level=info msg="Memory available for map entries (0.003% of 67421634560B): 168554086B" subsys=config level=info msg="option bpf-ct-global-tcp-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-ct-global-any-max set by dynamic sizing to 295708" subsys=config level=info msg="option bpf-nat-global-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-neigh-global-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-sock-rev-map-max set by dynamic sizing to 295708" subsys=config level=info msg=" --agent-health-port='9879'" subsys=daemon level=info msg=" --agent-labels=''" subsys=daemon level=info msg=" --agent-liveness-update-interval='1s'" subsys=daemon level=info msg=" --agent-not-ready-taint-key='node.cilium.io/agent-not-ready'" subsys=daemon level=info msg=" --allocator-list-timeout='3m0s'" subsys=daemon level=info msg=" --allow-icmp-frag-needed='true'" subsys=daemon level=info msg=" --allow-localhost='auto'" subsys=daemon level=info msg=" --annotate-k8s-node='false'" subsys=daemon level=info msg=" --api-rate-limit=''" subsys=daemon level=info msg=" --arping-refresh-period='30s'" subsys=daemon level=info msg=" --auto-create-cilium-node-resource='true'" subsys=daemon level=info msg=" --auto-direct-node-routes='false'" subsys=daemon level=info msg=" --bgp-announce-lb-ip='false'" subsys=daemon level=info msg=" --bgp-announce-pod-cidr='false'" subsys=daemon level=info msg=" --bgp-config-path='/var/lib/cilium/bgp/config.yaml'" subsys=daemon level=info msg=" --bpf-auth-map-max='524288'" subsys=daemon level=info msg=" --bpf-ct-global-any-max='262144'" subsys=daemon level=info msg=" --bpf-ct-global-tcp-max='524288'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-any='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp='6h0m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp-fin='10s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp-syn='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-any='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-tcp='6h0m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-tcp-grace='1m0s'" subsys=daemon level=info msg=" --bpf-filter-priority='1'" subsys=daemon level=info msg=" --bpf-fragments-map-max='8192'" subsys=daemon level=info msg=" --bpf-lb-acceleration='disabled'" subsys=daemon level=info msg=" --bpf-lb-affinity-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-algorithm='random'" subsys=daemon level=info msg=" --bpf-lb-dev-ip-addr-inherit=''" subsys=daemon level=info msg=" --bpf-lb-dsr-dispatch='opt'" subsys=daemon level=info msg=" --bpf-lb-dsr-l4-xlate='frontend'" subsys=daemon level=info msg=" --bpf-lb-external-clusterip='false'" subsys=daemon level=info msg=" --bpf-lb-maglev-hash-seed='JLfvgnHc2kaSUFaI'" subsys=daemon level=info msg=" --bpf-lb-maglev-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-maglev-table-size='16381'" subsys=daemon level=info msg=" --bpf-lb-map-max='65536'" subsys=daemon level=info msg=" --bpf-lb-mode='snat'" subsys=daemon level=info msg=" --bpf-lb-rev-nat-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-rss-ipv4-src-cidr=''" subsys=daemon level=info msg=" --bpf-lb-rss-ipv6-src-cidr=''" subsys=daemon level=info msg=" --bpf-lb-service-backend-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-service-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-sock='false'" subsys=daemon level=info msg=" --bpf-lb-sock-hostns-only='false'" subsys=daemon level=info msg=" --bpf-lb-source-range-map-max='0'" subsys=daemon level=info msg=" --bpf-map-dynamic-size-ratio='0.0025'" subsys=daemon level=info msg=" --bpf-map-event-buffers=''" subsys=daemon level=info msg=" --bpf-nat-global-max='524288'" subsys=daemon level=info msg=" --bpf-neigh-global-max='524288'" subsys=daemon level=info msg=" --bpf-policy-map-full-reconciliation-interval='15m0s'" subsys=daemon level=info msg=" --bpf-policy-map-max='16384'" subsys=daemon level=info msg=" --bpf-root='/sys/fs/bpf'" subsys=daemon level=info msg=" --bpf-sock-rev-map-max='262144'" subsys=daemon level=info msg=" --bypass-ip-availability-upon-restore='false'" subsys=daemon level=info msg=" --certificates-directory='/var/run/cilium/certs'" subsys=daemon level=info msg=" --cflags=''" subsys=daemon level=info msg=" --cgroup-root='/run/cilium/cgroupv2'" subsys=daemon level=info msg=" --cilium-endpoint-gc-interval='5m0s'" subsys=daemon level=info msg=" --cluster-health-port='4240'" subsys=daemon level=info msg=" --cluster-id='0'" subsys=daemon level=info msg=" --cluster-name='default'" subsys=daemon level=info msg=" --cluster-pool-ipv4-cidr='10.0.0.0/8'" subsys=daemon level=info msg=" --cluster-pool-ipv4-mask-size='24'" subsys=daemon level=info msg=" --clustermesh-config='/var/lib/cilium/clustermesh/'" subsys=daemon level=info msg=" --clustermesh-ip-identities-sync-timeout='1m0s'" subsys=daemon level=info msg=" --cmdref=''" subsys=daemon level=info msg=" --cni-chaining-mode='none'" subsys=daemon level=info msg=" --cni-chaining-target=''" subsys=daemon level=info msg=" --cni-exclusive='true'" subsys=daemon level=info msg=" --cni-external-routing='false'" subsys=daemon level=info msg=" --cni-log-file='/var/run/cilium/cilium-cni.log'" subsys=daemon level=info msg=" --cnp-node-status-gc-interval='0s'" subsys=daemon level=info msg=" --config=''" subsys=daemon level=info msg=" --config-dir='/tmp/cilium/config-map'" subsys=daemon level=info msg=" --config-sources='config-map:kube-system/cilium-config'" subsys=daemon level=info msg=" --conntrack-gc-interval='0s'" subsys=daemon level=info msg=" --conntrack-gc-max-interval='0s'" subsys=daemon level=info msg=" --crd-wait-timeout='5m0s'" subsys=daemon level=info msg=" --custom-cni-conf='false'" subsys=daemon level=info msg=" --datapath-mode='veth'" subsys=daemon level=info msg=" --debug='false'" subsys=daemon level=info msg=" --debug-verbose=''" subsys=daemon level=info msg=" --derive-masquerade-ip-addr-from-device=''" subsys=daemon level=info msg=" --devices=''" subsys=daemon level=info msg=" --direct-routing-device=''" subsys=daemon level=info msg=" --disable-cnp-status-updates='true'" subsys=daemon level=info msg=" --disable-endpoint-crd='false'" subsys=daemon level=info msg=" --disable-envoy-version-check='false'" subsys=daemon level=info msg=" --disable-iptables-feeder-rules=''" subsys=daemon level=info msg=" --dns-max-ips-per-restored-rule='1000'" subsys=daemon level=info msg=" --dns-policy-unload-on-shutdown='false'" subsys=daemon level=info msg=" --dnsproxy-concurrency-limit='0'" subsys=daemon level=info msg=" --dnsproxy-concurrency-processing-grace-period='0s'" subsys=daemon level=info msg=" --dnsproxy-enable-transparent-mode='true'" subsys=daemon level=info msg=" --dnsproxy-lock-count='128'" subsys=daemon level=info msg=" --dnsproxy-lock-timeout='500ms'" subsys=daemon level=info msg=" --egress-gateway-policy-map-max='16384'" subsys=daemon level=info msg=" --egress-gateway-reconciliation-trigger-interval='1s'" subsys=daemon level=info msg=" --egress-masquerade-interfaces=''" subsys=daemon level=info msg=" --egress-multi-home-ip-rule-compat='false'" subsys=daemon level=info msg=" --enable-auto-protect-node-port-range='true'" subsys=daemon level=info msg=" --enable-bandwidth-manager='false'" subsys=daemon level=info msg=" --enable-bbr='false'" subsys=daemon level=info msg=" --enable-bgp-control-plane='false'" subsys=daemon level=info msg=" --enable-bpf-clock-probe='false'" subsys=daemon level=info msg=" --enable-bpf-masquerade='false'" subsys=daemon level=info msg=" --enable-bpf-tproxy='false'" subsys=daemon level=info msg=" --enable-cilium-api-server-access='*'" subsys=daemon level=info msg=" --enable-cilium-endpoint-slice='false'" subsys=daemon level=info msg=" --enable-cilium-health-api-server-access='*'" subsys=daemon level=info msg=" --enable-custom-calls='false'" subsys=daemon level=info msg=" --enable-endpoint-health-checking='true'" subsys=daemon level=info msg=" --enable-endpoint-routes='false'" subsys=daemon level=info msg=" --enable-envoy-config='false'" subsys=daemon level=info msg=" --enable-external-ips='false'" subsys=daemon level=info msg=" --enable-health-check-nodeport='true'" subsys=daemon level=info msg=" --enable-health-checking='true'" subsys=daemon level=info msg=" --enable-high-scale-ipcache='false'" subsys=daemon level=info msg=" --enable-host-firewall='false'" subsys=daemon level=info msg=" --enable-host-legacy-routing='false'" subsys=daemon level=info msg=" --enable-host-port='false'" subsys=daemon level=info msg=" --enable-hubble='false'" subsys=daemon level=info msg=" --enable-hubble-recorder-api='true'" subsys=daemon level=info msg=" --enable-icmp-rules='true'" subsys=daemon level=info msg=" --enable-identity-mark='true'" subsys=daemon level=info msg=" --enable-ip-masq-agent='false'" subsys=daemon level=info msg=" --enable-ipsec='false'" subsys=daemon level=info msg=" --enable-ipsec-key-watcher='true'" subsys=daemon level=info msg=" --enable-ipv4='true'" subsys=daemon level=info msg=" --enable-ipv4-big-tcp='false'" subsys=daemon level=info msg=" --enable-ipv4-egress-gateway='false'" subsys=daemon level=info msg=" --enable-ipv4-fragment-tracking='true'" subsys=daemon level=info msg=" --enable-ipv4-masquerade='true'" subsys=daemon level=info msg=" --enable-ipv6='false'" subsys=daemon level=info msg=" --enable-ipv6-big-tcp='false'" subsys=daemon level=info msg=" --enable-ipv6-masquerade='true'" subsys=daemon level=info msg=" --enable-ipv6-ndp='false'" subsys=daemon level=info msg=" --enable-k8s='true'" subsys=daemon level=info msg=" --enable-k8s-api-discovery='false'" subsys=daemon level=info msg=" --enable-k8s-endpoint-slice='true'" subsys=daemon level=info msg=" --enable-k8s-event-handover='false'" subsys=daemon level=info msg=" --enable-k8s-networkpolicy='true'" subsys=daemon level=info msg=" --enable-k8s-terminating-endpoint='true'" subsys=daemon level=info msg=" --enable-l2-announcements='false'" subsys=daemon level=info msg=" --enable-l2-neigh-discovery='true'" subsys=daemon level=info msg=" --enable-l2-pod-announcements='false'" subsys=daemon level=info msg=" --enable-l7-proxy='true'" subsys=daemon level=info msg=" --enable-local-node-route='true'" subsys=daemon level=info msg=" --enable-local-redirect-policy='false'" subsys=daemon level=info msg=" --enable-mke='false'" subsys=daemon level=info msg=" --enable-monitor='true'" subsys=daemon level=info msg=" --enable-nat46x64-gateway='false'" subsys=daemon level=info msg=" --enable-node-port='false'" subsys=daemon level=info msg=" --enable-pmtu-discovery='false'" subsys=daemon level=info msg=" --enable-policy='default'" subsys=daemon level=info msg=" --enable-recorder='false'" subsys=daemon level=info msg=" --enable-remote-node-identity='true'" subsys=daemon level=info msg=" --enable-runtime-device-detection='false'" subsys=daemon level=info msg=" --enable-sctp='false'" subsys=daemon level=info msg=" --enable-service-topology='false'" subsys=daemon level=info msg=" --enable-session-affinity='false'" subsys=daemon level=info msg=" --enable-srv6='false'" subsys=daemon level=info msg=" --enable-stale-cilium-endpoint-cleanup='true'" subsys=daemon level=info msg=" --enable-svc-source-range-check='true'" subsys=daemon level=info msg=" --enable-tracing='false'" subsys=daemon level=info msg=" --enable-unreachable-routes='false'" subsys=daemon level=info msg=" --enable-vtep='false'" subsys=daemon level=info msg=" --enable-well-known-identities='false'" subsys=daemon level=info msg=" --enable-wireguard='false'" subsys=daemon level=info msg=" --enable-wireguard-userspace-fallback='false'" subsys=daemon level=info msg=" --enable-xdp-prefilter='false'" subsys=daemon level=info msg=" --enable-xt-socket-fallback='true'" subsys=daemon level=info msg=" --encrypt-interface=''" subsys=daemon level=info msg=" --encrypt-node='false'" subsys=daemon level=info msg=" --endpoint-gc-interval='5m0s'" subsys=daemon level=info msg=" --endpoint-queue-size='25'" subsys=daemon level=info msg=" --endpoint-status=''" subsys=daemon level=info msg=" --envoy-config-timeout='2m0s'" subsys=daemon level=info msg=" --envoy-log=''" subsys=daemon level=info msg=" --exclude-local-address=''" subsys=daemon level=info msg=" --external-envoy-proxy='false'" subsys=daemon level=info msg=" --fixed-identity-mapping=''" subsys=daemon level=info msg=" --fqdn-regex-compile-lru-size='1024'" subsys=daemon level=info msg=" --gops-port='9890'" subsys=daemon level=info msg=" --http-403-msg=''" subsys=daemon level=info msg=" --http-idle-timeout='0'" subsys=daemon level=info msg=" --http-max-grpc-timeout='0'" subsys=daemon level=info msg=" --http-normalize-path='true'" subsys=daemon level=info msg=" --http-request-timeout='3600'" subsys=daemon level=info msg=" --http-retry-count='3'" subsys=daemon level=info msg=" --http-retry-timeout='0'" subsys=daemon level=info msg=" --hubble-disable-tls='false'" subsys=daemon level=info msg=" --hubble-event-buffer-capacity='4095'" subsys=daemon level=info msg=" --hubble-event-queue-size='0'" subsys=daemon level=info msg=" --hubble-export-file-compress='false'" subsys=daemon level=info msg=" --hubble-export-file-max-backups='5'" subsys=daemon level=info msg=" --hubble-export-file-max-size-mb='10'" subsys=daemon level=info msg=" --hubble-export-file-path=''" subsys=daemon level=info msg=" --hubble-listen-address=''" subsys=daemon level=info msg=" --hubble-metrics=''" subsys=daemon level=info msg=" --hubble-metrics-server=''" subsys=daemon level=info msg=" --hubble-monitor-events=''" subsys=daemon level=info msg=" --hubble-prefer-ipv6='false'" subsys=daemon level=info msg=" --hubble-recorder-sink-queue-size='1024'" subsys=daemon level=info msg=" --hubble-recorder-storage-path='/var/run/cilium/pcaps'" subsys=daemon level=info msg=" --hubble-skip-unknown-cgroup-ids='true'" subsys=daemon level=info msg=" --hubble-socket-path='/var/run/cilium/hubble.sock'" subsys=daemon level=info msg=" --hubble-tls-cert-file=''" subsys=daemon level=info msg=" --hubble-tls-client-ca-files=''" subsys=daemon level=info msg=" --hubble-tls-key-file=''" subsys=daemon level=info msg=" --identity-allocation-mode='crd'" subsys=daemon level=info msg=" --identity-change-grace-period='5s'" subsys=daemon level=info msg=" --identity-gc-interval='15m0s'" subsys=daemon level=info msg=" --identity-heartbeat-timeout='30m0s'" subsys=daemon level=info msg=" --identity-restore-grace-period='10m0s'" subsys=daemon level=info msg=" --install-egress-gateway-routes='false'" subsys=daemon level=info msg=" --install-iptables-rules='true'" subsys=daemon level=info msg=" --install-no-conntrack-iptables-rules='false'" subsys=daemon level=info msg=" --ip-allocation-timeout='2m0s'" subsys=daemon level=info msg=" --ip-masq-agent-config-path='/etc/config/ip-masq-agent'" subsys=daemon level=info msg=" --ipam='cluster-pool'" subsys=daemon level=info msg=" --ipam-cilium-node-update-rate='15s'" subsys=daemon level=info msg=" --ipam-multi-pool-pre-allocation='default=8'" subsys=daemon level=info msg=" --ipsec-key-file=''" subsys=daemon level=info msg=" --ipsec-key-rotation-duration='5m0s'" subsys=daemon level=info msg=" --iptables-lock-timeout='5s'" subsys=daemon level=info msg=" --iptables-random-fully='false'" subsys=daemon level=info msg=" --ipv4-native-routing-cidr=''" subsys=daemon level=info msg=" --ipv4-node='auto'" subsys=daemon level=info msg=" --ipv4-pod-subnets=''" subsys=daemon level=info msg=" --ipv4-range='auto'" subsys=daemon level=info msg=" --ipv4-service-loopback-address='169.254.42.1'" subsys=daemon level=info msg=" --ipv4-service-range='auto'" subsys=daemon level=info msg=" --ipv6-cluster-alloc-cidr='f00d::/64'" subsys=daemon level=info msg=" --ipv6-mcast-device=''" subsys=daemon level=info msg=" --ipv6-native-routing-cidr=''" subsys=daemon level=info msg=" --ipv6-node='auto'" subsys=daemon level=info msg=" --ipv6-pod-subnets=''" subsys=daemon level=info msg=" --ipv6-range='auto'" subsys=daemon level=info msg=" --ipv6-service-range='auto'" subsys=daemon level=info msg=" --join-cluster='false'" subsys=daemon level=info msg=" --k8s-api-server=''" subsys=daemon level=info msg=" --k8s-client-burst='10'" subsys=daemon level=info msg=" --k8s-client-qps='5'" subsys=daemon level=info msg=" --k8s-heartbeat-timeout='30s'" subsys=daemon level=info msg=" --k8s-kubeconfig-path=''" subsys=daemon level=info msg=" --k8s-namespace='kube-system'" subsys=daemon level=info msg=" --k8s-require-ipv4-pod-cidr='false'" subsys=daemon level=info msg=" --k8s-require-ipv6-pod-cidr='false'" subsys=daemon level=info msg=" --k8s-service-cache-size='128'" subsys=daemon level=info msg=" --k8s-service-proxy-name=''" subsys=daemon level=info msg=" --k8s-sync-timeout='3m0s'" subsys=daemon level=info msg=" --k8s-watcher-endpoint-selector='metadata.name!=kube-scheduler,metadata.name!=kube-controller-manager,metadata.name!=etcd-operator,metadata.name!=gcp-controller-manager'" subsys=daemon level=info msg=" --keep-config='false'" subsys=daemon level=info msg=" --kube-proxy-replacement='disabled'" subsys=daemon level=info msg=" --kube-proxy-replacement-healthz-bind-address=''" subsys=daemon level=info msg=" --kvstore=''" subsys=daemon level=info msg=" --kvstore-connectivity-timeout='2m0s'" subsys=daemon level=info msg=" --kvstore-lease-ttl='15m0s'" subsys=daemon level=info msg=" --kvstore-max-consecutive-quorum-errors='2'" subsys=daemon level=info msg=" --kvstore-opt=''" subsys=daemon level=info msg=" --kvstore-periodic-sync='5m0s'" subsys=daemon level=info msg=" --l2-announcements-lease-duration='15s'" subsys=daemon level=info msg=" --l2-announcements-renew-deadline='5s'" subsys=daemon level=info msg=" --l2-announcements-retry-period='2s'" subsys=daemon level=info msg=" --l2-pod-announcements-interface=''" subsys=daemon level=info msg=" --label-prefix-file=''" subsys=daemon level=info msg=" --labels=''" subsys=daemon level=info msg=" --lib-dir='/var/lib/cilium'" subsys=daemon level=info msg=" --local-max-addr-scope='252'" subsys=daemon level=info msg=" --local-router-ipv4=''" subsys=daemon level=info msg=" --local-router-ipv6=''" subsys=daemon level=info msg=" --log-driver=''" subsys=daemon level=info msg=" --log-opt=''" subsys=daemon level=info msg=" --log-system-load='false'" subsys=daemon level=info msg=" --max-controller-interval='0'" subsys=daemon level=info msg=" --mesh-auth-enabled='true'" subsys=daemon level=info msg=" --mesh-auth-gc-interval='5m0s'" subsys=daemon level=info msg=" --mesh-auth-mutual-listener-port='0'" subsys=daemon level=info msg=" --mesh-auth-queue-size='1024'" subsys=daemon level=info msg=" --mesh-auth-rotated-identities-queue-size='1024'" subsys=daemon level=info msg=" --mesh-auth-signal-backoff-duration='1s'" subsys=daemon level=info msg=" --mesh-auth-spiffe-trust-domain='spiffe.cilium'" subsys=daemon level=info msg=" --mesh-auth-spire-admin-socket=''" subsys=daemon level=info msg=" --metrics=''" subsys=daemon level=info msg=" --mke-cgroup-mount=''" subsys=daemon level=info msg=" --monitor-aggregation='medium'" subsys=daemon level=info msg=" --monitor-aggregation-flags='all'" subsys=daemon level=info msg=" --monitor-aggregation-interval='5s'" subsys=daemon level=info msg=" --monitor-queue-size='0'" subsys=daemon level=info msg=" --mtu='0'" subsys=daemon level=info msg=" --node-encryption-opt-out-labels='node-role.kubernetes.io/control-plane'" subsys=daemon level=info msg=" --node-port-acceleration='disabled'" subsys=daemon level=info msg=" --node-port-algorithm='random'" subsys=daemon level=info msg=" --node-port-bind-protection='true'" subsys=daemon level=info msg=" --node-port-mode='snat'" subsys=daemon level=info msg=" --node-port-range='30000,32767'" subsys=daemon level=info msg=" --nodes-gc-interval='5m0s'" subsys=daemon level=info msg=" --operator-api-serve-addr='127.0.0.1:9234'" subsys=daemon level=info msg=" --policy-audit-mode='false'" subsys=daemon level=info msg=" --policy-queue-size='100'" subsys=daemon level=info msg=" --policy-trigger-interval='1s'" subsys=daemon level=info msg=" --pprof='false'" subsys=daemon level=info msg=" --pprof-address='localhost'" subsys=daemon level=info msg=" --pprof-port='6060'" subsys=daemon level=info msg=" --preallocate-bpf-maps='false'" subsys=daemon level=info msg=" --prepend-iptables-chains='true'" subsys=daemon level=info msg=" --procfs='/host/proc'" subsys=daemon level=info msg=" --prometheus-serve-addr=':9962'" subsys=daemon level=info msg=" --proxy-connect-timeout='2'" subsys=daemon level=info msg=" --proxy-gid='1337'" subsys=daemon level=info msg=" --proxy-idle-timeout-seconds='60'" subsys=daemon level=info msg=" --proxy-max-connection-duration-seconds='0'" subsys=daemon level=info msg=" --proxy-max-requests-per-connection='0'" subsys=daemon level=info msg=" --proxy-prometheus-port='9964'" subsys=daemon level=info msg=" --read-cni-conf=''" subsys=daemon level=info msg=" --remove-cilium-node-taints='true'" subsys=daemon level=info msg=" --restore='true'" subsys=daemon level=info msg=" --route-metric='0'" subsys=daemon level=info msg=" --routing-mode='tunnel'" subsys=daemon level=info msg=" --set-cilium-is-up-condition='true'" subsys=daemon level=info msg=" --set-cilium-node-taints='true'" subsys=daemon level=info msg=" --sidecar-istio-proxy-image='cilium/istio_proxy'" subsys=daemon level=info msg=" --single-cluster-route='false'" subsys=daemon level=info msg=" --skip-cnp-status-startup-clean='false'" subsys=daemon level=info msg=" --socket-path='/var/run/cilium/cilium.sock'" subsys=daemon level=info msg=" --srv6-encap-mode='reduced'" subsys=daemon level=info msg=" --state-dir='/var/run/cilium'" subsys=daemon level=info msg=" --synchronize-k8s-nodes='true'" subsys=daemon level=info msg=" --tofqdns-dns-reject-response-code='refused'" subsys=daemon level=info msg=" --tofqdns-enable-dns-compression='true'" subsys=daemon level=info msg=" --tofqdns-endpoint-max-ip-per-hostname='50'" subsys=daemon level=info msg=" --tofqdns-idle-connection-grace-period='0s'" subsys=daemon level=info msg=" --tofqdns-max-deferred-connection-deletes='10000'" subsys=daemon level=info msg=" --tofqdns-min-ttl='0'" subsys=daemon level=info msg=" --tofqdns-pre-cache=''" subsys=daemon level=info msg=" --tofqdns-proxy-port='0'" subsys=daemon level=info msg=" --tofqdns-proxy-response-max-delay='100ms'" subsys=daemon level=info msg=" --trace-payloadlen='128'" subsys=daemon level=info msg=" --trace-sock='true'" subsys=daemon level=info msg=" --tunnel=''" subsys=daemon level=info msg=" --tunnel-port='6082'" subsys=daemon level=info msg=" --tunnel-protocol='geneve'" subsys=daemon level=info msg=" --unmanaged-pod-watcher-interval='15'" subsys=daemon level=info msg=" --use-cilium-internal-ip-for-ipsec='false'" subsys=daemon level=info msg=" --version='false'" subsys=daemon level=info msg=" --vlan-bpf-bypass=''" subsys=daemon level=info msg=" --vtep-cidr=''" subsys=daemon level=info msg=" --vtep-endpoint=''" subsys=daemon level=info msg=" --vtep-mac=''" subsys=daemon level=info msg=" --vtep-mask=''" subsys=daemon level=info msg=" --wireguard-encapsulate='false'" subsys=daemon level=info msg=" --write-cni-conf-when-ready='/host/etc/cni/net.d/05-cilium.conflist'" subsys=daemon level=info msg=" _ _ _" subsys=daemon level=info msg=" ___|_| |_|_ _ _____" subsys=daemon level=info msg="| _| | | | | | |" subsys=daemon level=info msg="|___|_|_|_|___|_|_|_|" subsys=daemon level=info msg="Cilium 1.14.8 cf6e022e 2024-03-13T12:23:35-04:00 go version go1.21.8 linux/amd64" subsys=daemon level=info msg="clang (10.0.0) and kernel (5.15.0) versions: OK!" subsys=linux-datapath level=info msg="linking environment: OK!" subsys=linux-datapath level=info msg="Kernel config file not found: if the agent fails to start, check the system requirements at https://docs.cilium.io/en/stable/operations/system_requirements" subsys=probes level=info msg="Detected mounted BPF filesystem at /sys/fs/bpf" subsys=bpf level=info msg="Mounted cgroupv2 filesystem at /run/cilium/cgroupv2" subsys=cgroups level=info msg="Parsing base label prefixes from default label list" subsys=labels-filter level=info msg="Parsing additional label prefixes from user inputs: []" subsys=labels-filter level=info msg="Final label prefixes to be used for identity evaluation:" subsys=labels-filter level=info msg=" - reserved:.*" subsys=labels-filter level=info msg=" - :io\\.kubernetes\\.pod\\.namespace" subsys=labels-filter level=info msg=" - :io\\.cilium\\.k8s\\.namespace\\.labels" subsys=labels-filter level=info msg=" - :app\\.kubernetes\\.io" subsys=labels-filter level=info msg=" - !:io\\.kubernetes" subsys=labels-filter level=info msg=" - !:kubernetes\\.io" subsys=labels-filter level=info msg=" - !:.*beta\\.kubernetes\\.io" subsys=labels-filter level=info msg=" - !:k8s\\.io" subsys=labels-filter level=info msg=" - !:pod-template-generation" subsys=labels-filter level=info msg=" - !:pod-template-hash" subsys=labels-filter level=info msg=" - !:controller-revision-hash" subsys=labels-filter level=info msg=" - !:annotation.*" subsys=labels-filter level=info msg=" - !:etcd_node" subsys=labels-filter level=info msg=Invoked duration=1.144583ms function="pprof.glob..func1 (cell.go:50)" subsys=hive level=info msg=Invoked duration="135.204µs" function="gops.registerGopsHooks (cell.go:38)" subsys=hive level=info msg=Invoked duration=1.203083ms function="metrics.NewRegistry (registry.go:65)" subsys=hive level=info msg=Invoked duration="7.22µs" function="metrics.glob..func1 (cell.go:12)" subsys=hive level=info msg="Spire Delegate API Client is disabled as no socket path is configured" subsys=spire-delegate level=info msg="Mutual authentication handler is disabled as no port is configured" subsys=auth level=info msg=Invoked duration=109.045318ms function="cmd.glob..func4 (daemon_main.go:1607)" subsys=hive level=info msg=Invoked duration="12.07µs" function="gc.registerSignalHandler (cell.go:47)" subsys=hive level=info msg=Invoked duration="17.29µs" function="utime.initUtimeSync (cell.go:29)" subsys=hive level=info msg=Invoked duration="52.952µs" function="agentliveness.newAgentLivenessUpdater (agent_liveness.go:43)" subsys=hive level=info msg=Invoked duration="57.103µs" function="l2responder.NewL2ResponderReconciler (l2responder.go:63)" subsys=hive level=info msg=Invoked duration="70.381µs" function="garp.newGARPProcessor (processor.go:27)" subsys=hive level=info msg=Starting subsys=hive level=info msg="Started gops server" address="127.0.0.1:9890" subsys=gops level=info msg="Start hook executed" duration="462.983µs" function="gops.registerGopsHooks.func1 (cell.go:43)" subsys=hive level=info msg="Start hook executed" duration="2.19µs" function="metrics.NewRegistry.func1 (registry.go:86)" subsys=hive level=info msg="Establishing connection to apiserver" host="https://10.96.0.1:443" subsys=k8s-client level=info msg="Serving prometheus metrics on :9962" subsys=metrics level=info msg="Connected to apiserver" subsys=k8s-client level=info msg="Start hook executed" duration=11.450979ms function="client.(*compositeClientset).onStart" subsys=hive level=info msg="Start hook executed" duration=7.517531ms function="authmap.newAuthMap.func1 (cell.go:27)" subsys=hive level=info msg="Start hook executed" duration="50.291µs" function="configmap.newMap.func1 (cell.go:23)" subsys=hive level=info msg="Start hook executed" duration="47.581µs" function="signalmap.newMap.func1 (cell.go:44)" subsys=hive level=info msg="Start hook executed" duration="358.961µs" function="nodemap.newNodeMap.func1 (cell.go:23)" subsys=hive level=info msg="Start hook executed" duration="129.334µs" function="eventsmap.newEventsMap.func1 (cell.go:35)" subsys=hive level=info msg="Start hook executed" duration="184.336µs" function="*cni.cniConfigManager.Start" subsys=hive level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Wrote CNI configuration file to /host/etc/cni/net.d/05-cilium.conflist" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Start hook executed" duration=46.888461ms function="datapath.newDatapath.func1 (cells.go:113)" subsys=hive level=info msg="Restored 0 node IDs from the BPF map" subsys=linux-datapath level=info msg="Start hook executed" duration="341.831µs" function="datapath.newDatapath.func2 (cells.go:126)" subsys=hive level=info msg="Start hook executed" duration="17.64µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Node].Start" subsys=hive level=info msg="Start hook executed" duration="2.94µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumNode].Start" subsys=hive level=info msg="Using autogenerated IPv4 allocation range" subsys=node v4Prefix=10.48.0.0/16 level=info msg="no local ciliumnode found, will not restore cilium internal ips from k8s" subsys=daemon level=info msg="Start hook executed" duration=104.664864ms function="node.NewLocalNodeStore.func1 (local_node_store.go:76)" subsys=hive level=info msg="Start hook executed" duration="31.12µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Start" subsys=hive level=info msg="Start hook executed" duration=100.672833ms function="*manager.diffStore[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Start" subsys=hive level=info msg="Start hook executed" duration="50.601µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s.Endpoints].Start" subsys=hive level=info msg="Using discoveryv1.EndpointSlice" subsys=k8s level=info msg="Start hook executed" duration=200.716229ms function="*manager.diffStore[*github.com/cilium/cilium/pkg/k8s.Endpoints].Start" subsys=hive level=info msg="Start hook executed" duration="5.94µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Pod].Start" subsys=hive level=info msg="Start hook executed" duration="1.69µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Namespace].Start" subsys=hive level=info msg="Start hook executed" duration="2.44µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumNetworkPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="2.06µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumClusterwideNetworkPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="2.2µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumCIDRGroup].Start" subsys=hive level=info msg="Start hook executed" duration="34.891µs" function="endpointmanager.newDefaultEndpointManager.func1 (cell.go:203)" subsys=hive level=info msg="Start hook executed" duration="20.3µs" function="cmd.newPolicyTrifecta.func1 (policy.go:135)" subsys=hive level=info msg="Start hook executed" duration="72.022µs" function="*manager.manager.Start" subsys=hive level=info msg="Serving cilium node monitor v1.2 API at unix:///var/run/cilium/monitor1_2.sock" subsys=monitor-agent level=info msg="Start hook executed" duration="554.606µs" function="agent.newMonitorAgent.func1 (cell.go:61)" subsys=hive level=info msg="Start hook executed" duration="4.47µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumL2AnnouncementPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="21.101µs" function="*job.group.Start" subsys=hive level=info msg="Start hook executed" duration="379.91µs" function="proxy.newProxy.func1 (cell.go:55)" subsys=hive level=info msg="Envoy: Starting xDS gRPC server listening on /var/run/cilium/envoy/sockets/xds.sock" subsys=envoy-manager level=info msg="Start hook executed" duration=1.113302ms function="signal.provideSignalManager.func1 (cell.go:25)" subsys=hive level=info msg="Datapath signal listener running" subsys=signal level=info msg="Start hook executed" duration=1.383599ms function="auth.registerAuthManager.func1 (cell.go:109)" subsys=hive level=info msg="Start hook executed" duration="6.86µs" function="auth.registerGCJobs.func1 (cell.go:158)" subsys=hive level=info msg="Start hook executed" duration="25.1µs" function="*job.group.Start" subsys=hive level=warning msg="Deprecated value for --kube-proxy-replacement: disabled (use either \"true\", or \"false\")" subsys=daemon level=info msg="Auto-disabling \"enable-node-port\", \"enable-external-ips\", \"bpf-lb-sock\", \"enable-host-port\" features and falling back to \"enable-host-legacy-routing\"" subsys=daemon level=info msg="Inheriting MTU from external network interface" device=ens3 ipAddr=199.19.213.48 mtu=1500 subsys=mtu level=info msg="Removed map pin at /sys/fs/bpf/tc/globals/cilium_ipcache, recreating and re-pinning map cilium_ipcache" file-path=/sys/fs/bpf/tc/globals/cilium_ipcache name=cilium_ipcache subsys=bpf level=info msg="Removed map pin at /sys/fs/bpf/tc/globals/cilium_tunnel_map, recreating and re-pinning map cilium_tunnel_map" file-path=/sys/fs/bpf/tc/globals/cilium_tunnel_map name=cilium_tunnel_map subsys=bpf level=info msg="Restored services from maps" failedServices=0 restoredServices=0 subsys=service level=info msg="Restored backends from maps" failedBackends=0 restoredBackends=0 skippedBackends=0 subsys=service level=info msg="Reading old endpoints..." subsys=daemon level=info msg="No old endpoints found." subsys=daemon level=info msg="Waiting until all Cilium CRDs are available" subsys=k8s level=info msg="All Cilium CRDs have been found and are available" subsys=k8s level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=warning msg="Unable to get node resource" error="ciliumnodes.cilium.io \"instance\" not found" subsys=nodediscovery level=warning msg="Unable to get node resource" error="ciliumnodes.cilium.io \"instance\" not found" subsys=nodediscovery level=info msg="Successfully created CiliumNode resource" subsys=nodediscovery level=warning msg="Unable to create CiliumNode resource, will retry" error="ciliumnodes.cilium.io \"instance\" already exists" subsys=nodediscovery level=info msg="Retrieved node information from cilium node" nodeName=instance subsys=k8s level=warning msg="Waiting for k8s node information" error="required IPv4 PodCIDR not available" subsys=k8s level=info msg="Retrieved node information from cilium node" nodeName=instance subsys=k8s level=info msg="Received own node information from API server" ipAddr.ipv4=199.19.213.48 ipAddr.ipv6="" k8sNodeIP=199.19.213.48 labels="map[beta.kubernetes.io/arch:amd64 beta.kubernetes.io/os:linux kubernetes.io/arch:amd64 kubernetes.io/hostname:instance kubernetes.io/os:linux node-role.kubernetes.io/control-plane: node.kubernetes.io/exclude-from-external-load-balancers:]" nodeName=instance subsys=k8s v4Prefix=10.0.0.0/24 v6Prefix="" level=info msg="k8s mode: Allowing localhost to reach local endpoints" subsys=daemon level=info msg="Detected devices" devices="[]" subsys=linux-datapath level=info msg="Enabling k8s event listener" subsys=k8s-watcher level=info msg="Removing stale endpoint interfaces" subsys=daemon level=info msg="Skipping kvstore configuration" subsys=daemon level=info msg="Waiting until local node addressing before starting watchers depending on it" subsys=k8s-watcher level=info msg="Initializing node addressing" subsys=daemon level=info msg="Initializing cluster-pool IPAM" subsys=ipam v4Prefix=10.0.0.0/24 v6Prefix="" level=info msg="Restoring endpoints..." subsys=daemon level=info msg="Endpoints restored" failed=0 restored=0 subsys=daemon level=info msg="Addressing information:" subsys=daemon level=info msg=" Cluster-Name: default" subsys=daemon level=info msg=" Cluster-ID: 0" subsys=daemon level=info msg=" Local node-name: instance" subsys=daemon level=info msg=" Node-IPv6: " subsys=daemon level=info msg=" External-Node IPv4: 199.19.213.48" subsys=daemon level=info msg=" Internal-Node IPv4: 10.0.0.84" subsys=daemon level=info msg=" IPv4 allocation prefix: 10.0.0.0/24" subsys=daemon level=info msg=" Loopback IPv4: 169.254.42.1" subsys=daemon level=info msg=" Local IPv4 addresses:" subsys=daemon level=info msg=" - 199.19.213.48" subsys=daemon level=info msg=" - 172.17.0.100" subsys=daemon level=info msg=" - 10.96.240.200" subsys=daemon level=info msg="Node updated" clusterName=default nodeName=instance subsys=nodemanager level=info msg="Adding local node to cluster" node="{instance default [{InternalIP 199.19.213.48} {CiliumInternalIP 10.0.0.84}] 10.0.0.0/24 [] [] 10.0.0.210 0 local 0 map[beta.kubernetes.io/arch:amd64 beta.kubernetes.io/os:linux kubernetes.io/arch:amd64 kubernetes.io/hostname:instance kubernetes.io/os:linux node-role.kubernetes.io/control-plane: node.kubernetes.io/exclude-from-external-load-balancers:] map[] 1 }" subsys=nodediscovery level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Waiting until all pre-existing resources have been received" subsys=k8s-watcher level=info msg="Initializing identity allocator" subsys=identity-cache level=info msg="Allocating identities between range" cluster-id=0 max=65535 min=256 subsys=identity-cache level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.forwarding sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.accept_local sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.send_redirects sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.forwarding sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.accept_local sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.send_redirects sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.core.bpf_jit_enable sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.all.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.fib_multipath_use_neigh sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=kernel.unprivileged_bpf_disabled sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=kernel.timer_migration sysParamValue=0 level=info msg="Setting up BPF datapath" bpfClockSource=ktime bpfInsnSet="" subsys=datapath-loader level=info msg="Iptables rules installed" subsys=iptables level=info msg="Adding new proxy port rules for cilium-dns-egress:46035" id=cilium-dns-egress subsys=proxy level=info msg="Iptables proxy rules installed" subsys=iptables level=info msg="Start hook executed" duration=2.485407845s function="cmd.newDaemonPromise.func1 (daemon_main.go:1663)" subsys=hive level=info msg="Start hook executed" duration="12.81µs" function="utime.initUtimeSync.func1 (cell.go:33)" subsys=hive level=info msg="Starting IP identity watcher" subsys=ipcache level=info msg="Start hook executed" duration="6.88µs" function="*job.group.Start" subsys=hive level=info msg="Initializing daemon" subsys=daemon level=info msg="Start hook executed" duration="45.651µs" function="l2respondermap.newMap.func1 (l2_responder_map4.go:44)" subsys=hive level=info msg="Start hook executed" duration="4.52µs" function="*job.group.Start" subsys=hive level=info msg="Validating configured node address ranges" subsys=daemon level=info msg="Starting connection tracking garbage collector" subsys=daemon level=info msg="Initial scan of connection tracking completed" subsys=ct-gc level=info msg="Regenerating restored endpoints" numRestored=0 subsys=daemon level=info msg="Creating host endpoint" subsys=daemon level=info msg="Finished regenerating restored endpoints" regenerated=0 subsys=daemon total=0 level=info msg="Deleted orphan backends" orphanBackends=0 subsys=service level=info msg="New endpoint" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=575 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=575 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Identity of endpoint changed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=575 identity=1 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,reserved:host" ipv4= ipv6= k8sPodName=/ oldIdentity="no identity" subsys=endpoint level=info msg="Launching Cilium health daemon" subsys=daemon level=info msg="Launching Cilium health endpoint" subsys=daemon level=info msg="Started healthz status API server" address="127.0.0.1:9879" subsys=daemon level=info msg="Processing queued endpoint deletion requests from /var/run/cilium/deleteQueue" subsys=daemon level=info msg="processing 0 queued deletion requests" subsys=daemon level=info msg="Initializing Cilium API" subsys=daemon level=info msg="Daemon initialization completed" bootstrapTime=3.564320816s subsys=daemon level=info msg="Hubble server is disabled" subsys=hubble level=info msg="Serving cilium API at unix:///var/run/cilium/cilium.sock" subsys=daemon level=info msg="Compiled new BPF template" BPFCompilationTime=318.746617ms file-path=/var/run/cilium/state/templates/7168965fa19b8afffdd900f3e83ddc90140b478dddb3deafbb4ec0e3b07475f0/bpf_host.o subsys=datapath-loader level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=575 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.251 f7ef0abb-17e8-4487-83b5-3251017c83ca default }" containerID=4a62176bc71eabe70d2ac135d4f86506cdbbfd60e2104642694aee0d4670e63f datapathConfiguration="&{false false false false false }" interface=lxcf98c6f7c597b k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-sv6q8 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4a62176bc7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2510 ipv4=10.0.0.251 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-sv6q8 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4a62176bc7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2510 identityLabels="k8s:app=certgen,k8s:batch.kubernetes.io/controller-uid=d21fabf6-1f5c-4a2d-99ed-687ffd643492,k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen,k8s:controller-uid=d21fabf6-1f5c-4a2d-99ed-687ffd643492,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen,k8s:io.kubernetes.pod.namespace=envoy-gateway-system,k8s:job-name=envoy-gateway-gateway-helm-certgen" ipv4=10.0.0.251 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-sv6q8 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name:envoy-gateway-system]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=4a62176bc7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2510 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.251 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-sv6q8 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=certgen;k8s:batch.kubernetes.io/controller-uid=d21fabf6-1f5c-4a2d-99ed-687ffd643492;k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen;k8s:controller-uid=d21fabf6-1f5c-4a2d-99ed-687ffd643492;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system;k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen;k8s:io.kubernetes.pod.namespace=envoy-gateway-system;k8s:job-name=envoy-gateway-gateway-helm-certgen;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4a62176bc7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2510 identity=9950 identityLabels="k8s:app=certgen,k8s:batch.kubernetes.io/controller-uid=d21fabf6-1f5c-4a2d-99ed-687ffd643492,k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen,k8s:controller-uid=d21fabf6-1f5c-4a2d-99ed-687ffd643492,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen,k8s:io.kubernetes.pod.namespace=envoy-gateway-system,k8s:job-name=envoy-gateway-gateway-helm-certgen" ipv4=10.0.0.251 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-sv6q8 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4a62176bc7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2510 identity=9950 ipv4=10.0.0.251 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-sv6q8 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.14 04798c49-e6a0-4032-85fb-e74c99099a7f default }" containerID=a708fa622ebdce4d6b7020ebe7813994a53821a762680d32532a1e61fb962ed4 datapathConfiguration="&{false false false false false }" interface=lxc2a693a4e04a3 k8sPodName=kube-system/coredns-7c96b6546b-mw8bc labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a708fa622e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=932 ipv4=10.0.0.14 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-mw8bc subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a708fa622e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=932 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.14 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-mw8bc subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:kube-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=coredns;k8s:io.kubernetes.pod.namespace=kube-system;k8s:k8s-app=kube-dns;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a708fa622e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=932 identity=9085 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.14 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-mw8bc oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a708fa622e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=932 identity=9085 ipv4=10.0.0.14 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-mw8bc subsys=endpoint level=info msg="New endpoint" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2073 ipv4=10.0.0.210 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2073 identityLabels="reserved:health" ipv4=10.0.0.210 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Identity of endpoint changed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2073 identity=4 identityLabels="reserved:health" ipv4=10.0.0.210 ipv6= k8sPodName=/ oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Serving cilium health API at unix:///var/run/cilium/health.sock" subsys=health-server level=info msg="Compiled new BPF template" BPFCompilationTime=1.158491545s file-path=/var/run/cilium/state/templates/675d3a6f98e6d9e0de947e2e7b10a5c5f4ca02ffcd510dc63060ae931f499fd9/bpf_lxc.o subsys=datapath-loader level=info msg="Rewrote endpoint BPF program" containerID=4a62176bc7 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2510 identity=9950 ipv4=10.0.0.251 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-sv6q8 subsys=endpoint level=info msg="Successful endpoint creation" containerID=4a62176bc7 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2510 identity=9950 ipv4=10.0.0.251 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-sv6q8 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=a708fa622e datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=932 identity=9085 ipv4=10.0.0.14 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-mw8bc subsys=endpoint level=info msg="Successful endpoint creation" containerID=a708fa622e datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=932 identity=9085 ipv4=10.0.0.14 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-mw8bc subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2073 identity=4 ipv4=10.0.0.210 ipv6= k8sPodName=/ subsys=endpoint level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=4a62176bc7 endpointID=2510 k8sNamespace=envoy-gateway-system k8sPodName=envoy-gateway-gateway-helm-certgen-sv6q8 subsys=daemon level=info msg="Releasing key" key="[k8s:app=certgen k8s:batch.kubernetes.io/controller-uid=d21fabf6-1f5c-4a2d-99ed-687ffd643492 k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen k8s:controller-uid=d21fabf6-1f5c-4a2d-99ed-687ffd643492 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen k8s:io.kubernetes.pod.namespace=envoy-gateway-system k8s:job-name=envoy-gateway-gateway-helm-certgen]" subsys=allocator level=info msg="Removed endpoint" containerID=4a62176bc7 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2510 identity=9950 ipv4=10.0.0.251 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-sv6q8 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.43 2caeb8ca-37f1-4ea9-bcaa-9749c767cc27 default }" containerID=e0f46c6df3b16c4fa3854757b888201816c1d8b10d402630cc63238f80b38ae2 datapathConfiguration="&{false false false false false }" interface=lxcce1276a1bb8d k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-z6h28 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e0f46c6df3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=52 ipv4=10.0.0.43 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-z6h28 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e0f46c6df3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=52 identityLabels="k8s:app.kubernetes.io/instance=envoy-gateway,k8s:app.kubernetes.io/name=gateway-helm,k8s:control-plane=envoy-gateway,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway,k8s:io.kubernetes.pod.namespace=envoy-gateway-system" ipv4=10.0.0.43 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-z6h28 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name:envoy-gateway-system]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=e0f46c6df3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=52 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.43 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-z6h28 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=envoy-gateway;k8s:app.kubernetes.io/name=gateway-helm;k8s:control-plane=envoy-gateway;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system;k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway;k8s:io.kubernetes.pod.namespace=envoy-gateway-system;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e0f46c6df3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=52 identity=25424 identityLabels="k8s:app.kubernetes.io/instance=envoy-gateway,k8s:app.kubernetes.io/name=gateway-helm,k8s:control-plane=envoy-gateway,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway,k8s:io.kubernetes.pod.namespace=envoy-gateway-system" ipv4=10.0.0.43 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-z6h28 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e0f46c6df3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=52 identity=25424 ipv4=10.0.0.43 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-z6h28 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e0f46c6df3 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=52 identity=25424 ipv4=10.0.0.43 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-z6h28 subsys=endpoint level=info msg="Successful endpoint creation" containerID=e0f46c6df3 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=52 identity=25424 ipv4=10.0.0.43 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-z6h28 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=575 identity=1 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,k8s:openstack-compute-node=enabled,k8s:openstack-control-plane=enabled,k8s:openvswitch=enabled,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_hostns_00575 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_hostns_00575 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_hostns_00575 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_hostns_00575:pending" subsys=bpf level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_netdev_00005 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_netdev_00005 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005:pending" subsys=bpf level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=575 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.155 0b34251c-5100-45f5-81b1-2a1b45bcc40f default }" containerID=6ea5d74b10ebfe910adeab97677825e1acb076659f1c6356b2971b5990698efa datapathConfiguration="&{false false false false false }" interface=lxcc60eac106668 k8sPodName=kube-system/coredns-67659f764b-xrk4w labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6ea5d74b10 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1039 ipv4=10.0.0.155 ipv6= k8sPodName=kube-system/coredns-67659f764b-xrk4w subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6ea5d74b10 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1039 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.155 ipv6= k8sPodName=kube-system/coredns-67659f764b-xrk4w subsys=endpoint level=info msg="Identity of endpoint changed" containerID=6ea5d74b10 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1039 identity=9085 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.155 ipv6= k8sPodName=kube-system/coredns-67659f764b-xrk4w oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6ea5d74b10 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1039 identity=9085 ipv4=10.0.0.155 ipv6= k8sPodName=kube-system/coredns-67659f764b-xrk4w subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.220 c15ca414-2c9c-4d89-bc03-5b4b2d1a90a9 default }" containerID=cedd83df05da56cb15836f7d7eb33a89e4fa6046d26da954ef5b307b00a6880c datapathConfiguration="&{false false false false false }" interface=lxcfbdf8787a0de k8sPodName=kube-system/coredns-67659f764b-8h6kb labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=cedd83df05 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=56 ipv4=10.0.0.220 ipv6= k8sPodName=kube-system/coredns-67659f764b-8h6kb subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=cedd83df05 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=56 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.220 ipv6= k8sPodName=kube-system/coredns-67659f764b-8h6kb subsys=endpoint level=info msg="Identity of endpoint changed" containerID=cedd83df05 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=56 identity=9085 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.220 ipv6= k8sPodName=kube-system/coredns-67659f764b-8h6kb oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=cedd83df05 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=56 identity=9085 ipv4=10.0.0.220 ipv6= k8sPodName=kube-system/coredns-67659f764b-8h6kb subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=6ea5d74b10 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1039 identity=9085 ipv4=10.0.0.155 ipv6= k8sPodName=kube-system/coredns-67659f764b-xrk4w subsys=endpoint level=info msg="Successful endpoint creation" containerID=6ea5d74b10 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1039 identity=9085 ipv4=10.0.0.155 ipv6= k8sPodName=kube-system/coredns-67659f764b-xrk4w subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=cedd83df05 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=56 identity=9085 ipv4=10.0.0.220 ipv6= k8sPodName=kube-system/coredns-67659f764b-8h6kb subsys=endpoint level=info msg="Successful endpoint creation" containerID=cedd83df05 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=56 identity=9085 ipv4=10.0.0.220 ipv6= k8sPodName=kube-system/coredns-67659f764b-8h6kb subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.188 c814f88d-1111-4219-b593-aa0a5a12714d default }" containerID=489c1489883f15ab604ec5a2a2e3eb128142f7fdaf22388e396caf310fdfb45e datapathConfiguration="&{false false false false false }" interface=lxc77c569fb23c2 k8sPodName=local-path-storage/local-path-provisioner-679c578f5-ff72s labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=489c148988 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=17 ipv4=10.0.0.188 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-ff72s subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=489c148988 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=17 identityLabels="k8s:app.kubernetes.io/instance=local-path-provisioner,k8s:app.kubernetes.io/name=local-path-provisioner,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.188 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-ff72s subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:local-path-storage k8s:io.cilium.k8s.namespace.labels.name:local-path-storage]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=local-path-provisioner;k8s:app.kubernetes.io/name=local-path-provisioner;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=489c148988 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=17 identity=4098 identityLabels="k8s:app.kubernetes.io/instance=local-path-provisioner,k8s:app.kubernetes.io/name=local-path-provisioner,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.188 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-ff72s oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=489c148988 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=17 identity=4098 ipv4=10.0.0.188 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-ff72s subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=489c148988 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=17 identity=4098 ipv4=10.0.0.188 