage-init-ptngd subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f565026043 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=277 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=22b032c4-2e5a-454c-a396-8379298e9ddc,k8s:batch.kubernetes.io/job-name=cinder-backup-storage-init,k8s:component=storage-init,k8s:controller-uid=22b032c4-2e5a-454c-a396-8379298e9ddc,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-backup-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-backup-storage-init,k8s:release_group=cinder" ipv4=10.0.0.154 ipv6= k8sPodName=openstack/cinder-backup-storage-init-ptngd subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=22b032c4-2e5a-454c-a396-8379298e9ddc;k8s:batch.kubernetes.io/job-name=cinder-backup-storage-init;k8s:component=storage-init;k8s:controller-uid=22b032c4-2e5a-454c-a396-8379298e9ddc;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-backup-storage-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-backup-storage-init;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f565026043 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=277 identity=10754 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=22b032c4-2e5a-454c-a396-8379298e9ddc,k8s:batch.kubernetes.io/job-name=cinder-backup-storage-init,k8s:component=storage-init,k8s:controller-uid=22b032c4-2e5a-454c-a396-8379298e9ddc,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-backup-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-backup-storage-init,k8s:release_group=cinder" ipv4=10.0.0.154 ipv6= k8sPodName=openstack/cinder-backup-storage-init-ptngd oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=f565026043 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=277 identity=10754 ipv4=10.0.0.154 ipv6= k8sPodName=openstack/cinder-backup-storage-init-ptngd subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f565026043 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=277 identity=10754 ipv4=10.0.0.154 ipv6= k8sPodName=openstack/cinder-backup-storage-init-ptngd subsys=endpoint level=info msg="Successful endpoint creation" containerID=f565026043 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=277 identity=10754 ipv4=10.0.0.154 ipv6= k8sPodName=openstack/cinder-backup-storage-init-ptngd subsys=daemon level=info msg="Delete endpoint request" containerID=f565026043 endpointID=277 k8sNamespace=openstack k8sPodName=cinder-backup-storage-init-ptngd subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=22b032c4-2e5a-454c-a396-8379298e9ddc k8s:batch.kubernetes.io/job-name=cinder-backup-storage-init k8s:component=storage-init k8s:controller-uid=22b032c4-2e5a-454c-a396-8379298e9ddc k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-backup-storage-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-backup-storage-init k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=f565026043 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=277 identity=10754 ipv4=10.0.0.154 ipv6= k8sPodName=openstack/cinder-backup-storage-init-ptngd subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.49 70d4ec7e-a272-45e2-bcbe-06d2547cdf0f default }" containerID=1419417089908744ee1aa2735047e7cb25541059b47e00e913d093b2ad21979b datapathConfiguration="&{false false false false false }" interface=lxc167250cff5d3 k8sPodName=openstack/cinder-create-internal-tenant-dzfvr labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1419417089 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=777 ipv4=10.0.0.49 ipv6= k8sPodName=openstack/cinder-create-internal-tenant-dzfvr subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1419417089 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=777 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=bd2d9bb2-a499-42e3-b9b1-c56b92e9b0d5,k8s:batch.kubernetes.io/job-name=cinder-create-internal-tenant,k8s:component=create-internal-tenant,k8s:controller-uid=bd2d9bb2-a499-42e3-b9b1-c56b92e9b0d5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-create-internal-tenant,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-create-internal-tenant,k8s:release_group=cinder" ipv4=10.0.0.49 ipv6= k8sPodName=openstack/cinder-create-internal-tenant-dzfvr subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=1419417089 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=777 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.49 ipv6= k8sPodName=openstack/cinder-create-internal-tenant-dzfvr