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-ff72s subsys=endpoint level=info msg="Successful endpoint creation" containerID=489c148988 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=17 identity=4098 ipv4=10.0.0.188 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-ff72s subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=a708fa622e endpointID=932 k8sNamespace=kube-system k8sPodName=coredns-7c96b6546b-mw8bc subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=coredns k8s:io.kubernetes.pod.namespace=kube-system k8s:k8s-app=kube-dns]" subsys=allocator level=info msg="Removed endpoint" containerID=a708fa622e datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=932 identity=9085 ipv4=10.0.0.14 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-mw8bc subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.98 ae8fea01-8c77-4a15-8a00-9999d9dc11db default }" containerID=de1073680732a885e78c821e2960332af5d51a8d8c8a01a7147de117b318b982 datapathConfiguration="&{false false false false false }" interface=lxcbd1ad576502d k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-nqjc2 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=de10736807 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3001 ipv4=10.0.0.98 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-nqjc2 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=de10736807 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3001 identityLabels="k8s:app.kubernetes.io/component=cainjector,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cainjector,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cainjector,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.98 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-nqjc2 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=de10736807 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3001 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.98 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-nqjc2 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=cainjector;k8s:app.kubernetes.io/component=cainjector;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=cainjector;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=de10736807 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3001 identity=4008 identityLabels="k8s:app.kubernetes.io/component=cainjector,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cainjector,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cainjector,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.98 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-nqjc2 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=de10736807 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3001 identity=4008 ipv4=10.0.0.98 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-nqjc2 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.135 5601b6f6-b569-428d-9f4b-4cd56a707de6 default }" containerID=86176273205df6e4d89d62ddd66dc500e4ec646ac6a0f11276b5610590f1939f datapathConfiguration="&{false false false false false }" interface=lxc23593b3e7264 k8sPodName=cert-manager/cert-manager-webhook-548949fc64-bbqz7 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8617627320 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=429 ipv4=10.0.0.135 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-bbqz7 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8617627320 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=429 identityLabels="k8s:app.kubernetes.io/component=webhook,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=webhook,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=webhook,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.135 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-bbqz7 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.68 ed6b08ea-834f-4b20-8a46-2441cc6dba78 default }" containerID=60bd5d84fac1d515bf71332a9e1c4c25164adadd39810f6980535abf2a25df57 datapathConfiguration="&{false false false false false }" interface=lxc43ae0917d3d8 k8sPodName=cert-manager/cert-manager-75c4c745bc-kmtg6 labels="[]" subsys=daemon sync-build=true level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="New endpoint" containerID=60bd5d84fa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2107 ipv4=10.0.0.68 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-kmtg6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=60bd5d84fa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2107 identityLabels="k8s:app.kubernetes.io/component=controller,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cert-manager,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cert-manager,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.68 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-kmtg6 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=webhook;k8s:app.kubernetes.io/component=webhook;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=webhook;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8617627320 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=429 identity=54781 identityLabels="k8s:app.kubernetes.io/component=webhook,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=webhook,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=webhook,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.135 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-bbqz7 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8617627320 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=429 identity=54781 ipv4=10.0.0.135 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-bbqz7 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=cert-manager;k8s:app.kubernetes.io/component=controller;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=cert-manager;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=60bd5d84fa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2107 identity=34380 identityLabels="k8s:app.kubernetes.io/component=controller,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cert-manager,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cert-manager,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.68 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-kmtg6 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=60bd5d84fa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2107 identity=34380 ipv4=10.0.0.68 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-kmtg6 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=de10736807 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3001 identity=4008 ipv4=10.0.0.98 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-nqjc2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=de10736807 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3001 identity=4008 ipv4=10.0.0.98 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-nqjc2 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=60bd5d84fa datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2107 identity=34380 ipv4=10.0.0.68 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-kmtg6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=60bd5d84fa datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2107 identity=34380 ipv4=10.0.0.68 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-kmtg6 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=8617627320 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=429 identity=54781 ipv4=10.0.0.135 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-bbqz7 subsys=endpoint level=info msg="Successful endpoint creation" containerID=8617627320 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=429 identity=54781 ipv4=10.0.0.135 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-bbqz7 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.144 d7776eee-72cc-49c6-863c-1c9ad5a4e965 default }" containerID=709145d7779a9234c644f049d4c41b6db6340d1fda5fc459454d5cec9aaf26d5 datapathConfiguration="&{false false false false false }" interface=lxcd1b7e3094296 k8sPodName=cert-manager/cert-manager-startupapicheck-7k9p2 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=709145d777 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2616 ipv4=10.0.0.144 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-7k9p2 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=709145d777 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2616 identityLabels="k8s:app.kubernetes.io/component=startupapicheck,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=startupapicheck,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=startupapicheck,k8s:batch.kubernetes.io/controller-uid=f4c42338-db40-4dff-9331-34011438645e,k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck,k8s:controller-uid=f4c42338-db40-4dff-9331-34011438645e,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck,k8s:io.kubernetes.pod.namespace=cert-manager,k8s:job-name=cert-manager-startupapicheck" ipv4=10.0.0.144 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-7k9p2 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=startupapicheck;k8s:app.kubernetes.io/component=startupapicheck;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=startupapicheck;k8s:app.kubernetes.io/version=v1.11.5;k8s:batch.kubernetes.io/controller-uid=f4c42338-db40-4dff-9331-34011438645e;k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck;k8s:controller-uid=f4c42338-db40-4dff-9331-34011438645e;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck;k8s:io.kubernetes.pod.namespace=cert-manager;k8s:job-name=cert-manager-startupapicheck;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=709145d777 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2616 identity=26961 identityLabels="k8s:app.kubernetes.io/component=startupapicheck,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=startupapicheck,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=startupapicheck,k8s:batch.kubernetes.io/controller-uid=f4c42338-db40-4dff-9331-34011438645e,k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck,k8s:controller-uid=f4c42338-db40-4dff-9331-34011438645e,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck,k8s:io.kubernetes.pod.namespace=cert-manager,k8s:job-name=cert-manager-startupapicheck" ipv4=10.0.0.144 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-7k9p2 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=709145d777 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2616 identity=26961 ipv4=10.0.0.144 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-7k9p2 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=709145d777 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2616 identity=26961 ipv4=10.0.0.144 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-7k9p2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=709145d777 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2616 identity=26961 ipv4=10.0.0.144 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-7k9p2 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=709145d777 endpointID=2616 k8sNamespace=cert-manager k8sPodName=cert-manager-startupapicheck-7k9p2 subsys=daemon level=info msg="Releasing key" key="[k8s:app=startupapicheck k8s:app.kubernetes.io/component=startupapicheck k8s:app.kubernetes.io/instance=cert-manager k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=startupapicheck k8s:app.kubernetes.io/version=v1.11.5 k8s:batch.kubernetes.io/controller-uid=f4c42338-db40-4dff-9331-34011438645e k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck k8s:controller-uid=f4c42338-db40-4dff-9331-34011438645e k8s:helm.sh/chart=cert-manager-v1.11.5 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager k8s:io.cilium.k8s.namespace.labels.name=cert-manager k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck k8s:io.kubernetes.pod.namespace=cert-manager k8s:job-name=cert-manager-startupapicheck]" subsys=allocator level=info msg="Removed endpoint" containerID=709145d777 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2616 identity=26961 ipv4=10.0.0.144 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-7k9p2 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.142 cd0f8034-d892-4e8c-af1d-77f96f485d0d default }" containerID=f6324d73349db4c9f0b60441cec810d44611958ec986f7268a2d0dafdce36fd7 datapathConfiguration="&{false false false false false }" interface=lxc195c134e6827 k8sPodName=ingress-nginx/ingress-nginx-admission-create-ll6xm labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f6324d7334 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=997 ipv4=10.0.0.142 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-ll6xm subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f6324d7334 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=997 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=65261ae4-5e07-4bab-89d7-90990f8f74d2,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create,k8s:controller-uid=65261ae4-5e07-4bab-89d7-90990f8f74d2,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-create" ipv4=10.0.0.142 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-ll6xm subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=admission-webhook;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:batch.kubernetes.io/controller-uid=65261ae4-5e07-4bab-89d7-90990f8f74d2;k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create;k8s:controller-uid=65261ae4-5e07-4bab-89d7-90990f8f74d2;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission;k8s:io.kubernetes.pod.namespace=ingress-nginx;k8s:job-name=ingress-nginx-admission-create;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=f6324d7334 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=997 identity=10504 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=65261ae4-5e07-4bab-89d7-90990f8f74d2,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create,k8s:controller-uid=65261ae4-5e07-4bab-89d7-90990f8f74d2,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-create" ipv4=10.0.0.142 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-ll6xm oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f6324d7334 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=997 identity=10504 ipv4=10.0.0.142 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-ll6xm subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f6324d7334 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=997 identity=10504 ipv4=10.0.0.142 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-ll6xm subsys=endpoint level=info msg="Successful endpoint creation" containerID=f6324d7334 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=997 identity=10504 ipv4=10.0.0.142 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-ll6xm subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=f6324d7334 endpointID=997 k8sNamespace=ingress-nginx k8sPodName=ingress-nginx-admission-create-ll6xm subsys=daemon level=info msg="Releasing key" key="[k8s:app.kubernetes.io/component=admission-webhook k8s:app.kubernetes.io/instance=ingress-nginx k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=ingress-nginx k8s:app.kubernetes.io/part-of=ingress-nginx k8s:app.kubernetes.io/version=1.12.1 k8s:batch.kubernetes.io/controller-uid=65261ae4-5e07-4bab-89d7-90990f8f74d2 k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create k8s:controller-uid=65261ae4-5e07-4bab-89d7-90990f8f74d2 k8s:helm.sh/chart=ingress-nginx-4.12.1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission k8s:io.kubernetes.pod.namespace=ingress-nginx k8s:job-name=ingress-nginx-admission-create]" subsys=allocator level=info msg="Removed endpoint" containerID=f6324d7334 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=997 identity=10504 ipv4=10.0.0.142 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-ll6xm subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.224 a72d7e6c-4870-4e33-a014-ed0db51914e1 default }" containerID=8fe31099a1cd01c78a7ed9b0f3c70ccff9295cc95908c332ed95a01fd400bf2a datapathConfiguration="&{false false false false false }" interface=lxc4f4a994c15ee k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-f9nxd labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8fe31099a1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1329 ipv4=10.0.0.224 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-f9nxd subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8fe31099a1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1329 identityLabels="k8s:app.kubernetes.io/component=default-backend,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend,k8s:io.kubernetes.pod.namespace=ingress-nginx" ipv4=10.0.0.224 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-f9nxd subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=8fe31099a1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1329 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.224 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-f9nxd line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=default-backend;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend;k8s:io.kubernetes.pod.namespace=ingress-nginx;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8fe31099a1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1329 identity=6309 identityLabels="k8s:app.kubernetes.io/component=default-backend,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend,k8s:io.kubernetes.pod.namespace=ingress-nginx" ipv4=10.0.0.224 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-f9nxd oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8fe31099a1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1329 identity=6309 ipv4=10.0.0.224 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-f9nxd subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=8fe31099a1 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1329 identity=6309 ipv4=10.0.0.224 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-f9nxd subsys=endpoint level=info msg="Successful endpoint creation" containerID=8fe31099a1 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1329 identity=6309 ipv4=10.0.0.224 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-f9nxd subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.237 1dec7281-6da3-46af-908b-ddb452305455 default }" containerID=b6c8d66b479bb9b95d01479e3b4a5ab7bf0e6564ea95e8b215799a22be6513c8 datapathConfiguration="&{false false false false false }" interface=lxc2a8fb5bffdc6 k8sPodName=ingress-nginx/ingress-nginx-admission-patch-jzt4g labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b6c8d66b47 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=621 ipv4=10.0.0.237 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-jzt4g subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b6c8d66b47 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=621 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=2297e5af-88cc-4075-aec7-a0591181e1e9,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch,k8s:controller-uid=2297e5af-88cc-4075-aec7-a0591181e1e9,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-patch" ipv4=10.0.0.237 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-jzt4g subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=admission-webhook;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:batch.kubernetes.io/controller-uid=2297e5af-88cc-4075-aec7-a0591181e1e9;k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch;k8s:controller-uid=2297e5af-88cc-4075-aec7-a0591181e1e9;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission;k8s:io.kubernetes.pod.namespace=ingress-nginx;k8s:job-name=ingress-nginx-admission-patch;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b6c8d66b47 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=621 identity=32417 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=2297e5af-88cc-4075-aec7-a0591181e1e9,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch,k8s:controller-uid=2297e5af-88cc-4075-aec7-a0591181e1e9,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-patch" ipv4=10.0.0.237 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-jzt4g oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b6c8d66b47 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=621 identity=32417 ipv4=10.0.0.237 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-jzt4g subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b6c8d66b47 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=621 identity=32417 ipv4=10.0.0.237 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-jzt4g subsys=endpoint level=info msg="Successful endpoint creation" containerID=b6c8d66b47 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=621 identity=32417 ipv4=10.0.0.237 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-jzt4g subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=b6c8d66b47 endpointID=621 k8sNamespace=ingress-nginx k8sPodName=ingress-nginx-admission-patch-jzt4g subsys=daemon level=info msg="Releasing key" key="[k8s:app.kubernetes.io/component=admission-webhook k8s:app.kubernetes.io/instance=ingress-nginx k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=ingress-nginx k8s:app.kubernetes.io/part-of=ingress-nginx k8s:app.kubernetes.io/version=1.12.1 k8s:batch.kubernetes.io/controller-uid=2297e5af-88cc-4075-aec7-a0591181e1e9 k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch k8s:controller-uid=2297e5af-88cc-4075-aec7-a0591181e1e9 k8s:helm.sh/chart=ingress-nginx-4.12.1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission k8s:io.kubernetes.pod.namespace=ingress-nginx k8s:job-name=ingress-nginx-admission-patch]" subsys=allocator level=info msg="Removed endpoint" containerID=b6c8d66b47 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=621 identity=32417 ipv4=10.0.0.237 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-jzt4g subsys=endpoint level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"messaging-topology-operator\",\"k8s:app.kubernetes.io/instance\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/name\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/part-of\":\"rabbitmq\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:9443 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=rabbitmq-messaging-topology-operator k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=94587ff2-8a77-4a36-8f26-780664dc987d] Description:}]" policyAddRequest=c6769bbd-6d26-487e-b66f-7933405e1484 subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=c6769bbd-6d26-487e-b66f-7933405e1484 policyRevision=2 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=rabbitmq-messaging-topology-operator subsys=k8s-watcher level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"rabbitmq-operator\",\"k8s:app.kubernetes.io/instance\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/name\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/part-of\":\"rabbitmq\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=rabbitmq-cluster-operator k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=8ee3577d-581e-49ae-84a2-4924492becdf] Description:}]" policyAddRequest=7ec263b5-0287-4daf-945d-52c090658c3b subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=7ec263b5-0287-4daf-945d-52c090658c3b policyRevision=3 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=rabbitmq-cluster-operator subsys=k8s-watcher level=info msg="Create endpoint request" addressing="&{10.0.0.186 30955f75-5cde-4eed-83b3-b8d4f9e31fe5 default }" containerID=c7a7421f4a0a6cf38ed9fdfdaf1addbcc225ed732f5ae0fdb665538f8ee2b5ed datapathConfiguration="&{false false false false false }" interface=lxcbc69bbc6dfd5 k8sPodName=openstack/rabbitmq-cluster-operator-5448d56d95-cpnfs labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c7a7421f4a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=893 ipv4=10.0.0.186 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-5448d56d95-cpnfs subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c7a7421f4a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=893 identityLabels="k8s:app.kubernetes.io/component=rabbitmq-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=2.9.0,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.3.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.186 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-5448d56d95-cpnfs subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=c7a7421f4a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=893 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.186 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-5448d56d95-cpnfs line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq-operator;k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=rabbitmq-cluster-operator;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:app.kubernetes.io/version=2.9.0;k8s:helm.sh/chart=rabbitmq-cluster-operator-4.3.6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c7a7421f4a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=893 identity=12958 identityLabels="k8s:app.kubernetes.io/component=rabbitmq-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=2.9.0,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.3.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.186 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-5448d56d95-cpnfs oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c7a7421f4a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=893 identity=12958 ipv4=10.0.0.186 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-5448d56d95-cpnfs subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c7a7421f4a datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=893 identity=12958 ipv4=10.0.0.186 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-5448d56d95-cpnfs subsys=endpoint level=info msg="Successful endpoint creation" containerID=c7a7421f4a datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=893 identity=12958 ipv4=10.0.0.186 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-5448d56d95-cpnfs subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.30 96f39c09-6c77-45da-9194-6de9b1b76d15 default }" containerID=b2ac2d3a90e3be7d4d6c2b19b8d6fe6ee3305364f621091fcdbd988ccc43d139 datapathConfiguration="&{false false false false false }" interface=lxc0ae1190528cd k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-st856 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b2ac2d3a90 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=178 ipv4=10.0.0.30 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-st856 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b2ac2d3a90 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=178 identityLabels="k8s:app.kubernetes.io/component=messaging-topology-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=1.14.1,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.3.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.30 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-st856 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=messaging-topology-operator;k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=rabbitmq-cluster-operator;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:app.kubernetes.io/version=1.14.1;k8s:helm.sh/chart=rabbitmq-cluster-operator-4.3.6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b2ac2d3a90 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=178 identity=65386 identityLabels="k8s:app.kubernetes.io/component=messaging-topology-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=1.14.1,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.3.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.30 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-st856 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b2ac2d3a90 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=178 identity=65386 ipv4=10.0.0.30 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-st856 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b2ac2d3a90 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=178 identity=65386 ipv4=10.0.0.30 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-st856 subsys=endpoint level=info msg="Successful endpoint creation" containerID=b2ac2d3a90 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=178 identity=65386 ipv4=10.0.0.30 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-st856 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.237 fb295446-5b8d-4833-8d2e-698d367f7bc2 default }" containerID=0b8a35854f75539e7de4de216600c05ede0ca853a5cb4d4e088fec8a5a2b4dc3 datapathConfiguration="&{false false false false false }" interface=lxccd4e7ab76dfe k8sPodName=openstack/pxc-operator-7cff949c8b-cqkwp labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0b8a35854f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1041 ipv4=10.0.0.237 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-cqkwp subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0b8a35854f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1041 identityLabels="k8s:app.kubernetes.io/component=operator,k8s:app.kubernetes.io/instance=pxc-operator,k8s:app.kubernetes.io/name=pxc-operator,k8s:app.kubernetes.io/part-of=pxc-operator,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.237 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-cqkwp subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=operator;k8s:app.kubernetes.io/instance=pxc-operator;k8s:app.kubernetes.io/name=pxc-operator;k8s:app.kubernetes.io/part-of=pxc-operator;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0b8a35854f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1041 identity=1727 identityLabels="k8s:app.kubernetes.io/component=operator,k8s:app.kubernetes.io/instance=pxc-operator,k8s:app.kubernetes.io/name=pxc-operator,k8s:app.kubernetes.io/part-of=pxc-operator,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.237 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-cqkwp oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0b8a35854f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1041 identity=1727 ipv4=10.0.0.237 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-cqkwp subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=0b8a35854f datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=1041 identity=1727 ipv4=10.0.0.237 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-cqkwp subsys=endpoint level=info msg="Successful endpoint creation" containerID=0b8a35854f datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=1041 identity=1727 ipv4=10.0.0.237 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-cqkwp subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.162 d0fe4238-9b72-4155-8990-7f4abf4058d6 default }" containerID=5e4cadcc5df0c853acdb5dae34bb1b3041b9a0e2125cbf27b7ad9e6993fcb6ca datapathConfiguration="&{false false false false false }" interface=lxcefb72860da98 k8sPodName=local-path-storage/helper-pod-create-pvc-ddac9a81-ef54-40eb-8f9d-076254eb1a21 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5e4cadcc5d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1737 ipv4=10.0.0.162 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-ddac9a81-ef54-40eb-8f9d-076254eb1a21 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5e4cadcc5d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1737 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.162 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-ddac9a81-ef54-40eb-8f9d-076254eb1a21 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:local-path-storage k8s:io.cilium.k8s.namespace.labels.name:local-path-storage]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5e4cadcc5d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1737 identity=2052 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.162 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-ddac9a81-ef54-40eb-8f9d-076254eb1a21 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5e4cadcc5d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1737 identity=2052 ipv4=10.0.0.162 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-ddac9a81-ef54-40eb-8f9d-076254eb1a21 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=5e4cadcc5d datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=1737 identity=2052 ipv4=10.0.0.162 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-ddac9a81-ef54-40eb-8f9d-076254eb1a21 subsys=endpoint level=info msg="Successful endpoint creation" containerID=5e4cadcc5d datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=1737 identity=2052 ipv4=10.0.0.162 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-ddac9a81-ef54-40eb-8f9d-076254eb1a21 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.37 0b222739-9052-4845-94c5-25fa0c8b0dea default }" containerID=86c27f596d08a70410acdf833e759a23e18cc63cac618a3cb2c1d6e3d0edb4fe datapathConfiguration="&{false false false false false }" interface=lxc0578c1ac5b9f k8sPodName=openstack/percona-xtradb-haproxy-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=86c27f596d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3003 ipv4=10.0.0.37 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=86c27f596d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3003 identityLabels="k8s:app.kubernetes.io/component=haproxy,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0" ipv4=10.0.0.37 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=haproxy;k8s:app.kubernetes.io/instance=percona-xtradb;k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator;k8s:app.kubernetes.io/name=percona-xtradb-cluster;k8s:app.kubernetes.io/part-of=percona-xtradb-cluster;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=86c27f596d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3003 identity=25155 identityLabels="k8s:app.kubernetes.io/component=haproxy,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0" ipv4=10.0.0.37 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=86c27f596d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3003 identity=25155 ipv4=10.0.0.37 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=86c27f596d datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=3003 identity=25155 ipv4=10.0.0.37 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=86c27f596d datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=3003 identity=25155 ipv4=10.0.0.37 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=5e4cadcc5d endpointID=1737 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-ddac9a81-ef54-40eb-8f9d-076254eb1a21 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=5e4cadcc5d datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=1737 identity=2052 ipv4=10.0.0.162 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-ddac9a81-ef54-40eb-8f9d-076254eb1a21 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.5 5291a10a-a5a0-4b7c-be88-2898de985a41 default }" containerID=25fa76dc017d0187837a90d7b1a09f3bc8892e0f6310fc599a3c8c63ff993723 datapathConfiguration="&{false false false false false }" interface=lxc0fea535628c9 k8sPodName=openstack/percona-xtradb-pxc-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=25fa76dc01 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1456 ipv4=10.0.0.5 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=25fa76dc01 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1456 identityLabels="k8s:app.kubernetes.io/component=pxc,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0" ipv4=10.0.0.5 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=pxc;k8s:app.kubernetes.io/instance=percona-xtradb;k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator;k8s:app.kubernetes.io/name=percona-xtradb-cluster;k8s:app.kubernetes.io/part-of=percona-xtradb-cluster;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=25fa76dc01 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1456 identity=31559 identityLabels="k8s:app.kubernetes.io/component=pxc,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0" ipv4=10.0.0.5 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=25fa76dc01 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1456 identity=31559 ipv4=10.0.0.5 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=25fa76dc01 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=1456 identity=31559 ipv4=10.0.0.5 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=25fa76dc01 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=1456 identity=31559 ipv4=10.0.0.5 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/instance\":\"valkey\",\"k8s:app.kubernetes.io/name\":\"valkey\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:6379 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:} {Ports:[{Port:26379 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:} {IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:9121 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=valkey k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=94d66769-e6ef-48a6-8e06-2415dadd1b42] Description:}]" policyAddRequest=a35ed224-1856-49ae-af64-53f8a41fb2a3 subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=a35ed224-1856-49ae-af64-53f8a41fb2a3 policyRevision=4 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=valkey subsys=k8s-watcher level=info msg="Create endpoint request" addressing="&{10.0.0.172 b73dfdec-c0f3-4911-b5aa-ad769687116c default }" containerID=41c2b16084b237405eb836f391c405e1b5d7bed7b1d2233d378be17e15cc2d59 datapathConfiguration="&{false false false false false }" interface=lxc530159b6cf72 k8sPodName=local-path-storage/helper-pod-create-pvc-cb42236b-e2b8-4ec2-afd4-083312ffed7e labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=41c2b16084 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1378 ipv4=10.0.0.172 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-cb42236b-e2b8-4ec2-afd4-083312ffed7e subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=41c2b16084 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1378 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.172 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-cb42236b-e2b8-4ec2-afd4-083312ffed7e subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=41c2b16084 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1378 identity=2052 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.172 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-cb42236b-e2b8-4ec2-afd4-083312ffed7e oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=41c2b16084 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1378 identity=2052 ipv4=10.0.0.172 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-cb42236b-e2b8-4ec2-afd4-083312ffed7e subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=41c2b16084 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1378 identity=2052 ipv4=10.0.0.172 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-cb42236b-e2b8-4ec2-afd4-083312ffed7e subsys=endpoint level=info msg="Successful endpoint creation" containerID=41c2b16084 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1378 identity=2052 ipv4=10.0.0.172 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-cb42236b-e2b8-4ec2-afd4-083312ffed7e subsys=daemon level=info msg="Delete endpoint request" containerID=41c2b16084 endpointID=1378 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-cb42236b-e2b8-4ec2-afd4-083312ffed7e subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=41c2b16084 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1378 identity=2052 ipv4=10.0.0.172 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-cb42236b-e2b8-4ec2-afd4-083312ffed7e subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.76 fb633ae3-9126-4a43-8ae4-dc1b2fd67b70 default }" containerID=ce5a93878411a3b7d0463aa9e22793b6dd430ac6bfab2e297cf41b525057386b datapathConfiguration="&{false false false false false }" interface=lxc674e33a8351a k8sPodName=openstack/valkey-node-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ce5a938784 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1326 ipv4=10.0.0.76 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ce5a938784 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1326 identityLabels="k8s:app.kubernetes.io/component=node,k8s:app.kubernetes.io/instance=valkey,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=valkey,k8s:app.kubernetes.io/version=8.0.2,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=valkey-2.4.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=valkey,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=valkey-node-0" ipv4=10.0.0.76 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=node;k8s:app.kubernetes.io/instance=valkey;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=valkey;k8s:app.kubernetes.io/version=8.0.2;k8s:apps.kubernetes.io/pod-index=0;k8s:helm.sh/chart=valkey-2.4.6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=valkey;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=valkey-node-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ce5a938784 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1326 identity=12044 identityLabels="k8s:app.kubernetes.io/component=node,k8s:app.kubernetes.io/instance=valkey,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=valkey,k8s:app.kubernetes.io/version=8.0.2,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=valkey-2.4.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=valkey,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=valkey-node-0" ipv4=10.0.0.76 ipv6= k8sPodName=openstack/valkey-node-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ce5a938784 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1326 identity=12044 ipv4=10.0.0.76 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=ce5a938784 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1326 identity=12044 ipv4=10.0.0.76 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=ce5a938784 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1326 identity=12044 ipv4=10.0.0.76 ipv6= k8sPodName=openstack/valkey-node-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"keycloak\",\"k8s:app.kubernetes.io/instance\":\"keycloak\",\"k8s:app.kubernetes.io/name\":\"keycloak\",\"k8s:io.kubernetes.pod.namespace\":\"auth-system\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:7800 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:} {Ports:[{Port:8080 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=keycloak k8s:io.cilium.k8s.policy.namespace=auth-system k8s:io.cilium.k8s.policy.uid=b8036d19-fd3b-457d-b5ba-af9d3be7a087] Description:}]" policyAddRequest=9bfb2acf-31ee-4bb3-af06-9dacbf4bc998 subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=9bfb2acf-31ee-4bb3-af06-9dacbf4bc998 policyRevision=5 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=keycloak subsys=k8s-watcher level=info msg="Create endpoint request" addressing="&{10.0.0.229 f5ba05e3-1c2a-49ec-b065-02e9f0a82732 default }" containerID=fc31917da97fd9a36e294006bba80d2d3b493ff8e7c5f4252692f6ff79a87ad8 datapathConfiguration="&{false false false false false }" interface=lxc33fb333ad1c7 k8sPodName=auth-system/keycloak-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=fc31917da9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1016 ipv4=10.0.0.229 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=fc31917da9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1016 identityLabels="k8s:app.kubernetes.io/component=keycloak,k8s:app.kubernetes.io/instance=keycloak,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=keycloak,k8s:app.kubernetes.io/version=24.0.5,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=keycloak-21.4.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system,k8s:io.cilium.k8s.namespace.labels.name=auth-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keycloak,k8s:io.kubernetes.pod.namespace=auth-system,k8s:statefulset.kubernetes.io/pod-name=keycloak-0" ipv4=10.0.0.229 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:auth-system k8s:io.cilium.k8s.namespace.labels.name:auth-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=keycloak;k8s:app.kubernetes.io/instance=keycloak;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=keycloak;k8s:app.kubernetes.io/version=24.0.5;k8s:apps.kubernetes.io/pod-index=0;k8s:helm.sh/chart=keycloak-21.4.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system;k8s:io.cilium.k8s.namespace.labels.name=auth-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keycloak;k8s:io.kubernetes.pod.namespace=auth-system;k8s:statefulset.kubernetes.io/pod-name=keycloak-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=fc31917da9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1016 identity=11329 identityLabels="k8s:app.kubernetes.io/component=keycloak,k8s:app.kubernetes.io/instance=keycloak,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=keycloak,k8s:app.kubernetes.io/version=24.0.5,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=keycloak-21.4.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system,k8s:io.cilium.k8s.namespace.labels.name=auth-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keycloak,k8s:io.kubernetes.pod.namespace=auth-system,k8s:statefulset.kubernetes.io/pod-name=keycloak-0" ipv4=10.0.0.229 ipv6= k8sPodName=auth-system/keycloak-0 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=fc31917da9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1016 identity=11329 ipv4=10.0.0.229 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=fc31917da9 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1016 identity=11329 ipv4=10.0.0.229 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=fc31917da9 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1016 identity=11329 ipv4=10.0.0.229 ipv6= k8sPodName=auth-system/keycloak-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Conntrack garbage collector interval recalculated" deleteRatio=0.009867842601485249 newInterval=7m30s subsys=map-ct level=info msg="Create endpoint request" addressing="&{10.0.0.77 94cd1c48-76fd-4f3a-8ed9-2baa447309c7 default }" containerID=9efe469bae446478b4146610ea284eea1787e014f4df50869d4a56b3d69274e6 datapathConfiguration="&{false false false false false }" interface=lxca1bad36dc099 k8sPodName=monitoring/node-feature-discovery-worker-m9x87 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9efe469bae datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1344 ipv4=10.0.0.77 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-m9x87 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.45 45d377e8-50a7-4572-8ef3-b76895fa75d5 default }" containerID=a62e237d8892a81b9a6673b1fb38109f7ad2af3573347a34c10e0a1c959afdc5 datapathConfiguration="&{false false false false false }" interface=lxc640a47d3267f k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-xh8ck labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a62e237d88 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3733 ipv4=10.0.0.45 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-xh8ck subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9efe469bae datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1344 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=worker" ipv4=10.0.0.77 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-m9x87 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Create endpoint request" addressing="&{10.0.0.40 98dbf38a-e7d0-4144-8559-df61026858e8 default }" containerID=3a3626a64553229bda6d0fddd7d640a7032895dad6826ee1db709add3ef36e99 datapathConfiguration="&{false false false false false }" interface=lxc663ce855c64c k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-289gw labels="[]" subsys=daemon sync-build=true level=info msg="Resolving identity labels (blocking)" containerID=a62e237d88 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3733 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=gc" ipv4=10.0.0.45 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-xh8ck subsys=endpoint level=info msg="New endpoint" containerID=3a3626a645 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1299 ipv4=10.0.0.40 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-289gw subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3a3626a645 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1299 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=master" ipv4=10.0.0.40 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-289gw subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=worker;" subsys=allocator level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Identity of endpoint changed" containerID=9efe469bae datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1344 identity=50493 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=worker" ipv4=10.0.0.77 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-m9x87 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=9efe469bae datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1344 identity=50493 ipv4=10.0.0.77 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-m9x87 subsys=endpoint level=info msg="Invalid state transition skipped" containerID=3a3626a645 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1299 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.40 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-289gw line=611 subsys=endpoint level=info msg="Invalid state transition skipped" containerID=a62e237d88 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3733 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.45 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-xh8ck line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=gc;" subsys=allocator level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Identity of endpoint changed" containerID=a62e237d88 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3733 identity=20670 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=gc" ipv4=10.0.0.45 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-xh8ck oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a62e237d88 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3733 identity=20670 ipv4=10.0.0.45 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-xh8ck subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=master;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3a3626a645 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1299 identity=14686 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=master" ipv4=10.0.0.40 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-289gw oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3a3626a645 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1299 identity=14686 ipv4=10.0.0.40 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-289gw subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=9efe469bae datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1344 identity=50493 ipv4=10.0.0.77 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-m9x87 subsys=endpoint level=info msg="Successful endpoint creation" containerID=9efe469bae datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1344 identity=50493 ipv4=10.0.0.77 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-m9x87 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=a62e237d88 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3733 identity=20670 ipv4=10.0.0.45 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-xh8ck subsys=endpoint level=info msg="Successful endpoint creation" containerID=a62e237d88 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3733 identity=20670 ipv4=10.0.0.45 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-xh8ck subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=3a3626a645 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1299 identity=14686 ipv4=10.0.0.40 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-289gw subsys=endpoint level=info msg="Successful endpoint creation" containerID=3a3626a645 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1299 identity=14686 ipv4=10.0.0.40 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-289gw subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.62 25d028f2-5363-4e8e-9068-e4cf97799a6f default }" containerID=630c71cbd801e02de41ca62b723ad844ef935f16bb1102119ef651ae7043a522 datapathConfiguration="&{false false false false false }" interface=lxcba2bf57667d5 k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-x7xhb labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=630c71cbd8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=45 ipv4=10.0.0.62 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-x7xhb subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=630c71cbd8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=45 identityLabels="k8s:app=secretgen-controller,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa,k8s:io.kubernetes.pod.namespace=secretgen-controller" ipv4=10.0.0.62 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-x7xhb subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:secretgen-controller]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=secretgen-controller;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa;k8s:io.kubernetes.pod.namespace=secretgen-controller;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=630c71cbd8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=45 identity=44101 identityLabels="k8s:app=secretgen-controller,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa,k8s:io.kubernetes.pod.namespace=secretgen-controller" ipv4=10.0.0.62 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-x7xhb oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=630c71cbd8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=45 identity=44101 ipv4=10.0.0.62 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-x7xhb subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=630c71cbd8 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=45 identity=44101 ipv4=10.0.0.62 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-x7xhb subsys=endpoint level=info msg="Successful endpoint creation" containerID=630c71cbd8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=45 identity=44101 ipv4=10.0.0.62 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-x7xhb subsys=daemon level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=575 identity=1 