line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=bd2d9bb2-a499-42e3-b9b1-c56b92e9b0d5;k8s:batch.kubernetes.io/job-name=cinder-create-internal-tenant;k8s:component=create-internal-tenant;k8s:controller-uid=bd2d9bb2-a499-42e3-b9b1-c56b92e9b0d5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-create-internal-tenant;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-create-internal-tenant;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1419417089 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=777 identity=2327 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=bd2d9bb2-a499-42e3-b9b1-c56b92e9b0d5,k8s:batch.kubernetes.io/job-name=cinder-create-internal-tenant,k8s:component=create-internal-tenant,k8s:controller-uid=bd2d9bb2-a499-42e3-b9b1-c56b92e9b0d5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-create-internal-tenant,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-create-internal-tenant,k8s:release_group=cinder" ipv4=10.0.0.49 ipv6= k8sPodName=openstack/cinder-create-internal-tenant-dzfvr oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1419417089 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=777 identity=2327 ipv4=10.0.0.49 ipv6= k8sPodName=openstack/cinder-create-internal-tenant-dzfvr subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=1419417089 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=777 identity=2327 ipv4=10.0.0.49 ipv6= k8sPodName=openstack/cinder-create-internal-tenant-dzfvr subsys=endpoint level=info msg="Successful endpoint creation" containerID=1419417089 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=777 identity=2327 ipv4=10.0.0.49 ipv6= k8sPodName=openstack/cinder-create-internal-tenant-dzfvr subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=1419417089 endpointID=777 k8sNamespace=openstack k8sPodName=cinder-create-internal-tenant-dzfvr subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=bd2d9bb2-a499-42e3-b9b1-c56b92e9b0d5 k8s:batch.kubernetes.io/job-name=cinder-create-internal-tenant k8s:component=create-internal-tenant k8s:controller-uid=bd2d9bb2-a499-42e3-b9b1-c56b92e9b0d5 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-create-internal-tenant k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-create-internal-tenant k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=1419417089 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=777 identity=2327 ipv4=10.0.0.49 ipv6= k8sPodName=openstack/cinder-create-internal-tenant-dzfvr subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.97 f62ae4a4-180c-4996-9d21-4703c4789618 default }" containerID=1525d048bfc94063756461d7bf285fe6b92fd0b21c4ac731b9b2a5cec1764317 datapathConfiguration="&{false false false false false }" interface=lxced54dbe8dc23 k8sPodName=openstack/cinder-storage-init-tq2z5 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1525d048bf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1335 ipv4=10.0.0.97 ipv6= k8sPodName=openstack/cinder-storage-init-tq2z5 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1525d048bf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1335 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=0b0b3c2c-c1ee-4895-be9f-6eb8a47c1f17,k8s:batch.kubernetes.io/job-name=cinder-storage-init,k8s:component=storage-init,k8s:controller-uid=0b0b3c2c-c1ee-4895-be9f-6eb8a47c1f17,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-storage-init,k8s:release_group=cinder" ipv4=10.0.0.97 ipv6= k8sPodName=openstack/cinder-storage-init-tq2z5 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=0b0b3c2c-c1ee-4895-be9f-6eb8a47c1f17;k8s:batch.kubernetes.io/job-name=cinder-storage-init;k8s:component=storage-init;k8s:controller-uid=0b0b3c2c-c1ee-4895-be9f-6eb8a47c1f17;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-storage-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-storage-init;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1525d048bf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1335 identity=6315 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=0b0b3c2c-c1ee-4895-be9f-6eb8a47c1f17,k8s:batch.kubernetes.io/job-name=cinder-storage-init,k8s:component=storage-init,k8s:controller-uid=0b0b3c2c-c1ee-4895-be9f-6eb8a47c1f17,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-storage-init,k8s:release_group=cinder" ipv4=10.0.0.97 ipv6= k8sPodName=openstack/cinder-storage-init-tq2z5 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=1525d048bf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1335 identity=6315 ipv4=10.0.0.97 ipv6= k8sPodName=openstack/cinder-storage-init-tq2z5 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=1525d048bf datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1335 identity=6315 ipv4=10.0.0.97 ipv6= k8sPodName=openstack/cinder-storage-init-tq2z5 subsys=endpoint level=info msg="Successful endpoint creation" containerID=1525d048bf datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1335 identity=6315 ipv4=10.0.0.97 ipv6= k8sPodName=openstack/cinder-storage-init-tq2z5 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=1525d048bf endpointID=1335 k8sNamespace=openstack k8sPodName=cinder-storage-init-tq2z5 subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=0b0b3c2c-c1ee-4895-be9f-6eb8a47c1f17 k8s:batch.kubernetes.io/job-name=cinder-storage-init k8s:component=storage-init k8s:controller-uid=0b0b3c2c-c1ee-4895-be9f-6eb8a47c1f17 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-storage-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-storage-init k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=1525d048bf datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1335 identity=6315 ipv4=10.0.0.97 ipv6= k8sPodName=openstack/cinder-storage-init-tq2z5 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.12 5d92bb4e-074d-4082-a040-3dd9145c9da2 default }" containerID=0179c8a1cabd50427d51197c23aa064dd84d9244483d2ee3b9e321c22cece125 datapathConfiguration="&{false false false false false }" interface=lxcb4fa1a18402f k8sPodName=openstack/cinder-bootstrap-g889x labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0179c8a1ca datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=792 ipv4=10.0.0.12 ipv6= k8sPodName=openstack/cinder-bootstrap-g889x subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0179c8a1ca datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=792 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=ebc39d08-ce5a-4667-886f-b71f6f0456d0,k8s:batch.kubernetes.io/job-name=cinder-bootstrap,k8s:component=bootstrap,k8s:controller-uid=ebc39d08-ce5a-4667-886f-b71f6f0456d0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-bootstrap,k8s:release_group=cinder" ipv4=10.0.0.12 ipv6= k8sPodName=openstack/cinder-bootstrap-g889x subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=ebc39d08-ce5a-4667-886f-b71f6f0456d0;k8s:batch.kubernetes.io/job-name=cinder-bootstrap;k8s:component=bootstrap;k8s:controller-uid=ebc39d08-ce5a-4667-886f-b71f6f0456d0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-bootstrap;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-bootstrap;k8s:release_group=cinder;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=0179c8a1ca datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=792 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.12 ipv6= k8sPodName=openstack/cinder-bootstrap-g889x line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=0179c8a1ca datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=792 identity=22064 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=ebc39d08-ce5a-4667-886f-b71f6f0456d0,k8s:batch.kubernetes.io/job-name=cinder-bootstrap,k8s:component=bootstrap,k8s:controller-uid=ebc39d08-ce5a-4667-886f-b71f6f0456d0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-bootstrap,k8s:release_group=cinder" ipv4=10.0.0.12 ipv6= k8sPodName=openstack/cinder-bootstrap-g889x oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0179c8a1ca datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=792 identity=22064 ipv4=10.0.0.12 ipv6= k8sPodName=openstack/cinder-bootstrap-g889x subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=0179c8a1ca datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=792 identity=22064 ipv4=10.0.0.12 ipv6= k8sPodName=openstack/cinder-bootstrap-g889x subsys=endpoint level=info msg="Successful endpoint creation" containerID=0179c8a1ca datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=792 identity=22064 ipv4=10.0.0.12 ipv6= k8sPodName=openstack/cinder-bootstrap-g889x subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.84 549fe56a-d7ea-40c7-8d2e-7d1137d40aa2 default }" containerID=e8416b33a2246a51a3d00750f0a6e119e3353cdb5b804603672f96c16bd93e9c datapathConfiguration="&{false false false false false }" interface=lxcb0b57449b50f k8sPodName=openstack/cinder-backup-7c96654df7-5kw9k labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e8416b33a2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=9 ipv4=10.0.0.84 ipv6= k8sPodName=openstack/cinder-backup-7c96654df7-5kw9k subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e8416b33a2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=9 identityLabels="k8s:application=cinder,k8s:component=backup,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-backup,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=cinder" ipv4=10.0.0.84 