identityLabels="k8s:feature.node.kubernetes.io/cpu-cpuid.ADX=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AESNI=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AVX2=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AVX=true,k8s:feature.node.kubernetes.io/cpu-cpuid.CLZERO=true,k8s:feature.node.kubernetes.io/cpu-cpuid.CMPXCHG8=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FMA3=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FXSR=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FXSROPT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.HYPERVISOR=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IA32_ARCH_CAP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IBPB=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IBRS=true,k8s:feature.node.kubernetes.io/cpu-cpuid.LAHF=true,k8s:feature.node.kubernetes.io/cpu-cpuid.MOVBE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.NRIPS=true,k8s:feature.node.kubernetes.io/cpu-cpuid.OSXSAVE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SHA=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SPEC_CTRL_SSBD=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SSE4A=true,k8s:feature.node.kubernetes.io/cpu-cpuid.STIBP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SVM=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SVMNP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SYSCALL=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SYSEE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.TOPEXT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.WBNOINVD=true,k8s:feature.node.kubernetes.io/cpu-cpuid.X87=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XGETBV1=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVEC=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVEOPT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVES=true,k8s:feature.node.kubernetes.io/cpu-hardware_multithreading=false,k8s:feature.node.kubernetes.io/cpu-model.family=23,k8s:feature.node.kubernetes.io/cpu-model.id=49,k8s:feature.node.kubernetes.io/cpu-model.vendor_id=AMD,k8s:feature.node.kubernetes.io/kernel-config.NO_HZ=true,k8s:feature.node.kubernetes.io/kernel-config.NO_HZ_IDLE=true,k8s:feature.node.kubernetes.io/kernel-version.full=5.15.0-186-generic,k8s:feature.node.kubernetes.io/kernel-version.major=5,k8s:feature.node.kubernetes.io/kernel-version.minor=15,k8s:feature.node.kubernetes.io/kernel-version.revision=0,k8s:feature.node.kubernetes.io/pci-0300_1af4.present=true,k8s:feature.node.kubernetes.io/system-os_release.ID=ubuntu,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID.major=22,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID.minor=04,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID=22.04,k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,k8s:openstack-compute-node=enabled,k8s:openstack-control-plane=enabled,k8s:openvswitch=enabled,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_hostns_00575 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_hostns_00575 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_hostns_00575 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_hostns_00575:pending" subsys=bpf level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_netdev_00005 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_netdev_00005 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005:pending" subsys=bpf level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=575 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.152 cb29363f-88b6-4778-8fbf-e885ca353f3f default }" containerID=958962a181985106dc05639225b0c0e035c00238058409ccb6c9a912f9b37ee9 datapathConfiguration="&{false false false false false }" interface=lxcf38c8f9e2114 k8sPodName=monitoring/kube-prometheus-stack-admission-create-757vf labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=958962a181 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3488 ipv4=10.0.0.152 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-757vf subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=958962a181 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3488 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-create,k8s:batch.kubernetes.io/controller-uid=81a68732-f44c-476d-ade3-0d5653a7a3c5,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=81a68732-f44c-476d-ade3-0d5653a7a3c5,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-create,k8s:release=kube-prometheus-stack" ipv4=10.0.0.152 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-757vf subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-admission-create;k8s:app.kubernetes.io/component=prometheus-operator-webhook;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:batch.kubernetes.io/controller-uid=81a68732-f44c-476d-ade3-0d5653a7a3c5;k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create;k8s:chart=kube-prometheus-stack-60.2.0;k8s:controller-uid=81a68732-f44c-476d-ade3-0d5653a7a3c5;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission;k8s:io.kubernetes.pod.namespace=monitoring;k8s:job-name=kube-prometheus-stack-admission-create;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=958962a181 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3488 identity=18580 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-create,k8s:batch.kubernetes.io/controller-uid=81a68732-f44c-476d-ade3-0d5653a7a3c5,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=81a68732-f44c-476d-ade3-0d5653a7a3c5,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-create,k8s:release=kube-prometheus-stack" ipv4=10.0.0.152 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-757vf oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=958962a181 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3488 identity=18580 ipv4=10.0.0.152 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-757vf subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=958962a181 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3488 identity=18580 ipv4=10.0.0.152 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-757vf subsys=endpoint level=info msg="Successful endpoint creation" containerID=958962a181 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3488 identity=18580 ipv4=10.0.0.152 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-757vf subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=958962a181 endpointID=3488 k8sNamespace=monitoring k8sPodName=kube-prometheus-stack-admission-create-757vf subsys=daemon level=info msg="Releasing key" key="[k8s:app=kube-prometheus-stack-admission-create k8s:app.kubernetes.io/component=prometheus-operator-webhook k8s:app.kubernetes.io/instance=kube-prometheus-stack k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator k8s:app.kubernetes.io/part-of=kube-prometheus-stack k8s:app.kubernetes.io/version=60.2.0 k8s:batch.kubernetes.io/controller-uid=81a68732-f44c-476d-ade3-0d5653a7a3c5 k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create k8s:chart=kube-prometheus-stack-60.2.0 k8s:controller-uid=81a68732-f44c-476d-ade3-0d5653a7a3c5 k8s:heritage=Helm k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring k8s:io.cilium.k8s.namespace.labels.name=monitoring k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission k8s:io.kubernetes.pod.namespace=monitoring k8s:job-name=kube-prometheus-stack-admission-create k8s:release=kube-prometheus-stack]" subsys=allocator level=info msg="Removed endpoint" containerID=958962a181 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3488 identity=18580 ipv4=10.0.0.152 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-757vf subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.233 b1cd6d0a-09ca-4099-9cc3-1b0a24816bd4 default }" containerID=6f6ce12d369ecaa9e6f08f805840227ed6a9358d5d0d363b052f8f01bf4549db datapathConfiguration="&{false false false false false }" interface=lxcd498071d94e0 k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-59h8m labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6f6ce12d36 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=318 ipv4=10.0.0.233 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-59h8m subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6f6ce12d36 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=318 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-operator,k8s:chart=kube-prometheus-stack-60.2.0,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.233 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-59h8m subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-operator;k8s:app.kubernetes.io/component=prometheus-operator;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:chart=kube-prometheus-stack-60.2.0;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator;k8s:io.kubernetes.pod.namespace=monitoring;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6f6ce12d36 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=318 identity=32163 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-operator,k8s:chart=kube-prometheus-stack-60.2.0,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.233 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-59h8m oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6f6ce12d36 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=318 identity=32163 ipv4=10.0.0.233 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-59h8m subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.119 1c867a63-1daf-4605-9cab-892b702ee43d default }" containerID=84ef0efbe9f91a792e53b27ae865869f91ae52df07ebda66b909b7970729c4d2 datapathConfiguration="&{false false false false false }" interface=lxc995963148798 k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-fqdjs labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=84ef0efbe9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=439 ipv4=10.0.0.119 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-fqdjs subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=84ef0efbe9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=439 identityLabels="k8s:app.kubernetes.io/component=metrics,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-state-metrics,k8s:app.kubernetes.io/part-of=kube-state-metrics,k8s:app.kubernetes.io/version=2.12.0,k8s:helm.sh/chart=kube-state-metrics-5.20.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.119 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-fqdjs subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Create endpoint request" addressing="&{10.0.0.153 58ef8c64-1bb5-47be-b23b-be341bc34903 default }" containerID=1742a02276d5131e2148fb8172bb094a9827045e358248630ec6cccb318eb903 datapathConfiguration="&{false false false false false }" interface=lxcf2cc88f0d6e5 k8sPodName=monitoring/kube-prometheus-stack-grafana-76488c7d7c-6zdps labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1742a02276 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1768 ipv4=10.0.0.153 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-76488c7d7c-6zdps subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1742a02276 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1768 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/name=grafana,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.153 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-76488c7d7c-6zdps subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=metrics;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-state-metrics;k8s:app.kubernetes.io/part-of=kube-state-metrics;k8s:app.kubernetes.io/version=2.12.0;k8s:helm.sh/chart=kube-state-metrics-5.20.0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics;k8s:io.kubernetes.pod.namespace=monitoring;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=84ef0efbe9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=439 identity=60950 identityLabels="k8s:app.kubernetes.io/component=metrics,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-state-metrics,k8s:app.kubernetes.io/part-of=kube-state-metrics,k8s:app.kubernetes.io/version=2.12.0,k8s:helm.sh/chart=kube-state-metrics-5.20.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.119 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-fqdjs oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=84ef0efbe9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=439 identity=60950 ipv4=10.0.0.119 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-fqdjs subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/name=grafana;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1742a02276 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1768 identity=12579 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/name=grafana,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.153 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-76488c7d7c-6zdps oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1742a02276 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1768 identity=12579 ipv4=10.0.0.153 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-76488c7d7c-6zdps subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=6f6ce12d36 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=318 identity=32163 ipv4=10.0.0.233 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-59h8m subsys=endpoint level=info msg="Successful endpoint creation" containerID=6f6ce12d36 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=318 identity=32163 ipv4=10.0.0.233 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-59h8m subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=84ef0efbe9 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=439 identity=60950 ipv4=10.0.0.119 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-fqdjs subsys=endpoint level=info msg="Successful endpoint creation" containerID=84ef0efbe9 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=439 identity=60950 ipv4=10.0.0.119 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-fqdjs subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=1742a02276 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1768 identity=12579 ipv4=10.0.0.153 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-76488c7d7c-6zdps subsys=endpoint level=info msg="Successful endpoint creation" containerID=1742a02276 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1768 identity=12579 ipv4=10.0.0.153 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-76488c7d7c-6zdps subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.158 28ebdc23-24e5-4308-aa00-bac25ed8f0bd default }" containerID=3e48860d6dc95fe3aafb1251cb9a20c77668a7c7f107dcae66230fdc8da2d112 datapathConfiguration="&{false false false false false }" interface=lxca838f2226111 k8sPodName=monitoring/kube-prometheus-stack-admission-patch-8hvc5 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3e48860d6d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3492 ipv4=10.0.0.158 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-8hvc5 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3e48860d6d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3492 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-patch,k8s:batch.kubernetes.io/controller-uid=9db43d35-2be1-40d3-8a29-2c594907798b,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=9db43d35-2be1-40d3-8a29-2c594907798b,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-patch,k8s:release=kube-prometheus-stack" ipv4=10.0.0.158 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-8hvc5 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-admission-patch;k8s:app.kubernetes.io/component=prometheus-operator-webhook;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:batch.kubernetes.io/controller-uid=9db43d35-2be1-40d3-8a29-2c594907798b;k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch;k8s:chart=kube-prometheus-stack-60.2.0;k8s:controller-uid=9db43d35-2be1-40d3-8a29-2c594907798b;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission;k8s:io.kubernetes.pod.namespace=monitoring;k8s:job-name=kube-prometheus-stack-admission-patch;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3e48860d6d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3492 identity=9478 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-patch,k8s:batch.kubernetes.io/controller-uid=9db43d35-2be1-40d3-8a29-2c594907798b,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=9db43d35-2be1-40d3-8a29-2c594907798b,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-patch,k8s:release=kube-prometheus-stack" ipv4=10.0.0.158 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-8hvc5 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3e48860d6d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3492 identity=9478 ipv4=10.0.0.158 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-8hvc5 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=3e48860d6d datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3492 identity=9478 ipv4=10.0.0.158 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-8hvc5 subsys=endpoint level=info msg="Successful endpoint creation" containerID=3e48860d6d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3492 identity=9478 ipv4=10.0.0.158 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-8hvc5 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.83 d786babb-f7fe-470a-bbfb-26d8fd19f852 default }" containerID=549b6db197e1bda33ea158c62cb162f693b99d6e076e53804b0d58bffbdccff7 datapathConfiguration="&{false false false false false }" interface=lxc2d5c62a0a043 k8sPodName=local-path-storage/helper-pod-create-pvc-84b5f1d7-6805-4f4c-beb8-48e78faacca0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=549b6db197 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=137 ipv4=10.0.0.83 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-84b5f1d7-6805-4f4c-beb8-48e78faacca0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=549b6db197 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=137 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.83 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-84b5f1d7-6805-4f4c-beb8-48e78faacca0 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=549b6db197 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=137 identity=2052 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.83 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-84b5f1d7-6805-4f4c-beb8-48e78faacca0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=549b6db197 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=137 identity=2052 ipv4=10.0.0.83 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-84b5f1d7-6805-4f4c-beb8-48e78faacca0 subsys=endpoint level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=549b6db197 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=137 identity=2052 ipv4=10.0.0.83 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-84b5f1d7-6805-4f4c-beb8-48e78faacca0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=549b6db197 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=137 identity=2052 ipv4=10.0.0.83 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-84b5f1d7-6805-4f4c-beb8-48e78faacca0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.36 e111c807-0869-4a4e-83c7-fc62ce677175 default }" containerID=5f651899820377b3dfc3664c6c63f358de01cd1f2a614cd37999016788398686 datapathConfiguration="&{false false false false false }" interface=lxc922826de9f64 k8sPodName=local-path-storage/helper-pod-create-pvc-1c5ab3e9-4a09-47c3-ac9f-a46e1a0825b6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5f65189982 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3875 ipv4=10.0.0.36 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-1c5ab3e9-4a09-47c3-ac9f-a46e1a0825b6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5f65189982 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3875 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.36 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-1c5ab3e9-4a09-47c3-ac9f-a46e1a0825b6 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=5f65189982 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3875 identity=2052 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.36 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-1c5ab3e9-4a09-47c3-ac9f-a46e1a0825b6 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5f65189982 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3875 identity=2052 ipv4=10.0.0.36 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-1c5ab3e9-4a09-47c3-ac9f-a46e1a0825b6 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=5f65189982 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3875 identity=2052 ipv4=10.0.0.36 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-1c5ab3e9-4a09-47c3-ac9f-a46e1a0825b6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=5f65189982 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3875 identity=2052 ipv4=10.0.0.36 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-1c5ab3e9-4a09-47c3-ac9f-a46e1a0825b6 subsys=daemon level=info msg="Delete endpoint request" containerID=3e48860d6d endpointID=3492 k8sNamespace=monitoring k8sPodName=kube-prometheus-stack-admission-patch-8hvc5 subsys=daemon level=info msg="Releasing key" key="[k8s:app=kube-prometheus-stack-admission-patch k8s:app.kubernetes.io/component=prometheus-operator-webhook k8s:app.kubernetes.io/instance=kube-prometheus-stack k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator k8s:app.kubernetes.io/part-of=kube-prometheus-stack k8s:app.kubernetes.io/version=60.2.0 k8s:batch.kubernetes.io/controller-uid=9db43d35-2be1-40d3-8a29-2c594907798b k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch k8s:chart=kube-prometheus-stack-60.2.0 k8s:controller-uid=9db43d35-2be1-40d3-8a29-2c594907798b k8s:heritage=Helm k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring k8s:io.cilium.k8s.namespace.labels.name=monitoring k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission k8s:io.kubernetes.pod.namespace=monitoring k8s:job-name=kube-prometheus-stack-admission-patch k8s:release=kube-prometheus-stack]" subsys=allocator level=info msg="Removed endpoint" containerID=3e48860d6d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3492 identity=9478 ipv4=10.0.0.158 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-8hvc5 subsys=endpoint level=info msg="Delete endpoint request" containerID=549b6db197 endpointID=137 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-84b5f1d7-6805-4f4c-beb8-48e78faacca0 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Delete endpoint request" containerID=5f65189982 endpointID=3875 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-1c5ab3e9-4a09-47c3-ac9f-a46e1a0825b6 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=549b6db197 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=137 identity=2052 ipv4=10.0.0.83 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-84b5f1d7-6805-4f4c-beb8-48e78faacca0 subsys=endpoint level=info msg="Removed endpoint" containerID=5f65189982 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3875 identity=2052 ipv4=10.0.0.36 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-1c5ab3e9-4a09-47c3-ac9f-a46e1a0825b6 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.225 ac401b4d-e965-4986-8c34-5b8560793612 default }" containerID=f16782ed7dbe0f260900e183be92b180faec983480572679fd80d74b71d15634 datapathConfiguration="&{false false false false false }" interface=lxc0601fec9cbd7 k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f16782ed7d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=36 ipv4=10.0.0.225 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f16782ed7d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=36 identityLabels="k8s:alertmanager=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=alertmanager,k8s:app.kubernetes.io/version=0.27.0,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0" ipv4=10.0.0.225 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:alertmanager=kube-prometheus-stack-alertmanager;k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager;k8s:app.kubernetes.io/managed-by=prometheus-operator;k8s:app.kubernetes.io/name=alertmanager;k8s:app.kubernetes.io/version=0.27.0;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager;k8s:io.kubernetes.pod.namespace=monitoring;k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f16782ed7d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=36 identity=33041 identityLabels="k8s:alertmanager=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=alertmanager,k8s:app.kubernetes.io/version=0.27.0,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0" ipv4=10.0.0.225 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f16782ed7d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=36 identity=33041 ipv4=10.0.0.225 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=f16782ed7d datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=36 identity=33041 ipv4=10.0.0.225 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=f16782ed7d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=36 identity=33041 ipv4=10.0.0.225 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.6 e98a8899-1ad6-4f48-bccd-c686c69b6743 default }" containerID=29c57809b0873850d3da961ab44226b5affb5ebbb14fd42e6f13d05acdf7f6db datapathConfiguration="&{false false false false false }" interface=lxcc92be2934d1b k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=29c57809b0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1588 ipv4=10.0.0.6 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=29c57809b0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1588 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=prometheus,k8s:app.kubernetes.io/version=2.51.2,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus,k8s:io.kubernetes.pod.namespace=monitoring,k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus,k8s:operator.prometheus.io/shard=0,k8s:prometheus=kube-prometheus-stack-prometheus,k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0" ipv4=10.0.0.6 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus;k8s:app.kubernetes.io/managed-by=prometheus-operator;k8s:app.kubernetes.io/name=prometheus;k8s:app.kubernetes.io/version=2.51.2;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus;k8s:io.kubernetes.pod.namespace=monitoring;k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus;k8s:operator.prometheus.io/shard=0;k8s:prometheus=kube-prometheus-stack-prometheus;k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=29c57809b0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1588 identity=11785 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=prometheus,k8s:app.kubernetes.io/version=2.51.2,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus,k8s:io.kubernetes.pod.namespace=monitoring,k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus,k8s:operator.prometheus.io/shard=0,k8s:prometheus=kube-prometheus-stack-prometheus,k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0" ipv4=10.0.0.6 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=29c57809b0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1588 identity=11785 ipv4=10.0.0.6 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=29c57809b0 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1588 identity=11785 ipv4=10.0.0.6 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=29c57809b0 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1588 identity=11785 ipv4=10.0.0.6 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.141 2865f5ab-dc21-4834-93d9-e0aaa7c83f57 default }" containerID=3799d1b544ecf192238f506337776074db7bf04cc284a4787a507dea3a97b17f datapathConfiguration="&{false false false false false }" interface=lxcc313201d9534 k8sPodName=monitoring/loki-results-cache-0 labels="[]" subsys=daemon sync-build=true level=info msg="Create endpoint request" addressing="&{10.0.0.85 724363db-e5c1-4da2-9a45-5454729c37cc default }" containerID=5b78b8d37fb9f3b8565186eaa2b2aa928ca56b1ebe9884670ee935212c42d7ea datapathConfiguration="&{false false false false false }" interface=lxc89a8d86ea406 k8sPodName=monitoring/loki-gateway-cf54cb88c-kvk9q labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3799d1b544 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3382 ipv4=10.0.0.141 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="New endpoint" containerID=5b78b8d37f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1468 ipv4=10.0.0.85 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-kvk9q subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.73 272c3c7a-0c25-4dca-9c0c-75627e9236c8 default }" containerID=a4623c81132bcb780f613d4e9f9f18a6012d742581ecde0f1669c1d17ecc2d03 datapathConfiguration="&{false false false false false }" interface=lxc47e0cbe552f2 k8sPodName=monitoring/loki-chunks-cache-0 labels="[]" subsys=daemon sync-build=true level=info msg="Resolving identity labels (blocking)" containerID=3799d1b544 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3382 identityLabels="k8s:app.kubernetes.io/component=memcached-results-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-results-cache,k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0" ipv4=10.0.0.141 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5b78b8d37f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1468 identityLabels="k8s:app.kubernetes.io/component=gateway,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.85 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-kvk9q subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="New endpoint" containerID=a4623c8113 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2592 ipv4=10.0.0.73 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a4623c8113 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2592 identityLabels="k8s:app.kubernetes.io/component=memcached-chunks-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-chunks-cache,k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0" ipv4=10.0.0.73 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=memcached-results-cache;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:name=memcached-results-cache;k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=a4623c8113 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2592 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.73 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=3799d1b544 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3382 identity=22968 identityLabels="k8s:app.kubernetes.io/component=memcached-results-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-results-cache,k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0" ipv4=10.0.0.141 ipv6= k8sPodName=monitoring/loki-results-cache-0 oldIdentity="no identity" subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Waiting for endpoint to be generated" containerID=3799d1b544 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3382 identity=22968 ipv4=10.0.0.141 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Invalid state transition skipped" containerID=5b78b8d37f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1468 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.85 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-kvk9q line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=gateway;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5b78b8d37f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1468 identity=22842 identityLabels="k8s:app.kubernetes.io/component=gateway,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.85 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-kvk9q oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5b78b8d37f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1468 identity=22842 ipv4=10.0.0.85 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-kvk9q subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=memcached-chunks-cache;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:name=memcached-chunks-cache;k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a4623c8113 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2592 identity=15400 identityLabels="k8s:app.kubernetes.io/component=memcached-chunks-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-chunks-cache,k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0" ipv4=10.0.0.73 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a4623c8113 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2592 identity=15400 ipv4=10.0.0.73 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=3799d1b544 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3382 identity=22968 ipv4=10.0.0.141 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=3799d1b544 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3382 identity=22968 ipv4=10.0.0.141 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=5b78b8d37f datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1468 identity=22842 ipv4=10.0.0.85 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-kvk9q subsys=endpoint level=info msg="Successful endpoint creation" containerID=5b78b8d37f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1468 identity=22842 ipv4=10.0.0.85 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-kvk9q subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=a4623c8113 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2592 identity=15400 ipv4=10.0.0.73 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=a4623c8113 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2592 identity=15400 ipv4=10.0.0.73 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.10 c7182546-e533-4fb1-b5b5-624bb0c6ae0c default }" containerID=c9b655561b049204d02419733cef2e67d0ea46f0689d20a8060e0d7d4cf41670 datapathConfiguration="&{false false false false false }" interface=lxc649fec2f47e9 k8sPodName=local-path-storage/helper-pod-create-pvc-974585af-5b1d-4ecf-a065-2cf9dbe8028e labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c9b655561b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=767 ipv4=10.0.0.10 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-974585af-5b1d-4ecf-a065-2cf9dbe8028e subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c9b655561b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=767 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.10 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-974585af-5b1d-4ecf-a065-2cf9dbe8028e subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c9b655561b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=767 identity=2052 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.10 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-974585af-5b1d-4ecf-a065-2cf9dbe8028e oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c9b655561b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=767 identity=2052 ipv4=10.0.0.10 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-974585af-5b1d-4ecf-a065-2cf9dbe8028e subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c9b655561b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=767 identity=2052 ipv4=10.0.0.10 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-974585af-5b1d-4ecf-a065-2cf9dbe8028e subsys=endpoint level=info msg="Successful endpoint creation" containerID=c9b655561b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=767 identity=2052 ipv4=10.0.0.10 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-974585af-5b1d-4ecf-a065-2cf9dbe8028e subsys=daemon level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.108 a83aff3a-b838-40d6-aff8-1ebb7ce19247 default }" containerID=5e1eaacb283517e906cd65881d1b68aee789a90d5a2c99e95559b02baec475c7 datapathConfiguration="&{false false false false false }" interface=lxcc959a6584710 k8sPodName=monitoring/vector-c2ghq labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5e1eaacb28 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1705 ipv4=10.0.0.108 ipv6= k8sPodName=monitoring/vector-c2ghq subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5e1eaacb28 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1705 identityLabels="k8s:app.kubernetes.io/component=Agent,k8s:app.kubernetes.io/instance=vector,k8s:app.kubernetes.io/name=vector,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=vector,k8s:io.kubernetes.pod.namespace=monitoring,k8s:vector.dev/exclude=true" ipv4=10.0.0.108 ipv6= k8sPodName=monitoring/vector-c2ghq subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=Agent;k8s:app.kubernetes.io/instance=vector;k8s:app.kubernetes.io/name=vector;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=vector;k8s:io.kubernetes.pod.namespace=monitoring;k8s:vector.dev/exclude=true;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5e1eaacb28 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1705 identity=1587 identityLabels="k8s:app.kubernetes.io/component=Agent,k8s:app.kubernetes.io/instance=vector,k8s:app.kubernetes.io/name=vector,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=vector,k8s:io.kubernetes.pod.namespace=monitoring,k8s:vector.dev/exclude=true" ipv4=10.0.0.108 ipv6= k8sPodName=monitoring/vector-c2ghq oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5e1eaacb28 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1705 identity=1587 ipv4=10.0.0.108 ipv6= k8sPodName=monitoring/vector-c2ghq subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=5e1eaacb28 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1705 identity=1587 ipv4=10.0.0.108 ipv6= k8sPodName=monitoring/vector-c2ghq subsys=endpoint level=info msg="Successful endpoint creation" containerID=5e1eaacb28 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1705 identity=1587 ipv4=10.0.0.108 ipv6= k8sPodName=monitoring/vector-c2ghq subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=c9b655561b endpointID=767 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-974585af-5b1d-4ecf-a065-2cf9dbe8028e subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=c9b655561b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=767 identity=2052 ipv4=10.0.0.10 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-974585af-5b1d-4ecf-a065-2cf9dbe8028e subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.22 a61d0616-97aa-42f0-aeee-2545efdb8c4d default }" containerID=16e898a8ce76c0dfe0bdad92b3dc8d80bc56d67052adbd033a0f71d4ce6e8b0e datapathConfiguration="&{false false false false false }" interface=lxc08db94419013 k8sPodName=monitoring/loki-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=16e898a8ce datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2340 ipv4=10.0.0.22 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=16e898a8ce datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2340 identityLabels="k8s:app.kubernetes.io/component=single-binary,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:app.kubernetes.io/part-of=memberlist,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=loki-0" ipv4=10.0.0.22 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=single-binary;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:app.kubernetes.io/part-of=memberlist;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:statefulset.kubernetes.io/pod-name=loki-0;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=16e898a8ce datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2340 identity=43495 identityLabels="k8s:app.kubernetes.io/component=single-binary,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:app.kubernetes.io/part-of=memberlist,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=loki-0" ipv4=10.0.0.22 ipv6= k8sPodName=monitoring/loki-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=16e898a8ce datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2340 identity=43495 ipv4=10.0.0.22 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=16e898a8ce datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2340 identity=43495 ipv4=10.0.0.22 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=16e898a8ce datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2340 identity=43495 ipv4=10.0.0.22 ipv6= k8sPodName=monitoring/loki-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.8 76a1ff5b-a5ad-4c84-8897-5fec1a63a072 default }" containerID=b74819480b871cb5a7edc25c3e1d83e5268332443c2a1c6e3c32c4332adbddc0 datapathConfiguration="&{false false false false false }" interface=lxc55887d6bd76b k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-mtvbd labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b74819480b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=447 ipv4=10.0.0.8 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-mtvbd subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b74819480b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=447 identityLabels="k8s:app.kubernetes.io/instance=prometheus-pushgateway,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=prometheus-pushgateway,k8s:app.kubernetes.io/version=v1.8.0,k8s:helm.sh/chart=prometheus-pushgateway-2.13.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.8 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-mtvbd subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=prometheus-pushgateway;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=prometheus-pushgateway;k8s:app.kubernetes.io/version=v1.8.0;k8s:helm.sh/chart=prometheus-pushgateway-2.13.0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b74819480b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=447 identity=6862 identityLabels="k8s:app.kubernetes.io/instance=prometheus-pushgateway,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=prometheus-pushgateway,k8s:app.kubernetes.io/version=v1.8.0,k8s:helm.sh/chart=prometheus-pushgateway-2.13.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.8 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-mtvbd oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b74819480b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=447 identity=6862 ipv4=10.0.0.8 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-mtvbd subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b74819480b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=447 identity=6862 ipv4=10.0.0.8 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-mtvbd subsys=endpoint level=info msg="Successful endpoint creation" containerID=b74819480b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=447 identity=6862 ipv4=10.0.0.8 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-mtvbd subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.2 af01d462-d7cd-4bcf-b463-67716a8b2f08 default }" containerID=a183b4adfcaafef6be0e5d80ed5da7e29ef9321b090974c8f275d8aa042cca59 datapathConfiguration="&{false false false false false }" interface=lxc858034986cdf k8sPodName=openstack/memcached-memcached-6479589586-6f22j labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a183b4adfc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=535 ipv4=10.0.0.2 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-6f22j subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a183b4adfc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=535 identityLabels="k8s:application=memcached,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=memcached" ipv4=10.0.0.2 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-6f22j subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=a183b4adfc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=535 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.2 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-6f22j line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=memcached;k8s:component=server;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=memcached;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a183b4adfc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=535 identity=34369 identityLabels="k8s:application=memcached,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=memcached" ipv4=10.0.0.2 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-6f22j oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a183b4adfc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=535 identity=34369 ipv4=10.0.0.2 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-6f22j subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a183b4adfc datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=535 identity=34369 ipv4=10.0.0.2 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-6f22j subsys=endpoint level=info msg="Successful endpoint creation" containerID=a183b4adfc datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=535 identity=34369 ipv4=10.0.0.2 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-6f22j subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.81 443ab43a-4fe3-4ab7-a0e7-c7e7a235b26e default }" containerID=d60e008d594a7d7d99c3fa489d41af51bd79d373a3b99f4f45d082b9aaffde10 datapathConfiguration="&{false false false false false }" interface=lxcb0f49a766340 k8sPodName=local-path-storage/helper-pod-create-pvc-56508df5-7a75-4294-b57e-2185d339dabf labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d60e008d59 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=641 ipv4=10.0.0.81 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-56508df5-7a75-4294-b57e-2185d339dabf subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d60e008d59 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=641 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.81 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-56508df5-7a75-4294-b57e-2185d339dabf subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d60e008d59 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=641 identity=2052 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.81 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-56508df5-7a75-4294-b57e-2185d339dabf oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d60e008d59 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=641 identity=2052 ipv4=10.0.0.81 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-56508df5-7a75-4294-b57e-2185d339dabf subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d60e008d59 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=641 identity=2052 ipv4=10.0.0.81 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-56508df5-7a75-4294-b57e-2185d339dabf subsys=endpoint level=info msg="Successful endpoint creation" containerID=d60e008d59 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=641 identity=2052 ipv4=10.0.0.81 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-56508df5-7a75-4294-b57e-2185d339dabf subsys=daemon level=info msg="Delete endpoint request" containerID=d60e008d59 endpointID=641 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-56508df5-7a75-4294-b57e-2185d339dabf subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=d60e008d59 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=641 identity=2052 ipv4=10.0.0.81 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-56508df5-7a75-4294-b57e-2185d339dabf subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.111 193e3b33-4974-4feb-a814-d61bec3b226b default }" containerID=aec1cbd385bfa685056dfea783432ad0ae915a75ed0a10f576b8dd63d59a4b81 datapathConfiguration="&{false false false false false }" interface=lxce824e8e05247 k8sPodName=openstack/rabbitmq-keystone-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=aec1cbd385 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=201 ipv4=10.0.0.111 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=aec1cbd385 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=201 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-keystone,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0" ipv4=10.0.0.111 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-keystone;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=aec1cbd385 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=201 identity=55935 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-keystone,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0" ipv4=10.0.0.111 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=aec1cbd385 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=201 identity=55935 ipv4=10.0.0.111 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=aec1cbd385 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=201 identity=55935 ipv4=10.0.0.111 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=aec1cbd385 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=201 identity=55935 ipv4=10.0.0.111 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.235 993e482d-d82e-4568-97b3-874cb8fcd2e7 default }" containerID=046c28e76cac7aba28ce4ae883760038c594508baa9b86cbd0856cf27b451ac3 datapathConfiguration="&{false false false false false }" interface=lxc9a6360acc7ac k8sPodName=openstack/keystone-api-f759b9c58-5982m labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=046c28e76c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2395 ipv4=10.0.0.235 ipv6= k8sPodName=openstack/keystone-api-f759b9c58-5982m subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=046c28e76c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2395 identityLabels="k8s:application=keystone,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=keystone" ipv4=10.0.0.235 ipv6= k8sPodName=openstack/keystone-api-f759b9c58-5982m subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=046c28e76c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2395 identity=26565 identityLabels="k8s:application=keystone,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=keystone" ipv4=10.0.0.235 ipv6= k8sPodName=openstack/keystone-api-f759b9c58-5982m oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=046c28e76c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2395 identity=26565 ipv4=10.0.0.235 ipv6= k8sPodName=openstack/keystone-api-f759b9c58-5982m subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.159 4580b170-04a0-4232-8965-8b10f11f1a79 default }" containerID=6062b656d639b9c8b4a79f1614f8e0e46ca62fa670b50e22ae212e59dfbc7394 datapathConfiguration="&{false false false false false }" interface=lxc2e9d2ec690be k8sPodName=openstack/keystone-credential-setup-pwm86 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6062b656d6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=636 ipv4=10.0.0.159 ipv6= k8sPodName=openstack/keystone-credential-setup-pwm86 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6062b656d6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=636 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=edf5f5cd-d803-4191-b3f1-862b770f567d,k8s:batch.kubernetes.io/job-name=keystone-credential-setup,k8s:component=credential-setup,k8s:controller-uid=edf5f5cd-d803-4191-b3f1-862b770f567d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-credential-setup,k8s:release_group=keystone" ipv4=10.0.0.159 ipv6= k8sPodName=openstack/keystone-credential-setup-pwm86 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=edf5f5cd-d803-4191-b3f1-862b770f567d;k8s:batch.kubernetes.io/job-name=keystone-credential-setup;k8s:component=credential-setup;k8s:controller-uid=edf5f5cd-d803-4191-b3f1-862b770f567d;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-credential-setup;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6062b656d6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=636 identity=13083 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=edf5f5cd-d803-4191-b3f1-862b770f567d,k8s:batch.kubernetes.io/job-name=keystone-credential-setup,k8s:component=credential-setup,k8s:controller-uid=edf5f5cd-d803-4191-b3f1-862b770f567d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-credential-setup,k8s:release_group=keystone" ipv4=10.0.0.159 ipv6= k8sPodName=openstack/keystone-credential-setup-pwm86 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6062b656d6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=636 identity=13083 ipv4=10.0.0.159 ipv6= k8sPodName=openstack/keystone-credential-setup-pwm86 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=046c28e76c datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2395 identity=26565 ipv4=10.0.0.235 ipv6= k8sPodName=openstack/keystone-api-f759b9c58-5982m subsys=endpoint level=info msg="Successful endpoint creation" containerID=046c28e76c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2395 identity=26565 ipv4=10.0.0.235 ipv6= k8sPodName=openstack/keystone-api-f759b9c58-5982m subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=6062b656d6 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=636 identity=13083 ipv4=10.0.0.159 ipv6= k8sPodName=openstack/keystone-credential-setup-pwm86 subsys=endpoint level=info msg="Successful endpoint creation" containerID=6062b656d6 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=636 identity=13083 ipv4=10.0.0.159 ipv6= k8sPodName=openstack/keystone-credential-setup-pwm86 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=6062b656d6 endpointID=636 k8sNamespace=openstack k8sPodName=keystone-credential-setup-pwm86 subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=edf5f5cd-d803-4191-b3f1-862b770f567d k8s:batch.kubernetes.io/job-name=keystone-credential-setup k8s:component=credential-setup k8s:controller-uid=edf5f5cd-d803-4191-b3f1-862b770f567d k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-credential-setup k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=6062b656d6 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=636 identity=13083 ipv4=10.0.0.159 ipv6= k8sPodName=openstack/keystone-credential-setup-pwm86 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.47 2d6ee0df-8e39-425f-9ba1-523ad9ad09b3 default }" containerID=65a387f0d06e2e169b7e642a77f4d418a19d9262c07f7b76ab699f135660fb4b datapathConfiguration="&{false false false false false }" interface=lxcef68141c1d8b k8sPodName=openstack/keystone-db-init-zwhlq labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=65a387f0d0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=474 ipv4=10.0.0.47 ipv6= k8sPodName=openstack/keystone-db-init-zwhlq subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=65a387f0d0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=474 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=506ccf70-f756-4465-ab13-c85b0f051798,k8s:batch.kubernetes.io/job-name=keystone-db-init,k8s:component=db-init,k8s:controller-uid=506ccf70-f756-4465-ab13-c85b0f051798,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-init,k8s:release_group=keystone" ipv4=10.0.0.47 ipv6= k8sPodName=openstack/keystone-db-init-zwhlq subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=65a387f0d0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=474 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.47 ipv6= k8sPodName=openstack/keystone-db-init-zwhlq line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=506ccf70-f756-4465-ab13-c85b0f051798;k8s:batch.kubernetes.io/job-name=keystone-db-init;k8s:component=db-init;k8s:controller-uid=506ccf70-f756-4465-ab13-c85b0f051798;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-db-init;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=65a387f0d0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=474 identity=37507 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=506ccf70-f756-4465-ab13-c85b0f051798,k8s:batch.kubernetes.io/job-name=keystone-db-init,k8s:component=db-init,k8s:controller-uid=506ccf70-f756-4465-ab13-c85b0f051798,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-init,k8s:release_group=keystone" ipv4=10.0.0.47 ipv6= k8sPodName=openstack/keystone-db-init-zwhlq oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=65a387f0d0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=474 identity=37507 ipv4=10.0.0.47 ipv6= k8sPodName=openstack/keystone-db-init-zwhlq subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=65a387f0d0 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=474 identity=37507 ipv4=10.0.0.47 ipv6= k8sPodName=openstack/keystone-db-init-zwhlq subsys=endpoint level=info msg="Successful endpoint creation" containerID=65a387f0d0 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=474 identity=37507 ipv4=10.0.0.47 ipv6= k8sPodName=openstack/keystone-db-init-zwhlq subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=65a387f0d0 endpointID=474 k8sNamespace=openstack k8sPodName=keystone-db-init-zwhlq subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=506ccf70-f756-4465-ab13-c85b0f051798 k8s:batch.kubernetes.io/job-name=keystone-db-init k8s:component=db-init k8s:controller-uid=506ccf70-f756-4465-ab13-c85b0f051798 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-db-init k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=65a387f0d0 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=474 identity=37507 ipv4=10.0.0.47 ipv6= k8sPodName=openstack/keystone-db-init-zwhlq subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.194 34b9ad53-1208-4847-bb5c-1e61705960be default }" containerID=a36273d59da094ddad972c86525d81aebd6dea4e63a5d1083b5b1187f98c326e datapathConfiguration="&{false false false false false }" interface=lxcd9d581f7a236 k8sPodName=openstack/keystone-fernet-setup-55mqd labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a36273d59d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=564 