ipv6= k8sPodName=openstack/cinder-backup-7c96654df7-5kw9k subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:component=backup;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-backup;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=cinder;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=e8416b33a2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=9 identity=49188 identityLabels="k8s:application=cinder,k8s:component=backup,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-backup,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=cinder" ipv4=10.0.0.84 ipv6= k8sPodName=openstack/cinder-backup-7c96654df7-5kw9k oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e8416b33a2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=9 identity=49188 ipv4=10.0.0.84 ipv6= k8sPodName=openstack/cinder-backup-7c96654df7-5kw9k subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.54 f0ee6b37-e59e-47f9-954e-8a4e5028524f default }" containerID=0f2174d1990af17258c842f695a8996f12e3fca102406ea216d70bb10bea919e datapathConfiguration="&{false false false false false }" interface=lxcff34c8eb7b54 k8sPodName=openstack/cinder-volume-6ddd4f754-6gz6c labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0f2174d199 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=545 ipv4=10.0.0.54 ipv6= k8sPodName=openstack/cinder-volume-6ddd4f754-6gz6c subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0f2174d199 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=545 identityLabels="k8s:application=cinder,k8s:component=volume,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-volume,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=cinder" ipv4=10.0.0.54 ipv6= k8sPodName=openstack/cinder-volume-6ddd4f754-6gz6c subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:component=volume;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-volume;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0f2174d199 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=545 identity=9241 identityLabels="k8s:application=cinder,k8s:component=volume,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-volume,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=cinder" ipv4=10.0.0.54 ipv6= k8sPodName=openstack/cinder-volume-6ddd4f754-6gz6c oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0f2174d199 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=545 identity=9241 ipv4=10.0.0.54 ipv6= k8sPodName=openstack/cinder-volume-6ddd4f754-6gz6c subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e8416b33a2 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=9 identity=49188 ipv4=10.0.0.84 ipv6= k8sPodName=openstack/cinder-backup-7c96654df7-5kw9k subsys=endpoint level=info msg="Successful endpoint creation" containerID=e8416b33a2 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=9 identity=49188 ipv4=10.0.0.84 ipv6= k8sPodName=openstack/cinder-backup-7c96654df7-5kw9k subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=0f2174d199 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=545 identity=9241 ipv4=10.0.0.54 ipv6= k8sPodName=openstack/cinder-volume-6ddd4f754-6gz6c subsys=endpoint level=info msg="Successful endpoint creation" containerID=0f2174d199 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=545 identity=9241 ipv4=10.0.0.54 ipv6= k8sPodName=openstack/cinder-volume-6ddd4f754-6gz6c subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=0179c8a1ca endpointID=792 k8sNamespace=openstack k8sPodName=cinder-bootstrap-g889x subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=ebc39d08-ce5a-4667-886f-b71f6f0456d0 k8s:batch.kubernetes.io/job-name=cinder-bootstrap k8s:component=bootstrap k8s:controller-uid=ebc39d08-ce5a-4667-886f-b71f6f0456d0 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-bootstrap k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-bootstrap k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=0179c8a1ca datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=792 identity=22064 ipv4=10.0.0.12 ipv6= k8sPodName=openstack/cinder-bootstrap-g889x subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.249 d9cadf92-9ba8-4581-a6b4-280cd45007f4 default }" containerID=a81bdf4ea0b56cc17bdb4aec764276a53f067499e1491afd9436dc0f58af6ce6 datapathConfiguration="&{false false false false false }" interface=lxce2672e5bce06 k8sPodName=openstack/placement-api-7f6b4fddf4-jp74r labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a81bdf4ea0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2194 