ipv4=10.0.0.194 ipv6= k8sPodName=openstack/keystone-fernet-setup-55mqd subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a36273d59d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=564 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=2a594427-8ebc-4122-891c-3614c6429c82,k8s:batch.kubernetes.io/job-name=keystone-fernet-setup,k8s:component=fernet-setup,k8s:controller-uid=2a594427-8ebc-4122-891c-3614c6429c82,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-setup,k8s:release_group=keystone" ipv4=10.0.0.194 ipv6= k8sPodName=openstack/keystone-fernet-setup-55mqd subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=2a594427-8ebc-4122-891c-3614c6429c82;k8s:batch.kubernetes.io/job-name=keystone-fernet-setup;k8s:component=fernet-setup;k8s:controller-uid=2a594427-8ebc-4122-891c-3614c6429c82;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-fernet-setup;k8s:release_group=keystone;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=a36273d59d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=564 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.194 ipv6= k8sPodName=openstack/keystone-fernet-setup-55mqd line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=a36273d59d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=564 identity=50763 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=2a594427-8ebc-4122-891c-3614c6429c82,k8s:batch.kubernetes.io/job-name=keystone-fernet-setup,k8s:component=fernet-setup,k8s:controller-uid=2a594427-8ebc-4122-891c-3614c6429c82,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-setup,k8s:release_group=keystone" ipv4=10.0.0.194 ipv6= k8sPodName=openstack/keystone-fernet-setup-55mqd oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a36273d59d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=564 identity=50763 ipv4=10.0.0.194 ipv6= k8sPodName=openstack/keystone-fernet-setup-55mqd subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a36273d59d datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=564 identity=50763 ipv4=10.0.0.194 ipv6= k8sPodName=openstack/keystone-fernet-setup-55mqd subsys=endpoint level=info msg="Successful endpoint creation" containerID=a36273d59d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=564 identity=50763 ipv4=10.0.0.194 ipv6= k8sPodName=openstack/keystone-fernet-setup-55mqd subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=a36273d59d endpointID=564 k8sNamespace=openstack k8sPodName=keystone-fernet-setup-55mqd subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=2a594427-8ebc-4122-891c-3614c6429c82 k8s:batch.kubernetes.io/job-name=keystone-fernet-setup k8s:component=fernet-setup k8s:controller-uid=2a594427-8ebc-4122-891c-3614c6429c82 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-fernet-setup k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=a36273d59d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=564 identity=50763 ipv4=10.0.0.194 ipv6= k8sPodName=openstack/keystone-fernet-setup-55mqd subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.75 53193d97-7d4a-486b-af49-30ab752392e4 default }" containerID=dcfa6386a3a8d8b44242dd339c808adf49a88142a3858be66b6053d25e789fb1 datapathConfiguration="&{false false false false false }" interface=lxc1182777a6292 k8sPodName=openstack/keystone-db-sync-q2mll labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=dcfa6386a3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2656 ipv4=10.0.0.75 ipv6= k8sPodName=openstack/keystone-db-sync-q2mll subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=dcfa6386a3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2656 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=326fa97a-7d12-4430-b9e4-d0ff13aa0ad7,k8s:batch.kubernetes.io/job-name=keystone-db-sync,k8s:component=db-sync,k8s:controller-uid=326fa97a-7d12-4430-b9e4-d0ff13aa0ad7,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-sync,k8s:release_group=keystone" ipv4=10.0.0.75 ipv6= k8sPodName=openstack/keystone-db-sync-q2mll subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=326fa97a-7d12-4430-b9e4-d0ff13aa0ad7;k8s:batch.kubernetes.io/job-name=keystone-db-sync;k8s:component=db-sync;k8s:controller-uid=326fa97a-7d12-4430-b9e4-d0ff13aa0ad7;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-db-sync;k8s:release_group=keystone;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=dcfa6386a3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2656 identity=6213 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=326fa97a-7d12-4430-b9e4-d0ff13aa0ad7,k8s:batch.kubernetes.io/job-name=keystone-db-sync,k8s:component=db-sync,k8s:controller-uid=326fa97a-7d12-4430-b9e4-d0ff13aa0ad7,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-sync,k8s:release_group=keystone" ipv4=10.0.0.75 ipv6= k8sPodName=openstack/keystone-db-sync-q2mll oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=dcfa6386a3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2656 identity=6213 ipv4=10.0.0.75 ipv6= k8sPodName=openstack/keystone-db-sync-q2mll subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=dcfa6386a3 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2656 identity=6213 ipv4=10.0.0.75 ipv6= k8sPodName=openstack/keystone-db-sync-q2mll subsys=endpoint level=info msg="Successful endpoint creation" containerID=dcfa6386a3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2656 identity=6213 ipv4=10.0.0.75 ipv6= k8sPodName=openstack/keystone-db-sync-q2mll subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=dcfa6386a3 endpointID=2656 k8sNamespace=openstack k8sPodName=keystone-db-sync-q2mll subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=326fa97a-7d12-4430-b9e4-d0ff13aa0ad7 k8s:batch.kubernetes.io/job-name=keystone-db-sync k8s:component=db-sync k8s:controller-uid=326fa97a-7d12-4430-b9e4-d0ff13aa0ad7 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-db-sync k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=dcfa6386a3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2656 identity=6213 ipv4=10.0.0.75 ipv6= k8sPodName=openstack/keystone-db-sync-q2mll subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.121 1a44b5c8-cf2c-4618-b285-1493a312fc22 default }" containerID=50283a11909c608e111d0fd56a8a7751f6026d66ceebaa314d29799f283b6990 datapathConfiguration="&{false false false false false }" interface=lxc02bf96ac6c8f k8sPodName=openstack/keystone-rabbit-init-9x4jb labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=50283a1190 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=194 ipv4=10.0.0.121 ipv6= k8sPodName=openstack/keystone-rabbit-init-9x4jb subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=50283a1190 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=194 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=d38aacbe-3bd8-4cb9-b51d-2a336507becc,k8s:batch.kubernetes.io/job-name=keystone-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=d38aacbe-3bd8-4cb9-b51d-2a336507becc,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-rabbit-init,k8s:release_group=keystone" ipv4=10.0.0.121 ipv6= k8sPodName=openstack/keystone-rabbit-init-9x4jb subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=d38aacbe-3bd8-4cb9-b51d-2a336507becc;k8s:batch.kubernetes.io/job-name=keystone-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=d38aacbe-3bd8-4cb9-b51d-2a336507becc;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-rabbit-init;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=50283a1190 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=194 identity=62746 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=d38aacbe-3bd8-4cb9-b51d-2a336507becc,k8s:batch.kubernetes.io/job-name=keystone-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=d38aacbe-3bd8-4cb9-b51d-2a336507becc,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-rabbit-init,k8s:release_group=keystone" ipv4=10.0.0.121 ipv6= k8sPodName=openstack/keystone-rabbit-init-9x4jb oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=50283a1190 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=194 identity=62746 ipv4=10.0.0.121 ipv6= k8sPodName=openstack/keystone-rabbit-init-9x4jb subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=50283a1190 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=194 identity=62746 ipv4=10.0.0.121 ipv6= k8sPodName=openstack/keystone-rabbit-init-9x4jb subsys=endpoint level=info msg="Successful endpoint creation" containerID=50283a1190 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=194 identity=62746 ipv4=10.0.0.121 ipv6= k8sPodName=openstack/keystone-rabbit-init-9x4jb subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=50283a1190 endpointID=194 k8sNamespace=openstack k8sPodName=keystone-rabbit-init-9x4jb subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=d38aacbe-3bd8-4cb9-b51d-2a336507becc k8s:batch.kubernetes.io/job-name=keystone-rabbit-init k8s:component=rabbit-init k8s:controller-uid=d38aacbe-3bd8-4cb9-b51d-2a336507becc k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-rabbit-init k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=50283a1190 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=194 identity=62746 ipv4=10.0.0.121 ipv6= k8sPodName=openstack/keystone-rabbit-init-9x4jb subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.136 38feec3d-e901-4b98-9b31-f921ed0301a0 default }" containerID=95ea1ceebba19814ed4ed22e1b1b621e5bf26f4d3563dd2ceaaa09fa621de834 datapathConfiguration="&{false false false false false }" interface=lxc2ffbd3deb236 k8sPodName=openstack/keystone-domain-manage-9f88q labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=95ea1ceebb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3345 ipv4=10.0.0.136 ipv6= k8sPodName=openstack/keystone-domain-manage-9f88q subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=95ea1ceebb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3345 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=9fef8ccf-4cf5-4667-b33e-1ffb7d03523c,k8s:batch.kubernetes.io/job-name=keystone-domain-manage,k8s:component=domain-manage,k8s:controller-uid=9fef8ccf-4cf5-4667-b33e-1ffb7d03523c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-domain-manage,k8s:release_group=keystone" ipv4=10.0.0.136 ipv6= k8sPodName=openstack/keystone-domain-manage-9f88q subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=9fef8ccf-4cf5-4667-b33e-1ffb7d03523c;k8s:batch.kubernetes.io/job-name=keystone-domain-manage;k8s:component=domain-manage;k8s:controller-uid=9fef8ccf-4cf5-4667-b33e-1ffb7d03523c;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-domain-manage;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=95ea1ceebb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3345 identity=56476 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=9fef8ccf-4cf5-4667-b33e-1ffb7d03523c,k8s:batch.kubernetes.io/job-name=keystone-domain-manage,k8s:component=domain-manage,k8s:controller-uid=9fef8ccf-4cf5-4667-b33e-1ffb7d03523c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-domain-manage,k8s:release_group=keystone" ipv4=10.0.0.136 ipv6= k8sPodName=openstack/keystone-domain-manage-9f88q oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=95ea1ceebb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3345 identity=56476 ipv4=10.0.0.136 ipv6= k8sPodName=openstack/keystone-domain-manage-9f88q subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=95ea1ceebb datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3345 identity=56476 ipv4=10.0.0.136 ipv6= k8sPodName=openstack/keystone-domain-manage-9f88q subsys=endpoint level=info msg="Successful endpoint creation" containerID=95ea1ceebb datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3345 identity=56476 ipv4=10.0.0.136 ipv6= k8sPodName=openstack/keystone-domain-manage-9f88q subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=95ea1ceebb endpointID=3345 k8sNamespace=openstack k8sPodName=keystone-domain-manage-9f88q subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=9fef8ccf-4cf5-4667-b33e-1ffb7d03523c k8s:batch.kubernetes.io/job-name=keystone-domain-manage k8s:component=domain-manage k8s:controller-uid=9fef8ccf-4cf5-4667-b33e-1ffb7d03523c k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-domain-manage k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=95ea1ceebb datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3345 identity=56476 ipv4=10.0.0.136 ipv6= k8sPodName=openstack/keystone-domain-manage-9f88q subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.79 67965e82-15bf-4aba-aab7-d8ce6e01b209 default }" containerID=14dce2a55ece4173dbd9faa2fd478b2cdd11ddf8cd7e212b76aacf590a8df253 datapathConfiguration="&{false false false false false }" interface=lxccf59150a47cd k8sPodName=openstack/keystone-bootstrap-pm97z labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=14dce2a55e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2057 ipv4=10.0.0.79 ipv6= k8sPodName=openstack/keystone-bootstrap-pm97z subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=14dce2a55e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2057 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=fe282daf-2534-486c-8956-1e62b9d27c95,k8s:batch.kubernetes.io/job-name=keystone-bootstrap,k8s:component=bootstrap,k8s:controller-uid=fe282daf-2534-486c-8956-1e62b9d27c95,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-bootstrap,k8s:release_group=keystone" ipv4=10.0.0.79 ipv6= k8sPodName=openstack/keystone-bootstrap-pm97z subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=fe282daf-2534-486c-8956-1e62b9d27c95;k8s:batch.kubernetes.io/job-name=keystone-bootstrap;k8s:component=bootstrap;k8s:controller-uid=fe282daf-2534-486c-8956-1e62b9d27c95;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-bootstrap;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=14dce2a55e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2057 identity=37477 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=fe282daf-2534-486c-8956-1e62b9d27c95,k8s:batch.kubernetes.io/job-name=keystone-bootstrap,k8s:component=bootstrap,k8s:controller-uid=fe282daf-2534-486c-8956-1e62b9d27c95,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-bootstrap,k8s:release_group=keystone" ipv4=10.0.0.79 ipv6= k8sPodName=openstack/keystone-bootstrap-pm97z oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=14dce2a55e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2057 identity=37477 ipv4=10.0.0.79 ipv6= k8sPodName=openstack/keystone-bootstrap-pm97z subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=14dce2a55e datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2057 identity=37477 ipv4=10.0.0.79 ipv6= k8sPodName=openstack/keystone-bootstrap-pm97z subsys=endpoint level=info msg="Successful endpoint creation" containerID=14dce2a55e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2057 identity=37477 ipv4=10.0.0.79 ipv6= k8sPodName=openstack/keystone-bootstrap-pm97z subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=14dce2a55e endpointID=2057 k8sNamespace=openstack k8sPodName=keystone-bootstrap-pm97z subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=fe282daf-2534-486c-8956-1e62b9d27c95 k8s:batch.kubernetes.io/job-name=keystone-bootstrap k8s:component=bootstrap k8s:controller-uid=fe282daf-2534-486c-8956-1e62b9d27c95 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-bootstrap k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=14dce2a55e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2057 identity=37477 ipv4=10.0.0.79 ipv6= k8sPodName=openstack/keystone-bootstrap-pm97z subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.189 7d958780-054d-4903-837f-3e5d44dd9252 default }" containerID=ad6ef6a0ca47cae9cbcb7a695aa3590dd4e9cb6699ff1c542bd581b265a60415 datapathConfiguration="&{false false false false false }" interface=lxc30df5c27af16 k8sPodName=local-path-storage/helper-pod-create-pvc-7584fe9a-b355-4194-b5b5-4b81056cbe30 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ad6ef6a0ca datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1601 ipv4=10.0.0.189 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-7584fe9a-b355-4194-b5b5-4b81056cbe30 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ad6ef6a0ca datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1601 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.189 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-7584fe9a-b355-4194-b5b5-4b81056cbe30 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ad6ef6a0ca datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1601 identity=2052 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.189 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-7584fe9a-b355-4194-b5b5-4b81056cbe30 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ad6ef6a0ca datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1601 identity=2052 ipv4=10.0.0.189 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-7584fe9a-b355-4194-b5b5-4b81056cbe30 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ad6ef6a0ca datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1601 identity=2052 ipv4=10.0.0.189 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-7584fe9a-b355-4194-b5b5-4b81056cbe30 subsys=endpoint level=info msg="Successful endpoint creation" containerID=ad6ef6a0ca datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1601 identity=2052 ipv4=10.0.0.189 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-7584fe9a-b355-4194-b5b5-4b81056cbe30 subsys=daemon level=info msg="Delete endpoint request" containerID=ad6ef6a0ca endpointID=1601 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-7584fe9a-b355-4194-b5b5-4b81056cbe30 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=ad6ef6a0ca datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1601 identity=2052 ipv4=10.0.0.189 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-7584fe9a-b355-4194-b5b5-4b81056cbe30 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.66 189fa261-77a3-452e-abf4-d1d81b3d8c8b default }" containerID=30bccbf1657fd5c10671af09e6a5d3472d977d6ec74c31bc156635d7826d9ddc datapathConfiguration="&{false false false false false }" interface=lxc9633253297e3 k8sPodName=openstack/rabbitmq-barbican-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=30bccbf165 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=546 ipv4=10.0.0.66 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=30bccbf165 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=546 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-barbican,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0" ipv4=10.0.0.66 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=30bccbf165 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=546 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.66 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-barbican;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=30bccbf165 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=546 identity=5352 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-barbican,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0" ipv4=10.0.0.66 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=30bccbf165 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=546 identity=5352 ipv4=10.0.0.66 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=30bccbf165 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=546 identity=5352 ipv4=10.0.0.66 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=30bccbf165 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=546 identity=5352 ipv4=10.0.0.66 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.44 0f07312b-1d7e-4c0a-af66-be8d425e50b1 default }" containerID=213e66235559490ba0ca13aceb24a95b2076fa21fd2d5e463ba321946a07d531 datapathConfiguration="&{false false false false false }" interface=lxc55c5f61e2491 k8sPodName=openstack/barbican-api-94b94bcbb-2j246 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=213e662355 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3006 ipv4=10.0.0.44 ipv6= k8sPodName=openstack/barbican-api-94b94bcbb-2j246 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=213e662355 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3006 identityLabels="k8s:application=barbican,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=barbican" ipv4=10.0.0.44 ipv6= k8sPodName=openstack/barbican-api-94b94bcbb-2j246 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=213e662355 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3006 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.44 ipv6= k8sPodName=openstack/barbican-api-94b94bcbb-2j246 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=213e662355 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3006 identity=58424 identityLabels="k8s:application=barbican,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=barbican" ipv4=10.0.0.44 ipv6= k8sPodName=openstack/barbican-api-94b94bcbb-2j246 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=213e662355 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3006 identity=58424 ipv4=10.0.0.44 ipv6= k8sPodName=openstack/barbican-api-94b94bcbb-2j246 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.219 e22cce28-555c-41ef-bcae-bbc6d056aa6c default }" containerID=6d429f16d44e615be1ff093a65228d46fe26e01656514eebb70352b334447494 datapathConfiguration="&{false false false false false }" interface=lxcacf5fe940d0f k8sPodName=openstack/barbican-db-init-lzpxw labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6d429f16d4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1675 ipv4=10.0.0.219 ipv6= k8sPodName=openstack/barbican-db-init-lzpxw subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6d429f16d4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1675 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=93b38081-3ff8-48bb-b091-3aa2321604d7,k8s:batch.kubernetes.io/job-name=barbican-db-init,k8s:component=db-init,k8s:controller-uid=93b38081-3ff8-48bb-b091-3aa2321604d7,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-init,k8s:release_group=barbican" ipv4=10.0.0.219 ipv6= k8sPodName=openstack/barbican-db-init-lzpxw subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=93b38081-3ff8-48bb-b091-3aa2321604d7;k8s:batch.kubernetes.io/job-name=barbican-db-init;k8s:component=db-init;k8s:controller-uid=93b38081-3ff8-48bb-b091-3aa2321604d7;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-db-init;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6d429f16d4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1675 identity=16202 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=93b38081-3ff8-48bb-b091-3aa2321604d7,k8s:batch.kubernetes.io/job-name=barbican-db-init,k8s:component=db-init,k8s:controller-uid=93b38081-3ff8-48bb-b091-3aa2321604d7,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-init,k8s:release_group=barbican" ipv4=10.0.0.219 ipv6= k8sPodName=openstack/barbican-db-init-lzpxw oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6d429f16d4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1675 identity=16202 ipv4=10.0.0.219 ipv6= k8sPodName=openstack/barbican-db-init-lzpxw subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=213e662355 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3006 identity=58424 ipv4=10.0.0.44 ipv6= k8sPodName=openstack/barbican-api-94b94bcbb-2j246 subsys=endpoint level=info msg="Successful endpoint creation" containerID=213e662355 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3006 identity=58424 ipv4=10.0.0.44 ipv6= k8sPodName=openstack/barbican-api-94b94bcbb-2j246 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=6d429f16d4 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1675 identity=16202 ipv4=10.0.0.219 ipv6= k8sPodName=openstack/barbican-db-init-lzpxw subsys=endpoint level=info msg="Successful endpoint creation" containerID=6d429f16d4 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1675 identity=16202 ipv4=10.0.0.219 ipv6= k8sPodName=openstack/barbican-db-init-lzpxw subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Conntrack garbage collector interval recalculated" deleteRatio=0.03569399542792214 newInterval=11m15s subsys=map-ct level=info msg="Delete endpoint request" containerID=6d429f16d4 endpointID=1675 k8sNamespace=openstack k8sPodName=barbican-db-init-lzpxw subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=93b38081-3ff8-48bb-b091-3aa2321604d7 k8s:batch.kubernetes.io/job-name=barbican-db-init k8s:component=db-init k8s:controller-uid=93b38081-3ff8-48bb-b091-3aa2321604d7 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-db-init k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=6d429f16d4 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1675 identity=16202 ipv4=10.0.0.219 ipv6= k8sPodName=openstack/barbican-db-init-lzpxw subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.48 d7eff30f-68df-454d-9d9a-1efc073a894c default }" containerID=96d17c9f85b03f0331fd4c6be4c3162e281050d791bdede3aa208a3ff1c55a64 datapathConfiguration="&{false false false false false }" interface=lxcb89c1004ea1b k8sPodName=openstack/barbican-db-sync-87vqv labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=96d17c9f85 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2379 ipv4=10.0.0.48 ipv6= k8sPodName=openstack/barbican-db-sync-87vqv subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=96d17c9f85 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2379 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=439a890f-9dc5-4985-9308-956f71267fa9,k8s:batch.kubernetes.io/job-name=barbican-db-sync,k8s:component=db-sync,k8s:controller-uid=439a890f-9dc5-4985-9308-956f71267fa9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-sync,k8s:release_group=barbican" ipv4=10.0.0.48 ipv6= k8sPodName=openstack/barbican-db-sync-87vqv subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=439a890f-9dc5-4985-9308-956f71267fa9;k8s:batch.kubernetes.io/job-name=barbican-db-sync;k8s:component=db-sync;k8s:controller-uid=439a890f-9dc5-4985-9308-956f71267fa9;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-db-sync;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=96d17c9f85 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2379 identity=6378 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=439a890f-9dc5-4985-9308-956f71267fa9,k8s:batch.kubernetes.io/job-name=barbican-db-sync,k8s:component=db-sync,k8s:controller-uid=439a890f-9dc5-4985-9308-956f71267fa9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-sync,k8s:release_group=barbican" ipv4=10.0.0.48 ipv6= k8sPodName=openstack/barbican-db-sync-87vqv oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=96d17c9f85 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2379 identity=6378 ipv4=10.0.0.48 ipv6= k8sPodName=openstack/barbican-db-sync-87vqv subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=96d17c9f85 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2379 identity=6378 ipv4=10.0.0.48 ipv6= k8sPodName=openstack/barbican-db-sync-87vqv subsys=endpoint level=info msg="Successful endpoint creation" containerID=96d17c9f85 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2379 identity=6378 ipv4=10.0.0.48 ipv6= k8sPodName=openstack/barbican-db-sync-87vqv subsys=daemon level=info msg="Delete endpoint request" containerID=96d17c9f85 endpointID=2379 k8sNamespace=openstack k8sPodName=barbican-db-sync-87vqv subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=439a890f-9dc5-4985-9308-956f71267fa9 k8s:batch.kubernetes.io/job-name=barbican-db-sync k8s:component=db-sync k8s:controller-uid=439a890f-9dc5-4985-9308-956f71267fa9 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-db-sync k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=96d17c9f85 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2379 identity=6378 ipv4=10.0.0.48 ipv6= k8sPodName=openstack/barbican-db-sync-87vqv subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.167 696a6239-8fd0-4bed-8f49-5bfae6ee80ff default }" containerID=4e552585fecd68769cf1f58294a88c1715d94459ec5c348da3814d57cad3fb5e datapathConfiguration="&{false false false false false }" interface=lxc947371fe6786 k8sPodName=openstack/barbican-rabbit-init-m6rq9 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4e552585fe datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1232 ipv4=10.0.0.167 ipv6= k8sPodName=openstack/barbican-rabbit-init-m6rq9 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4e552585fe datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1232 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=0b778573-a22a-416b-b675-b9eee986c2d0,k8s:batch.kubernetes.io/job-name=barbican-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=0b778573-a22a-416b-b675-b9eee986c2d0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-rabbit-init,k8s:release_group=barbican" ipv4=10.0.0.167 ipv6= k8sPodName=openstack/barbican-rabbit-init-m6rq9 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=4e552585fe datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1232 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.167 ipv6= k8sPodName=openstack/barbican-rabbit-init-m6rq9 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=0b778573-a22a-416b-b675-b9eee986c2d0;k8s:batch.kubernetes.io/job-name=barbican-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=0b778573-a22a-416b-b675-b9eee986c2d0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-rabbit-init;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4e552585fe datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1232 identity=48126 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=0b778573-a22a-416b-b675-b9eee986c2d0,k8s:batch.kubernetes.io/job-name=barbican-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=0b778573-a22a-416b-b675-b9eee986c2d0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-rabbit-init,k8s:release_group=barbican" ipv4=10.0.0.167 ipv6= k8sPodName=openstack/barbican-rabbit-init-m6rq9 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4e552585fe datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1232 identity=48126 ipv4=10.0.0.167 ipv6= k8sPodName=openstack/barbican-rabbit-init-m6rq9 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=4e552585fe datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1232 identity=48126 ipv4=10.0.0.167 ipv6= k8sPodName=openstack/barbican-rabbit-init-m6rq9 subsys=endpoint level=info msg="Successful endpoint creation" containerID=4e552585fe datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1232 identity=48126 ipv4=10.0.0.167 ipv6= k8sPodName=openstack/barbican-rabbit-init-m6rq9 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=4e552585fe endpointID=1232 k8sNamespace=openstack k8sPodName=barbican-rabbit-init-m6rq9 subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=0b778573-a22a-416b-b675-b9eee986c2d0 k8s:batch.kubernetes.io/job-name=barbican-rabbit-init k8s:component=rabbit-init k8s:controller-uid=0b778573-a22a-416b-b675-b9eee986c2d0 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-rabbit-init k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=4e552585fe datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1232 identity=48126 ipv4=10.0.0.167 ipv6= k8sPodName=openstack/barbican-rabbit-init-m6rq9 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.29 2efb2de6-eb3b-477b-a907-8d0a721cded4 default }" containerID=b8f68c4e448f251b91d62032b317406da8ad968f762f1490ed2a0bdb95092c5d datapathConfiguration="&{false false false false false }" interface=lxc9de41a01a7cf k8sPodName=openstack/barbican-ks-service-q4dh8 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b8f68c4e44 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2525 ipv4=10.0.0.29 ipv6= k8sPodName=openstack/barbican-ks-service-q4dh8 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b8f68c4e44 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2525 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=3ba9e46a-8d21-4871-98e0-6fd9425e6897,k8s:batch.kubernetes.io/job-name=barbican-ks-service,k8s:component=ks-service,k8s:controller-uid=3ba9e46a-8d21-4871-98e0-6fd9425e6897,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-service,k8s:release_group=barbican" ipv4=10.0.0.29 ipv6= k8sPodName=openstack/barbican-ks-service-q4dh8 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=3ba9e46a-8d21-4871-98e0-6fd9425e6897;k8s:batch.kubernetes.io/job-name=barbican-ks-service;k8s:component=ks-service;k8s:controller-uid=3ba9e46a-8d21-4871-98e0-6fd9425e6897;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-service;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b8f68c4e44 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2525 identity=13501 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=3ba9e46a-8d21-4871-98e0-6fd9425e6897,k8s:batch.kubernetes.io/job-name=barbican-ks-service,k8s:component=ks-service,k8s:controller-uid=3ba9e46a-8d21-4871-98e0-6fd9425e6897,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-service,k8s:release_group=barbican" ipv4=10.0.0.29 ipv6= k8sPodName=openstack/barbican-ks-service-q4dh8 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b8f68c4e44 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2525 identity=13501 ipv4=10.0.0.29 ipv6= k8sPodName=openstack/barbican-ks-service-q4dh8 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=b8f68c4e44 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2525 identity=13501 ipv4=10.0.0.29 ipv6= k8sPodName=openstack/barbican-ks-service-q4dh8 subsys=endpoint level=info msg="Successful endpoint creation" containerID=b8f68c4e44 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2525 identity=13501 ipv4=10.0.0.29 ipv6= k8sPodName=openstack/barbican-ks-service-q4dh8 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=b8f68c4e44 endpointID=2525 k8sNamespace=openstack k8sPodName=barbican-ks-service-q4dh8 subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=3ba9e46a-8d21-4871-98e0-6fd9425e6897 k8s:batch.kubernetes.io/job-name=barbican-ks-service k8s:component=ks-service k8s:controller-uid=3ba9e46a-8d21-4871-98e0-6fd9425e6897 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-service k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=b8f68c4e44 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2525 identity=13501 ipv4=10.0.0.29 ipv6= k8sPodName=openstack/barbican-ks-service-q4dh8 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.144 44ceb2e3-de23-4eec-aa49-90c2cb1897a3 default }" containerID=42cacc5d2245623c3ec944af70b5f7c93ddb79209d0d4feb2ef5a3dffad58666 datapathConfiguration="&{false false false false false }" interface=lxc54d07a1c2334 k8sPodName=openstack/barbican-ks-endpoints-gl4rz labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=42cacc5d22 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1159 ipv4=10.0.0.144 ipv6= k8sPodName=openstack/barbican-ks-endpoints-gl4rz subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=42cacc5d22 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1159 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=b33a7d74-94ed-411b-aa8c-b83f20e61e9e,k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=b33a7d74-94ed-411b-aa8c-b83f20e61e9e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-endpoints,k8s:release_group=barbican" ipv4=10.0.0.144 ipv6= k8sPodName=openstack/barbican-ks-endpoints-gl4rz subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=42cacc5d22 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1159 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.144 ipv6= k8sPodName=openstack/barbican-ks-endpoints-gl4rz line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=b33a7d74-94ed-411b-aa8c-b83f20e61e9e;k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=b33a7d74-94ed-411b-aa8c-b83f20e61e9e;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-endpoints;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=42cacc5d22 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1159 identity=37227 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=b33a7d74-94ed-411b-aa8c-b83f20e61e9e,k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=b33a7d74-94ed-411b-aa8c-b83f20e61e9e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-endpoints,k8s:release_group=barbican" ipv4=10.0.0.144 ipv6= k8sPodName=openstack/barbican-ks-endpoints-gl4rz oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=42cacc5d22 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1159 identity=37227 ipv4=10.0.0.144 ipv6= k8sPodName=openstack/barbican-ks-endpoints-gl4rz subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=42cacc5d22 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1159 identity=37227 ipv4=10.0.0.144 ipv6= k8sPodName=openstack/barbican-ks-endpoints-gl4rz subsys=endpoint level=info msg="Successful endpoint creation" containerID=42cacc5d22 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1159 identity=37227 ipv4=10.0.0.144 ipv6= k8sPodName=openstack/barbican-ks-endpoints-gl4rz subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=42cacc5d22 endpointID=1159 k8sNamespace=openstack k8sPodName=barbican-ks-endpoints-gl4rz subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=b33a7d74-94ed-411b-aa8c-b83f20e61e9e k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=b33a7d74-94ed-411b-aa8c-b83f20e61e9e k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-endpoints k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=42cacc5d22 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1159 identity=37227 ipv4=10.0.0.144 ipv6= k8sPodName=openstack/barbican-ks-endpoints-gl4rz subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.175 3e353254-86d0-4c5c-8228-6793b8a0de37 default }" containerID=b92f900ccf62c2327a9083f345d8988d3959bbe6e9a4909bbc7e752b95c68483 datapathConfiguration="&{false false false false false }" interface=lxcaab5a697db86 k8sPodName=openstack/barbican-ks-user-xl7nv labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b92f900ccf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2373 ipv4=10.0.0.175 ipv6= k8sPodName=openstack/barbican-ks-user-xl7nv subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b92f900ccf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2373 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=553a159c-504a-4641-a22d-f41e89189948,k8s:batch.kubernetes.io/job-name=barbican-ks-user,k8s:component=ks-user,k8s:controller-uid=553a159c-504a-4641-a22d-f41e89189948,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-user,k8s:release_group=barbican" ipv4=10.0.0.175 ipv6= k8sPodName=openstack/barbican-ks-user-xl7nv subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=553a159c-504a-4641-a22d-f41e89189948;k8s:batch.kubernetes.io/job-name=barbican-ks-user;k8s:component=ks-user;k8s:controller-uid=553a159c-504a-4641-a22d-f41e89189948;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-user;k8s:release_group=barbican;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=b92f900ccf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2373 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.175 ipv6= k8sPodName=openstack/barbican-ks-user-xl7nv line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=b92f900ccf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2373 identity=11614 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=553a159c-504a-4641-a22d-f41e89189948,k8s:batch.kubernetes.io/job-name=barbican-ks-user,k8s:component=ks-user,k8s:controller-uid=553a159c-504a-4641-a22d-f41e89189948,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-user,k8s:release_group=barbican" ipv4=10.0.0.175 ipv6= k8sPodName=openstack/barbican-ks-user-xl7nv oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b92f900ccf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2373 identity=11614 ipv4=10.0.0.175 ipv6= k8sPodName=openstack/barbican-ks-user-xl7nv subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b92f900ccf datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2373 identity=11614 ipv4=10.0.0.175 ipv6= k8sPodName=openstack/barbican-ks-user-xl7nv subsys=endpoint level=info msg="Successful endpoint creation" containerID=b92f900ccf datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2373 identity=11614 ipv4=10.0.0.175 ipv6= k8sPodName=openstack/barbican-ks-user-xl7nv subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=b92f900ccf endpointID=2373 k8sNamespace=openstack k8sPodName=barbican-ks-user-xl7nv subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=553a159c-504a-4641-a22d-f41e89189948 k8s:batch.kubernetes.io/job-name=barbican-ks-user k8s:component=ks-user k8s:controller-uid=553a159c-504a-4641-a22d-f41e89189948 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-user k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=b92f900ccf datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2373 identity=11614 ipv4=10.0.0.175 ipv6= k8sPodName=openstack/barbican-ks-user-xl7nv subsys=endpoint level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Create endpoint request" addressing="&{10.0.0.139 3e330d4b-293c-433d-b939-fa74daec0b05 default }" containerID=c7f65d467682fe44228248b2c34b7bd914c87e912496148ba3d261c1d77a4014 datapathConfiguration="&{false false false false false }" interface=lxcab07ad52476b k8sPodName=rook-ceph/rook-ceph-operator-7b66cfb94c-gnrh4 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c7f65d4676 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2081 ipv4=10.0.0.139 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-7b66cfb94c-gnrh4 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c7f65d4676 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2081 identityLabels="k8s:app=rook-ceph-operator,k8s:helm.sh/chart=rook-ceph-v1.14.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph,k8s:io.cilium.k8s.namespace.labels.name=rook-ceph,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system,k8s:io.kubernetes.pod.namespace=rook-ceph" ipv4=10.0.0.139 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-7b66cfb94c-gnrh4 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:rook-ceph k8s:io.cilium.k8s.namespace.labels.name:rook-ceph]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=c7f65d4676 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2081 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.139 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-7b66cfb94c-gnrh4 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=rook-ceph-operator;k8s:helm.sh/chart=rook-ceph-v1.14.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph;k8s:io.cilium.k8s.namespace.labels.name=rook-ceph;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system;k8s:io.kubernetes.pod.namespace=rook-ceph;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c7f65d4676 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2081 identity=44298 identityLabels="k8s:app=rook-ceph-operator,k8s:helm.sh/chart=rook-ceph-v1.14.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph,k8s:io.cilium.k8s.namespace.labels.name=rook-ceph,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system,k8s:io.kubernetes.pod.namespace=rook-ceph" ipv4=10.0.0.139 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-7b66cfb94c-gnrh4 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c7f65d4676 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2081 identity=44298 ipv4=10.0.0.139 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-7b66cfb94c-gnrh4 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c7f65d4676 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2081 identity=44298 ipv4=10.0.0.139 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-7b66cfb94c-gnrh4 subsys=endpoint level=info msg="Successful endpoint creation" containerID=c7f65d4676 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2081 identity=44298 ipv4=10.0.0.139 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-7b66cfb94c-gnrh4 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.24 36d02ea0-5b2f-43b4-9ede-f51278e7b514 default }" containerID=a36af09bbbec22e8fb7c5448c8e89079a76ae607e7a78068412754276852a2e5 datapathConfiguration="&{false false false false false }" interface=lxc6e0cb79bf66d k8sPodName=openstack/rook-ceph-detect-version-qbqcl labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a36af09bbb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2264 ipv4=10.0.0.24 ipv6= k8sPodName=openstack/rook-ceph-detect-version-qbqcl subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a36af09bbb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2264 identityLabels="k8s:app=rook-ceph-detect-version,k8s:batch.kubernetes.io/controller-uid=c0ab9a10-6391-4cb5-91f1-acfd3615cbdd,k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version,k8s:controller-uid=c0ab9a10-6391-4cb5-91f1-acfd3615cbdd,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=rook-ceph-detect-version,k8s:rook-version=v1.14.5" ipv4=10.0.0.24 ipv6= k8sPodName=openstack/rook-ceph-detect-version-qbqcl subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=a36af09bbb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2264 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.24 ipv6= k8sPodName=openstack/rook-ceph-detect-version-qbqcl line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=rook-ceph-detect-version;k8s:batch.kubernetes.io/controller-uid=c0ab9a10-6391-4cb5-91f1-acfd3615cbdd;k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version;k8s:controller-uid=c0ab9a10-6391-4cb5-91f1-acfd3615cbdd;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=rook-ceph-detect-version;k8s:rook-version=v1.14.5;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a36af09bbb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2264 identity=38468 identityLabels="k8s:app=rook-ceph-detect-version,k8s:batch.kubernetes.io/controller-uid=c0ab9a10-6391-4cb5-91f1-acfd3615cbdd,k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version,k8s:controller-uid=c0ab9a10-6391-4cb5-91f1-acfd3615cbdd,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=rook-ceph-detect-version,k8s:rook-version=v1.14.5" ipv4=10.0.0.24 ipv6= k8sPodName=openstack/rook-ceph-detect-version-qbqcl oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a36af09bbb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2264 identity=38468 ipv4=10.0.0.24 ipv6= k8sPodName=openstack/rook-ceph-detect-version-qbqcl subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a36af09bbb datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2264 identity=38468 ipv4=10.0.0.24 ipv6= k8sPodName=openstack/rook-ceph-detect-version-qbqcl subsys=endpoint level=info msg="Successful endpoint creation" containerID=a36af09bbb datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2264 identity=38468 ipv4=10.0.0.24 ipv6= k8sPodName=openstack/rook-ceph-detect-version-qbqcl subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=a36af09bbb endpointID=2264 k8sNamespace=openstack k8sPodName=rook-ceph-detect-version-qbqcl subsys=daemon level=info msg="Releasing key" key="[k8s:app=rook-ceph-detect-version k8s:batch.kubernetes.io/controller-uid=c0ab9a10-6391-4cb5-91f1-acfd3615cbdd k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version k8s:controller-uid=c0ab9a10-6391-4cb5-91f1-acfd3615cbdd k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=rook-ceph-detect-version k8s:rook-version=v1.14.5]" subsys=allocator level=info msg="Removed endpoint" containerID=a36af09bbb datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2264 identity=38468 ipv4=10.0.0.24 ipv6= k8sPodName=openstack/rook-ceph-detect-version-qbqcl subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.122 c78c3e5a-e5b0-48ba-b2d3-f0b7b428390b default }" containerID=79d9422d0a0be50bc561239cac0920bd9cbbc9c0e7f91a807b6c3328d8b6fb06 datapathConfiguration="&{false false false false false }" interface=lxc587ef685cf2d k8sPodName=openstack/ceph-object-controller-detect-version-x5sll labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=79d9422d0a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1465 ipv4=10.0.0.122 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-x5sll subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=79d9422d0a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1465 identityLabels="k8s:app=ceph-object-controller-detect-version,k8s:batch.kubernetes.io/controller-uid=4a350776-02e3-4f65-b50e-ba54130f517d,k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version,k8s:controller-uid=4a350776-02e3-4f65-b50e-ba54130f517d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=ceph-object-controller-detect-version,k8s:rook-version=v1.14.5" ipv4=10.0.0.122 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-x5sll subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=ceph-object-controller-detect-version;k8s:batch.kubernetes.io/controller-uid=4a350776-02e3-4f65-b50e-ba54130f517d;k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version;k8s:controller-uid=4a350776-02e3-4f65-b50e-ba54130f517d;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=ceph-object-controller-detect-version;k8s:rook-version=v1.14.5;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=79d9422d0a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1465 identity=54508 identityLabels="k8s:app=ceph-object-controller-detect-version,k8s:batch.kubernetes.io/controller-uid=4a350776-02e3-4f65-b50e-ba54130f517d,k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version,k8s:controller-uid=4a350776-02e3-4f65-b50e-ba54130f517d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=ceph-object-controller-detect-version,k8s:rook-version=v1.14.5" ipv4=10.0.0.122 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-x5sll oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=79d9422d0a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1465 identity=54508 ipv4=10.0.0.122 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-x5sll subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=79d9422d0a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1465 identity=54508 ipv4=10.0.0.122 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-x5sll subsys=endpoint level=info msg="Successful endpoint creation" containerID=79d9422d0a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1465 identity=54508 ipv4=10.0.0.122 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-x5sll subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=79d9422d0a endpointID=1465 k8sNamespace=openstack k8sPodName=ceph-object-controller-detect-version-x5sll subsys=daemon level=info msg="Releasing key" key="[k8s:app=ceph-object-controller-detect-version k8s:batch.kubernetes.io/controller-uid=4a350776-02e3-4f65-b50e-ba54130f517d k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version k8s:controller-uid=4a350776-02e3-4f65-b50e-ba54130f517d k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=ceph-object-controller-detect-version k8s:rook-version=v1.14.5]" subsys=allocator level=info msg="Removed endpoint" containerID=79d9422d0a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1465 identity=54508 ipv4=10.0.0.122 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-x5sll subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.191 243cece0-1973-4e44-a31a-e50b3519bafc default }" containerID=34a946c6b1feeb53f5a1dec5ce4fc3b233c86c796fd00fbed4e64ebd8990a9b3 datapathConfiguration="&{false false false false false }" interface=lxc8461f31f5f2c k8sPodName=local-path-storage/helper-pod-create-pvc-79d1378c-02ee-4cd9-8566-7e2e6139d6a8 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=34a946c6b1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=715 ipv4=10.0.0.191 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-79d1378c-02ee-4cd9-8566-7e2e6139d6a8 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=34a946c6b1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=715 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.191 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-79d1378c-02ee-4cd9-8566-7e2e6139d6a8 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=34a946c6b1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=715 identity=2052 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.191 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-79d1378c-02ee-4cd9-8566-7e2e6139d6a8 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=34a946c6b1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=715 identity=2052 ipv4=10.0.0.191 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-79d1378c-02ee-4cd9-8566-7e2e6139d6a8 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=34a946c6b1 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=715 identity=2052 ipv4=10.0.0.191 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-79d1378c-02ee-4cd9-8566-7e2e6139d6a8 subsys=endpoint level=info msg="Successful endpoint creation" containerID=34a946c6b1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=715 identity=2052 ipv4=10.0.0.191 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-79d1378c-02ee-4cd9-8566-7e2e6139d6a8 subsys=daemon level=info msg="Delete endpoint request" containerID=34a946c6b1 endpointID=715 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-79d1378c-02ee-4cd9-8566-7e2e6139d6a8 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=34a946c6b1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=715 identity=2052 ipv4=10.0.0.191 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-79d1378c-02ee-4cd9-8566-7e2e6139d6a8 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.7 fd61bb0b-44fb-4676-9076-fcea92d57796 default }" containerID=7565f1e42fac2c8f5e52f650f16a5003a183d0aadc7779b6ef0abbf29116cd5e datapathConfiguration="&{false false false false false }" interface=lxc98fb6dc8adc0 k8sPodName=openstack/rabbitmq-glance-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7565f1e42f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=131 ipv4=10.0.0.7 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7565f1e42f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=131 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-glance,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0" ipv4=10.0.0.7 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=7565f1e42f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=131 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.7 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-glance;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7565f1e42f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=131 identity=52820 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-glance,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0" ipv4=10.0.0.7 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7565f1e42f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=131 identity=52820 ipv4=10.0.0.7 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=7565f1e42f datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=131 identity=52820 ipv4=10.0.0.7 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=7565f1e42f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=131 identity=52820 ipv4=10.0.0.7 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.178 608acea5-12b8-4e07-9b73-d3029ce0a26f default }" containerID=4e46093d488c57a2eb74ce81488df7baaf67a6ef1f6db599b037dc6fc8560254 datapathConfiguration="&{false false false false false }" interface=lxc46a4efdf615e k8sPodName=openstack/glance-db-init-59284 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4e46093d48 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=491 ipv4=10.0.0.178 ipv6= k8sPodName=openstack/glance-db-init-59284 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4e46093d48 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=491 