ipv4=10.0.0.249 ipv6= k8sPodName=openstack/placement-api-7f6b4fddf4-jp74r subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a81bdf4ea0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2194 identityLabels="k8s:application=placement,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=placement" ipv4=10.0.0.249 ipv6= k8sPodName=openstack/placement-api-7f6b4fddf4-jp74r subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=placement;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=placement-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=placement;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a81bdf4ea0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2194 identity=2184 identityLabels="k8s:application=placement,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=placement" ipv4=10.0.0.249 ipv6= k8sPodName=openstack/placement-api-7f6b4fddf4-jp74r oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a81bdf4ea0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2194 identity=2184 ipv4=10.0.0.249 ipv6= k8sPodName=openstack/placement-api-7f6b4fddf4-jp74r subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.96 d4673990-4be9-4fa4-abd0-207bcabec7f5 default }" containerID=2a7421661d0c88ecd709f81db1bcd7ae0de22a043e361956bd2b6aaf83e13964 datapathConfiguration="&{false false false false false }" interface=lxc79badcc212dd k8sPodName=openstack/placement-db-init-qx5h7 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2a7421661d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=459 ipv4=10.0.0.96 ipv6= k8sPodName=openstack/placement-db-init-qx5h7 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2a7421661d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=459 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=ad620a5f-f5a0-445a-b0d8-87f03909a34a,k8s:batch.kubernetes.io/job-name=placement-db-init,k8s:component=db-init,k8s:controller-uid=ad620a5f-f5a0-445a-b0d8-87f03909a34a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-db-init,k8s:release_group=placement" ipv4=10.0.0.96 ipv6= k8sPodName=openstack/placement-db-init-qx5h7 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=placement;k8s:batch.kubernetes.io/controller-uid=ad620a5f-f5a0-445a-b0d8-87f03909a34a;k8s:batch.kubernetes.io/job-name=placement-db-init;k8s:component=db-init;k8s:controller-uid=ad620a5f-f5a0-445a-b0d8-87f03909a34a;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=placement-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=placement-db-init;k8s:release_group=placement;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2a7421661d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=459 identity=6419 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=ad620a5f-f5a0-445a-b0d8-87f03909a34a,k8s:batch.kubernetes.io/job-name=placement-db-init,k8s:component=db-init,k8s:controller-uid=ad620a5f-f5a0-445a-b0d8-87f03909a34a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-db-init,k8s:release_group=placement" ipv4=10.0.0.96 ipv6= k8sPodName=openstack/placement-db-init-qx5h7 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2a7421661d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=459 identity=6419 ipv4=10.0.0.96 ipv6= k8sPodName=openstack/placement-db-init-qx5h7 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a81bdf4ea0 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2194 identity=2184 ipv4=10.0.0.249 ipv6= k8sPodName=openstack/placement-api-7f6b4fddf4-jp74r subsys=endpoint level=info msg="Successful endpoint creation" containerID=a81bdf4ea0 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2194 identity=2184 ipv4=10.0.0.249 ipv6= k8sPodName=openstack/placement-api-7f6b4fddf4-jp74r subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=2a7421661d datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=459 identity=6419 ipv4=10.0.0.96 ipv6= k8sPodName=openstack/placement-db-init-qx5h7 subsys=endpoint level=info msg="Successful endpoint creation" containerID=2a7421661d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=459 identity=6419 ipv4=10.0.0.96 ipv6= k8sPodName=openstack/placement-db-init-qx5h7 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=2a7421661d endpointID=459 k8sNamespace=openstack k8sPodName=placement-db-init-qx5h7 subsys=daemon level=info msg="Releasing key" key="[k8s:application=placement k8s:batch.kubernetes.io/controller-uid=ad620a5f-f5a0-445a-b0d8-87f03909a34a k8s:batch.kubernetes.io/job-name=placement-db-init k8s:component=db-init k8s:controller-uid=ad620a5f-f5a0-445a-b0d8-87f03909a34a