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=3482444b-bdae-4019-8c3b-6a152d49bcd0,k8s:batch.kubernetes.io/job-name=glance-db-init,k8s:component=db-init,k8s:controller-uid=3482444b-bdae-4019-8c3b-6a152d49bcd0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-init,k8s:release_group=glance" ipv4=10.0.0.178 ipv6= k8sPodName=openstack/glance-db-init-59284 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=3482444b-bdae-4019-8c3b-6a152d49bcd0;k8s:batch.kubernetes.io/job-name=glance-db-init;k8s:component=db-init;k8s:controller-uid=3482444b-bdae-4019-8c3b-6a152d49bcd0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-db-init;k8s:release_group=glance;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=4e46093d48 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=491 identity=9544 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=3482444b-bdae-4019-8c3b-6a152d49bcd0,k8s:batch.kubernetes.io/job-name=glance-db-init,k8s:component=db-init,k8s:controller-uid=3482444b-bdae-4019-8c3b-6a152d49bcd0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-init,k8s:release_group=glance" ipv4=10.0.0.178 ipv6= k8sPodName=openstack/glance-db-init-59284 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4e46093d48 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=491 identity=9544 ipv4=10.0.0.178 ipv6= k8sPodName=openstack/glance-db-init-59284 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=4e46093d48 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=491 identity=9544 ipv4=10.0.0.178 ipv6= k8sPodName=openstack/glance-db-init-59284 subsys=endpoint level=info msg="Successful endpoint creation" containerID=4e46093d48 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=491 identity=9544 ipv4=10.0.0.178 ipv6= k8sPodName=openstack/glance-db-init-59284 subsys=daemon level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=4e46093d48 endpointID=491 k8sNamespace=openstack k8sPodName=glance-db-init-59284 subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=3482444b-bdae-4019-8c3b-6a152d49bcd0 k8s:batch.kubernetes.io/job-name=glance-db-init k8s:component=db-init k8s:controller-uid=3482444b-bdae-4019-8c3b-6a152d49bcd0 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-db-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=4e46093d48 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=491 identity=9544 ipv4=10.0.0.178 ipv6= k8sPodName=openstack/glance-db-init-59284 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.60 50307f91-6b37-42cb-beb7-e8a7e5613641 default }" containerID=29acb85757bd56928d9938ac8383d31b987c4c1ff9c6420aa9c5ebacbad0c96e datapathConfiguration="&{false false false false false }" interface=lxc5a0de0580f43 k8sPodName=openstack/glance-db-sync-7q86k labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=29acb85757 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=714 ipv4=10.0.0.60 ipv6= k8sPodName=openstack/glance-db-sync-7q86k subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=29acb85757 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=714 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=960f714a-e842-42c8-94d9-bb26aa9c0afe,k8s:batch.kubernetes.io/job-name=glance-db-sync,k8s:component=db-sync,k8s:controller-uid=960f714a-e842-42c8-94d9-bb26aa9c0afe,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-sync,k8s:release_group=glance" ipv4=10.0.0.60 ipv6= k8sPodName=openstack/glance-db-sync-7q86k subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=960f714a-e842-42c8-94d9-bb26aa9c0afe;k8s:batch.kubernetes.io/job-name=glance-db-sync;k8s:component=db-sync;k8s:controller-uid=960f714a-e842-42c8-94d9-bb26aa9c0afe;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-db-sync;k8s:release_group=glance;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=29acb85757 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=714 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.60 ipv6= k8sPodName=openstack/glance-db-sync-7q86k line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=29acb85757 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=714 identity=44974 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=960f714a-e842-42c8-94d9-bb26aa9c0afe,k8s:batch.kubernetes.io/job-name=glance-db-sync,k8s:component=db-sync,k8s:controller-uid=960f714a-e842-42c8-94d9-bb26aa9c0afe,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-sync,k8s:release_group=glance" ipv4=10.0.0.60 ipv6= k8sPodName=openstack/glance-db-sync-7q86k oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=29acb85757 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=714 identity=44974 ipv4=10.0.0.60 ipv6= k8sPodName=openstack/glance-db-sync-7q86k subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=29acb85757 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=714 identity=44974 ipv4=10.0.0.60 ipv6= k8sPodName=openstack/glance-db-sync-7q86k subsys=endpoint level=info msg="Successful endpoint creation" containerID=29acb85757 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=714 identity=44974 ipv4=10.0.0.60 ipv6= k8sPodName=openstack/glance-db-sync-7q86k subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=29acb85757 endpointID=714 k8sNamespace=openstack k8sPodName=glance-db-sync-7q86k subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=960f714a-e842-42c8-94d9-bb26aa9c0afe k8s:batch.kubernetes.io/job-name=glance-db-sync k8s:component=db-sync k8s:controller-uid=960f714a-e842-42c8-94d9-bb26aa9c0afe k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-db-sync k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=29acb85757 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=714 identity=44974 ipv4=10.0.0.60 ipv6= k8sPodName=openstack/glance-db-sync-7q86k subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.136 31c2a401-fa9a-4bd4-a11a-d75329c7d443 default }" containerID=d089e97d61b3ec4ebb0bf8d2736dbc600f9025b17056e37156cc3903d3e09e4e datapathConfiguration="&{false false false false false }" interface=lxc531a32fd450b k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-ff8lp labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d089e97d61 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2456 ipv4=10.0.0.136 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-ff8lp subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d089e97d61 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2456 identityLabels="k8s:app=rook-ceph-crashcollector,k8s:ceph-version=18.2.7-0,k8s:ceph_daemon_id=crash,k8s:crashcollector=crash,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default,k8s:io.kubernetes.pod.namespace=openstack,k8s:node_name=instance,k8s:rook_cluster=openstack" ipv4=10.0.0.136 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-ff8lp subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-crashcollector;k8s:ceph-version=18.2.7-0;k8s:ceph_daemon_id=crash;k8s:crashcollector=crash;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default;k8s:io.kubernetes.pod.namespace=openstack;k8s:node_name=instance;k8s:rook_cluster=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d089e97d61 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2456 identity=11594 identityLabels="k8s:app=rook-ceph-crashcollector,k8s:ceph-version=18.2.7-0,k8s:ceph_daemon_id=crash,k8s:crashcollector=crash,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default,k8s:io.kubernetes.pod.namespace=openstack,k8s:node_name=instance,k8s:rook_cluster=openstack" ipv4=10.0.0.136 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-ff8lp oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d089e97d61 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2456 identity=11594 ipv4=10.0.0.136 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-ff8lp subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=d089e97d61 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2456 identity=11594 ipv4=10.0.0.136 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-ff8lp subsys=endpoint level=info msg="Successful endpoint creation" containerID=d089e97d61 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2456 identity=11594 ipv4=10.0.0.136 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-ff8lp subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.3 cfd5bc31-37b8-4ece-90bb-0e8586e60108 default }" containerID=bd6ce572bf81293ac4f5eb06ba33d473d54c330f313cd0c2a9a844b563c550aa datapathConfiguration="&{false false false false false }" interface=lxcbb512fe9b0dd k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-76c74 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=bd6ce572bf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2227 ipv4=10.0.0.3 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-76c74 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=bd6ce572bf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2227 identityLabels="k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io,k8s:app.kubernetes.io/created-by=rook-ceph-operator,k8s:app.kubernetes.io/instance=ceph,k8s:app.kubernetes.io/managed-by=rook-ceph-operator,k8s:app.kubernetes.io/name=ceph-rgw,k8s:app.kubernetes.io/part-of=ceph,k8s:app=rook-ceph-rgw,k8s:ceph_daemon_id=ceph,k8s:ceph_daemon_type=rgw,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw,k8s:io.kubernetes.pod.namespace=openstack,k8s:rgw=ceph,k8s:rook.io/operator-namespace=rook-ceph,k8s:rook_cluster=openstack,k8s:rook_object_store=ceph" ipv4=10.0.0.3 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-76c74 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-rgw;k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io;k8s:app.kubernetes.io/created-by=rook-ceph-operator;k8s:app.kubernetes.io/instance=ceph;k8s:app.kubernetes.io/managed-by=rook-ceph-operator;k8s:app.kubernetes.io/name=ceph-rgw;k8s:app.kubernetes.io/part-of=ceph;k8s:ceph_daemon_id=ceph;k8s:ceph_daemon_type=rgw;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw;k8s:io.kubernetes.pod.namespace=openstack;k8s:rgw=ceph;k8s:rook.io/operator-namespace=rook-ceph;k8s:rook_cluster=openstack;k8s:rook_object_store=ceph;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=bd6ce572bf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2227 identity=39436 identityLabels="k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io,k8s:app.kubernetes.io/created-by=rook-ceph-operator,k8s:app.kubernetes.io/instance=ceph,k8s:app.kubernetes.io/managed-by=rook-ceph-operator,k8s:app.kubernetes.io/name=ceph-rgw,k8s:app.kubernetes.io/part-of=ceph,k8s:app=rook-ceph-rgw,k8s:ceph_daemon_id=ceph,k8s:ceph_daemon_type=rgw,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw,k8s:io.kubernetes.pod.namespace=openstack,k8s:rgw=ceph,k8s:rook.io/operator-namespace=rook-ceph,k8s:rook_cluster=openstack,k8s:rook_object_store=ceph" ipv4=10.0.0.3 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-76c74 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=bd6ce572bf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2227 identity=39436 ipv4=10.0.0.3 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-76c74 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=bd6ce572bf datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2227 identity=39436 ipv4=10.0.0.3 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-76c74 subsys=endpoint level=info msg="Successful endpoint creation" containerID=bd6ce572bf datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2227 identity=39436 ipv4=10.0.0.3 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-76c74 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.208 9778fe4b-e7ab-4286-bb92-3bfcc5826bf6 default }" containerID=932888c5e4d277afc49605248c83ce2b2b564056716c1a523394427fa5b767a1 datapathConfiguration="&{false false false false false }" interface=lxc05ff3f564438 k8sPodName=openstack/glance-rabbit-init-xpffn labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=932888c5e4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1528 ipv4=10.0.0.208 ipv6= k8sPodName=openstack/glance-rabbit-init-xpffn subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=932888c5e4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1528 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=87d9b214-b67c-4d66-84fe-8be9f9fca3f8,k8s:batch.kubernetes.io/job-name=glance-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=87d9b214-b67c-4d66-84fe-8be9f9fca3f8,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-rabbit-init,k8s:release_group=glance" ipv4=10.0.0.208 ipv6= k8sPodName=openstack/glance-rabbit-init-xpffn subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=87d9b214-b67c-4d66-84fe-8be9f9fca3f8;k8s:batch.kubernetes.io/job-name=glance-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=87d9b214-b67c-4d66-84fe-8be9f9fca3f8;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-rabbit-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=932888c5e4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1528 identity=25461 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=87d9b214-b67c-4d66-84fe-8be9f9fca3f8,k8s:batch.kubernetes.io/job-name=glance-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=87d9b214-b67c-4d66-84fe-8be9f9fca3f8,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-rabbit-init,k8s:release_group=glance" ipv4=10.0.0.208 ipv6= k8sPodName=openstack/glance-rabbit-init-xpffn oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=932888c5e4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1528 identity=25461 ipv4=10.0.0.208 ipv6= k8sPodName=openstack/glance-rabbit-init-xpffn subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=932888c5e4 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1528 identity=25461 ipv4=10.0.0.208 ipv6= k8sPodName=openstack/glance-rabbit-init-xpffn subsys=endpoint level=info msg="Successful endpoint creation" containerID=932888c5e4 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1528 identity=25461 ipv4=10.0.0.208 ipv6= k8sPodName=openstack/glance-rabbit-init-xpffn subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=932888c5e4 endpointID=1528 k8sNamespace=openstack k8sPodName=glance-rabbit-init-xpffn subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=87d9b214-b67c-4d66-84fe-8be9f9fca3f8 k8s:batch.kubernetes.io/job-name=glance-rabbit-init k8s:component=rabbit-init k8s:controller-uid=87d9b214-b67c-4d66-84fe-8be9f9fca3f8 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-rabbit-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=932888c5e4 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1528 identity=25461 ipv4=10.0.0.208 ipv6= k8sPodName=openstack/glance-rabbit-init-xpffn subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.46 a80ba8e6-cff7-4697-b5c1-a97d6c11f4ab default }" containerID=9e4fc272d315371af2372e3c1d0191b5848199c18e4ffdfd9d0424653a5d087f datapathConfiguration="&{false false false false false }" interface=lxc1939e864478a k8sPodName=openstack/glance-ks-service-9jdvb labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9e4fc272d3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=292 ipv4=10.0.0.46 ipv6= k8sPodName=openstack/glance-ks-service-9jdvb subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9e4fc272d3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=292 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=cebbcd59-2edf-4b89-bd0e-4cc5b8ccc709,k8s:batch.kubernetes.io/job-name=glance-ks-service,k8s:component=ks-service,k8s:controller-uid=cebbcd59-2edf-4b89-bd0e-4cc5b8ccc709,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-service,k8s:release_group=glance" ipv4=10.0.0.46 ipv6= k8sPodName=openstack/glance-ks-service-9jdvb subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=9e4fc272d3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=292 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.46 ipv6= k8sPodName=openstack/glance-ks-service-9jdvb line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=cebbcd59-2edf-4b89-bd0e-4cc5b8ccc709;k8s:batch.kubernetes.io/job-name=glance-ks-service;k8s:component=ks-service;k8s:controller-uid=cebbcd59-2edf-4b89-bd0e-4cc5b8ccc709;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-service;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9e4fc272d3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=292 identity=12564 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=cebbcd59-2edf-4b89-bd0e-4cc5b8ccc709,k8s:batch.kubernetes.io/job-name=glance-ks-service,k8s:component=ks-service,k8s:controller-uid=cebbcd59-2edf-4b89-bd0e-4cc5b8ccc709,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-service,k8s:release_group=glance" ipv4=10.0.0.46 ipv6= k8sPodName=openstack/glance-ks-service-9jdvb oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9e4fc272d3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=292 identity=12564 ipv4=10.0.0.46 ipv6= k8sPodName=openstack/glance-ks-service-9jdvb subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=9e4fc272d3 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=292 identity=12564 ipv4=10.0.0.46 ipv6= k8sPodName=openstack/glance-ks-service-9jdvb subsys=endpoint level=info msg="Successful endpoint creation" containerID=9e4fc272d3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=292 identity=12564 ipv4=10.0.0.46 ipv6= k8sPodName=openstack/glance-ks-service-9jdvb subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=9e4fc272d3 endpointID=292 k8sNamespace=openstack k8sPodName=glance-ks-service-9jdvb subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=cebbcd59-2edf-4b89-bd0e-4cc5b8ccc709 k8s:batch.kubernetes.io/job-name=glance-ks-service k8s:component=ks-service k8s:controller-uid=cebbcd59-2edf-4b89-bd0e-4cc5b8ccc709 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-service k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=9e4fc272d3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=292 identity=12564 ipv4=10.0.0.46 ipv6= k8sPodName=openstack/glance-ks-service-9jdvb subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.86 3fe2c7fb-e002-49ae-94e6-b148ac96b6ea default }" containerID=de339b5fa00725d8d545c061708ac306af8bfeb80e640401450c2eabb0da4d40 datapathConfiguration="&{false false false false false }" interface=lxc84bdd0c71b69 k8sPodName=openstack/glance-ks-endpoints-khjgh labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=de339b5fa0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=226 ipv4=10.0.0.86 ipv6= k8sPodName=openstack/glance-ks-endpoints-khjgh subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=de339b5fa0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=226 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=b5ad1984-b5f6-46ff-a910-07accd8af8c6,k8s:batch.kubernetes.io/job-name=glance-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=b5ad1984-b5f6-46ff-a910-07accd8af8c6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-endpoints,k8s:release_group=glance" ipv4=10.0.0.86 ipv6= k8sPodName=openstack/glance-ks-endpoints-khjgh subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=b5ad1984-b5f6-46ff-a910-07accd8af8c6;k8s:batch.kubernetes.io/job-name=glance-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=b5ad1984-b5f6-46ff-a910-07accd8af8c6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-endpoints;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=de339b5fa0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=226 identity=14306 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=b5ad1984-b5f6-46ff-a910-07accd8af8c6,k8s:batch.kubernetes.io/job-name=glance-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=b5ad1984-b5f6-46ff-a910-07accd8af8c6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-endpoints,k8s:release_group=glance" ipv4=10.0.0.86 ipv6= k8sPodName=openstack/glance-ks-endpoints-khjgh oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=de339b5fa0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=226 identity=14306 ipv4=10.0.0.86 ipv6= k8sPodName=openstack/glance-ks-endpoints-khjgh subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=de339b5fa0 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=226 identity=14306 ipv4=10.0.0.86 ipv6= k8sPodName=openstack/glance-ks-endpoints-khjgh subsys=endpoint level=info msg="Successful endpoint creation" containerID=de339b5fa0 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=226 identity=14306 ipv4=10.0.0.86 ipv6= k8sPodName=openstack/glance-ks-endpoints-khjgh subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.127 b4b40127-9c34-4e8d-8814-bffeebc29f37 default }" containerID=1052c4842c3d6c65b0e901cfded518271df4c06ec6e90fa6e21ef148a251307d datapathConfiguration="&{false false false false false }" interface=lxcd55daccafcfe k8sPodName=openstack/ceph-object-controller-detect-version-jqnzm labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1052c4842c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2214 ipv4=10.0.0.127 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-jqnzm subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1052c4842c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2214 identityLabels="k8s:app=ceph-object-controller-detect-version,k8s:batch.kubernetes.io/controller-uid=9de0e99a-9b3f-4fc4-802b-ab5aafaad8f9,k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version,k8s:controller-uid=9de0e99a-9b3f-4fc4-802b-ab5aafaad8f9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=ceph-object-controller-detect-version,k8s:rook-version=v1.14.5" ipv4=10.0.0.127 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-jqnzm subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=ceph-object-controller-detect-version;k8s:batch.kubernetes.io/controller-uid=9de0e99a-9b3f-4fc4-802b-ab5aafaad8f9;k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version;k8s:controller-uid=9de0e99a-9b3f-4fc4-802b-ab5aafaad8f9;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=ceph-object-controller-detect-version;k8s:rook-version=v1.14.5;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1052c4842c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2214 identity=6633 identityLabels="k8s:app=ceph-object-controller-detect-version,k8s:batch.kubernetes.io/controller-uid=9de0e99a-9b3f-4fc4-802b-ab5aafaad8f9,k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version,k8s:controller-uid=9de0e99a-9b3f-4fc4-802b-ab5aafaad8f9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=ceph-object-controller-detect-version,k8s:rook-version=v1.14.5" ipv4=10.0.0.127 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-jqnzm oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1052c4842c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2214 identity=6633 ipv4=10.0.0.127 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-jqnzm subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=1052c4842c datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2214 identity=6633 ipv4=10.0.0.127 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-jqnzm subsys=endpoint level=info msg="Successful endpoint creation" containerID=1052c4842c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2214 identity=6633 ipv4=10.0.0.127 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-jqnzm subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=1052c4842c endpointID=2214 k8sNamespace=openstack k8sPodName=ceph-object-controller-detect-version-jqnzm subsys=daemon level=info msg="Releasing key" key="[k8s:app=ceph-object-controller-detect-version k8s:batch.kubernetes.io/controller-uid=9de0e99a-9b3f-4fc4-802b-ab5aafaad8f9 k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version k8s:controller-uid=9de0e99a-9b3f-4fc4-802b-ab5aafaad8f9 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=ceph-object-controller-detect-version k8s:rook-version=v1.14.5]" subsys=allocator level=info msg="Removed endpoint" containerID=1052c4842c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2214 identity=6633 ipv4=10.0.0.127 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-jqnzm subsys=endpoint level=info msg="Delete endpoint request" containerID=de339b5fa0 endpointID=226 k8sNamespace=openstack k8sPodName=glance-ks-endpoints-khjgh subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=b5ad1984-b5f6-46ff-a910-07accd8af8c6 k8s:batch.kubernetes.io/job-name=glance-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=b5ad1984-b5f6-46ff-a910-07accd8af8c6 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-endpoints k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=de339b5fa0 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=226 identity=14306 ipv4=10.0.0.86 ipv6= k8sPodName=openstack/glance-ks-endpoints-khjgh subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.160 f977dc2a-2332-4295-aba0-dcea8641a4be default }" containerID=ded1f733e00aeedaf5afb3af5a9ad033d728dba30a5174c37629cb87bf98ca24 datapathConfiguration="&{false false false false false }" interface=lxced58738f42c8 k8sPodName=openstack/glance-ks-user-glp9v labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ded1f733e0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2295 ipv4=10.0.0.160 ipv6= k8sPodName=openstack/glance-ks-user-glp9v subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ded1f733e0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2295 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=3e0089ab-ed55-4401-939d-83096009a304,k8s:batch.kubernetes.io/job-name=glance-ks-user,k8s:component=ks-user,k8s:controller-uid=3e0089ab-ed55-4401-939d-83096009a304,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-user,k8s:release_group=glance" ipv4=10.0.0.160 ipv6= k8sPodName=openstack/glance-ks-user-glp9v subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=3e0089ab-ed55-4401-939d-83096009a304;k8s:batch.kubernetes.io/job-name=glance-ks-user;k8s:component=ks-user;k8s:controller-uid=3e0089ab-ed55-4401-939d-83096009a304;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-user;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ded1f733e0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2295 identity=20823 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=3e0089ab-ed55-4401-939d-83096009a304,k8s:batch.kubernetes.io/job-name=glance-ks-user,k8s:component=ks-user,k8s:controller-uid=3e0089ab-ed55-4401-939d-83096009a304,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-user,k8s:release_group=glance" ipv4=10.0.0.160 ipv6= k8sPodName=openstack/glance-ks-user-glp9v oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ded1f733e0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2295 identity=20823 ipv4=10.0.0.160 ipv6= k8sPodName=openstack/glance-ks-user-glp9v subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ded1f733e0 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2295 identity=20823 ipv4=10.0.0.160 ipv6= k8sPodName=openstack/glance-ks-user-glp9v subsys=endpoint level=info msg="Successful endpoint creation" containerID=ded1f733e0 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2295 identity=20823 ipv4=10.0.0.160 ipv6= k8sPodName=openstack/glance-ks-user-glp9v subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=ded1f733e0 endpointID=2295 k8sNamespace=openstack k8sPodName=glance-ks-user-glp9v subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=3e0089ab-ed55-4401-939d-83096009a304 k8s:batch.kubernetes.io/job-name=glance-ks-user k8s:component=ks-user k8s:controller-uid=3e0089ab-ed55-4401-939d-83096009a304 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-user k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=ded1f733e0 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2295 identity=20823 ipv4=10.0.0.160 ipv6= k8sPodName=openstack/glance-ks-user-glp9v subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.165 f2cb0ea9-4bd9-4d67-8f3b-6da02176ad8b default }" containerID=e9573f7aeb3c556613ff2fc0c8463aa728346f7888bc1323b8281ebbaeeb4769 datapathConfiguration="&{false false false false false }" interface=lxc27a4ce0014c7 k8sPodName=openstack/glance-metadefs-load-k7lpp labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e9573f7aeb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1381 ipv4=10.0.0.165 ipv6= k8sPodName=openstack/glance-metadefs-load-k7lpp subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e9573f7aeb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1381 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=7a3998da-a751-4068-b187-b4483efa29d8,k8s:batch.kubernetes.io/job-name=glance-metadefs-load,k8s:component=metadefs_load,k8s:controller-uid=7a3998da-a751-4068-b187-b4483efa29d8,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-metadefs-load,k8s:release_group=glance" ipv4=10.0.0.165 ipv6= k8sPodName=openstack/glance-metadefs-load-k7lpp subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=7a3998da-a751-4068-b187-b4483efa29d8;k8s:batch.kubernetes.io/job-name=glance-metadefs-load;k8s:component=metadefs_load;k8s:controller-uid=7a3998da-a751-4068-b187-b4483efa29d8;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-metadefs-load;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e9573f7aeb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1381 identity=59945 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=7a3998da-a751-4068-b187-b4483efa29d8,k8s:batch.kubernetes.io/job-name=glance-metadefs-load,k8s:component=metadefs_load,k8s:controller-uid=7a3998da-a751-4068-b187-b4483efa29d8,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-metadefs-load,k8s:release_group=glance" ipv4=10.0.0.165 ipv6= k8sPodName=openstack/glance-metadefs-load-k7lpp oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=e9573f7aeb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1381 identity=59945 ipv4=10.0.0.165 ipv6= k8sPodName=openstack/glance-metadefs-load-k7lpp subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e9573f7aeb datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1381 identity=59945 ipv4=10.0.0.165 ipv6= k8sPodName=openstack/glance-metadefs-load-k7lpp subsys=endpoint level=info msg="Successful endpoint creation" containerID=e9573f7aeb datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1381 identity=59945 ipv4=10.0.0.165 ipv6= k8sPodName=openstack/glance-metadefs-load-k7lpp subsys=daemon level=info msg="Delete endpoint request" containerID=e9573f7aeb endpointID=1381 k8sNamespace=openstack k8sPodName=glance-metadefs-load-k7lpp subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=7a3998da-a751-4068-b187-b4483efa29d8 k8s:batch.kubernetes.io/job-name=glance-metadefs-load k8s:component=metadefs_load k8s:controller-uid=7a3998da-a751-4068-b187-b4483efa29d8 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-metadefs-load k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=e9573f7aeb datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1381 identity=59945 ipv4=10.0.0.165 ipv6= k8sPodName=openstack/glance-metadefs-load-k7lpp subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.149 a20902d6-3bd6-434c-8e7c-65f696902aef default }" containerID=e5fa681e438d3b4d34ef1665a6aa1691903512897a56c63737800d4a40879e65 datapathConfiguration="&{false false false false false }" interface=lxc5b1ce4ffc532 k8sPodName=openstack/glance-storage-init-kq8hr labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e5fa681e43 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3231 ipv4=10.0.0.149 ipv6= k8sPodName=openstack/glance-storage-init-kq8hr subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e5fa681e43 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3231 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=ec5da9ba-ffda-4ede-ad31-02c00e5cf414,k8s:batch.kubernetes.io/job-name=glance-storage-init,k8s:component=storage-init,k8s:controller-uid=ec5da9ba-ffda-4ede-ad31-02c00e5cf414,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-storage-init,k8s:release_group=glance" ipv4=10.0.0.149 ipv6= k8sPodName=openstack/glance-storage-init-kq8hr subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=e5fa681e43 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3231 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.149 ipv6= k8sPodName=openstack/glance-storage-init-kq8hr line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=ec5da9ba-ffda-4ede-ad31-02c00e5cf414;k8s:batch.kubernetes.io/job-name=glance-storage-init;k8s:component=storage-init;k8s:controller-uid=ec5da9ba-ffda-4ede-ad31-02c00e5cf414;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-storage-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e5fa681e43 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3231 identity=55299 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=ec5da9ba-ffda-4ede-ad31-02c00e5cf414,k8s:batch.kubernetes.io/job-name=glance-storage-init,k8s:component=storage-init,k8s:controller-uid=ec5da9ba-ffda-4ede-ad31-02c00e5cf414,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-storage-init,k8s:release_group=glance" ipv4=10.0.0.149 ipv6= k8sPodName=openstack/glance-storage-init-kq8hr oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e5fa681e43 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3231 identity=55299 ipv4=10.0.0.149 ipv6= k8sPodName=openstack/glance-storage-init-kq8hr subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e5fa681e43 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3231 identity=55299 ipv4=10.0.0.149 ipv6= k8sPodName=openstack/glance-storage-init-kq8hr subsys=endpoint level=info msg="Successful endpoint creation" containerID=e5fa681e43 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3231 identity=55299 ipv4=10.0.0.149 ipv6= k8sPodName=openstack/glance-storage-init-kq8hr subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=e5fa681e43 endpointID=3231 k8sNamespace=openstack k8sPodName=glance-storage-init-kq8hr subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=ec5da9ba-ffda-4ede-ad31-02c00e5cf414 k8s:batch.kubernetes.io/job-name=glance-storage-init k8s:component=storage-init k8s:controller-uid=ec5da9ba-ffda-4ede-ad31-02c00e5cf414 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-storage-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=e5fa681e43 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3231 identity=55299 ipv4=10.0.0.149 ipv6= k8sPodName=openstack/glance-storage-init-kq8hr subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.244 dd7c7465-7852-4e3e-bf0c-be6644ed757c default }" containerID=57f95d1171002c96237699dfd4dbc2f0f389a3b7de85556f70898876092ad68a datapathConfiguration="&{false false false false false }" interface=lxc8b2f387bf21e k8sPodName=openstack/glance-api-856cf97976-m5gx9 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=57f95d1171 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=346 ipv4=10.0.0.244 ipv6= k8sPodName=openstack/glance-api-856cf97976-m5gx9 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=57f95d1171 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=346 identityLabels="k8s:application=glance,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=glance" ipv4=10.0.0.244 ipv6= k8sPodName=openstack/glance-api-856cf97976-m5gx9 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=57f95d1171 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=346 identity=57219 identityLabels="k8s:application=glance,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=glance" ipv4=10.0.0.244 ipv6= k8sPodName=openstack/glance-api-856cf97976-m5gx9 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=57f95d1171 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=346 identity=57219 ipv4=10.0.0.244 ipv6= k8sPodName=openstack/glance-api-856cf97976-m5gx9 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=57f95d1171 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=346 identity=57219 ipv4=10.0.0.244 ipv6= k8sPodName=openstack/glance-api-856cf97976-m5gx9 subsys=endpoint level=info msg="Successful endpoint creation" containerID=57f95d1171 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=346 identity=57219 ipv4=10.0.0.244 ipv6= k8sPodName=openstack/glance-api-856cf97976-m5gx9 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.4 635ea5ca-158e-4e12-8f67-452812ef7497 default }" containerID=58536afd68790fe9dd650a8d2fa2891a732d2ca581fb47cb815ae6f8a7a1a00e datapathConfiguration="&{false false false false false }" interface=lxc5d5940bb30e4 k8sPodName=openstack/staffeln-api-794df8888c-gfgp8 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=58536afd68 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1465 ipv4=10.0.0.4 ipv6= k8sPodName=openstack/staffeln-api-794df8888c-gfgp8 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=58536afd68 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1465 identityLabels="k8s:application=staffeln,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.4 ipv6= k8sPodName=openstack/staffeln-api-794df8888c-gfgp8 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Create endpoint request" addressing="&{10.0.0.254 d5606ac2-66ca-4c8b-926d-6eef532f7e0a default }" containerID=cd2599dbe7a13c02cd0a1e1022f09d97e2998cece60c4f825f36291c0981eb7f datapathConfiguration="&{false false false false false }" interface=lxcbc5b74b8a065 k8sPodName=openstack/staffeln-conductor-6b78687d4-v8w5h labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=cd2599dbe7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=717 ipv4=10.0.0.254 ipv6= k8sPodName=openstack/staffeln-conductor-6b78687d4-v8w5h subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=cd2599dbe7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=717 identityLabels="k8s:application=staffeln,k8s:component=conductor,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.254 ipv6= k8sPodName=openstack/staffeln-conductor-6b78687d4-v8w5h subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=cd2599dbe7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=717 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.254 ipv6= k8sPodName=openstack/staffeln-conductor-6b78687d4-v8w5h line=611 subsys=endpoint level=info msg="Invalid state transition skipped" containerID=58536afd68 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1465 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.4 ipv6= k8sPodName=openstack/staffeln-api-794df8888c-gfgp8 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=staffeln;" subsys=allocator level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Identity of endpoint changed" containerID=58536afd68 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1465 identity=28771 identityLabels="k8s:application=staffeln,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.4 ipv6= k8sPodName=openstack/staffeln-api-794df8888c-gfgp8 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=58536afd68 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1465 identity=28771 ipv4=10.0.0.4 ipv6= k8sPodName=openstack/staffeln-api-794df8888c-gfgp8 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:component=conductor;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=cd2599dbe7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=717 identity=13085 identityLabels="k8s:application=staffeln,k8s:component=conductor,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.254 ipv6= k8sPodName=openstack/staffeln-conductor-6b78687d4-v8w5h oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=cd2599dbe7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=717 identity=13085 ipv4=10.0.0.254 ipv6= k8sPodName=openstack/staffeln-conductor-6b78687d4-v8w5h subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.78 ddc5ac88-e14a-4043-81ff-da114c09eaf1 default }" containerID=b34cc722d3b0d61d02197f70ab151d725750ff29c6d5a9d073d4f9b4f1995513 datapathConfiguration="&{false false false false false }" interface=lxc575551551ba4 k8sPodName=openstack/staffeln-db-init-rtq9d labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b34cc722d3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2940 ipv4=10.0.0.78 ipv6= k8sPodName=openstack/staffeln-db-init-rtq9d subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b34cc722d3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2940 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=874dee54-2423-425e-9846-99d2d51975e3,k8s:batch.kubernetes.io/job-name=staffeln-db-init,k8s:component=db-init,k8s:controller-uid=874dee54-2423-425e-9846-99d2d51975e3,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-init,k8s:release_group=staffeln" ipv4=10.0.0.78 ipv6= k8sPodName=openstack/staffeln-db-init-rtq9d subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:batch.kubernetes.io/controller-uid=874dee54-2423-425e-9846-99d2d51975e3;k8s:batch.kubernetes.io/job-name=staffeln-db-init;k8s:component=db-init;k8s:controller-uid=874dee54-2423-425e-9846-99d2d51975e3;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=staffeln-db-init;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b34cc722d3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2940 identity=8142 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=874dee54-2423-425e-9846-99d2d51975e3,k8s:batch.kubernetes.io/job-name=staffeln-db-init,k8s:component=db-init,k8s:controller-uid=874dee54-2423-425e-9846-99d2d51975e3,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-init,k8s:release_group=staffeln" ipv4=10.0.0.78 ipv6= k8sPodName=openstack/staffeln-db-init-rtq9d oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b34cc722d3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2940 identity=8142 ipv4=10.0.0.78 ipv6= k8sPodName=openstack/staffeln-db-init-rtq9d subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=cd2599dbe7 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=717 identity=13085 ipv4=10.0.0.254 ipv6= k8sPodName=openstack/staffeln-conductor-6b78687d4-v8w5h subsys=endpoint level=info msg="Successful endpoint creation" containerID=cd2599dbe7 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=717 identity=13085 ipv4=10.0.0.254 ipv6= k8sPodName=openstack/staffeln-conductor-6b78687d4-v8w5h subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=58536afd68 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1465 identity=28771 ipv4=10.0.0.4 ipv6= k8sPodName=openstack/staffeln-api-794df8888c-gfgp8 subsys=endpoint level=info msg="Successful endpoint creation" containerID=58536afd68 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1465 identity=28771 ipv4=10.0.0.4 ipv6= k8sPodName=openstack/staffeln-api-794df8888c-gfgp8 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=b34cc722d3 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2940 identity=8142 ipv4=10.0.0.78 ipv6= k8sPodName=openstack/staffeln-db-init-rtq9d subsys=endpoint level=info msg="Successful endpoint creation" containerID=b34cc722d3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2940 identity=8142 ipv4=10.0.0.78 ipv6= k8sPodName=openstack/staffeln-db-init-rtq9d subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=b34cc722d3 endpointID=2940 k8sNamespace=openstack k8sPodName=staffeln-db-init-rtq9d subsys=daemon level=info msg="Releasing key" key="[k8s:application=staffeln k8s:batch.kubernetes.io/controller-uid=874dee54-2423-425e-9846-99d2d51975e3 k8s:batch.kubernetes.io/job-name=staffeln-db-init k8s:component=db-init k8s:controller-uid=874dee54-2423-425e-9846-99d2d51975e3 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=staffeln-db-init k8s:release_group=staffeln]" subsys=allocator level=info msg="Removed endpoint" containerID=b34cc722d3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2940 identity=8142 ipv4=10.0.0.78 ipv6= k8sPodName=openstack/staffeln-db-init-rtq9d subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.89 6d0b2b51-bb90-49b2-b833-ac25b66e838b default }" containerID=2fae53580e88af4f34eb148398a80e9e9af14fd7c63142ccfe445c19f71424b5 datapathConfiguration="&{false false false false false }" interface=lxc7e6521983b23 k8sPodName=openstack/staffeln-db-sync-rdzls labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2fae53580e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1043 ipv4=10.0.0.89 ipv6= k8sPodName=openstack/staffeln-db-sync-rdzls subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2fae53580e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1043 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=51782bdd-c52f-4e9b-8b15-4c0404d60c0a,k8s:batch.kubernetes.io/job-name=staffeln-db-sync,k8s:component=db-sync,k8s:controller-uid=51782bdd-c52f-4e9b-8b15-4c0404d60c0a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-sync,k8s:release_group=staffeln" ipv4=10.0.0.89 ipv6= k8sPodName=openstack/staffeln-db-sync-rdzls subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:batch.kubernetes.io/controller-uid=51782bdd-c52f-4e9b-8b15-4c0404d60c0a;k8s:batch.kubernetes.io/job-name=staffeln-db-sync;k8s:component=db-sync;k8s:controller-uid=51782bdd-c52f-4e9b-8b15-4c0404d60c0a;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=staffeln-db-sync;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2fae53580e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1043 identity=38801 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=51782bdd-c52f-4e9b-8b15-4c0404d60c0a,k8s:batch.kubernetes.io/job-name=staffeln-db-sync,k8s:component=db-sync,k8s:controller-uid=51782bdd-c52f-4e9b-8b15-4c0404d60c0a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-sync,k8s:release_group=staffeln" ipv4=10.0.0.89 ipv6= k8sPodName=openstack/staffeln-db-sync-rdzls oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2fae53580e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1043 identity=38801 ipv4=10.0.0.89 ipv6= k8sPodName=openstack/staffeln-db-sync-rdzls subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=2fae53580e datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1043 identity=38801 ipv4=10.0.0.89 ipv6= k8sPodName=openstack/staffeln-db-sync-rdzls subsys=endpoint level=info msg="Successful endpoint creation" containerID=2fae53580e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1043 identity=38801 ipv4=10.0.0.89 ipv6= k8sPodName=openstack/staffeln-db-sync-rdzls subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=2fae53580e endpointID=1043 k8sNamespace=openstack k8sPodName=staffeln-db-sync-rdzls subsys=daemon level=info msg="Releasing key" key="[k8s:application=staffeln k8s:batch.kubernetes.io/controller-uid=51782bdd-c52f-4e9b-8b15-4c0404d60c0a k8s:batch.kubernetes.io/job-name=staffeln-db-sync k8s:component=db-sync k8s:controller-uid=51782bdd-c52f-4e9b-8b15-4c0404d60c0a k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=staffeln-db-sync k8s:release_group=staffeln]" subsys=allocator level=info msg="Removed endpoint" containerID=2fae53580e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1043 identity=38801 ipv4=10.0.0.89 ipv6= k8sPodName=openstack/staffeln-db-sync-rdzls subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.151 f3af0a2d-f00d-4c52-a8ee-e46e5c60c739 default }" containerID=247b47c18ad315c1f0a896524f9904c943b2866e773dac3c5a127693b4450d80 datapathConfiguration="&{false false false false false }" interface=lxc58d983e1e034 k8sPodName=local-path-storage/helper-pod-create-pvc-2f6aa47c-9f3c-4c67-8819-c414a92e986f labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=247b47c18a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=349 ipv4=10.0.0.151 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-2f6aa47c-9f3c-4c67-8819-c414a92e986f subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=247b47c18a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=349 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.151 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-2f6aa47c-9f3c-4c67-8819-c414a92e986f subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=247b47c18a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=349 identity=2052 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.151 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-2f6aa47c-9f3c-4c67-8819-c414a92e986f oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=247b47c18a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=349 identity=2052 ipv4=10.0.0.151 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-2f6aa47c-9f3c-4c67-8819-c414a92e986f subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=247b47c18a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=349 identity=2052 ipv4=10.0.0.151 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-2f6aa47c-9f3c-4c67-8819-c414a92e986f subsys=endpoint level=info msg="Successful endpoint creation" containerID=247b47c18a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=349 identity=2052 ipv4=10.0.0.151 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-2f6aa47c-9f3c-4c67-8819-c414a92e986f subsys=daemon level=info msg="Delete endpoint request" containerID=247b47c18a endpointID=349 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-2f6aa47c-9f3c-4c67-8819-c414a92e986f subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=247b47c18a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=349 identity=2052 ipv4=10.0.0.151 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-2f6aa47c-9f3c-4c67-8819-c414a92e986f subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.152 8e07fefa-064c-4873-b697-a0f858bcae7c default }" containerID=298837edaf3975aad2daf3a002bce2951f2c5c6b8ad4929dfae2facb2e7e3252 datapathConfiguration="&{false false false false false }" interface=lxc93138b308ddf k8sPodName=openstack/rabbitmq-cinder-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=298837edaf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1056 ipv4=10.0.0.152 ipv6= k8sPodName=openstack/rabbitmq-cinder-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=298837edaf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1056 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-cinder,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cinder-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-cinder-server-0" ipv4=10.0.0.152 ipv6= k8sPodName=openstack/rabbitmq-cinder-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=298837edaf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1056 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.152 ipv6= k8sPodName=openstack/rabbitmq-cinder-server-0 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-cinder;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cinder-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-cinder-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=298837edaf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1056 identity=32010 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-cinder,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cinder-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-cinder-server-0" ipv4=10.0.0.152 ipv6= k8sPodName=openstack/rabbitmq-cinder-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=298837edaf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1056 identity=32010 ipv4=10.0.0.152 ipv6= k8sPodName=openstack/rabbitmq-cinder-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=298837edaf datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1056 identity=32010 ipv4=10.0.0.152 ipv6= k8sPodName=openstack/rabbitmq-cinder-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=298837edaf datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1056 identity=32010 ipv4=10.0.0.152 ipv6= k8sPodName=openstack/rabbitmq-cinder-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.236 4a6688e9-e08c-4e91-b41e-ecdf00ca2e12 default }" containerID=133d6a39470bfd1bc3468b3138ee6b57898d8a0a7f11996b5f6d7c2c5827c469 datapathConfiguration="&{false false false false false }" interface=lxcba097c6028a2 k8sPodName=openstack/cinder-api-5544d7d54c-t69fn labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=133d6a3947 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=220 ipv4=10.0.0.236 ipv6= k8sPodName=openstack/cinder-api-5544d7d54c-t69fn subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=133d6a3947 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=220 identityLabels="k8s:application=cinder,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=cinder" ipv4=10.0.0.236 ipv6= k8sPodName=openstack/cinder-api-5544d7d54c-t69fn subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=133d6a3947 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=220 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.236 ipv6= k8sPodName=openstack/cinder-api-5544d7d54c-t69fn line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=133d6a3947 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=220 identity=7244 identityLabels="k8s:application=cinder,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=cinder" ipv4=10.0.0.236 ipv6= k8sPodName=openstack/cinder-api-5544d7d54c-t69fn oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=133d6a3947 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=220 identity=7244 ipv4=10.0.0.236 ipv6= k8sPodName=openstack/cinder-api-5544d7d54c-t69fn subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.209 7efd9498-b409-4bc9-8a46-3163f233a0b4 default }" containerID=016274e40431c57ea6261e4afb441b44e2278b6c5150499bd301d34cd51893dc datapathConfiguration="&{false false false false false }" interface=lxcfd08e4fcc793 k8sPodName=openstack/cinder-scheduler-7c78f774f8-h9k45 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=016274e404 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1251 ipv4=10.0.0.209 ipv6= k8sPodName=openstack/cinder-scheduler-7c78f774f8-h9k45 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=016274e404 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1251 identityLabels="k8s:application=cinder,k8s:component=scheduler,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-scheduler,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=cinder" ipv4=10.0.0.209 ipv6= k8sPodName=openstack/cinder-scheduler-7c78f774f8-h9k45 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:component=scheduler;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-scheduler;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=016274e404 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1251 identity=39844 identityLabels="k8s:application=cinder,k8s:component=scheduler,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-scheduler,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=cinder" ipv4=10.0.0.209 ipv6= k8sPodName=openstack/cinder-scheduler-7c78f774f8-h9k45 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=016274e404 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1251 identity=39844 ipv4=10.0.0.209 ipv6= k8sPodName=openstack/cinder-scheduler-7c78f774f8-h9k45 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=133d6a3947 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=220 identity=7244 ipv4=10.0.0.236 ipv6= k8sPodName=openstack/cinder-api-5544d7d54c-t69fn subsys=endpoint level=info msg="Successful endpoint creation" containerID=133d6a3947 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=220 identity=7244 ipv4=10.0.0.236 ipv6= k8sPodName=openstack/cinder-api-5544d7d54c-t69fn subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.226 7d604373-2e20-48c1-a43b-4f7e8e34c0a3 default }" containerID=f6d387804a7fb7ead249786649ce9c844c4611da274d72cde4919ddc9586d5f6 datapathConfiguration="&{false false false false false }" interface=lxc5c691e06e150 k8sPodName=openstack/cinder-db-init-bp4ls labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f6d387804a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=407 ipv4=10.0.0.226 ipv6= k8sPodName=openstack/cinder-db-init-bp4ls subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f6d387804a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=407 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=0545cdec-b820-4b14-b751-3992ae6b35ee,k8s:batch.kubernetes.io/job-name=cinder-db-init,k8s:component=db-init,k8s:controller-uid=0545cdec-b820-4b14-b751-3992ae6b35ee,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-db-init,k8s:release_group=cinder" ipv4=10.0.0.226 ipv6= k8sPodName=openstack/cinder-db-init-bp4ls subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=0545cdec-b820-4b14-b751-3992ae6b35ee;k8s:batch.kubernetes.io/job-name=cinder-db-init;k8s:component=db-init;k8s:controller-uid=0545cdec-b820-4b14-b751-3992ae6b35ee;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-db-init;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f6d387804a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=407 identity=12159 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=0545cdec-b820-4b14-b751-3992ae6b35ee,k8s:batch.kubernetes.io/job-name=cinder-db-init,k8s:component=db-init,k8s:controller-uid=0545cdec-b820-4b14-b751-3992ae6b35ee,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-db-init,k8s:release_group=cinder" ipv4=10.0.0.226 ipv6= k8sPodName=openstack/cinder-db-init-bp4ls oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f6d387804a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=407 identity=12159 ipv4=10.0.0.226 ipv6= k8sPodName=openstack/cinder-db-init-bp4ls subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=016274e404 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1251 identity=39844 ipv4=10.0.0.209 ipv6= k8sPodName=openstack/cinder-scheduler-7c78f774f8-h9k45 subsys=endpoint level=info msg="Successful endpoint creation" containerID=016274e404 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1251 identity=39844 ipv4=10.0.0.209 ipv6= k8sPodName=openstack/cinder-scheduler-7c78f774f8-h9k45 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=f6d387804a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=407 identity=12159 ipv4=10.0.0.226 ipv6= k8sPodName=openstack/cinder-db-init-bp4ls subsys=endpoint level=info msg="Successful endpoint creation" containerID=f6d387804a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=407 identity=12159 ipv4=10.0.0.226 ipv6= k8sPodName=openstack/cinder-db-init-bp4ls subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=f6d387804a endpointID=407 k8sNamespace=openstack k8sPodName=cinder-db-init-bp4ls subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=0545cdec-b820-4b14-b751-3992ae6b35ee k8s:batch.kubernetes.io/job-name=cinder-db-init k8s:component=db-init k8s:controller-uid=0545cdec-b820-4b14-b751-3992ae6b35ee k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-db-init k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=f6d387804a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=407 identity=12159 ipv4=10.0.0.226 ipv6= k8sPodName=openstack/cinder-db-init-bp4ls subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.245 24b4c3d9-25f9-49f0-93d7-12ad4066bc37 default }" containerID=fa7dd2879d38de3f0701be2d53e238a45fe671cad7ea9d30c87103c2a825f907 datapathConfiguration="&{false false false false false }" interface=lxc82374a8f749e k8sPodName=openstack/cinder-db-sync-f7sqf labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=fa7dd2879d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1031 ipv4=10.0.0.245 ipv6= k8sPodName=openstack/cinder-db-sync-f7sqf subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=fa7dd2879d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1031 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=1369008b-5539-4244-8113-0e1c0b3cffd2,k8s:batch.kubernetes.io/job-name=cinder-db-sync,k8s:component=db-sync,k8s:controller-uid=1369008b-5539-4244-8113-0e1c0b3cffd2,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-db-sync,k8s:release_group=cinder" ipv4=10.0.0.245 ipv6= k8sPodName=openstack/cinder-db-sync-f7sqf subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=1369008b-5539-4244-8113-0e1c0b3cffd2;k8s:batch.kubernetes.io/job-name=cinder-db-sync;k8s:component=db-sync;k8s:controller-uid=1369008b-5539-4244-8113-0e1c0b3cffd2;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-db-sync;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=fa7dd2879d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1031 identity=54031 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=1369008b-5539-4244-8113-0e1c0b3cffd2,k8s:batch.kubernetes.io/job-name=cinder-db-sync,k8s:component=db-sync,k8s:controller-uid=1369008b-5539-4244-8113-0e1c0b3cffd2,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-db-sync,k8s:release_group=cinder" ipv4=10.0.0.245 ipv6= k8sPodName=openstack/cinder-db-sync-f7sqf oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=fa7dd2879d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1031 identity=54031 ipv4=10.0.0.245 ipv6= k8sPodName=openstack/cinder-db-sync-f7sqf subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=fa7dd2879d datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1031 identity=54031 ipv4=10.0.0.245 ipv6= k8sPodName=openstack/cinder-db-sync-f7sqf subsys=endpoint level=info msg="Successful endpoint creation" containerID=fa7dd2879d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1031 identity=54031 ipv4=10.0.0.245 ipv6= k8sPodName=openstack/cinder-db-sync-f7sqf subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=fa7dd2879d endpointID=1031 k8sNamespace=openstack k8sPodName=cinder-db-sync-f7sqf subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=1369008b-5539-4244-8113-0e1c0b3cffd2 k8s:batch.kubernetes.io/job-name=cinder-db-sync k8s:component=db-sync k8s:controller-uid=1369008b-5539-4244-8113-0e1c0b3cffd2 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-db-sync k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=fa7dd2879d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1031 identity=54031 ipv4=10.0.0.245 ipv6= k8sPodName=openstack/cinder-db-sync-f7sqf subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.18 3b1aaa9b-d2ab-45c3-91d3-81058232bf14 default }" containerID=a4de02364f591c49f17323c70f1b00079bacf618dd92f5aaf8d4cba869da0069 datapathConfiguration="&{false false false false false }" interface=lxcb75e59217b13 k8sPodName=openstack/cinder-rabbit-init-glx77 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a4de02364f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3999 ipv4=10.0.0.18 ipv6= k8sPodName=openstack/cinder-rabbit-init-glx77 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a4de02364f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3999 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=80e62ad7-d0f9-477b-b77c-406f06a26d2e,k8s:batch.kubernetes.io/job-name=cinder-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=80e62ad7-d0f9-477b-b77c-406f06a26d2e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-rabbit-init,k8s:release_group=cinder" ipv4=10.0.0.18 ipv6= k8sPodName=openstack/cinder-rabbit-init-glx77 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=80e62ad7-d0f9-477b-b77c-406f06a26d2e;k8s:batch.kubernetes.io/job-name=cinder-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=80e62ad7-d0f9-477b-b77c-406f06a26d2e;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-rabbit-init;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a4de02364f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3999 identity=33694 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=80e62ad7-d0f9-477b-b77c-406f06a26d2e,k8s:batch.kubernetes.io/job-name=cinder-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=80e62ad7-d0f9-477b-b77c-406f06a26d2e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-rabbit-init,k8s:release_group=cinder" ipv4=10.0.0.18 ipv6= k8sPodName=openstack/cinder-rabbit-init-glx77 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a4de02364f datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3999 identity=33694 ipv4=10.0.0.18 ipv6= k8sPodName=openstack/cinder-rabbit-init-glx77 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a4de02364f datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3999 identity=33694 ipv4=10.0.0.18 ipv6= k8sPodName=openstack/cinder-rabbit-init-glx77 subsys=endpoint level=info msg="Successful endpoint creation" containerID=a4de02364f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3999 identity=33694 ipv4=10.0.0.18 ipv6= k8sPodName=openstack/cinder-rabbit-init-glx77 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=a4de02364f endpointID=3999 k8sNamespace=openstack k8sPodName=cinder-rabbit-init-glx77 subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=80e62ad7-d0f9-477b-b77c-406f06a26d2e k8s:batch.kubernetes.io/job-name=cinder-rabbit-init k8s:component=rabbit-init k8s:controller-uid=80e62ad7-d0f9-477b-b77c-406f06a26d2e k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-rabbit-init k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=a4de02364f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3999 identity=33694 ipv4=10.0.0.18 ipv6= k8sPodName=openstack/cinder-rabbit-init-glx77 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.173 bc47ae4c-9a51-4ff5-806d-237a5726e180 default }" containerID=32a307bbc22bea4142e55931f9558bbd08206018da19b101cc171a34ff1edb33 datapathConfiguration="&{false false false false false }" interface=lxc3f3c2883ea44 k8sPodName=openstack/cinder-ks-service-4n4ng labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=32a307bbc2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1937 ipv4=10.0.0.173 ipv6= k8sPodName=openstack/cinder-ks-service-4n4ng subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=32a307bbc2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1937 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=9c0e9013-e748-441b-b236-77973f528687,k8s:batch.kubernetes.io/job-name=cinder-ks-service,k8s:component=ks-service,k8s:controller-uid=9c0e9013-e748-441b-b236-77973f528687,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-ks-service,k8s:release_group=cinder" ipv4=10.0.0.173 ipv6= k8sPodName=openstack/cinder-ks-service-4n4ng subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=9c0e9013-e748-441b-b236-77973f528687;k8s:batch.kubernetes.io/job-name=cinder-ks-service;k8s:component=ks-service;k8s:controller-uid=9c0e9013-e748-441b-b236-77973f528687;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-ks-service;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=32a307bbc2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1937 identity=19745 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=9c0e9013-e748-441b-b236-77973f528687,k8s:batch.kubernetes.io/job-name=cinder-ks-service,k8s:component=ks-service,k8s:controller-uid=9c0e9013-e748-441b-b236-77973f528687,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-ks-service,k8s:release_group=cinder" ipv4=10.0.0.173 ipv6= k8sPodName=openstack/cinder-ks-service-4n4ng oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=32a307bbc2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1937 identity=19745 ipv4=10.0.0.173 ipv6= k8sPodName=openstack/cinder-ks-service-4n4ng subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=32a307bbc2 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1937 identity=19745 ipv4=10.0.0.173 ipv6= k8sPodName=openstack/cinder-ks-service-4n4ng subsys=endpoint level=info msg="Successful endpoint creation" containerID=32a307bbc2 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1937 identity=19745 ipv4=10.0.0.173 ipv6= k8sPodName=openstack/cinder-ks-service-4n4ng subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=32a307bbc2 endpointID=1937 k8sNamespace=openstack k8sPodName=cinder-ks-service-4n4ng subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=9c0e9013-e748-441b-b236-77973f528687 k8s:batch.kubernetes.io/job-name=cinder-ks-service k8s:component=ks-service k8s:controller-uid=9c0e9013-e748-441b-b236-77973f528687 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-ks-service k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=32a307bbc2 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1937 identity=19745 ipv4=10.0.0.173 ipv6= k8sPodName=openstack/cinder-ks-service-4n4ng subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.189 a74bd320-36d8-4857-ba8e-a1fb72303400 default }" containerID=4d9e6d50c6232ca8f6b40b4cb08781159645ee8ebfc6399460d987cb1c9bc342 datapathConfiguration="&{false false false false false }" interface=lxcf47c73a8ff1c k8sPodName=openstack/cinder-ks-endpoints-qjx8k labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4d9e6d50c6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2186 ipv4=10.0.0.189 ipv6= k8sPodName=openstack/cinder-ks-endpoints-qjx8k subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4d9e6d50c6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2186 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=9477c216-2178-4569-a8b1-3c0acf11e6a2,k8s:batch.kubernetes.io/job-name=cinder-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=9477c216-2178-4569-a8b1-3c0acf11e6a2,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-ks-endpoints,k8s:release_group=cinder" ipv4=10.0.0.189 ipv6= k8sPodName=openstack/cinder-ks-endpoints-qjx8k subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=4d9e6d50c6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2186 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.189 ipv6= k8sPodName=openstack/cinder-ks-endpoints-qjx8k line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=9477c216-2178-4569-a8b1-3c0acf11e6a2;k8s:batch.kubernetes.io/job-name=cinder-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=9477c216-2178-4569-a8b1-3c0acf11e6a2;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-ks-endpoints;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4d9e6d50c6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2186 identity=2365 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=9477c216-2178-4569-a8b1-3c0acf11e6a2,k8s:batch.kubernetes.io/job-name=cinder-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=9477c216-2178-4569-a8b1-3c0acf11e6a2,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-ks-endpoints,k8s:release_group=cinder" ipv4=10.0.0.189 ipv6= k8sPodName=openstack/cinder-ks-endpoints-qjx8k oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4d9e6d50c6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2186 identity=2365 ipv4=10.0.0.189 ipv6= k8sPodName=openstack/cinder-ks-endpoints-qjx8k subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=4d9e6d50c6 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2186 identity=2365 ipv4=10.0.0.189 ipv6= k8sPodName=openstack/cinder-ks-endpoints-qjx8k subsys=endpoint level=info msg="Successful endpoint creation" containerID=4d9e6d50c6 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2186 identity=2365 ipv4=10.0.0.189 ipv6= k8sPodName=openstack/cinder-ks-endpoints-qjx8k subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=4d9e6d50c6 endpointID=2186 k8sNamespace=openstack k8sPodName=cinder-ks-endpoints-qjx8k subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=9477c216-2178-4569-a8b1-3c0acf11e6a2 k8s:batch.kubernetes.io/job-name=cinder-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=9477c216-2178-4569-a8b1-3c0acf11e6a2 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-ks-endpoints k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=4d9e6d50c6 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2186 identity=2365 ipv4=10.0.0.189 ipv6= k8sPodName=openstack/cinder-ks-endpoints-qjx8k subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.51 b704199b-e810-492d-a70a-72d39702f6a6 default }" containerID=24262268dbcc89643bf1f0133f081d9c451b2b757fbb6ddff065419b333da762 datapathConfiguration="&{false false false false false }" interface=lxced0e69ad377b k8sPodName=openstack/cinder-ks-user-6w86d labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=24262268db datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1103 ipv4=10.0.0.51 ipv6= k8sPodName=openstack/cinder-ks-user-6w86d subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=24262268db datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1103 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=f410a337-ec83-4f9e-8f8b-a79b1d27c499,k8s:batch.kubernetes.io/job-name=cinder-ks-user,k8s:component=ks-user,k8s:controller-uid=f410a337-ec83-4f9e-8f8b-a79b1d27c499,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-ks-user,k8s:release_group=cinder" ipv4=10.0.0.51 ipv6= k8sPodName=openstack/cinder-ks-user-6w86d subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=f410a337-ec83-4f9e-8f8b-a79b1d27c499;k8s:batch.kubernetes.io/job-name=cinder-ks-user;k8s:component=ks-user;k8s:controller-uid=f410a337-ec83-4f9e-8f8b-a79b1d27c499;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-ks-user;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=24262268db datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1103 identity=2186 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=f410a337-ec83-4f9e-8f8b-a79b1d27c499,k8s:batch.kubernetes.io/job-name=cinder-ks-user,k8s:component=ks-user,k8s:controller-uid=f410a337-ec83-4f9e-8f8b-a79b1d27c499,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-ks-user,k8s:release_group=cinder" ipv4=10.0.0.51 ipv6= k8sPodName=openstack/cinder-ks-user-6w86d oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=24262268db datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1103 identity=2186 ipv4=10.0.0.51 ipv6= k8sPodName=openstack/cinder-ks-user-6w86d subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=24262268db datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1103 identity=2186 ipv4=10.0.0.51 ipv6= k8sPodName=openstack/cinder-ks-user-6w86d subsys=endpoint level=info msg="Successful endpoint creation" containerID=24262268db datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1103 identity=2186 ipv4=10.0.0.51 ipv6= k8sPodName=openstack/cinder-ks-user-6w86d subsys=daemon level=info msg="Delete endpoint request" containerID=24262268db endpointID=1103 k8sNamespace=openstack k8sPodName=cinder-ks-user-6w86d subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=f410a337-ec83-4f9e-8f8b-a79b1d27c499 k8s:batch.kubernetes.io/job-name=cinder-ks-user k8s:component=ks-user k8s:controller-uid=f410a337-ec83-4f9e-8f8b-a79b1d27c499 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-ks-user k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=24262268db datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1103 identity=2186 ipv4=10.0.0.51 ipv6= k8sPodName=openstack/cinder-ks-user-6w86d subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.181 a5f0f5cc-a986-40cd-ae45-a4f962c6dafe default }" containerID=78e29b9b2e4cd95e1748e2eb87ff237e94c3c7621fdd9ce1c0e5aec1c0ab971c datapathConfiguration="&{false false false false false }" interface=lxca24e41a5ea5b k8sPodName=openstack/cinder-backup-storage-init-z9nx5 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=78e29b9b2e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=289 ipv4=10.0.0.181 ipv6= k8sPodName=openstack/cinder-backup-storage-init-z9nx5 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=78e29b9b2e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=289 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=ce0e83ea-d4f4-4f39-b9d5-33038a055406,k8s:batch.kubernetes.io/job-name=cinder-backup-storage-init,k8s:component=storage-init,k8s:controller-uid=ce0e83ea-d4f4-4f39-b9d5-33038a055406,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-backup-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-backup-storage-init,k8s:release_group=cinder" ipv4=10.0.0.181 ipv6= k8sPodName=openstack/cinder-backup-storage-init-z9nx5 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=ce0e83ea-d4f4-4f39-b9d5-33038a055406;k8s:batch.kubernetes.io/job-name=cinder-backup-storage-init;k8s:component=storage-init;k8s:controller-uid=ce0e83ea-d4f4-4f39-b9d5-33038a055406;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-backup-storage-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-backup-storage-init;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=78e29b9b2e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=289 identity=28585 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=ce0e83ea-d4f4-4f39-b9d5-33038a055406,k8s:batch.kubernetes.io/job-name=cinder-backup-storage-init,k8s:component=storage-init,k8s:controller-uid=ce0e83ea-d4f4-4f39-b9d5-33038a055406,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-backup-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-backup-storage-init,k8s:release_group=cinder" ipv4=10.0.0.181 ipv6= k8sPodName=openstack/cinder-backup-storage-init-z9nx5 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=78e29b9b2e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=289 identity=28585 ipv4=10.0.0.181 ipv6= k8sPodName=openstack/cinder-backup-storage-init-z9nx5 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=78e29b9b2e datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=289 identity=28585 ipv4=10.0.0.181 ipv6= k8sPodName=openstack/cinder-backup-storage-init-z9nx5 subsys=endpoint level=info msg="Successful endpoint creation" containerID=78e29b9b2e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=289 identity=28585 ipv4=10.0.0.181 ipv6= k8sPodName=openstack/cinder-backup-storage-init-z9nx5 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=78e29b9b2e endpointID=289 k8sNamespace=openstack k8sPodName=cinder-backup-storage-init-z9nx5 subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=ce0e83ea-d4f4-4f39-b9d5-33038a055406 k8s:batch.kubernetes.io/job-name=cinder-backup-storage-init k8s:component=storage-init k8s:controller-uid=ce0e83ea-d4f4-4f39-b9d5-33038a055406 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-backup-storage-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-backup-storage-init k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=78e29b9b2e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=289 identity=28585 ipv4=10.0.0.181 ipv6= k8sPodName=openstack/cinder-backup-storage-init-z9nx5 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.9 9abf15f0-1704-4ad7-85bb-3a0610136413 default }" containerID=e2442274466ab28905559f00d1e01d6d5278a20e4722af2c4695bc0bc4620b42 datapathConfiguration="&{false false false false false }" interface=lxcbe3d12df30e2 k8sPodName=openstack/cinder-create-internal-tenant-zq8lm labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e244227446 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=670 ipv4=10.0.0.9 ipv6= k8sPodName=openstack/cinder-create-internal-tenant-zq8lm subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e244227446 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=670 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=8ac9f8d9-c13e-4e61-b0b7-fbf942592b25,k8s:batch.kubernetes.io/job-name=cinder-create-internal-tenant,k8s:component=create-internal-tenant,k8s:controller-uid=8ac9f8d9-c13e-4e61-b0b7-fbf942592b25,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-create-internal-tenant,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-create-internal-tenant,k8s:release_group=cinder" ipv4=10.0.0.9 ipv6= k8sPodName=openstack/cinder-create-internal-tenant-zq8lm subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=e244227446 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=670 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.9 ipv6= k8sPodName=openstack/cinder-create-internal-tenant-zq8lm line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=8ac9f8d9-c13e-4e61-b0b7-fbf942592b25;k8s:batch.kubernetes.io/job-name=cinder-create-internal-tenant;k8s:component=create-internal-tenant;k8s:controller-uid=8ac9f8d9-c13e-4e61-b0b7-fbf942592b25;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-create-internal-tenant;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-create-internal-tenant;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e244227446 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=670 identity=41173 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=8ac9f8d9-c13e-4e61-b0b7-fbf942592b25,k8s:batch.kubernetes.io/job-name=cinder-create-internal-tenant,k8s:component=create-internal-tenant,k8s:controller-uid=8ac9f8d9-c13e-4e61-b0b7-fbf942592b25,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-create-internal-tenant,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-create-internal-tenant,k8s:release_group=cinder" ipv4=10.0.0.9 ipv6= k8sPodName=openstack/cinder-create-internal-tenant-zq8lm oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e244227446 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=670 identity=41173 ipv4=10.0.0.9 ipv6= k8sPodName=openstack/cinder-create-internal-tenant-zq8lm subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e244227446 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=670 identity=41173 ipv4=10.0.0.9 ipv6= k8sPodName=openstack/cinder-create-internal-tenant-zq8lm subsys=endpoint level=info msg="Successful endpoint creation" containerID=e244227446 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=670 identity=41173 ipv4=10.0.0.9 ipv6= k8sPodName=openstack/cinder-create-internal-tenant-zq8lm subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=e244227446 endpointID=670 k8sNamespace=openstack k8sPodName=cinder-create-internal-tenant-zq8lm subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=8ac9f8d9-c13e-4e61-b0b7-fbf942592b25 k8s:batch.kubernetes.io/job-name=cinder-create-internal-tenant k8s:component=create-internal-tenant k8s:controller-uid=8ac9f8d9-c13e-4e61-b0b7-fbf942592b25 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-create-internal-tenant k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-create-internal-tenant k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=e244227446 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=670 identity=41173 ipv4=10.0.0.9 ipv6= k8sPodName=openstack/cinder-create-internal-tenant-zq8lm subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.123 f3a4c611-eec2-4ea6-9b8d-ea9c84cfb452 default }" containerID=410215fed7a5482a7f3529e228176187678e6331d91d6c7b19b648afea356f69 datapathConfiguration="&{false false false false false }" interface=lxc737e5dc52470 k8sPodName=openstack/cinder-storage-init-2f8lx labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=410215fed7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1145 ipv4=10.0.0.123 ipv6= k8sPodName=openstack/cinder-storage-init-2f8lx subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=410215fed7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1145 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=085b4382-f40d-4a4f-a250-1df57889afd1,k8s:batch.kubernetes.io/job-name=cinder-storage-init,k8s:component=storage-init,k8s:controller-uid=085b4382-f40d-4a4f-a250-1df57889afd1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-storage-init,k8s:release_group=cinder" ipv4=10.0.0.123 ipv6= k8sPodName=openstack/cinder-storage-init-2f8lx subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=085b4382-f40d-4a4f-a250-1df57889afd1;k8s:batch.kubernetes.io/job-name=cinder-storage-init;k8s:component=storage-init;k8s:controller-uid=085b4382-f40d-4a4f-a250-1df57889afd1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-storage-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-storage-init;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=410215fed7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1145 identity=27114 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=085b4382-f40d-4a4f-a250-1df57889afd1,k8s:batch.kubernetes.io/job-name=cinder-storage-init,k8s:component=storage-init,k8s:controller-uid=085b4382-f40d-4a4f-a250-1df57889afd1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-storage-init,k8s:release_group=cinder" ipv4=10.0.0.123 ipv6= k8sPodName=openstack/cinder-storage-init-2f8lx oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=410215fed7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1145 identity=27114 ipv4=10.0.0.123 ipv6= k8sPodName=openstack/cinder-storage-init-2f8lx subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=410215fed7 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1145 identity=27114 ipv4=10.0.0.123 ipv6= k8sPodName=openstack/cinder-storage-init-2f8lx subsys=endpoint level=info msg="Successful endpoint creation" containerID=410215fed7 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1145 identity=27114 ipv4=10.0.0.123 ipv6= k8sPodName=openstack/cinder-storage-init-2f8lx subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=410215fed7 endpointID=1145 k8sNamespace=openstack k8sPodName=cinder-storage-init-2f8lx subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=085b4382-f40d-4a4f-a250-1df57889afd1 k8s:batch.kubernetes.io/job-name=cinder-storage-init k8s:component=storage-init k8s:controller-uid=085b4382-f40d-4a4f-a250-1df57889afd1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-storage-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-storage-init k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=410215fed7 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1145 identity=27114 ipv4=10.0.0.123 ipv6= k8sPodName=openstack/cinder-storage-init-2f8lx subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.74 0408647e-7a43-4544-8528-393721a8183a default }" containerID=720a0bf63e75c7500e419b98c8c26344ca796aa3512944f30ff4d552ecb3684e datapathConfiguration="&{false false false false false }" interface=lxceac7d2669631 k8sPodName=openstack/cinder-bootstrap-78tz4 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=720a0bf63e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1884 ipv4=10.0.0.74 ipv6= k8sPodName=openstack/cinder-bootstrap-78tz4 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=720a0bf63e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1884 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=9012fb97-9dda-411f-b796-3e2be97f2274,k8s:batch.kubernetes.io/job-name=cinder-bootstrap,k8s:component=bootstrap,k8s:controller-uid=9012fb97-9dda-411f-b796-3e2be97f2274,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-bootstrap,k8s:release_group=cinder" ipv4=10.0.0.74 ipv6= k8sPodName=openstack/cinder-bootstrap-78tz4 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=9012fb97-9dda-411f-b796-3e2be97f2274;k8s:batch.kubernetes.io/job-name=cinder-bootstrap;k8s:component=bootstrap;k8s:controller-uid=9012fb97-9dda-411f-b796-3e2be97f2274;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-bootstrap;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-bootstrap;k8s:release_group=cinder;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=720a0bf63e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1884 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.74 ipv6= k8sPodName=openstack/cinder-bootstrap-78tz4 line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=720a0bf63e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1884 identity=55698 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=9012fb97-9dda-411f-b796-3e2be97f2274,k8s:batch.kubernetes.io/job-name=cinder-bootstrap,k8s:component=bootstrap,k8s:controller-uid=9012fb97-9dda-411f-b796-3e2be97f2274,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-bootstrap,k8s:release_group=cinder" ipv4=10.0.0.74 ipv6= k8sPodName=openstack/cinder-bootstrap-78tz4 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=720a0bf63e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1884 identity=55698 ipv4=10.0.0.74 ipv6= k8sPodName=openstack/cinder-bootstrap-78tz4 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=720a0bf63e datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1884 identity=55698 ipv4=10.0.0.74 ipv6= k8sPodName=openstack/cinder-bootstrap-78tz4 subsys=endpoint level=info msg="Successful endpoint creation" containerID=720a0bf63e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1884 identity=55698 ipv4=10.0.0.74 ipv6= k8sPodName=openstack/cinder-bootstrap-78tz4 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.9 f81d446c-d47e-41d3-9049-f11201933e3b default }" containerID=fd82c66cf790727d1369ce04015712c266ac25f851c5af23bfca3fb33cdb377d datapathConfiguration="&{false false false false false }" interface=lxccf0a689652da k8sPodName=openstack/cinder-backup-fc48cfd84-2p6s7 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=fd82c66cf7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3488 ipv4=10.0.0.9 ipv6= k8sPodName=openstack/cinder-backup-fc48cfd84-2p6s7 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=fd82c66cf7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3488 identityLabels="k8s:application=cinder,k8s:component=backup,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-backup,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=cinder" ipv4=10.0.0.9 ipv6= k8sPodName=openstack/cinder-backup-fc48cfd84-2p6s7 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:component=backup;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-backup;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=fd82c66cf7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3488 identity=14570 identityLabels="k8s:application=cinder,k8s:component=backup,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-backup,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=cinder" ipv4=10.0.0.9 ipv6= k8sPodName=openstack/cinder-backup-fc48cfd84-2p6s7 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=fd82c66cf7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3488 identity=14570 ipv4=10.0.0.9 ipv6= k8sPodName=openstack/cinder-backup-fc48cfd84-2p6s7 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.148 5a3bf6ac-8b39-4929-b843-dee80b46095e default }" containerID=8a6b9488e25b00d1ca5501a324b7677cdde306d404ca31210e6014a8b03293fe datapathConfiguration="&{false false false false false }" interface=lxcb805b8dbc6d2 k8sPodName=openstack/cinder-volume-f9b7bb94f-987tr labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8a6b9488e2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2757 ipv4=10.0.0.148 ipv6= k8sPodName=openstack/cinder-volume-f9b7bb94f-987tr subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8a6b9488e2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2757 identityLabels="k8s:application=cinder,k8s:component=volume,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-volume,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=cinder" ipv4=10.0.0.148 ipv6= k8sPodName=openstack/cinder-volume-f9b7bb94f-987tr subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:component=volume;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-volume;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8a6b9488e2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2757 identity=4866 identityLabels="k8s:application=cinder,k8s:component=volume,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-volume,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=cinder" ipv4=10.0.0.148 ipv6= k8sPodName=openstack/cinder-volume-f9b7bb94f-987tr oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8a6b9488e2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2757 identity=4866 ipv4=10.0.0.148 ipv6= k8sPodName=openstack/cinder-volume-f9b7bb94f-987tr subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=fd82c66cf7 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3488 identity=14570 ipv4=10.0.0.9 ipv6= k8sPodName=openstack/cinder-backup-fc48cfd84-2p6s7 subsys=endpoint level=info msg="Successful endpoint creation" containerID=fd82c66cf7 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3488 identity=14570 ipv4=10.0.0.9 ipv6= k8sPodName=openstack/cinder-backup-fc48cfd84-2p6s7 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=8a6b9488e2 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2757 identity=4866 ipv4=10.0.0.148 ipv6= k8sPodName=openstack/cinder-volume-f9b7bb94f-987tr subsys=endpoint level=info msg="Successful endpoint creation" containerID=8a6b9488e2 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2757 identity=4866 ipv4=10.0.0.148 ipv6= k8sPodName=openstack/cinder-volume-f9b7bb94f-987tr subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=720a0bf63e endpointID=1884 k8sNamespace=openstack k8sPodName=cinder-bootstrap-78tz4 subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=9012fb97-9dda-411f-b796-3e2be97f2274 k8s:batch.kubernetes.io/job-name=cinder-bootstrap k8s:component=bootstrap k8s:controller-uid=9012fb97-9dda-411f-b796-3e2be97f2274 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-bootstrap k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-bootstrap k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=720a0bf63e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1884 identity=55698 ipv4=10.0.0.74 ipv6= k8sPodName=openstack/cinder-bootstrap-78tz4 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.230 15d2fa62-9315-4963-8edb-de07035a349e default }" containerID=8b54f936625896845aa43417ae3dee9cf10af9612a169fe19cf99ac31ad3c481 datapathConfiguration="&{false false false false false }" interface=lxcb5985141830c k8sPodName=openstack/placement-api-75b58f8789-ct9vh labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8b54f93662 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1077 ipv4=10.0.0.230 ipv6= k8sPodName=openstack/placement-api-75b58f8789-ct9vh subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8b54f93662 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1077 identityLabels="k8s:application=placement,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=placement" ipv4=10.0.0.230 ipv6= k8sPodName=openstack/placement-api-75b58f8789-ct9vh subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=placement;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=placement-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=placement;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=8b54f93662 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1077 identity=11478 identityLabels="k8s:application=placement,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=placement" ipv4=10.0.0.230 ipv6= k8sPodName=openstack/placement-api-75b58f8789-ct9vh oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8b54f93662 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1077 identity=11478 ipv4=10.0.0.230 ipv6= k8sPodName=openstack/placement-api-75b58f8789-ct9vh subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.20 bb3172f4-ed25-49d6-8124-6d20110f88f9 default }" containerID=dc32f00f79f3731f784c5a7674e02d65ed82a4bbce56e045fef76baf463cb66e datapathConfiguration="&{false false false false false }" interface=lxc4a57730b1121 k8sPodName=openstack/placement-db-init-45zrj labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=dc32f00f79 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3165 ipv4=10.0.0.20 ipv6= k8sPodName=openstack/placement-db-init-45zrj subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=dc32f00f79 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3165 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=b56451bc-b057-404c-b837-78794cefe4dd,k8s:batch.kubernetes.io/job-name=placement-db-init,k8s:component=db-init,k8s:controller-uid=b56451bc-b057-404c-b837-78794cefe4dd,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-db-init,k8s:release_group=placement" ipv4=10.0.0.20 ipv6= k8sPodName=openstack/placement-db-init-45zrj subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=placement;k8s:batch.kubernetes.io/controller-uid=b56451bc-b057-404c-b837-78794cefe4dd;k8s:batch.kubernetes.io/job-name=placement-db-init;k8s:component=db-init;k8s:controller-uid=b56451bc-b057-404c-b837-78794cefe4dd;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=placement-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=placement-db-init;k8s:release_group=placement;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=dc32f00f79 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3165 identity=13222 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=b56451bc-b057-404c-b837-78794cefe4dd,k8s:batch.kubernetes.io/job-name=placement-db-init,k8s:component=db-init,k8s:controller-uid=b56451bc-b057-404c-b837-78794cefe4dd,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-db-init,k8s:release_group=placement" ipv4=10.0.0.20 ipv6= k8sPodName=openstack/placement-db-init-45zrj oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=dc32f00f79 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3165 identity=13222 ipv4=10.0.0.20 ipv6= k8sPodName=openstack/placement-db-init-45zrj subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=8b54f93662 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1077 identity=11478 ipv4=10.0.0.230 ipv6= k8sPodName=openstack/placement-api-75b58f8789-ct9vh subsys=endpoint level=info msg="Successful endpoint creation" containerID=8b54f93662 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1077 identity=11478 ipv4=10.0.0.230 ipv6= k8sPodName=openstack/placement-api-75b58f8789-ct9vh subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=dc32f00f79 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3165 identity=13222 ipv4=10.0.0.20 ipv6= k8sPodName=openstack/placement-db-init-45zrj subsys=endpoint level=info msg="Successful endpoint creation" containerID=dc32f00f79 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3165 identity=13222 ipv4=10.0.0.20 ipv6= k8sPodName=openstack/placement-db-init-45zrj subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=dc32f00f79 endpointID=3165 k8sNamespace=openstack k8sPodName=placement-db-init-45zrj subsys=daemon level=info msg="Releasing key" key="[k8s:application=placement k8s:batch.kubernetes.io/controller-uid=b56451bc-b057-404c-b837-78794cefe4dd k8s:batch.kubernetes.io/job-name=placement-db-init k8s:component=db-init k8s:controller-uid=b56451bc-b057-404c-b837-78794cefe4dd k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=placement-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=placement-db-init k8s:release_group=placement]" subsys=allocator level=info msg="Removed endpoint" containerID=dc32f00f79 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3165 identity=13222 ipv4=10.0.0.20 ipv6= k8sPodName=openstack/placement-db-init-45zrj subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.54 dabd86d2-0b8f-4a53-9fa9-af9e18beaf10 default }" containerID=92f335ff8383319af6673b371cc7dfd8745fd01c9044433015a01171e220107a datapathConfiguration="&{false false false false false }" interface=lxc995280080423 k8sPodName=openstack/placement-db-sync-jlbfz labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=92f335ff83 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1277 ipv4=10.0.0.54 ipv6= k8sPodName=openstack/placement-db-sync-jlbfz subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=92f335ff83 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1277 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=3136c10f-822b-41aa-8c43-8b90ff227caa,k8s:batch.kubernetes.io/job-name=placement-db-sync,k8s:component=db-sync,k8s:controller-uid=3136c10f-822b-41aa-8c43-8b90ff227caa,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-db-sync,k8s:release_group=placement" ipv4=10.0.0.54 ipv6= k8sPodName=openstack/placement-db-sync-jlbfz subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=92f335ff83 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1277 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.54 ipv6= k8sPodName=openstack/placement-db-sync-jlbfz line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=placement;k8s:batch.kubernetes.io/controller-uid=3136c10f-822b-41aa-8c43-8b90ff227caa;k8s:batch.kubernetes.io/job-name=placement-db-sync;k8s:component=db-sync;k8s:controller-uid=3136c10f-822b-41aa-8c43-8b90ff227caa;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=placement-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=placement-db-sync;k8s:release_group=placement;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=92f335ff83 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1277 identity=28840 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=3136c10f-822b-41aa-8c43-8b90ff227caa,k8s:batch.kubernetes.io/job-name=placement-db-sync,k8s:component=db-sync,k8s:controller-uid=3136c10f-822b-41aa-8c43-8b90ff227caa,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-db-sync,k8s:release_group=placement" ipv4=10.0.0.54 ipv6= k8sPodName=openstack/placement-db-sync-jlbfz oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=92f335ff83 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1277 identity=28840 ipv4=10.0.0.54 ipv6= k8sPodName=openstack/placement-db-sync-jlbfz subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=92f335ff83 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1277 identity=28840 ipv4=10.0.0.54 ipv6= k8sPodName=openstack/placement-db-sync-jlbfz subsys=endpoint level=info msg="Successful endpoint creation" containerID=92f335ff83 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1277 identity=28840 ipv4=10.0.0.54 ipv6= k8sPodName=openstack/placement-db-sync-jlbfz subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=92f335ff83 endpointID=1277 k8sNamespace=openstack k8sPodName=placement-db-sync-jlbfz subsys=daemon level=info msg="Releasing key" key="[k8s:application=placement k8s:batch.kubernetes.io/controller-uid=3136c10f-822b-41aa-8c43-8b90ff227caa k8s:batch.kubernetes.io/job-name=placement-db-sync k8s:component=db-sync k8s:controller-uid=3136c10f-822b-41aa-8c43-8b90ff227caa k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=placement-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=placement-db-sync k8s:release_group=placement]" subsys=allocator level=info msg="Removed endpoint" containerID=92f335ff83 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1277 identity=28840 ipv4=10.0.0.54 ipv6= k8sPodName=openstack/placement-db-sync-jlbfz subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.156 19f4a67a-f5c7-4b0d-b246-0568c560b697 default }" containerID=e7d7d806e4039635b78e18b8c631ff3c84b56badcc2ffa40d4e8f3cdda8ba0d8 datapathConfiguration="&{false false false false false }" interface=lxce47cd7079118 k8sPodName=openstack/placement-ks-service-xsmnf labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e7d7d806e4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1357 ipv4=10.0.0.156 ipv6= k8sPodName=openstack/placement-ks-service-xsmnf subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e7d7d806e4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1357 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=230f88f7-49eb-43e7-b736-af60f96c3422,k8s:batch.kubernetes.io/job-name=placement-ks-service,k8s:component=ks-service,k8s:controller-uid=230f88f7-49eb-43e7-b736-af60f96c3422,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-ks-service,k8s:release_group=placement" ipv4=10.0.0.156 ipv6= k8sPodName=openstack/placement-ks-service-xsmnf subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=placement;k8s:batch.kubernetes.io/controller-uid=230f88f7-49eb-43e7-b736-af60f96c3422;k8s:batch.kubernetes.io/job-name=placement-ks-service;k8s:component=ks-service;k8s:controller-uid=230f88f7-49eb-43e7-b736-af60f96c3422;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=placement-ks-service;k8s:release_group=placement;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=e7d7d806e4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1357 identity=17739 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=230f88f7-49eb-43e7-b736-af60f96c3422,k8s:batch.kubernetes.io/job-name=placement-ks-service,k8s:component=ks-service,k8s:controller-uid=230f88f7-49eb-43e7-b736-af60f96c3422,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-ks-service,k8s:release_group=placement" ipv4=10.0.0.156 ipv6= k8sPodName=openstack/placement-ks-service-xsmnf oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e7d7d806e4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1357 identity=17739 ipv4=10.0.0.156 ipv6= k8sPodName=openstack/placement-ks-service-xsmnf subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e7d7d806e4 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1357 identity=17739 ipv4=10.0.0.156 ipv6= k8sPodName=openstack/placement-ks-service-xsmnf subsys=endpoint level=info msg="Successful endpoint creation" containerID=e7d7d806e4 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1357 identity=17739 ipv4=10.0.0.156 ipv6= k8sPodName=openstack/placement-ks-service-xsmnf subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=e7d7d806e4 endpointID=1357 k8sNamespace=openstack k8sPodName=placement-ks-service-xsmnf subsys=daemon level=info msg="Releasing key" key="[k8s:application=placement k8s:batch.kubernetes.io/controller-uid=230f88f7-49eb-43e7-b736-af60f96c3422 k8s:batch.kubernetes.io/job-name=placement-ks-service k8s:component=ks-service k8s:controller-uid=230f88f7-49eb-43e7-b736-af60f96c3422 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=placement-ks-service k8s:release_group=placement]" subsys=allocator level=info msg="Removed endpoint" containerID=e7d7d806e4 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1357 identity=17739 ipv4=10.0.0.156 ipv6= k8sPodName=openstack/placement-ks-service-xsmnf subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.219 ba84545f-7e96-4fba-8c46-67fc3aa4009a default }" containerID=06d9c5c9fe2f657f7dcf434af908728d9d20b8c6631d83805a53a5a75bf4d162 datapathConfiguration="&{false false false false false }" interface=lxc77194bf0941f k8sPodName=openstack/placement-ks-user-rzckk labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=06d9c5c9fe datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1394 ipv4=10.0.0.219 ipv6= k8sPodName=openstack/placement-ks-user-rzckk subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=06d9c5c9fe datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1394 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=d685ea95-1f96-437a-827e-adccf617acb0,k8s:batch.kubernetes.io/job-name=placement-ks-user,k8s:component=ks-user,k8s:controller-uid=d685ea95-1f96-437a-827e-adccf617acb0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-ks-user,k8s:release_group=placement" ipv4=10.0.0.219 ipv6= k8sPodName=openstack/placement-ks-user-rzckk subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=placement;k8s:batch.kubernetes.io/controller-uid=d685ea95-1f96-437a-827e-adccf617acb0;k8s:batch.kubernetes.io/job-name=placement-ks-user;k8s:component=ks-user;k8s:controller-uid=d685ea95-1f96-437a-827e-adccf617acb0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=placement-ks-user;k8s:release_group=placement;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=06d9c5c9fe datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1394 identity=30559 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=d685ea95-1f96-437a-827e-adccf617acb0,k8s:batch.kubernetes.io/job-name=placement-ks-user,k8s:component=ks-user,k8s:controller-uid=d685ea95-1f96-437a-827e-adccf617acb0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-ks-user,k8s:release_group=placement" ipv4=10.0.0.219 ipv6= k8sPodName=openstack/placement-ks-user-rzckk oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=06d9c5c9fe datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1394 identity=30559 ipv4=10.0.0.219 ipv6= k8sPodName=openstack/placement-ks-user-rzckk subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=06d9c5c9fe datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1394 identity=30559 ipv4=10.0.0.219 ipv6= k8sPodName=openstack/placement-ks-user-rzckk subsys=endpoint level=info msg="Successful endpoint creation" containerID=06d9c5c9fe datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1394 identity=30559 ipv4=10.0.0.219 ipv6= k8sPodName=openstack/placement-ks-user-rzckk subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=06d9c5c9fe endpointID=1394 k8sNamespace=openstack k8sPodName=placement-ks-user-rzckk subsys=daemon level=info msg="Releasing key" key="[k8s:application=placement k8s:batch.kubernetes.io/controller-uid=d685ea95-1f96-437a-827e-adccf617acb0 k8s:batch.kubernetes.io/job-name=placement-ks-user k8s:component=ks-user k8s:controller-uid=d685ea95-1f96-437a-827e-adccf617acb0 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=placement-ks-user k8s:release_group=placement]" subsys=allocator level=info msg="Removed endpoint" containerID=06d9c5c9fe datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1394 identity=30559 ipv4=10.0.0.219 ipv6= k8sPodName=openstack/placement-ks-user-rzckk subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.120 7cc5f75f-5099-43ef-aaad-c4f11870eb92 default }" containerID=708b7ded2a55bbfb8f7e615fd4940acb21aa5b7b871deb37637c02af7ba702e7 datapathConfiguration="&{false false false false false }" interface=lxc4548d71f63cf k8sPodName=openstack/placement-ks-endpoints-cmlqx labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=708b7ded2a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=627 ipv4=10.0.0.120 ipv6= k8sPodName=openstack/placement-ks-endpoints-cmlqx subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=708b7ded2a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=627 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=5e479442-e567-4554-b74c-3d7864642b9e,k8s:batch.kubernetes.io/job-name=placement-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=5e479442-e567-4554-b74c-3d7864642b9e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-ks-endpoints,k8s:release_group=placement" ipv4=10.0.0.120 ipv6= k8sPodName=openstack/placement-ks-endpoints-cmlqx subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=708b7ded2a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=627 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.120 ipv6= k8sPodName=openstack/placement-ks-endpoints-cmlqx line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=placement;k8s:batch.kubernetes.io/controller-uid=5e479442-e567-4554-b74c-3d7864642b9e;k8s:batch.kubernetes.io/job-name=placement-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=5e479442-e567-4554-b74c-3d7864642b9e;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=placement-ks-endpoints;k8s:release_group=placement;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=708b7ded2a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=627 identity=2564 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=5e479442-e567-4554-b74c-3d7864642b9e,k8s:batch.kubernetes.io/job-name=placement-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=5e479442-e567-4554-b74c-3d7864642b9e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-ks-endpoints,k8s:release_group=placement" ipv4=10.0.0.120 ipv6= k8sPodName=openstack/placement-ks-endpoints-cmlqx oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=708b7ded2a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=627 identity=2564 ipv4=10.0.0.120 ipv6= k8sPodName=openstack/placement-ks-endpoints-cmlqx subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=708b7ded2a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=627 identity=2564 ipv4=10.0.0.120 ipv6= k8sPodName=openstack/placement-ks-endpoints-cmlqx subsys=endpoint level=info msg="Successful endpoint creation" containerID=708b7ded2a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=627 identity=2564 ipv4=10.0.0.120 ipv6= k8sPodName=openstack/placement-ks-endpoints-cmlqx subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=708b7ded2a endpointID=627 k8sNamespace=openstack k8sPodName=placement-ks-endpoints-cmlqx subsys=daemon level=info msg="Releasing key" key="[k8s:application=placement k8s:batch.kubernetes.io/controller-uid=5e479442-e567-4554-b74c-3d7864642b9e k8s:batch.kubernetes.io/job-name=placement-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=5e479442-e567-4554-b74c-3d7864642b9e k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=placement-ks-endpoints k8s:release_group=placement]" subsys=allocator level=info msg="Removed endpoint" containerID=708b7ded2a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=627 identity=2564 ipv4=10.0.0.120 ipv6= k8sPodName=openstack/placement-ks-endpoints-cmlqx subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.106 76150bd7-59a4-4ec4-850a-a6073d4abe6d default }" containerID=ea81fbbdd4ee9d3382e397fd51bf06ff1309287b3495db71081f517fc5d78763 datapathConfiguration="&{false false false false false }" interface=lxc7f28e3565a75 k8sPodName=openstack/neutron-coredns-7dd4958666-tss86 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ea81fbbdd4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=498 ipv4=10.0.0.106 ipv6= k8sPodName=openstack/neutron-coredns-7dd4958666-tss86 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ea81fbbdd4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=498 identityLabels="k8s:app.kubernetes.io/instance=neutron-coredns,k8s:app.kubernetes.io/name=coredns,k8s:application=neutron,k8s:component=coredns,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.106 ipv6= k8sPodName=openstack/neutron-coredns-7dd4958666-tss86 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=ea81fbbdd4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=498 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.106 ipv6= k8sPodName=openstack/neutron-coredns-7dd4958666-tss86 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=neutron-coredns;k8s:app.kubernetes.io/name=coredns;k8s:application=neutron;k8s:component=coredns;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ea81fbbdd4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=498 identity=19382 identityLabels="k8s:app.kubernetes.io/instance=neutron-coredns,k8s:app.kubernetes.io/name=coredns,k8s:application=neutron,k8s:component=coredns,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.106 ipv6= k8sPodName=openstack/neutron-coredns-7dd4958666-tss86 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ea81fbbdd4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=498 identity=19382 ipv4=10.0.0.106 ipv6= k8sPodName=openstack/neutron-coredns-7dd4958666-tss86 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ea81fbbdd4 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=498 identity=19382 ipv4=10.0.0.106 ipv6= k8sPodName=openstack/neutron-coredns-7dd4958666-tss86 subsys=endpoint level=info msg="Successful endpoint creation" containerID=ea81fbbdd4 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=498 identity=19382 ipv4=10.0.0.106 ipv6= k8sPodName=openstack/neutron-coredns-7dd4958666-tss86 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.67 362f09fe-f224-44d8-9a6e-46bc2ddba1e7 default }" containerID=e1b24e92b833517167fa398031e721cdecb760f5666572aa18900f9e33743204 datapathConfiguration="&{false false false false false }" interface=lxc1296f118d7cf k8sPodName=local-path-storage/helper-pod-create-pvc-c72077b0-ef04-4e2a-8d4b-421a5e60473a labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e1b24e92b8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2484 ipv4=10.0.0.67 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-c72077b0-ef04-4e2a-8d4b-421a5e60473a subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e1b24e92b8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2484 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.67 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-c72077b0-ef04-4e2a-8d4b-421a5e60473a subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e1b24e92b8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2484 identity=2052 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.67 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-c72077b0-ef04-4e2a-8d4b-421a5e60473a oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e1b24e92b8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2484 identity=2052 ipv4=10.0.0.67 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-c72077b0-ef04-4e2a-8d4b-421a5e60473a subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e1b24e92b8 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2484 identity=2052 ipv4=10.0.0.67 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-c72077b0-ef04-4e2a-8d4b-421a5e60473a subsys=endpoint level=info msg="Successful endpoint creation" containerID=e1b24e92b8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2484 identity=2052 ipv4=10.0.0.67 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-c72077b0-ef04-4e2a-8d4b-421a5e60473a subsys=daemon level=info msg="Delete endpoint request" containerID=e1b24e92b8 endpointID=2484 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-c72077b0-ef04-4e2a-8d4b-421a5e60473a subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=e1b24e92b8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2484 identity=2052 ipv4=10.0.0.67 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-c72077b0-ef04-4e2a-8d4b-421a5e60473a subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.198 edf18986-39d0-480e-bc75-8cdd3c224c19 default }" containerID=6adc49c1157a6c114ea2fd25a8923c825f2d0f592734f062be50b196964eb125 datapathConfiguration="&{false false false false false }" interface=lxc4de39fcff160 k8sPodName=openstack/rabbitmq-nova-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6adc49c115 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1691 ipv4=10.0.0.198 ipv6= k8sPodName=openstack/rabbitmq-nova-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6adc49c115 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1691 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-nova,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-nova-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-nova-server-0" ipv4=10.0.0.198 ipv6= k8sPodName=openstack/rabbitmq-nova-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-nova;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-nova-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-nova-server-0;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=6adc49c115 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1691 identity=52611 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-nova,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-nova-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-nova-server-0" ipv4=10.0.0.198 ipv6= k8sPodName=openstack/rabbitmq-nova-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6adc49c115 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1691 identity=52611 ipv4=10.0.0.198 ipv6= k8sPodName=openstack/rabbitmq-nova-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=6adc49c115 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1691 identity=52611 ipv4=10.0.0.198 ipv6= k8sPodName=openstack/rabbitmq-nova-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=6adc49c115 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1691 identity=52611 ipv4=10.0.0.198 ipv6= k8sPodName=openstack/rabbitmq-nova-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.156 5602c8d3-11d4-40fd-93b8-72c2c39e480c default }" containerID=3cb748b92618519d5b2671ff38e826ecf0a917ccf9daf05744df77aec765066d datapathConfiguration="&{false false false false false }" interface=lxc5fa4a0a7fb6d k8sPodName=openstack/nova-scheduler-585c767854-n4tdk labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3cb748b926 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1880 ipv4=10.0.0.156 ipv6= k8sPodName=openstack/nova-scheduler-585c767854-n4tdk subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3cb748b926 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1880 identityLabels="k8s:application=nova,k8s:component=scheduler,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-scheduler,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=nova" ipv4=10.0.0.156 ipv6= k8sPodName=openstack/nova-scheduler-585c767854-n4tdk subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=nova;k8s:component=scheduler;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=nova-scheduler;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=nova;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3cb748b926 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1880 identity=18340 identityLabels="k8s:application=nova,k8s:component=scheduler,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-scheduler,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=nova" ipv4=10.0.0.156 ipv6= k8sPodName=openstack/nova-scheduler-585c767854-n4tdk oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3cb748b926 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1880 identity=18340 ipv4=10.0.0.156 ipv6= k8sPodName=openstack/nova-scheduler-585c767854-n4tdk subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.159 5d657964-7b9b-4d2c-b8b9-1f1f069237c4 default }" containerID=dd4aac89a3222a4641c87c8389ddaab739040ba29b4a267c3224c0c986a3883a datapathConfiguration="&{false false false false false }" interface=lxc5681c743ba39 k8sPodName=openstack/nova-cell-setup-kzf88 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=dd4aac89a3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=10 ipv4=10.0.0.159 ipv6= k8sPodName=openstack/nova-cell-setup-kzf88 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=dd4aac89a3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=10 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=166c875d-67a0-4e92-8580-1bd025ed3a7e,k8s:batch.kubernetes.io/job-name=nova-cell-setup,k8s:component=cell-setup,k8s:controller-uid=166c875d-67a0-4e92-8580-1bd025ed3a7e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-cell-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-cell-setup,k8s:release_group=nova" ipv4=10.0.0.159 ipv6= k8sPodName=openstack/nova-cell-setup-kzf88 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=nova;k8s:batch.kubernetes.io/controller-uid=166c875d-67a0-4e92-8580-1bd025ed3a7e;k8s:batch.kubernetes.io/job-name=nova-cell-setup;k8s:component=cell-setup;k8s:controller-uid=166c875d-67a0-4e92-8580-1bd025ed3a7e;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=nova-cell-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=nova-cell-setup;k8s:release_group=nova;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=dd4aac89a3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=10 identity=15875 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=166c875d-67a0-4e92-8580-1bd025ed3a7e,k8s:batch.kubernetes.io/job-name=nova-cell-setup,k8s:component=cell-setup,k8s:controller-uid=166c875d-67a0-4e92-8580-1bd025ed3a7e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-cell-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-cell-setup,k8s:release_group=nova" ipv4=10.0.0.159 ipv6= k8sPodName=openstack/nova-cell-setup-kzf88 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=dd4aac89a3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=10 identity=15875 ipv4=10.0.0.159 ipv6= k8sPodName=openstack/nova-cell-setup-kzf88 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.154 9cf8f32d-75b5-48de-8a02-2e53dde8f773 default }" containerID=6a18165e5fc6728fce10f27d8c9ab0ed950bb70259c9c192a71e49adaaed7088 datapathConfiguration="&{false false false false false }" interface=lxcd85987e654a4 k8sPodName=openstack/nova-bootstrap-8f7xw labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6a18165e5f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1877 ipv4=10.0.0.154 ipv6= k8sPodName=openstack/nova-bootstrap-8f7xw subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6a18165e5f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1877 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=a7a5c2b4-140b-4897-b202-6b23d57d551a,k8s:batch.kubernetes.io/job-name=nova-bootstrap,k8s:component=bootstrap,k8s:controller-uid=a7a5c2b4-140b-4897-b202-6b23d57d551a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-bootstrap,k8s:release_group=nova" ipv4=10.0.0.154 ipv6= k8sPodName=openstack/nova-bootstrap-8f7xw subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Create endpoint request" addressing="&{10.0.0.228 7fc527f4-6ae6-4163-bcf2-553376bd61f4 default }" containerID=6f48facc3b1cb89162f3bb5011a51ae7a42449e9ce3eaf1a2bd7661ee382cf64 datapathConfiguration="&{false false false false false }" interface=lxc30f6a72bc820 k8sPodName=openstack/nova-api-metadata-6bfb84c685-h24pm labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6f48facc3b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1778 ipv4=10.0.0.228 ipv6= k8sPodName=openstack/nova-api-metadata-6bfb84c685-h24pm subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6f48facc3b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1778 identityLabels="k8s:application=nova,k8s:component=metadata,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-api-metadata,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=nova" ipv4=10.0.0.228 ipv6= k8sPodName=openstack/nova-api-metadata-6bfb84c685-h24pm subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=nova;k8s:batch.kubernetes.io/controller-uid=a7a5c2b4-140b-4897-b202-6b23d57d551a;k8s:batch.kubernetes.io/job-name=nova-bootstrap;k8s:component=bootstrap;k8s:controller-uid=a7a5c2b4-140b-4897-b202-6b23d57d551a;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=nova-bootstrap;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=nova-bootstrap;k8s:release_group=nova;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6a18165e5f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1877 identity=21635 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=a7a5c2b4-140b-4897-b202-6b23d57d551a,k8s:batch.kubernetes.io/job-name=nova-bootstrap,k8s:component=bootstrap,k8s:controller-uid=a7a5c2b4-140b-4897-b202-6b23d57d551a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-bootstrap,k8s:release_group=nova" ipv4=10.0.0.154 ipv6= k8sPodName=openstack/nova-bootstrap-8f7xw oldIdentity="no identity" subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Waiting for endpoint to be generated" containerID=6a18165e5f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1877 identity=21635 ipv4=10.0.0.154 ipv6= k8sPodName=openstack/nova-bootstrap-8f7xw subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=nova;k8s:component=metadata;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=nova-api-metadata;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=nova;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6f48facc3b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1778 identity=25098 identityLabels="k8s:application=nova,k8s:component=metadata,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-api-metadata,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=nova" ipv4=10.0.0.228 ipv6= k8sPodName=openstack/nova-api-metadata-6bfb84c685-h24pm oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6f48facc3b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1778 identity=25098 ipv4=10.0.0.228 ipv6= k8sPodName=openstack/nova-api-metadata-6bfb84c685-h24pm subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=3cb748b926 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1880 identity=18340 ipv4=10.0.0.156 ipv6= k8sPodName=openstack/nova-scheduler-585c767854-n4tdk subsys=endpoint level=info msg="Successful endpoint creation" containerID=3cb748b926 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1880 identity=18340 ipv4=10.0.0.156 ipv6= k8sPodName=openstack/nova-scheduler-585c767854-n4tdk subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.124 037026b0-56a7-40a1-b8c6-cbee5737095f default }" containerID=2fc3972f2e4fa7ea09af02e7593cecd1448fec2a68a14570e811666a4fbbc352 datapathConfiguration="&{false false false false false }" interface=lxc0f2c4a2e3ebe k8sPodName=openstack/nova-api-osapi-7dcc8cb6d6-qtctl labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2fc3972f2e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2113 ipv4=10.0.0.124 ipv6= k8sPodName=openstack/nova-api-osapi-7dcc8cb6d6-qtctl subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2fc3972f2e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2113 identityLabels="k8s:application=nova,k8s:component=os-api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-api-osapi,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=nova" ipv4=10.0.0.124 ipv6= k8sPodName=openstack/nova-api-osapi-7dcc8cb6d6-qtctl subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=nova;k8s:component=os-api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=nova-api-osapi;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=nova;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2fc3972f2e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2113 identity=4986 identityLabels="k8s:application=nova,k8s:component=os-api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-api-osapi,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=nova" ipv4=10.0.0.124 ipv6= k8sPodName=openstack/nova-api-osapi-7dcc8cb6d6-qtctl oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2fc3972f2e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2113 identity=4986 ipv4=10.0.0.124 ipv6= k8sPodName=openstack/nova-api-osapi-7dcc8cb6d6-qtctl subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.203 b712927e-9e5d-47ca-91c5-a93843902a8c default }" containerID=ce2b65317642f172314469d643218f1969254736ffa7f4e613f4b410ee27b706 datapathConfiguration="&{false false false false false }" interface=lxc4f2682d0b899 k8sPodName=openstack/nova-conductor-c7b5dbf98-j4njz labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ce2b653176 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1246 ipv4=10.0.0.203 ipv6= k8sPodName=openstack/nova-conductor-c7b5dbf98-j4njz subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ce2b653176 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1246 identityLabels="k8s:application=nova,k8s:component=conductor,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-conductor,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=nova" ipv4=10.0.0.203 ipv6= k8sPodName=openstack/nova-conductor-c7b5dbf98-j4njz subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Rewrote endpoint BPF program" containerID=dd4aac89a3 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=10 identity=15875 ipv4=10.0.0.159 ipv6= k8sPodName=openstack/nova-cell-setup-kzf88 subsys=endpoint level=info msg="Successful endpoint creation" containerID=dd4aac89a3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=10 identity=15875 ipv4=10.0.0.159 ipv6= k8sPodName=openstack/nova-cell-setup-kzf88 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=6a18165e5f datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1877 identity=21635 ipv4=10.0.0.154 ipv6= k8sPodName=openstack/nova-bootstrap-8f7xw subsys=endpoint level=info msg="Successful endpoint creation" containerID=6a18165e5f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1877 identity=21635 ipv4=10.0.0.154 ipv6= k8sPodName=openstack/nova-bootstrap-8f7xw subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.208 c6f53255-3265-44c8-a634-2b8c9b4be56a default }" containerID=8a345806a4c567ceec8a91d19d5382f96019f5f81382017d9278924ad6a05925 datapathConfiguration="&{false false false false false }" interface=lxce08fdcb51583 k8sPodName=openstack/nova-db-init-44cx9 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8a345806a4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=653 ipv4=10.0.0.208 ipv6= k8sPodName=openstack/nova-db-init-44cx9 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8a345806a4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=653 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=859abba5-37c4-4dbb-9953-fd2ce36a4adb,k8s:batch.kubernetes.io/job-name=nova-db-init,k8s:component=db-init,k8s:controller-uid=859abba5-37c4-4dbb-9953-fd2ce36a4adb,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-db-init,k8s:release_group=nova" ipv4=10.0.0.208 ipv6= k8sPodName=openstack/nova-db-init-44cx9 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=6f48facc3b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1778 identity=25098 ipv4=10.0.0.228 ipv6= k8sPodName=openstack/nova-api-metadata-6bfb84c685-h24pm subsys=endpoint level=info msg="Successful endpoint creation" containerID=6f48facc3b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1778 identity=25098 ipv4=10.0.0.228 ipv6= k8sPodName=openstack/nova-api-metadata-6bfb84c685-h24pm subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=2fc3972f2e datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2113 identity=4986 ipv4=10.0.0.124 ipv6= k8sPodName=openstack/nova-api-osapi-7dcc8cb6d6-qtctl subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.20 1d17ed33-4a84-4116-9d8a-977c1ea92067 default }" containerID=9c7c3640bd9a03f3ee4a1568a495e541f6ed2c81add754ad441bf22c1170bee0 datapathConfiguration="&{false false false false false }" interface=lxc6a3c6ea8e123 k8sPodName=openstack/nova-novncproxy-549777c9f9-ks7gh labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9c7c3640bd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=526 ipv4=10.0.0.20 ipv6= k8sPodName=openstack/nova-novncproxy-549777c9f9-ks7gh subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9c7c3640bd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=526 identityLabels="k8s:application=nova,k8s:component=novnc-proxy,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-novncproxy,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=nova" ipv4=10.0.0.20 ipv6= k8sPodName=openstack/nova-novncproxy-549777c9f9-ks7gh subsys=endpoint level=info msg="Successful endpoint creation" containerID=2fc3972f2e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2113 identity=4986 ipv4=10.0.0.124 ipv6= k8sPodName=openstack/nova-api-osapi-7dcc8cb6d6-qtctl subsys=daemon level=info msg="Allocated new global key" key="k8s:application=nova;k8s:component=conductor;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=nova-conductor;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=nova;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ce2b653176 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1246 identity=23013 identityLabels="k8s:application=nova,k8s:component=conductor,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-conductor,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=nova" ipv4=10.0.0.203 ipv6= k8sPodName=openstack/nova-conductor-c7b5dbf98-j4njz oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ce2b653176 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1246 identity=23013 ipv4=10.0.0.203 ipv6= k8sPodName=openstack/nova-conductor-c7b5dbf98-j4njz subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=9c7c3640bd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=526 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.20 ipv6= k8sPodName=openstack/nova-novncproxy-549777c9f9-ks7gh line=611 subsys=endpoint level=info msg="Invalid state transition skipped" containerID=8a345806a4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=653 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.208 ipv6= k8sPodName=openstack/nova-db-init-44cx9 line=611 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ce2b653176 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1246 identity=23013 ipv4=10.0.0.203 ipv6= k8sPodName=openstack/nova-conductor-c7b5dbf98-j4njz subsys=endpoint level=info msg="Successful endpoint creation" containerID=ce2b653176 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1246 identity=23013 ipv4=10.0.0.203 ipv6= k8sPodName=openstack/nova-conductor-c7b5dbf98-j4njz subsys=daemon level=info msg="Allocated new global key" key="k8s:application=nova;k8s:batch.kubernetes.io/controller-uid=859abba5-37c4-4dbb-9953-fd2ce36a4adb;k8s:batch.kubernetes.io/job-name=nova-db-init;k8s:component=db-init;k8s:controller-uid=859abba5-37c4-4dbb-9953-fd2ce36a4adb;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=nova-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=nova-db-init;k8s:release_group=nova;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8a345806a4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=653 identity=51735 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=859abba5-37c4-4dbb-9953-fd2ce36a4adb,k8s:batch.kubernetes.io/job-name=nova-db-init,k8s:component=db-init,k8s:controller-uid=859abba5-37c4-4dbb-9953-fd2ce36a4adb,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-db-init,k8s:release_group=nova" ipv4=10.0.0.208 ipv6= k8sPodName=openstack/nova-db-init-44cx9 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8a345806a4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=653 identity=51735 ipv4=10.0.0.208 ipv6= k8sPodName=openstack/nova-db-init-44cx9 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Rewrote endpoint BPF program" containerID=8a345806a4 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=653 identity=51735 ipv4=10.0.0.208 ipv6= k8sPodName=openstack/nova-db-init-44cx9 subsys=endpoint level=info msg="Successful endpoint creation" containerID=8a345806a4 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=653 identity=51735 ipv4=10.0.0.208 ipv6= k8sPodName=openstack/nova-db-init-44cx9 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=nova;k8s:component=novnc-proxy;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=nova-novncproxy;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=nova;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=9c7c3640bd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=526 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.20 ipv6= k8sPodName=openstack/nova-novncproxy-549777c9f9-ks7gh line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=9c7c3640bd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=526 identity=3019 identityLabels="k8s:application=nova,k8s:component=novnc-proxy,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-novncproxy,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=nova" ipv4=10.0.0.20 ipv6= k8sPodName=openstack/nova-novncproxy-549777c9f9-ks7gh oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9c7c3640bd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=526 identity=3019 ipv4=10.0.0.20 ipv6= k8sPodName=openstack/nova-novncproxy-549777c9f9-ks7gh subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=9c7c3640bd datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=526 identity=3019 ipv4=10.0.0.20 ipv6= k8sPodName=openstack/nova-novncproxy-549777c9f9-ks7gh subsys=endpoint level=info msg="Successful endpoint creation" containerID=9c7c3640bd datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=526 identity=3019 ipv4=10.0.0.20 ipv6= k8sPodName=openstack/nova-novncproxy-549777c9f9-ks7gh subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=8a345806a4 endpointID=653 k8sNamespace=openstack k8sPodName=nova-db-init-44cx9 subsys=daemon level=info msg="Releasing key" key="[k8s:application=nova k8s:batch.kubernetes.io/controller-uid=859abba5-37c4-4dbb-9953-fd2ce36a4adb k8s:batch.kubernetes.io/job-name=nova-db-init k8s:component=db-init k8s:controller-uid=859abba5-37c4-4dbb-9953-fd2ce36a4adb k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=nova-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=nova-db-init k8s:release_group=nova]" subsys=allocator level=info msg="Removed endpoint" containerID=8a345806a4 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=653 identity=51735 ipv4=10.0.0.208 ipv6= k8sPodName=openstack/nova-db-init-44cx9 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.109 17b37b32-74f0-4728-b667-a7823be4cb54 default }" containerID=b4759690b3becd314de29c932a914a88ba83608e9e5bd7051db3d66784e2d725 datapathConfiguration="&{false false false false false }" interface=lxc1e5bce7c4396 k8sPodName=openstack/nova-db-sync-qclvs labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b4759690b3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1349 ipv4=10.0.0.109 ipv6= k8sPodName=openstack/nova-db-sync-qclvs subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b4759690b3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1349 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=94ca2ec9-ff71-430e-9176-bddea3d53a8e,k8s:batch.kubernetes.io/job-name=nova-db-sync,k8s:component=db-sync,k8s:controller-uid=94ca2ec9-ff71-430e-9176-bddea3d53a8e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-db-sync,k8s:release_group=nova" ipv4=10.0.0.109 ipv6= k8sPodName=openstack/nova-db-sync-qclvs subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=nova;k8s:batch.kubernetes.io/controller-uid=94ca2ec9-ff71-430e-9176-bddea3d53a8e;k8s:batch.kubernetes.io/job-name=nova-db-sync;k8s:component=db-sync;k8s:controller-uid=94ca2ec9-ff71-430e-9176-bddea3d53a8e;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=nova-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=nova-db-sync;k8s:release_group=nova;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b4759690b3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1349 identity=24798 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=94ca2ec9-ff71-430e-9176-bddea3d53a8e,k8s:batch.kubernetes.io/job-name=nova-db-sync,k8s:component=db-sync,k8s:controller-uid=94ca2ec9-ff71-430e-9176-bddea3d53a8e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-db-sync,k8s:release_group=nova" ipv4=10.0.0.109 ipv6= k8sPodName=openstack/nova-db-sync-qclvs oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b4759690b3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1349 identity=24798 ipv4=10.0.0.109 ipv6= k8sPodName=openstack/nova-db-sync-qclvs subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b4759690b3 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1349 identity=24798 ipv4=10.0.0.109 ipv6= k8sPodName=openstack/nova-db-sync-qclvs subsys=endpoint level=info msg="Successful endpoint creation" containerID=b4759690b3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1349 identity=24798 ipv4=10.0.0.109 ipv6= k8sPodName=openstack/nova-db-sync-qclvs subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=b4759690b3 endpointID=1349 k8sNamespace=openstack k8sPodName=nova-db-sync-qclvs subsys=daemon level=info msg="Releasing key" key="[k8s:application=nova k8s:batch.kubernetes.io/controller-uid=94ca2ec9-ff71-430e-9176-bddea3d53a8e k8s:batch.kubernetes.io/job-name=nova-db-sync k8s:component=db-sync k8s:controller-uid=94ca2ec9-ff71-430e-9176-bddea3d53a8e k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=nova-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=nova-db-sync k8s:release_group=nova]" subsys=allocator level=info msg="Removed endpoint" containerID=b4759690b3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1349 identity=24798 ipv4=10.0.0.109 ipv6= k8sPodName=openstack/nova-db-sync-qclvs subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.113 7a23beed-a31b-4c73-985a-0daf31268011 default }" containerID=7dbec5007cf101f4ac566fb4f1c6bf262d2ddd83b6bcb4c5fee9a7c4234f78e5 datapathConfiguration="&{false false false false false }" interface=lxc9e12db0a85ea k8sPodName=openstack/nova-rabbit-init-v2w5x labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7dbec5007c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1172 ipv4=10.0.0.113 ipv6= k8sPodName=openstack/nova-rabbit-init-v2w5x subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7dbec5007c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1172 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=eb8898ca-f4f8-4bb9-ab5b-ae3bb9dea31b,k8s:batch.kubernetes.io/job-name=nova-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=eb8898ca-f4f8-4bb9-ab5b-ae3bb9dea31b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-rabbit-init,k8s:release_group=nova" ipv4=10.0.0.113 ipv6= k8sPodName=openstack/nova-rabbit-init-v2w5x subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=nova;k8s:batch.kubernetes.io/controller-uid=eb8898ca-f4f8-4bb9-ab5b-ae3bb9dea31b;k8s:batch.kubernetes.io/job-name=nova-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=eb8898ca-f4f8-4bb9-ab5b-ae3bb9dea31b;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=nova-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=nova-rabbit-init;k8s:release_group=nova;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7dbec5007c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1172 identity=20579 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=eb8898ca-f4f8-4bb9-ab5b-ae3bb9dea31b,k8s:batch.kubernetes.io/job-name=nova-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=eb8898ca-f4f8-4bb9-ab5b-ae3bb9dea31b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-rabbit-init,k8s:release_group=nova" ipv4=10.0.0.113 ipv6= k8sPodName=openstack/nova-rabbit-init-v2w5x oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7dbec5007c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1172 identity=20579 ipv4=10.0.0.113 ipv6= k8sPodName=openstack/nova-rabbit-init-v2w5x subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=7dbec5007c datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1172 identity=20579 ipv4=10.0.0.113 ipv6= k8sPodName=openstack/nova-rabbit-init-v2w5x subsys=endpoint level=info msg="Successful endpoint creation" containerID=7dbec5007c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1172 identity=20579 ipv4=10.0.0.113 ipv6= k8sPodName=openstack/nova-rabbit-init-v2w5x subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=7dbec5007c endpointID=1172 k8sNamespace=openstack k8sPodName=nova-rabbit-init-v2w5x subsys=daemon level=info msg="Releasing key" key="[k8s:application=nova k8s:batch.kubernetes.io/controller-uid=eb8898ca-f4f8-4bb9-ab5b-ae3bb9dea31b k8s:batch.kubernetes.io/job-name=nova-rabbit-init k8s:component=rabbit-init k8s:controller-uid=eb8898ca-f4f8-4bb9-ab5b-ae3bb9dea31b k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=nova-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=nova-rabbit-init k8s:release_group=nova]" subsys=allocator level=info msg="Removed endpoint" containerID=7dbec5007c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1172 identity=20579 ipv4=10.0.0.113 ipv6= k8sPodName=openstack/nova-rabbit-init-v2w5x subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.10 dab7311a-33fd-470f-be40-c6323224b337 default }" containerID=fc2d7e0ce3d638e02a8594fb5cc2a1b374943712e6d5d339d560d1d4a8b0b1e6 datapathConfiguration="&{false false false false false }" interface=lxcc3c7a1abe550 k8sPodName=openstack/nova-ks-service-b2gf2 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=fc2d7e0ce3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=227 ipv4=10.0.0.10 ipv6= k8sPodName=openstack/nova-ks-service-b2gf2 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=fc2d7e0ce3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=227 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=be8bf031-d8aa-486f-a4f9-6f0f0d4c7ee4,k8s:batch.kubernetes.io/job-name=nova-ks-service,k8s:component=ks-service,k8s:controller-uid=be8bf031-d8aa-486f-a4f9-6f0f0d4c7ee4,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-ks-service,k8s:release_group=nova" ipv4=10.0.0.10 ipv6= k8sPodName=openstack/nova-ks-service-b2gf2 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=nova;k8s:batch.kubernetes.io/controller-uid=be8bf031-d8aa-486f-a4f9-6f0f0d4c7ee4;k8s:batch.kubernetes.io/job-name=nova-ks-service;k8s:component=ks-service;k8s:controller-uid=be8bf031-d8aa-486f-a4f9-6f0f0d4c7ee4;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=nova-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=nova-ks-service;k8s:release_group=nova;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=fc2d7e0ce3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=227 identity=10056 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=be8bf031-d8aa-486f-a4f9-6f0f0d4c7ee4,k8s:batch.kubernetes.io/job-name=nova-ks-service,k8s:component=ks-service,k8s:controller-uid=be8bf031-d8aa-486f-a4f9-6f0f0d4c7ee4,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-ks-service,k8s:release_group=nova" ipv4=10.0.0.10 ipv6= k8sPodName=openstack/nova-ks-service-b2gf2 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=fc2d7e0ce3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=227 identity=10056 ipv4=10.0.0.10 ipv6= k8sPodName=openstack/nova-ks-service-b2gf2 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=fc2d7e0ce3 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=227 identity=10056 ipv4=10.0.0.10 ipv6= k8sPodName=openstack/nova-ks-service-b2gf2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=fc2d7e0ce3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=227 identity=10056 ipv4=10.0.0.10 ipv6= k8sPodName=openstack/nova-ks-service-b2gf2 subsys=daemon level=info msg="Delete endpoint request" containerID=fc2d7e0ce3 endpointID=227 k8sNamespace=openstack k8sPodName=nova-ks-service-b2gf2 subsys=daemon level=info msg="Releasing key" key="[k8s:application=nova k8s:batch.kubernetes.io/controller-uid=be8bf031-d8aa-486f-a4f9-6f0f0d4c7ee4 k8s:batch.kubernetes.io/job-name=nova-ks-service k8s:component=ks-service k8s:controller-uid=be8bf031-d8aa-486f-a4f9-6f0f0d4c7ee4 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=nova-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=nova-ks-service k8s:release_group=nova]" subsys=allocator level=info msg="Removed endpoint" containerID=fc2d7e0ce3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=227 identity=10056 ipv4=10.0.0.10 ipv6= k8sPodName=openstack/nova-ks-service-b2gf2 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.10 ee508d20-7005-4b0b-8b17-621bd109e4d0 default }" containerID=38a621022dc8cf2dcec93d7f85dd49f6b0ce4a73adb65cb052e24f81ac92c42e datapathConfiguration="&{false false false false false }" interface=lxc7a441275dc16 k8sPodName=openstack/nova-ks-endpoints-46slw labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=38a621022d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3713 ipv4=10.0.0.10 ipv6= k8sPodName=openstack/nova-ks-endpoints-46slw subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=38a621022d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3713 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=f63dfb35-3344-48cd-aaa1-fea8a385bf29,k8s:batch.kubernetes.io/job-name=nova-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=f63dfb35-3344-48cd-aaa1-fea8a385bf29,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-ks-endpoints,k8s:release_group=nova" ipv4=10.0.0.10 ipv6= k8sPodName=openstack/nova-ks-endpoints-46slw subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=38a621022d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3713 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.10 ipv6= k8sPodName=openstack/nova-ks-endpoints-46slw line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=nova;k8s:batch.kubernetes.io/controller-uid=f63dfb35-3344-48cd-aaa1-fea8a385bf29;k8s:batch.kubernetes.io/job-name=nova-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=f63dfb35-3344-48cd-aaa1-fea8a385bf29;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=nova-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=nova-ks-endpoints;k8s:release_group=nova;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=38a621022d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3713 identity=1735 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=f63dfb35-3344-48cd-aaa1-fea8a385bf29,k8s:batch.kubernetes.io/job-name=nova-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=f63dfb35-3344-48cd-aaa1-fea8a385bf29,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-ks-endpoints,k8s:release_group=nova" ipv4=10.0.0.10 ipv6= k8sPodName=openstack/nova-ks-endpoints-46slw oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=38a621022d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3713 identity=1735 ipv4=10.0.0.10 ipv6= k8sPodName=openstack/nova-ks-endpoints-46slw subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=38a621022d datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3713 identity=1735 ipv4=10.0.0.10 ipv6= k8sPodName=openstack/nova-ks-endpoints-46slw subsys=endpoint level=info msg="Successful endpoint creation" containerID=38a621022d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3713 identity=1735 ipv4=10.0.0.10 ipv6= k8sPodName=openstack/nova-ks-endpoints-46slw subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=38a621022d endpointID=3713 k8sNamespace=openstack k8sPodName=nova-ks-endpoints-46slw subsys=daemon level=info msg="Releasing key" key="[k8s:application=nova k8s:batch.kubernetes.io/controller-uid=f63dfb35-3344-48cd-aaa1-fea8a385bf29 k8s:batch.kubernetes.io/job-name=nova-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=f63dfb35-3344-48cd-aaa1-fea8a385bf29 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=nova-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=nova-ks-endpoints k8s:release_group=nova]" subsys=allocator level=info msg="Removed endpoint" containerID=38a621022d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3713 identity=1735 ipv4=10.0.0.10 ipv6= k8sPodName=openstack/nova-ks-endpoints-46slw subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.118 0fff8686-8e73-4d82-b51f-693f8dd31285 default }" containerID=2fe8c5f3e0839a3118cd88a69956d7d32ae5e7c3b41b97b89644b0fd2588d09c datapathConfiguration="&{false false false false false }" interface=lxcd9af5639ca50 k8sPodName=openstack/nova-ks-user-m4rqk labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2fe8c5f3e0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1981 ipv4=10.0.0.118 ipv6= k8sPodName=openstack/nova-ks-user-m4rqk subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2fe8c5f3e0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1981 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=007ee613-3161-4605-90b3-21461646d177,k8s:batch.kubernetes.io/job-name=nova-ks-user,k8s:component=ks-user,k8s:controller-uid=007ee613-3161-4605-90b3-21461646d177,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-ks-user,k8s:release_group=nova" ipv4=10.0.0.118 ipv6= k8sPodName=openstack/nova-ks-user-m4rqk subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=nova;k8s:batch.kubernetes.io/controller-uid=007ee613-3161-4605-90b3-21461646d177;k8s:batch.kubernetes.io/job-name=nova-ks-user;k8s:component=ks-user;k8s:controller-uid=007ee613-3161-4605-90b3-21461646d177;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=nova-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=nova-ks-user;k8s:release_group=nova;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=2fe8c5f3e0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1981 identity=36528 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=007ee613-3161-4605-90b3-21461646d177,k8s:batch.kubernetes.io/job-name=nova-ks-user,k8s:component=ks-user,k8s:controller-uid=007ee613-3161-4605-90b3-21461646d177,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-ks-user,k8s:release_group=nova" ipv4=10.0.0.118 ipv6= k8sPodName=openstack/nova-ks-user-m4rqk oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2fe8c5f3e0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1981 identity=36528 ipv4=10.0.0.118 ipv6= k8sPodName=openstack/nova-ks-user-m4rqk subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=2fe8c5f3e0 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1981 identity=36528 ipv4=10.0.0.118 ipv6= k8sPodName=openstack/nova-ks-user-m4rqk subsys=endpoint level=info msg="Successful endpoint creation" containerID=2fe8c5f3e0 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1981 identity=36528 ipv4=10.0.0.118 ipv6= k8sPodName=openstack/nova-ks-user-m4rqk subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=2fe8c5f3e0 endpointID=1981 k8sNamespace=openstack k8sPodName=nova-ks-user-m4rqk subsys=daemon level=info msg="Releasing key" key="[k8s:application=nova k8s:batch.kubernetes.io/controller-uid=007ee613-3161-4605-90b3-21461646d177 k8s:batch.kubernetes.io/job-name=nova-ks-user k8s:component=ks-user k8s:controller-uid=007ee613-3161-4605-90b3-21461646d177 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=nova-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=nova-ks-user k8s:release_group=nova]" subsys=allocator level=info msg="Removed endpoint" containerID=2fe8c5f3e0 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1981 identity=36528 ipv4=10.0.0.118 ipv6= k8sPodName=openstack/nova-ks-user-m4rqk subsys=endpoint level=info msg="Delete endpoint request" containerID=6a18165e5f endpointID=1877 k8sNamespace=openstack k8sPodName=nova-bootstrap-8f7xw subsys=daemon level=info msg="Releasing key" key="[k8s:application=nova k8s:batch.kubernetes.io/controller-uid=a7a5c2b4-140b-4897-b202-6b23d57d551a k8s:batch.kubernetes.io/job-name=nova-bootstrap k8s:component=bootstrap k8s:controller-uid=a7a5c2b4-140b-4897-b202-6b23d57d551a k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=nova-bootstrap k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=nova-bootstrap k8s:release_group=nova]" subsys=allocator level=info msg="Removed endpoint" containerID=6a18165e5f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1877 identity=21635 ipv4=10.0.0.154 ipv6= k8sPodName=openstack/nova-bootstrap-8f7xw subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.89 c531880e-cbef-43cf-ac54-0544798d635c default }" containerID=cbfbdf3541be2cca0ddf59f45f82589ecb6674ec36158f3a788be61007275ff8 datapathConfiguration="&{false false false false false }" interface=lxc87af69cc86c8 k8sPodName=local-path-storage/helper-pod-create-pvc-0db2a2ba-9cdf-41e8-9282-6e9f1d8db76c labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=cbfbdf3541 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1258 ipv4=10.0.0.89 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-0db2a2ba-9cdf-41e8-9282-6e9f1d8db76c subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=cbfbdf3541 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1258 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.89 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-0db2a2ba-9cdf-41e8-9282-6e9f1d8db76c subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=cbfbdf3541 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1258 identity=2052 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.89 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-0db2a2ba-9cdf-41e8-9282-6e9f1d8db76c oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=cbfbdf3541 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1258 identity=2052 ipv4=10.0.0.89 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-0db2a2ba-9cdf-41e8-9282-6e9f1d8db76c subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=cbfbdf3541 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1258 identity=2052 ipv4=10.0.0.89 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-0db2a2ba-9cdf-41e8-9282-6e9f1d8db76c subsys=endpoint level=info msg="Successful endpoint creation" containerID=cbfbdf3541 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1258 identity=2052 ipv4=10.0.0.89 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-0db2a2ba-9cdf-41e8-9282-6e9f1d8db76c subsys=daemon level=info msg="Delete endpoint request" containerID=cbfbdf3541 endpointID=1258 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-0db2a2ba-9cdf-41e8-9282-6e9f1d8db76c subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=cbfbdf3541 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1258 identity=2052 ipv4=10.0.0.89 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-0db2a2ba-9cdf-41e8-9282-6e9f1d8db76c subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.192 c4fd6e30-8b2d-4dc5-a0d7-880d5fc0d211 default }" containerID=d778fd87d5890d330facef27c8e9703ced05bbfe6facdfaca65dea5f8fef304d datapathConfiguration="&{false false false false false }" interface=lxc63c11156b31d k8sPodName=openstack/rabbitmq-neutron-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d778fd87d5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2847 ipv4=10.0.0.192 ipv6= k8sPodName=openstack/rabbitmq-neutron-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d778fd87d5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2847 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-neutron,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-neutron-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-neutron-server-0" ipv4=10.0.0.192 ipv6= k8sPodName=openstack/rabbitmq-neutron-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-neutron;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-neutron-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-neutron-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d778fd87d5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2847 identity=3005 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-neutron,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-neutron-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-neutron-server-0" ipv4=10.0.0.192 ipv6= k8sPodName=openstack/rabbitmq-neutron-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=d778fd87d5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2847 identity=3005 ipv4=10.0.0.192 ipv6= k8sPodName=openstack/rabbitmq-neutron-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d778fd87d5 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2847 identity=3005 ipv4=10.0.0.192 ipv6= k8sPodName=openstack/rabbitmq-neutron-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=d778fd87d5 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2847 identity=3005 ipv4=10.0.0.192 ipv6= k8sPodName=openstack/rabbitmq-neutron-server-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.15 f360f8f1-0752-419c-8184-cf775fc395b8 default }" containerID=751c39adf11bc7b31747a1e1940e0954450a88839f21673098310c971142ec42 datapathConfiguration="&{false false false false false }" interface=lxc324c7431d02b k8sPodName=openstack/neutron-rpc-server-5cf55b7794-s95k5 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=751c39adf1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2856 ipv4=10.0.0.15 ipv6= k8sPodName=openstack/neutron-rpc-server-5cf55b7794-s95k5 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=751c39adf1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2856 identityLabels="k8s:application=neutron,k8s:component=rpc_server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=neutron-rpc-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=neutron" ipv4=10.0.0.15 ipv6= k8sPodName=openstack/neutron-rpc-server-5cf55b7794-s95k5 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=neutron;k8s:component=rpc_server;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=neutron-rpc-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=neutron;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=751c39adf1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2856 identity=58932 identityLabels="k8s:application=neutron,k8s:component=rpc_server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=neutron-rpc-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=neutron" ipv4=10.0.0.15 ipv6= k8sPodName=openstack/neutron-rpc-server-5cf55b7794-s95k5 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=751c39adf1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2856 identity=58932 ipv4=10.0.0.15 ipv6= k8sPodName=openstack/neutron-rpc-server-5cf55b7794-s95k5 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.12 a008933c-30be-43f8-b8de-80ea3086a6e4 default }" containerID=2996dc4cd788f03a00b77bf853b5afe542341f0903b5cfa26165f3bd7b8b29ed datapathConfiguration="&{false false false false false }" interface=lxc680e2e34dd20 k8sPodName=openstack/neutron-server-d6fd8985c-94lft labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2996dc4cd7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1508 ipv4=10.0.0.12 ipv6= k8sPodName=openstack/neutron-server-d6fd8985c-94lft subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2996dc4cd7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1508 identityLabels="k8s:application=neutron,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=neutron-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=neutron" ipv4=10.0.0.12 ipv6= k8sPodName=openstack/neutron-server-d6fd8985c-94lft subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=neutron;k8s:component=server;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=neutron-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=neutron;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2996dc4cd7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1508 identity=40821 identityLabels="k8s:application=neutron,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=neutron-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=neutron" ipv4=10.0.0.12 ipv6= k8sPodName=openstack/neutron-server-d6fd8985c-94lft oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2996dc4cd7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1508 identity=40821 ipv4=10.0.0.12 ipv6= k8sPodName=openstack/neutron-server-d6fd8985c-94lft subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=751c39adf1 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2856 identity=58932 ipv4=10.0.0.15 ipv6= k8sPodName=openstack/neutron-rpc-server-5cf55b7794-s95k5 subsys=endpoint level=info msg="Successful endpoint creation" containerID=751c39adf1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2856 identity=58932 ipv4=10.0.0.15 ipv6= k8sPodName=openstack/neutron-rpc-server-5cf55b7794-s95k5 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.238 f0aa0351-090e-4708-a0d6-43fb75e3e4ea default }" containerID=e0a6b89e3f61a78c8a4db61fdc90511b50fe9712a45083ce25d58f7e3cf3c5f0 datapathConfiguration="&{false false false false false }" interface=lxc443a2a4f5c85 k8sPodName=openstack/neutron-db-init-wgzfn labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e0a6b89e3f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=671 ipv4=10.0.0.238 ipv6= k8sPodName=openstack/neutron-db-init-wgzfn subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e0a6b89e3f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=671 identityLabels="k8s:application=neutron,k8s:batch.kubernetes.io/controller-uid=ecf726c3-c299-4577-a346-37e5c4ccb0cf,k8s:batch.kubernetes.io/job-name=neutron-db-init,k8s:component=db-init,k8s:controller-uid=ecf726c3-c299-4577-a346-37e5c4ccb0cf,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=neutron-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=neutron-db-init,k8s:release_group=neutron" ipv4=10.0.0.238 ipv6= k8sPodName=openstack/neutron-db-init-wgzfn subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=neutron;k8s:batch.kubernetes.io/controller-uid=ecf726c3-c299-4577-a346-37e5c4ccb0cf;k8s:batch.kubernetes.io/job-name=neutron-db-init;k8s:component=db-init;k8s:controller-uid=ecf726c3-c299-4577-a346-37e5c4ccb0cf;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=neutron-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=neutron-db-init;k8s:release_group=neutron;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e0a6b89e3f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=671 identity=9294 identityLabels="k8s:application=neutron,k8s:batch.kubernetes.io/controller-uid=ecf726c3-c299-4577-a346-37e5c4ccb0cf,k8s:batch.kubernetes.io/job-name=neutron-db-init,k8s:component=db-init,k8s:controller-uid=ecf726c3-c299-4577-a346-37e5c4ccb0cf,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=neutron-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=neutron-db-init,k8s:release_group=neutron" ipv4=10.0.0.238 ipv6= k8sPodName=openstack/neutron-db-init-wgzfn oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e0a6b89e3f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=671 identity=9294 ipv4=10.0.0.238 ipv6= k8sPodName=openstack/neutron-db-init-wgzfn subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=2996dc4cd7 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1508 identity=40821 ipv4=10.0.0.12 ipv6= k8sPodName=openstack/neutron-server-d6fd8985c-94lft subsys=endpoint level=info msg="Successful endpoint creation" containerID=2996dc4cd7 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1508 identity=40821 