k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=placement-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=placement-db-init k8s:release_group=placement]" subsys=allocator level=info msg="Removed endpoint" containerID=2a7421661d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=459 identity=6419 ipv4=10.0.0.96 ipv6= k8sPodName=openstack/placement-db-init-qx5h7 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.39 2d91c644-9552-481c-972c-847f4bd31cbb default }" containerID=0e736354050510bc9e53a94014da0aa605cf60bfb2e3b089721ce1cc95df0d77 datapathConfiguration="&{false false false false false }" interface=lxc62986f08b8ed k8sPodName=openstack/placement-db-sync-hc4nm labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0e73635405 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3116 ipv4=10.0.0.39 ipv6= k8sPodName=openstack/placement-db-sync-hc4nm subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0e73635405 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3116 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=ebef8329-9734-4e98-b100-405fa12b6cbd,k8s:batch.kubernetes.io/job-name=placement-db-sync,k8s:component=db-sync,k8s:controller-uid=ebef8329-9734-4e98-b100-405fa12b6cbd,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-db-sync,k8s:release_group=placement" ipv4=10.0.0.39 ipv6= k8sPodName=openstack/placement-db-sync-hc4nm subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=placement;k8s:batch.kubernetes.io/controller-uid=ebef8329-9734-4e98-b100-405fa12b6cbd;k8s:batch.kubernetes.io/job-name=placement-db-sync;k8s:component=db-sync;k8s:controller-uid=ebef8329-9734-4e98-b100-405fa12b6cbd;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=placement-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=placement-db-sync;k8s:release_group=placement;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=0e73635405 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3116 identity=18651 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=ebef8329-9734-4e98-b100-405fa12b6cbd,k8s:batch.kubernetes.io/job-name=placement-db-sync,k8s:component=db-sync,k8s:controller-uid=ebef8329-9734-4e98-b100-405fa12b6cbd,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-db-sync,k8s:release_group=placement" ipv4=10.0.0.39 ipv6= k8sPodName=openstack/placement-db-sync-hc4nm oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0e73635405 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3116 identity=18651 ipv4=10.0.0.39 ipv6= k8sPodName=openstack/placement-db-sync-hc4nm subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=0e73635405 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3116 identity=18651 ipv4=10.0.0.39 ipv6= k8sPodName=openstack/placement-db-sync-hc4nm subsys=endpoint level=info msg="Successful endpoint creation" containerID=0e73635405 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3116 identity=18651 ipv4=10.0.0.39 ipv6= k8sPodName=openstack/placement-db-sync-hc4nm subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=0e73635405 endpointID=3116 k8sNamespace=openstack k8sPodName=placement-db-sync-hc4nm subsys=daemon level=info msg="Releasing key" key="[k8s:application=placement k8s:batch.kubernetes.io/controller-uid=ebef8329-9734-4e98-b100-405fa12b6cbd k8s:batch.kubernetes.io/job-name=placement-db-sync k8s:component=db-sync k8s:controller-uid=ebef8329-9734-4e98-b100-405fa12b6cbd k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=placement-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=placement-db-sync k8s:release_group=placement]" subsys=allocator level=info msg="Removed endpoint" containerID=0e73635405 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3116 identity=18651 ipv4=10.0.0.39 ipv6= k8sPodName=openstack/placement-db-sync-hc4nm subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.66 5c59309c-a8ca-409b-94d8-f7b5bda4b892 default }" containerID=d696dd5b0f020e3f04d82fab77ee7999236f199db1809713b705c990d0688c54 datapathConfiguration="&{false false false false false }" interface=lxc937113681087 k8sPodName=openstack/placement-ks-service-xpzj5 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d696dd5b0f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1092 ipv4=10.0.0.66 ipv6= k8sPodName=openstack/placement-ks-service-xpzj5 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d696dd5b0f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1092 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=72b441bd-89e5-4656-876a-0f02b65e1ed4,k8s:batch.kubernetes.io/job-name=placement-ks-service,k8s:component=ks-service,k8s:controller-uid=72b441bd-89e5-4656-876a-0f02b65e1ed4,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-ks-service,k8s:release_group=placement" ipv4=10.0.0.66 ipv6= k8sPodName=openstack/placement-ks-service-xpzj5 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=placement;k8s:batch.kubernetes.io/controller-uid=72b441bd-89e5-4656-876a-0f02b65e1ed4;k8s:batch.kubernetes.io/job-name=placement-ks-service;k8s:component=ks-service;k8s:controller-uid=72b441bd-89e5-4656-876a-0f02b65e1ed4;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=placement-ks-service;k8s:release_group=placement;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d696dd5b0f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1092 identity=3027 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=72b441bd-89e5-4656-876a-0f02b65e1ed4,k8s:batch.kubernetes.io/job-name=placement-ks-service,k8s:component=ks-service,k8s:controller-uid=72b441bd-89e5-4656-876a-0f02b65e1ed4,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-ks-service,k8s:release_group=placement" ipv4=10.0.0.66 ipv6= k8sPodName=openstack/placement-ks-service-xpzj5 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d696dd5b0f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1092 identity=3027 ipv4=10.0.0.66 ipv6= k8sPodName=openstack/placement-ks-service-xpzj5 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d696dd5b0f datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1092 identity=3027 ipv4=10.0.0.66 ipv6= k8sPodName=openstack/placement-ks-service-xpzj5 subsys=endpoint level=info msg="Successful endpoint creation" containerID=d696dd5b0f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1092 identity=3027 ipv4=10.0.0.66 ipv6= k8sPodName=openstack/placement-ks-service-xpzj5 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=d696dd5b0f endpointID=1092 k8sNamespace=openstack k8sPodName=placement-ks-service-xpzj5 subsys=daemon level=info msg="Releasing key" key="[k8s:application=placement k8s:batch.kubernetes.io/controller-uid=72b441bd-89e5-4656-876a-0f02b65e1ed4 k8s:batch.kubernetes.io/job-name=placement-ks-service k8s:component=ks-service k8s:controller-uid=72b441bd-89e5-4656-876a-0f02b65e1ed4 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=placement-ks-service k8s:release_group=placement]" subsys=allocator level=info msg="Removed endpoint" containerID=d696dd5b0f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1092 identity=3027 ipv4=10.0.0.66 ipv6= k8sPodName=openstack/placement-ks-service-xpzj5 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.137 dede3cb0-4d86-40a8-a6d9-d041bc6f12de default }" containerID=ff8a7548b1e76f9b6f6cad0f48086fd7930630079e85b79693c897b3c82c5784 datapathConfiguration="&{false false false false false }" interface=lxc619e8e0744e5 k8sPodName=openstack/placement-ks-user-jcwdv labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ff8a7548b1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1755 ipv4=10.0.0.137 ipv6= k8sPodName=openstack/placement-ks-user-jcwdv subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ff8a7548b1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1755 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=9fb62d71-fd9c-40d5-9f59-44acef006768,k8s:batch.kubernetes.io/job-name=placement-ks-user,k8s:component=ks-user,k8s:controller-uid=9fb62d71-fd9c-40d5-9f59-44acef006768,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-ks-user,k8s:release_group=placement" ipv4=10.0.0.137 ipv6= k8sPodName=openstack/placement-ks-user-jcwdv subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=placement;k8s:batch.kubernetes.io/controller-uid=9fb62d71-fd9c-40d5-9f59-44acef006768;k8s:batch.kubernetes.io/job-name=placement-ks-user;k8s:component=ks-user;k8s:controller-uid=9fb62d71-fd9c-40d5-9f59-44acef006768;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=placement-ks-user;k8s:release_group=placement;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ff8a7548b1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1755 identity=59270 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=9fb62d71-fd9c-40d5-9f59-44acef006768,k8s:batch.kubernetes.io/job-name=placement-ks-user,k8s:component=ks-user,k8s:controller-uid=9fb62d71-fd9c-40d5-9f59-44acef006768,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-ks-user,k8s:release_group=placement" ipv4=10.0.0.137 ipv6= k8sPodName=openstack/placement-ks-user-jcwdv oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=ff8a7548b1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1755 identity=59270 ipv4=10.0.0.137 ipv6= k8sPodName=openstack/placement-ks-user-jcwdv subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ff8a7548b1 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1755 identity=59270 ipv4=10.0.0.137 ipv6= k8sPodName=openstack/placement-ks-user-jcwdv subsys=endpoint level=info msg="Successful endpoint creation" containerID=ff8a7548b1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1755 identity=59270 ipv4=10.0.0.137 ipv6= k8sPodName=openstack/placement-ks-user-jcwdv subsys=daemon level=info msg="Delete endpoint request" containerID=ff8a7548b1 endpointID=1755 k8sNamespace=openstack k8sPodName=placement-ks-user-jcwdv subsys=daemon level=info msg="Releasing key" key="[k8s:application=placement k8s:batch.kubernetes.io/controller-uid=9fb62d71-fd9c-40d5-9f59-44acef006768 k8s:batch.kubernetes.io/job-name=placement-ks-user k8s:component=ks-user k8s:controller-uid=9fb62d71-fd9c-40d5-9f59-44acef006768 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=placement-ks-user k8s:release_group=placement]" subsys=allocator level=info msg="Removed endpoint" containerID=ff8a7548b1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1755 identity=59270 ipv4=10.0.0.137 ipv6= k8sPodName=openstack/placement-ks-user-jcwdv subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.161 cb4a2bcc-675a-4044-8d4a-03f4863f7435 default }" containerID=e3a2c24fc296fa3450c6f4f07791ca558b9284f3261a24c0484de36e921225a8 datapathConfiguration="&{false false false false false }" interface=lxc21ee90f12c2a k8sPodName=openstack/placement-ks-endpoints-mxmrc labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e3a2c24fc2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3946 ipv4=10.0.0.161 ipv6= k8sPodName=openstack/placement-ks-endpoints-mxmrc subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e3a2c24fc2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3946 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=00e2e020-bb13-40cf-be1d-762404f8e53a,k8s:batch.kubernetes.io/job-name=placement-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=00e2e020-bb13-40cf-be1d-762404f8e53a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-ks-endpoints,k8s:release_group=placement" ipv4=10.0.0.161 ipv6= k8sPodName=openstack/placement-ks-endpoints-mxmrc subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=placement;k8s:batch.kubernetes.io/controller-uid=00e2e020-bb13-40cf-be1d-762404f8e53a;k8s:batch.kubernetes.io/job-name=placement-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=00e2e020-bb13-40cf-be1d-762404f8e53a;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=placement-ks-endpoints;k8s:release_group=placement;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e3a2c24fc2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3946 identity=48293 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=00e2e020-bb13-40cf-be1d-762404f8e53a,k8s:batch.kubernetes.io/job-name=placement-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=00e2e020-bb13-40cf-be1d-762404f8e53a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-ks-endpoints,k8s:release_group=placement" ipv4=10.0.0.161 ipv6= k8sPodName=openstack/placement-ks-endpoints-mxmrc oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e3a2c24fc2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3946 identity=48293 ipv4=10.0.0.161 ipv6= k8sPodName=openstack/placement-ks-endpoints-mxmrc subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=e3a2c24fc2 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3946 identity=48293 ipv4=10.0.0.161 ipv6= k8sPodName=openstack/placement-ks-endpoints-mxmrc subsys=endpoint level=info msg="Successful endpoint creation" containerID=e3a2c24fc2 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3946 identity=48293 ipv4=10.0.0.161 ipv6= k8sPodName=openstack/placement-ks-endpoints-mxmrc subsys=daemon level=info msg="Delete endpoint request" containerID=e3a2c24fc2 endpointID=3946 k8sNamespace=openstack k8sPodName=placement-ks-endpoints-mxmrc subsys=daemon level=info msg="Releasing key" key="[k8s:application=placement k8s:batch.kubernetes.io/controller-uid=00e2e020-bb13-40cf-be1d-762404f8e53a k8s:batch.kubernetes.io/job-name=placement-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=00e2e020-bb13-40cf-be1d-762404f8e53a k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=placement-ks-endpoints k8s:release_group=placement]" subsys=allocator level=info msg="Removed endpoint" containerID=e3a2c24fc2 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3946 identity=48293 ipv4=10.0.0.161 ipv6= k8sPodName=openstack/placement-ks-endpoints-mxmrc subsys=endpoint