ipv4=10.0.0.12 ipv6= k8sPodName=openstack/neutron-server-d6fd8985c-94lft subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=e0a6b89e3f datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=671 identity=9294 ipv4=10.0.0.238 ipv6= k8sPodName=openstack/neutron-db-init-wgzfn subsys=endpoint level=info msg="Successful endpoint creation" containerID=e0a6b89e3f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=671 identity=9294 ipv4=10.0.0.238 ipv6= k8sPodName=openstack/neutron-db-init-wgzfn subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=e0a6b89e3f endpointID=671 k8sNamespace=openstack k8sPodName=neutron-db-init-wgzfn subsys=daemon level=info msg="Releasing key" key="[k8s:application=neutron k8s:batch.kubernetes.io/controller-uid=ecf726c3-c299-4577-a346-37e5c4ccb0cf k8s:batch.kubernetes.io/job-name=neutron-db-init k8s:component=db-init k8s:controller-uid=ecf726c3-c299-4577-a346-37e5c4ccb0cf k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=neutron-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=neutron-db-init k8s:release_group=neutron]" subsys=allocator level=info msg="Removed endpoint" containerID=e0a6b89e3f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=671 identity=9294 ipv4=10.0.0.238 ipv6= k8sPodName=openstack/neutron-db-init-wgzfn subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.250 e9f8c7af-b82e-4455-bf4a-fe31451bd2cd default }" containerID=a000aec9a672cff8fe26f687038f5c7f026b7e59d25720e522744e731aaf9134 datapathConfiguration="&{false false false false false }" interface=lxcc2f1fdb90673 k8sPodName=openstack/neutron-db-sync-dcnb2 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a000aec9a6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=803 ipv4=10.0.0.250 ipv6= k8sPodName=openstack/neutron-db-sync-dcnb2 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a000aec9a6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=803 identityLabels="k8s:application=neutron,k8s:batch.kubernetes.io/controller-uid=3b808d4f-7a35-43fd-8680-3ccb71d17cfc,k8s:batch.kubernetes.io/job-name=neutron-db-sync,k8s:component=db-sync,k8s:controller-uid=3b808d4f-7a35-43fd-8680-3ccb71d17cfc,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=neutron-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=neutron-db-sync,k8s:release_group=neutron" ipv4=10.0.0.250 ipv6= k8sPodName=openstack/neutron-db-sync-dcnb2 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=neutron;k8s:batch.kubernetes.io/controller-uid=3b808d4f-7a35-43fd-8680-3ccb71d17cfc;k8s:batch.kubernetes.io/job-name=neutron-db-sync;k8s:component=db-sync;k8s:controller-uid=3b808d4f-7a35-43fd-8680-3ccb71d17cfc;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=neutron-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=neutron-db-sync;k8s:release_group=neutron;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=a000aec9a6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=803 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.250 ipv6= k8sPodName=openstack/neutron-db-sync-dcnb2 line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=a000aec9a6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=803 identity=54609 identityLabels="k8s:application=neutron,k8s:batch.kubernetes.io/controller-uid=3b808d4f-7a35-43fd-8680-3ccb71d17cfc,k8s:batch.kubernetes.io/job-name=neutron-db-sync,k8s:component=db-sync,k8s:controller-uid=3b808d4f-7a35-43fd-8680-3ccb71d17cfc,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=neutron-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=neutron-db-sync,k8s:release_group=neutron" ipv4=10.0.0.250 ipv6= k8sPodName=openstack/neutron-db-sync-dcnb2 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a000aec9a6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=803 identity=54609 ipv4=10.0.0.250 ipv6= k8sPodName=openstack/neutron-db-sync-dcnb2 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a000aec9a6 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=803 identity=54609 ipv4=10.0.0.250 ipv6= k8sPodName=openstack/neutron-db-sync-dcnb2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=a000aec9a6 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=803 identity=54609 ipv4=10.0.0.250 ipv6= k8sPodName=openstack/neutron-db-sync-dcnb2 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=a000aec9a6 endpointID=803 k8sNamespace=openstack k8sPodName=neutron-db-sync-dcnb2 subsys=daemon level=info msg="Releasing key" key="[k8s:application=neutron k8s:batch.kubernetes.io/controller-uid=3b808d4f-7a35-43fd-8680-3ccb71d17cfc k8s:batch.kubernetes.io/job-name=neutron-db-sync k8s:component=db-sync k8s:controller-uid=3b808d4f-7a35-43fd-8680-3ccb71d17cfc k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=neutron-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=neutron-db-sync k8s:release_group=neutron]" subsys=allocator level=info msg="Removed endpoint" containerID=a000aec9a6 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=803 identity=54609 ipv4=10.0.0.250 ipv6= k8sPodName=openstack/neutron-db-sync-dcnb2 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.190 f090c62c-f05e-4a0c-b581-687043143191 default }" containerID=e1f7eae8f6b096bd6b84ddb0c2d35f3ec13adda2accc51526f7ab4426db09032 datapathConfiguration="&{false false false false false }" interface=lxcb793fe6b1934 k8sPodName=openstack/neutron-rabbit-init-7dx27 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e1f7eae8f6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=192 ipv4=10.0.0.190 ipv6= k8sPodName=openstack/neutron-rabbit-init-7dx27 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e1f7eae8f6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=192 identityLabels="k8s:application=neutron,k8s:batch.kubernetes.io/controller-uid=695b5f18-d412-4a86-9825-99be90305119,k8s:batch.kubernetes.io/job-name=neutron-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=695b5f18-d412-4a86-9825-99be90305119,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=neutron-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=neutron-rabbit-init,k8s:release_group=neutron" ipv4=10.0.0.190 ipv6= k8sPodName=openstack/neutron-rabbit-init-7dx27 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=neutron;k8s:batch.kubernetes.io/controller-uid=695b5f18-d412-4a86-9825-99be90305119;k8s:batch.kubernetes.io/job-name=neutron-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=695b5f18-d412-4a86-9825-99be90305119;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=neutron-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=neutron-rabbit-init;k8s:release_group=neutron;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e1f7eae8f6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=192 identity=37432 identityLabels="k8s:application=neutron,k8s:batch.kubernetes.io/controller-uid=695b5f18-d412-4a86-9825-99be90305119,k8s:batch.kubernetes.io/job-name=neutron-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=695b5f18-d412-4a86-9825-99be90305119,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=neutron-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=neutron-rabbit-init,k8s:release_group=neutron" ipv4=10.0.0.190 ipv6= k8sPodName=openstack/neutron-rabbit-init-7dx27 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e1f7eae8f6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=192 identity=37432 ipv4=10.0.0.190 ipv6= k8sPodName=openstack/neutron-rabbit-init-7dx27 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=e1f7eae8f6 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=192 identity=37432 ipv4=10.0.0.190 ipv6= k8sPodName=openstack/neutron-rabbit-init-7dx27 subsys=endpoint level=info msg="Successful endpoint creation" containerID=e1f7eae8f6 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=192 identity=37432 ipv4=10.0.0.190 ipv6= k8sPodName=openstack/neutron-rabbit-init-7dx27 subsys=daemon level=info msg="Delete endpoint request" containerID=e1f7eae8f6 endpointID=192 k8sNamespace=openstack k8sPodName=neutron-rabbit-init-7dx27 subsys=daemon level=info msg="Releasing key" key="[k8s:application=neutron k8s:batch.kubernetes.io/controller-uid=695b5f18-d412-4a86-9825-99be90305119 k8s:batch.kubernetes.io/job-name=neutron-rabbit-init k8s:component=rabbit-init k8s:controller-uid=695b5f18-d412-4a86-9825-99be90305119 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=neutron-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=neutron-rabbit-init k8s:release_group=neutron]" subsys=allocator level=info msg="Removed endpoint" containerID=e1f7eae8f6 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=192 identity=37432 ipv4=10.0.0.190 ipv6= k8sPodName=openstack/neutron-rabbit-init-7dx27 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.144 09c44b96-554d-4b19-b6c5-b93f4acc58ad default }" containerID=966ecc56b16f3ccc785b11297f9a70e3af2c9f2d17a78aefb1b937f3f3240530 datapathConfiguration="&{false false false false false }" interface=lxc17888c3afc23 k8sPodName=openstack/neutron-ks-service-cgs5t labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=966ecc56b1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1776 ipv4=10.0.0.144 ipv6= k8sPodName=openstack/neutron-ks-service-cgs5t subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=966ecc56b1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1776 identityLabels="k8s:application=neutron,k8s:batch.kubernetes.io/controller-uid=8dbc86fa-2633-465b-9e6e-c4203989a9e5,k8s:batch.kubernetes.io/job-name=neutron-ks-service,k8s:component=ks-service,k8s:controller-uid=8dbc86fa-2633-465b-9e6e-c4203989a9e5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=neutron-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=neutron-ks-service,k8s:release_group=neutron" ipv4=10.0.0.144 ipv6= k8sPodName=openstack/neutron-ks-service-cgs5t subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=966ecc56b1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1776 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.144 ipv6= k8sPodName=openstack/neutron-ks-service-cgs5t line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=neutron;k8s:batch.kubernetes.io/controller-uid=8dbc86fa-2633-465b-9e6e-c4203989a9e5;k8s:batch.kubernetes.io/job-name=neutron-ks-service;k8s:component=ks-service;k8s:controller-uid=8dbc86fa-2633-465b-9e6e-c4203989a9e5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=neutron-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=neutron-ks-service;k8s:release_group=neutron;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=966ecc56b1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1776 identity=9271 identityLabels="k8s:application=neutron,k8s:batch.kubernetes.io/controller-uid=8dbc86fa-2633-465b-9e6e-c4203989a9e5,k8s:batch.kubernetes.io/job-name=neutron-ks-service,k8s:component=ks-service,k8s:controller-uid=8dbc86fa-2633-465b-9e6e-c4203989a9e5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=neutron-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=neutron-ks-service,k8s:release_group=neutron" ipv4=10.0.0.144 ipv6= k8sPodName=openstack/neutron-ks-service-cgs5t oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=966ecc56b1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1776 identity=9271 ipv4=10.0.0.144 ipv6= k8sPodName=openstack/neutron-ks-service-cgs5t subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=966ecc56b1 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1776 identity=9271 ipv4=10.0.0.144 ipv6= k8sPodName=openstack/neutron-ks-service-cgs5t subsys=endpoint level=info msg="Successful endpoint creation" containerID=966ecc56b1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1776 identity=9271 ipv4=10.0.0.144 ipv6= k8sPodName=openstack/neutron-ks-service-cgs5t subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=966ecc56b1 endpointID=1776 k8sNamespace=openstack k8sPodName=neutron-ks-service-cgs5t subsys=daemon level=info msg="Releasing key" key="[k8s:application=neutron k8s:batch.kubernetes.io/controller-uid=8dbc86fa-2633-465b-9e6e-c4203989a9e5 k8s:batch.kubernetes.io/job-name=neutron-ks-service k8s:component=ks-service k8s:controller-uid=8dbc86fa-2633-465b-9e6e-c4203989a9e5 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=neutron-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=neutron-ks-service k8s:release_group=neutron]" subsys=allocator level=info msg="Removed endpoint" containerID=966ecc56b1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1776 identity=9271 ipv4=10.0.0.144 ipv6= k8sPodName=openstack/neutron-ks-service-cgs5t subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.193 5bddfe09-a2a5-44ee-a1cc-196eadceb4a4 default }" containerID=18574715d669afe8f4eeac36f81acff0767b77be3f01d88a24ce61bfb30f3675 datapathConfiguration="&{false false false false false }" interface=lxc87e030880082 k8sPodName=openstack/neutron-ks-endpoints-j6jrc labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=18574715d6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=216 ipv4=10.0.0.193 ipv6= k8sPodName=openstack/neutron-ks-endpoints-j6jrc subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=18574715d6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=216 identityLabels="k8s:application=neutron,k8s:batch.kubernetes.io/controller-uid=1532373a-1ca7-4a4e-98f3-f2843d7a6ea6,k8s:batch.kubernetes.io/job-name=neutron-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=1532373a-1ca7-4a4e-98f3-f2843d7a6ea6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=neutron-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=neutron-ks-endpoints,k8s:release_group=neutron" ipv4=10.0.0.193 ipv6= k8sPodName=openstack/neutron-ks-endpoints-j6jrc subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=neutron;k8s:batch.kubernetes.io/controller-uid=1532373a-1ca7-4a4e-98f3-f2843d7a6ea6;k8s:batch.kubernetes.io/job-name=neutron-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=1532373a-1ca7-4a4e-98f3-f2843d7a6ea6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=neutron-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=neutron-ks-endpoints;k8s:release_group=neutron;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=18574715d6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=216 identity=4220 identityLabels="k8s:application=neutron,k8s:batch.kubernetes.io/controller-uid=1532373a-1ca7-4a4e-98f3-f2843d7a6ea6,k8s:batch.kubernetes.io/job-name=neutron-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=1532373a-1ca7-4a4e-98f3-f2843d7a6ea6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=neutron-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=neutron-ks-endpoints,k8s:release_group=neutron" ipv4=10.0.0.193 ipv6= k8sPodName=openstack/neutron-ks-endpoints-j6jrc oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=18574715d6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=216 identity=4220 ipv4=10.0.0.193 ipv6= k8sPodName=openstack/neutron-ks-endpoints-j6jrc subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=18574715d6 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=216 identity=4220 ipv4=10.0.0.193 ipv6= k8sPodName=openstack/neutron-ks-endpoints-j6jrc subsys=endpoint level=info msg="Successful endpoint creation" containerID=18574715d6 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=216 identity=4220 ipv4=10.0.0.193 ipv6= k8sPodName=openstack/neutron-ks-endpoints-j6jrc subsys=daemon level=info msg="Delete endpoint request" containerID=18574715d6 endpointID=216 k8sNamespace=openstack k8sPodName=neutron-ks-endpoints-j6jrc subsys=daemon level=info msg="Releasing key" key="[k8s:application=neutron k8s:batch.kubernetes.io/controller-uid=1532373a-1ca7-4a4e-98f3-f2843d7a6ea6 k8s:batch.kubernetes.io/job-name=neutron-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=1532373a-1ca7-4a4e-98f3-f2843d7a6ea6 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=neutron-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=neutron-ks-endpoints k8s:release_group=neutron]" subsys=allocator level=info msg="Removed endpoint" containerID=18574715d6 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=216 identity=4220 ipv4=10.0.0.193 ipv6= k8sPodName=openstack/neutron-ks-endpoints-j6jrc subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.13 987fc6dc-f56c-4f5b-8b70-6a1a053b4890 default }" containerID=8f265e903e36fb6381f8c006665923bc33bacf7f08ba900b32f68fb492615e19 datapathConfiguration="&{false false false false false }" interface=lxc6df94d21ac98 k8sPodName=openstack/neutron-ks-user-q596f labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8f265e903e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3816 ipv4=10.0.0.13 ipv6= k8sPodName=openstack/neutron-ks-user-q596f subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8f265e903e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3816 identityLabels="k8s:application=neutron,k8s:batch.kubernetes.io/controller-uid=53c4ae1f-614e-4fdd-b005-8bafdbd97290,k8s:batch.kubernetes.io/job-name=neutron-ks-user,k8s:component=ks-user,k8s:controller-uid=53c4ae1f-614e-4fdd-b005-8bafdbd97290,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=neutron-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=neutron-ks-user,k8s:release_group=neutron" ipv4=10.0.0.13 ipv6= k8sPodName=openstack/neutron-ks-user-q596f subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=neutron;k8s:batch.kubernetes.io/controller-uid=53c4ae1f-614e-4fdd-b005-8bafdbd97290;k8s:batch.kubernetes.io/job-name=neutron-ks-user;k8s:component=ks-user;k8s:controller-uid=53c4ae1f-614e-4fdd-b005-8bafdbd97290;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=neutron-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=neutron-ks-user;k8s:release_group=neutron;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8f265e903e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3816 identity=19256 identityLabels="k8s:application=neutron,k8s:batch.kubernetes.io/controller-uid=53c4ae1f-614e-4fdd-b005-8bafdbd97290,k8s:batch.kubernetes.io/job-name=neutron-ks-user,k8s:component=ks-user,k8s:controller-uid=53c4ae1f-614e-4fdd-b005-8bafdbd97290,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=neutron-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=neutron-ks-user,k8s:release_group=neutron" ipv4=10.0.0.13 ipv6= k8sPodName=openstack/neutron-ks-user-q596f oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8f265e903e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3816 identity=19256 ipv4=10.0.0.13 ipv6= k8sPodName=openstack/neutron-ks-user-q596f subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=8f265e903e datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3816 identity=19256 ipv4=10.0.0.13 ipv6= k8sPodName=openstack/neutron-ks-user-q596f subsys=endpoint level=info msg="Successful endpoint creation" containerID=8f265e903e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3816 identity=19256 ipv4=10.0.0.13 ipv6= k8sPodName=openstack/neutron-ks-user-q596f subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=8f265e903e endpointID=3816 k8sNamespace=openstack k8sPodName=neutron-ks-user-q596f subsys=daemon level=info msg="Releasing key" key="[k8s:application=neutron k8s:batch.kubernetes.io/controller-uid=53c4ae1f-614e-4fdd-b005-8bafdbd97290 k8s:batch.kubernetes.io/job-name=neutron-ks-user k8s:component=ks-user k8s:controller-uid=53c4ae1f-614e-4fdd-b005-8bafdbd97290 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=neutron-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=neutron-ks-user k8s:release_group=neutron]" subsys=allocator level=info msg="Removed endpoint" containerID=8f265e903e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3816 identity=19256 ipv4=10.0.0.13 ipv6= k8sPodName=openstack/neutron-ks-user-q596f subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.125 83268321-de08-497c-8e56-7bac33470525 default }" containerID=a6b1d0ba2a4627d9cea376aa767b8e21f9d4bc60362de4b67616a8508c5198b8 datapathConfiguration="&{false false false false false }" interface=lxcaa9e89665c87 k8sPodName=local-path-storage/helper-pod-create-pvc-fae97555-8adb-4a85-a5ac-2651a38521a9 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a6b1d0ba2a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=934 ipv4=10.0.0.125 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-fae97555-8adb-4a85-a5ac-2651a38521a9 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a6b1d0ba2a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=934 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.125 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-fae97555-8adb-4a85-a5ac-2651a38521a9 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a6b1d0ba2a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=934 identity=2052 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.125 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-fae97555-8adb-4a85-a5ac-2651a38521a9 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a6b1d0ba2a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=934 identity=2052 ipv4=10.0.0.125 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-fae97555-8adb-4a85-a5ac-2651a38521a9 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a6b1d0ba2a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=934 identity=2052 ipv4=10.0.0.125 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-fae97555-8adb-4a85-a5ac-2651a38521a9 subsys=endpoint level=info msg="Successful endpoint creation" containerID=a6b1d0ba2a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=934 identity=2052 ipv4=10.0.0.125 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-fae97555-8adb-4a85-a5ac-2651a38521a9 subsys=daemon level=info msg="Delete endpoint request" containerID=a6b1d0ba2a endpointID=934 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-fae97555-8adb-4a85-a5ac-2651a38521a9 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=a6b1d0ba2a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=934 identity=2052 ipv4=10.0.0.125 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-fae97555-8adb-4a85-a5ac-2651a38521a9 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.142 57226823-2218-4e02-b3a7-f279c8b730df default }" containerID=ba33d6cbeb8b9d6bd59b5c447727bf0832a2203278d5e567b3173c8e8b2182f8 datapathConfiguration="&{false false false false false }" interface=lxc08cf36b64c10 k8sPodName=openstack/rabbitmq-heat-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ba33d6cbeb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2641 ipv4=10.0.0.142 ipv6= k8sPodName=openstack/rabbitmq-heat-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ba33d6cbeb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2641 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-heat,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-heat-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-heat-server-0" ipv4=10.0.0.142 ipv6= k8sPodName=openstack/rabbitmq-heat-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-heat;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-heat-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-heat-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ba33d6cbeb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2641 identity=11163 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-heat,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-heat-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-heat-server-0" ipv4=10.0.0.142 ipv6= k8sPodName=openstack/rabbitmq-heat-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=ba33d6cbeb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2641 identity=11163 ipv4=10.0.0.142 ipv6= k8sPodName=openstack/rabbitmq-heat-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ba33d6cbeb datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2641 identity=11163 ipv4=10.0.0.142 ipv6= k8sPodName=openstack/rabbitmq-heat-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=ba33d6cbeb datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2641 identity=11163 ipv4=10.0.0.142 ipv6= k8sPodName=openstack/rabbitmq-heat-server-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.99 5b06d67f-81f8-41f0-b52c-0b0290800c18 default }" containerID=c00f9ea05b459010d04028295721c41e2827aedcdcd4e34a3c3ea1fe57754f0a datapathConfiguration="&{false false false false false }" interface=lxc6186c1325913 k8sPodName=openstack/heat-engine-6dcfd8d46c-dswrd labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c00f9ea05b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1108 ipv4=10.0.0.99 ipv6= k8sPodName=openstack/heat-engine-6dcfd8d46c-dswrd subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c00f9ea05b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1108 identityLabels="k8s:application=heat,k8s:component=engine,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=heat-engine,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=heat" ipv4=10.0.0.99 ipv6= k8sPodName=openstack/heat-engine-6dcfd8d46c-dswrd subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=heat;k8s:component=engine;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=heat-engine;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=heat;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c00f9ea05b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1108 identity=11002 identityLabels="k8s:application=heat,k8s:component=engine,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=heat-engine,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=heat" ipv4=10.0.0.99 ipv6= k8sPodName=openstack/heat-engine-6dcfd8d46c-dswrd oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c00f9ea05b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1108 identity=11002 ipv4=10.0.0.99 ipv6= k8sPodName=openstack/heat-engine-6dcfd8d46c-dswrd subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.109 28f09112-0f2c-47b3-ad73-805fc0a963a2 default }" containerID=c1f774a337baa6f2e1f3c439bf7c2b591a021f64fb9ac79367e8bfb296a94037 datapathConfiguration="&{false false false false false }" interface=lxc8cc2bb32d12b k8sPodName=openstack/heat-cfn-bcbd44876-76xfb labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c1f774a337 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3569 ipv4=10.0.0.109 ipv6= k8sPodName=openstack/heat-cfn-bcbd44876-76xfb subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c1f774a337 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3569 identityLabels="k8s:application=heat,k8s:component=cfn,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=heat-cfn,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=heat" ipv4=10.0.0.109 ipv6= k8sPodName=openstack/heat-cfn-bcbd44876-76xfb subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=heat;k8s:component=cfn;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=heat-cfn;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=heat;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c1f774a337 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3569 identity=7342 identityLabels="k8s:application=heat,k8s:component=cfn,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=heat-cfn,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=heat" ipv4=10.0.0.109 ipv6= k8sPodName=openstack/heat-cfn-bcbd44876-76xfb oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c1f774a337 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3569 identity=7342 ipv4=10.0.0.109 ipv6= k8sPodName=openstack/heat-cfn-bcbd44876-76xfb subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c00f9ea05b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1108 identity=11002 ipv4=10.0.0.99 ipv6= k8sPodName=openstack/heat-engine-6dcfd8d46c-dswrd subsys=endpoint level=info msg="Successful endpoint creation" containerID=c00f9ea05b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1108 identity=11002 ipv4=10.0.0.99 ipv6= k8sPodName=openstack/heat-engine-6dcfd8d46c-dswrd subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.154 f1350696-c8e2-46a7-a04b-3bb0ed89137d default }" containerID=d260d9c3c28ff4dfd6e3d264ce59e21b14c0b4ac2031c46984141efb73cd1cb4 datapathConfiguration="&{false false false false false }" interface=lxcee4660087af6 k8sPodName=openstack/heat-api-5fdc8ccf46-2vwcw labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d260d9c3c2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=619 ipv4=10.0.0.154 ipv6= k8sPodName=openstack/heat-api-5fdc8ccf46-2vwcw subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d260d9c3c2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=619 identityLabels="k8s:application=heat,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=heat-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=heat" ipv4=10.0.0.154 ipv6= k8sPodName=openstack/heat-api-5fdc8ccf46-2vwcw subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=heat;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=heat-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=heat;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d260d9c3c2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=619 identity=55471 identityLabels="k8s:application=heat,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=heat-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=heat" ipv4=10.0.0.154 ipv6= k8sPodName=openstack/heat-api-5fdc8ccf46-2vwcw oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d260d9c3c2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=619 identity=55471 ipv4=10.0.0.154 ipv6= k8sPodName=openstack/heat-api-5fdc8ccf46-2vwcw subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.78 25622441-424d-4065-b70c-2b7dd75bb6b7 default }" containerID=d83cc8aec38fd225bb8ee5097098da01bf32c81f370ed67c6b704f11e2c7dceb datapathConfiguration="&{false false false false false }" interface=lxca2cda5bb6112 k8sPodName=openstack/heat-db-init-5sp5w labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d83cc8aec3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2991 ipv4=10.0.0.78 ipv6= k8sPodName=openstack/heat-db-init-5sp5w subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d83cc8aec3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2991 identityLabels="k8s:application=heat,k8s:batch.kubernetes.io/controller-uid=80cdc382-fdda-4c3f-926b-444348b17c4a,k8s:batch.kubernetes.io/job-name=heat-db-init,k8s:component=db-init,k8s:controller-uid=80cdc382-fdda-4c3f-926b-444348b17c4a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=heat-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=heat-db-init,k8s:release_group=heat" ipv4=10.0.0.78 ipv6= k8sPodName=openstack/heat-db-init-5sp5w subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=heat;k8s:batch.kubernetes.io/controller-uid=80cdc382-fdda-4c3f-926b-444348b17c4a;k8s:batch.kubernetes.io/job-name=heat-db-init;k8s:component=db-init;k8s:controller-uid=80cdc382-fdda-4c3f-926b-444348b17c4a;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=heat-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=heat-db-init;k8s:release_group=heat;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d83cc8aec3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2991 identity=59629 identityLabels="k8s:application=heat,k8s:batch.kubernetes.io/controller-uid=80cdc382-fdda-4c3f-926b-444348b17c4a,k8s:batch.kubernetes.io/job-name=heat-db-init,k8s:component=db-init,k8s:controller-uid=80cdc382-fdda-4c3f-926b-444348b17c4a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=heat-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=heat-db-init,k8s:release_group=heat" ipv4=10.0.0.78 ipv6= k8sPodName=openstack/heat-db-init-5sp5w oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d83cc8aec3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2991 identity=59629 ipv4=10.0.0.78 ipv6= k8sPodName=openstack/heat-db-init-5sp5w subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c1f774a337 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3569 identity=7342 ipv4=10.0.0.109 ipv6= k8sPodName=openstack/heat-cfn-bcbd44876-76xfb subsys=endpoint level=info msg="Successful endpoint creation" containerID=c1f774a337 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3569 identity=7342 ipv4=10.0.0.109 ipv6= k8sPodName=openstack/heat-cfn-bcbd44876-76xfb subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=d260d9c3c2 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=619 identity=55471 ipv4=10.0.0.154 ipv6= k8sPodName=openstack/heat-api-5fdc8ccf46-2vwcw subsys=endpoint level=info msg="Successful endpoint creation" containerID=d260d9c3c2 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=619 identity=55471 ipv4=10.0.0.154 ipv6= k8sPodName=openstack/heat-api-5fdc8ccf46-2vwcw subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=d83cc8aec3 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2991 identity=59629 ipv4=10.0.0.78 ipv6= k8sPodName=openstack/heat-db-init-5sp5w subsys=endpoint level=info msg="Successful endpoint creation" containerID=d83cc8aec3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2991 identity=59629 ipv4=10.0.0.78 ipv6= k8sPodName=openstack/heat-db-init-5sp5w subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=d83cc8aec3 endpointID=2991 k8sNamespace=openstack k8sPodName=heat-db-init-5sp5w subsys=daemon level=info msg="Releasing key" key="[k8s:application=heat k8s:batch.kubernetes.io/controller-uid=80cdc382-fdda-4c3f-926b-444348b17c4a k8s:batch.kubernetes.io/job-name=heat-db-init k8s:component=db-init k8s:controller-uid=80cdc382-fdda-4c3f-926b-444348b17c4a k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=heat-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=heat-db-init k8s:release_group=heat]" subsys=allocator level=info msg="Removed endpoint" containerID=d83cc8aec3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2991 identity=59629 ipv4=10.0.0.78 ipv6= k8sPodName=openstack/heat-db-init-5sp5w subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.217 348815eb-53ca-49ad-9dea-3f99e2f427ec default }" containerID=1c93e94d175954d10bc5bdcfddc5c5782ea5fcf910b273f0f4cce374d0e13521 datapathConfiguration="&{false false false false false }" interface=lxc6287590ad42f k8sPodName=openstack/heat-db-sync-msggd labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1c93e94d17 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1945 ipv4=10.0.0.217 ipv6= k8sPodName=openstack/heat-db-sync-msggd subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1c93e94d17 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1945 identityLabels="k8s:application=heat,k8s:batch.kubernetes.io/controller-uid=4ccfb356-9c50-4d5e-8f22-8132bd2b2148,k8s:batch.kubernetes.io/job-name=heat-db-sync,k8s:component=db-sync,k8s:controller-uid=4ccfb356-9c50-4d5e-8f22-8132bd2b2148,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=heat-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=heat-db-sync,k8s:release_group=heat" ipv4=10.0.0.217 ipv6= k8sPodName=openstack/heat-db-sync-msggd subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=1c93e94d17 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1945 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.217 ipv6= k8sPodName=openstack/heat-db-sync-msggd line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=heat;k8s:batch.kubernetes.io/controller-uid=4ccfb356-9c50-4d5e-8f22-8132bd2b2148;k8s:batch.kubernetes.io/job-name=heat-db-sync;k8s:component=db-sync;k8s:controller-uid=4ccfb356-9c50-4d5e-8f22-8132bd2b2148;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=heat-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=heat-db-sync;k8s:release_group=heat;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1c93e94d17 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1945 identity=11436 identityLabels="k8s:application=heat,k8s:batch.kubernetes.io/controller-uid=4ccfb356-9c50-4d5e-8f22-8132bd2b2148,k8s:batch.kubernetes.io/job-name=heat-db-sync,k8s:component=db-sync,k8s:controller-uid=4ccfb356-9c50-4d5e-8f22-8132bd2b2148,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=heat-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=heat-db-sync,k8s:release_group=heat" ipv4=10.0.0.217 ipv6= k8sPodName=openstack/heat-db-sync-msggd oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1c93e94d17 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1945 identity=11436 ipv4=10.0.0.217 ipv6= k8sPodName=openstack/heat-db-sync-msggd subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=1c93e94d17 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1945 identity=11436 ipv4=10.0.0.217 ipv6= k8sPodName=openstack/heat-db-sync-msggd subsys=endpoint level=info msg="Successful endpoint creation" containerID=1c93e94d17 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1945 identity=11436 ipv4=10.0.0.217 ipv6= k8sPodName=openstack/heat-db-sync-msggd subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=1c93e94d17 endpointID=1945 k8sNamespace=openstack k8sPodName=heat-db-sync-msggd subsys=daemon level=info msg="Releasing key" key="[k8s:application=heat k8s:batch.kubernetes.io/controller-uid=4ccfb356-9c50-4d5e-8f22-8132bd2b2148 k8s:batch.kubernetes.io/job-name=heat-db-sync k8s:component=db-sync k8s:controller-uid=4ccfb356-9c50-4d5e-8f22-8132bd2b2148 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=heat-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=heat-db-sync k8s:release_group=heat]" subsys=allocator level=info msg="Removed endpoint" containerID=1c93e94d17 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1945 identity=11436 ipv4=10.0.0.217 ipv6= k8sPodName=openstack/heat-db-sync-msggd subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.202 a2f2d37d-d18c-49e1-9c51-ffdb7d997503 default }" containerID=333963435c241ac56c9b0bd8eaafb3903a99690cc4b76c7fe1af2ef01509b3c2 datapathConfiguration="&{false false false false false }" interface=lxc04d3500ecb9a k8sPodName=openstack/heat-rabbit-init-d65cv labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=333963435c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=688 ipv4=10.0.0.202 ipv6= k8sPodName=openstack/heat-rabbit-init-d65cv subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=333963435c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=688 identityLabels="k8s:application=heat,k8s:batch.kubernetes.io/controller-uid=e0f93495-e393-425d-a501-b6d2be0979de,k8s:batch.kubernetes.io/job-name=heat-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=e0f93495-e393-425d-a501-b6d2be0979de,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=heat-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=heat-rabbit-init,k8s:release_group=heat" ipv4=10.0.0.202 ipv6= k8sPodName=openstack/heat-rabbit-init-d65cv subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=heat;k8s:batch.kubernetes.io/controller-uid=e0f93495-e393-425d-a501-b6d2be0979de;k8s:batch.kubernetes.io/job-name=heat-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=e0f93495-e393-425d-a501-b6d2be0979de;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=heat-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=heat-rabbit-init;k8s:release_group=heat;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=333963435c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=688 identity=21479 identityLabels="k8s:application=heat,k8s:batch.kubernetes.io/controller-uid=e0f93495-e393-425d-a501-b6d2be0979de,k8s:batch.kubernetes.io/job-name=heat-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=e0f93495-e393-425d-a501-b6d2be0979de,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=heat-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=heat-rabbit-init,k8s:release_group=heat" ipv4=10.0.0.202 ipv6= k8sPodName=openstack/heat-rabbit-init-d65cv oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=333963435c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=688 identity=21479 ipv4=10.0.0.202 ipv6= k8sPodName=openstack/heat-rabbit-init-d65cv subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=333963435c datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=688 identity=21479 ipv4=10.0.0.202 ipv6= k8sPodName=openstack/heat-rabbit-init-d65cv subsys=endpoint level=info msg="Successful endpoint creation" containerID=333963435c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=688 identity=21479 ipv4=10.0.0.202 ipv6= k8sPodName=openstack/heat-rabbit-init-d65cv subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=333963435c endpointID=688 k8sNamespace=openstack k8sPodName=heat-rabbit-init-d65cv subsys=daemon level=info msg="Releasing key" key="[k8s:application=heat k8s:batch.kubernetes.io/controller-uid=e0f93495-e393-425d-a501-b6d2be0979de k8s:batch.kubernetes.io/job-name=heat-rabbit-init k8s:component=rabbit-init k8s:controller-uid=e0f93495-e393-425d-a501-b6d2be0979de k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=heat-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=heat-rabbit-init k8s:release_group=heat]" subsys=allocator level=info msg="Removed endpoint" containerID=333963435c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=688 identity=21479 ipv4=10.0.0.202 ipv6= k8sPodName=openstack/heat-rabbit-init-d65cv subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.75 0f2d1829-87fb-4900-890a-e12c73d74201 default }" containerID=33c08b740803bd9d1f2d76a722558ace26d5198669963823532ca03d1ce3daf0 datapathConfiguration="&{false false false false false }" interface=lxc4239d0bc1463 k8sPodName=openstack/heat-ks-service-dj4x6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=33c08b7408 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3565 ipv4=10.0.0.75 ipv6= k8sPodName=openstack/heat-ks-service-dj4x6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=33c08b7408 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3565 identityLabels="k8s:application=heat,k8s:batch.kubernetes.io/controller-uid=a0495340-e6a3-445c-b40d-5882c2d4bc7c,k8s:batch.kubernetes.io/job-name=heat-ks-service,k8s:component=ks-service,k8s:controller-uid=a0495340-e6a3-445c-b40d-5882c2d4bc7c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=heat-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=heat-ks-service,k8s:release_group=heat" ipv4=10.0.0.75 ipv6= k8sPodName=openstack/heat-ks-service-dj4x6 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=heat;k8s:batch.kubernetes.io/controller-uid=a0495340-e6a3-445c-b40d-5882c2d4bc7c;k8s:batch.kubernetes.io/job-name=heat-ks-service;k8s:component=ks-service;k8s:controller-uid=a0495340-e6a3-445c-b40d-5882c2d4bc7c;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=heat-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=heat-ks-service;k8s:release_group=heat;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=33c08b7408 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3565 identity=1593 identityLabels="k8s:application=heat,k8s:batch.kubernetes.io/controller-uid=a0495340-e6a3-445c-b40d-5882c2d4bc7c,k8s:batch.kubernetes.io/job-name=heat-ks-service,k8s:component=ks-service,k8s:controller-uid=a0495340-e6a3-445c-b40d-5882c2d4bc7c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=heat-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=heat-ks-service,k8s:release_group=heat" ipv4=10.0.0.75 ipv6= k8sPodName=openstack/heat-ks-service-dj4x6 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=33c08b7408 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3565 identity=1593 ipv4=10.0.0.75 ipv6= k8sPodName=openstack/heat-ks-service-dj4x6 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=33c08b7408 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3565 identity=1593 ipv4=10.0.0.75 ipv6= k8sPodName=openstack/heat-ks-service-dj4x6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=33c08b7408 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3565 identity=1593 ipv4=10.0.0.75 ipv6= k8sPodName=openstack/heat-ks-service-dj4x6 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=33c08b7408 endpointID=3565 k8sNamespace=openstack k8sPodName=heat-ks-service-dj4x6 subsys=daemon level=info msg="Releasing key" key="[k8s:application=heat k8s:batch.kubernetes.io/controller-uid=a0495340-e6a3-445c-b40d-5882c2d4bc7c k8s:batch.kubernetes.io/job-name=heat-ks-service k8s:component=ks-service k8s:controller-uid=a0495340-e6a3-445c-b40d-5882c2d4bc7c k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=heat-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=heat-ks-service k8s:release_group=heat]" subsys=allocator level=info msg="Removed endpoint" containerID=33c08b7408 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3565 identity=1593 ipv4=10.0.0.75 ipv6= k8sPodName=openstack/heat-ks-service-dj4x6 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.60 1fd8e827-1b1f-4a95-9b8e-a1e428929928 default }" containerID=04d86421efe3218f087786aaa6888f306d9224bb3300cbaaeaf126d2197b069b datapathConfiguration="&{false false false false false }" interface=lxcc8769fe90dca k8sPodName=openstack/heat-ks-endpoints-jpbrv labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=04d86421ef datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=561 ipv4=10.0.0.60 ipv6= k8sPodName=openstack/heat-ks-endpoints-jpbrv subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=04d86421ef datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=561 identityLabels="k8s:application=heat,k8s:batch.kubernetes.io/controller-uid=b86e1b44-9e97-4522-b33f-fc0a66594924,k8s:batch.kubernetes.io/job-name=heat-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=b86e1b44-9e97-4522-b33f-fc0a66594924,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=heat-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=heat-ks-endpoints,k8s:release_group=heat" ipv4=10.0.0.60 ipv6= k8sPodName=openstack/heat-ks-endpoints-jpbrv subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=heat;k8s:batch.kubernetes.io/controller-uid=b86e1b44-9e97-4522-b33f-fc0a66594924;k8s:batch.kubernetes.io/job-name=heat-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=b86e1b44-9e97-4522-b33f-fc0a66594924;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=heat-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=heat-ks-endpoints;k8s:release_group=heat;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=04d86421ef datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=561 identity=16778 identityLabels="k8s:application=heat,k8s:batch.kubernetes.io/controller-uid=b86e1b44-9e97-4522-b33f-fc0a66594924,k8s:batch.kubernetes.io/job-name=heat-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=b86e1b44-9e97-4522-b33f-fc0a66594924,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=heat-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=heat-ks-endpoints,k8s:release_group=heat" ipv4=10.0.0.60 ipv6= k8sPodName=openstack/heat-ks-endpoints-jpbrv oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=04d86421ef datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=561 identity=16778 ipv4=10.0.0.60 ipv6= k8sPodName=openstack/heat-ks-endpoints-jpbrv subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=04d86421ef datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=561 identity=16778 ipv4=10.0.0.60 ipv6= k8sPodName=openstack/heat-ks-endpoints-jpbrv subsys=endpoint level=info msg="Successful endpoint creation" containerID=04d86421ef datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=561 identity=16778 ipv4=10.0.0.60 ipv6= k8sPodName=openstack/heat-ks-endpoints-jpbrv subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=04d86421ef endpointID=561 k8sNamespace=openstack k8sPodName=heat-ks-endpoints-jpbrv subsys=daemon level=info msg="Releasing key" key="[k8s:application=heat k8s:batch.kubernetes.io/controller-uid=b86e1b44-9e97-4522-b33f-fc0a66594924 k8s:batch.kubernetes.io/job-name=heat-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=b86e1b44-9e97-4522-b33f-fc0a66594924 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=heat-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=heat-ks-endpoints k8s:release_group=heat]" subsys=allocator level=info msg="Removed endpoint" containerID=04d86421ef datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=561 identity=16778 ipv4=10.0.0.60 ipv6= k8sPodName=openstack/heat-ks-endpoints-jpbrv subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.46 d9755bab-596b-43bc-8bd3-ff60a868b27b default }" containerID=511614ca02e8aee471031dfe25c8e5035ecf72040e2df1698cf6db870b289d1d datapathConfiguration="&{false false false false false }" interface=lxc70cf30d57dfc k8sPodName=openstack/heat-ks-user-d2gvw labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=511614ca02 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=112 ipv4=10.0.0.46 ipv6= k8sPodName=openstack/heat-ks-user-d2gvw subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=511614ca02 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=112 identityLabels="k8s:application=heat,k8s:batch.kubernetes.io/controller-uid=89d56d5e-48e1-4ed1-93ac-cd12b58c54ed,k8s:batch.kubernetes.io/job-name=heat-ks-user,k8s:component=ks-user,k8s:controller-uid=89d56d5e-48e1-4ed1-93ac-cd12b58c54ed,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=heat-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=heat-ks-user,k8s:release_group=heat" ipv4=10.0.0.46 ipv6= k8sPodName=openstack/heat-ks-user-d2gvw subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=heat;k8s:batch.kubernetes.io/controller-uid=89d56d5e-48e1-4ed1-93ac-cd12b58c54ed;k8s:batch.kubernetes.io/job-name=heat-ks-user;k8s:component=ks-user;k8s:controller-uid=89d56d5e-48e1-4ed1-93ac-cd12b58c54ed;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=heat-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=heat-ks-user;k8s:release_group=heat;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=511614ca02 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=112 identity=7450 identityLabels="k8s:application=heat,k8s:batch.kubernetes.io/controller-uid=89d56d5e-48e1-4ed1-93ac-cd12b58c54ed,k8s:batch.kubernetes.io/job-name=heat-ks-user,k8s:component=ks-user,k8s:controller-uid=89d56d5e-48e1-4ed1-93ac-cd12b58c54ed,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=heat-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=heat-ks-user,k8s:release_group=heat" ipv4=10.0.0.46 ipv6= k8sPodName=openstack/heat-ks-user-d2gvw oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=511614ca02 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=112 identity=7450 ipv4=10.0.0.46 ipv6= k8sPodName=openstack/heat-ks-user-d2gvw subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=511614ca02 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=112 identity=7450 ipv4=10.0.0.46 ipv6= k8sPodName=openstack/heat-ks-user-d2gvw subsys=endpoint level=info msg="Successful endpoint creation" containerID=511614ca02 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=112 identity=7450 ipv4=10.0.0.46 ipv6= k8sPodName=openstack/heat-ks-user-d2gvw subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=511614ca02 endpointID=112 k8sNamespace=openstack k8sPodName=heat-ks-user-d2gvw subsys=daemon level=info msg="Releasing key" key="[k8s:application=heat k8s:batch.kubernetes.io/controller-uid=89d56d5e-48e1-4ed1-93ac-cd12b58c54ed k8s:batch.kubernetes.io/job-name=heat-ks-user k8s:component=ks-user k8s:controller-uid=89d56d5e-48e1-4ed1-93ac-cd12b58c54ed k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=heat-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=heat-ks-user k8s:release_group=heat]" subsys=allocator level=info msg="Removed endpoint" containerID=511614ca02 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=112 identity=7450 ipv4=10.0.0.46 ipv6= k8sPodName=openstack/heat-ks-user-d2gvw subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.42 686a065b-0762-4bfe-8229-a96cea24f45b default }" containerID=ee3d7d6513bd7b260ce2d6383d59c5201534a98311f3af0cb2432476c53548eb datapathConfiguration="&{false false false false false }" interface=lxc513cc1d90603 k8sPodName=openstack/heat-bootstrap-75jcx labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ee3d7d6513 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3672 ipv4=10.0.0.42 ipv6= k8sPodName=openstack/heat-bootstrap-75jcx subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ee3d7d6513 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3672 identityLabels="k8s:application=heat,k8s:batch.kubernetes.io/controller-uid=462c3c92-f0b3-417d-9ad2-23c694428edb,k8s:batch.kubernetes.io/job-name=heat-bootstrap,k8s:component=bootstrap,k8s:controller-uid=462c3c92-f0b3-417d-9ad2-23c694428edb,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=heat-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=heat-bootstrap,k8s:release_group=heat" ipv4=10.0.0.42 ipv6= k8sPodName=openstack/heat-bootstrap-75jcx subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=heat;k8s:batch.kubernetes.io/controller-uid=462c3c92-f0b3-417d-9ad2-23c694428edb;k8s:batch.kubernetes.io/job-name=heat-bootstrap;k8s:component=bootstrap;k8s:controller-uid=462c3c92-f0b3-417d-9ad2-23c694428edb;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=heat-bootstrap;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=heat-bootstrap;k8s:release_group=heat;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ee3d7d6513 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3672 identity=28417 identityLabels="k8s:application=heat,k8s:batch.kubernetes.io/controller-uid=462c3c92-f0b3-417d-9ad2-23c694428edb,k8s:batch.kubernetes.io/job-name=heat-bootstrap,k8s:component=bootstrap,k8s:controller-uid=462c3c92-f0b3-417d-9ad2-23c694428edb,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=heat-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=heat-bootstrap,k8s:release_group=heat" ipv4=10.0.0.42 ipv6= k8sPodName=openstack/heat-bootstrap-75jcx oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=ee3d7d6513 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3672 identity=28417 ipv4=10.0.0.42 ipv6= k8sPodName=openstack/heat-bootstrap-75jcx subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ee3d7d6513 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3672 identity=28417 ipv4=10.0.0.42 ipv6= k8sPodName=openstack/heat-bootstrap-75jcx subsys=endpoint level=info msg="Successful endpoint creation" containerID=ee3d7d6513 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3672 identity=28417 ipv4=10.0.0.42 ipv6= k8sPodName=openstack/heat-bootstrap-75jcx subsys=daemon level=info msg="Delete endpoint request" containerID=dd4aac89a3 endpointID=10 k8sNamespace=openstack k8sPodName=nova-cell-setup-kzf88 subsys=daemon level=info msg="Releasing key" key="[k8s:application=nova k8s:batch.kubernetes.io/controller-uid=166c875d-67a0-4e92-8580-1bd025ed3a7e k8s:batch.kubernetes.io/job-name=nova-cell-setup k8s:component=cell-setup k8s:controller-uid=166c875d-67a0-4e92-8580-1bd025ed3a7e k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=nova-cell-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=nova-cell-setup k8s:release_group=nova]" subsys=allocator level=info msg="Removed endpoint" containerID=dd4aac89a3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=10 identity=15875 ipv4=10.0.0.159 ipv6= k8sPodName=openstack/nova-cell-setup-kzf88 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.245 e8f86c42-cf6a-45bf-bed1-c4a8990155db default }" containerID=043635580d107729acdb3463f50c1a5359cb1373651d80e470086b1a735219c2 datapathConfiguration="&{false false false false false }" interface=lxc72f7ada69472 k8sPodName=openstack/heat-engine-cleaner-29766340-s5jmk labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=043635580d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1916 ipv4=10.0.0.245 ipv6= k8sPodName=openstack/heat-engine-cleaner-29766340-s5jmk subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=043635580d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1916 identityLabels="k8s:application=heat,k8s:batch.kubernetes.io/controller-uid=9d50673b-28b3-4e77-ad6e-345b79f3c8fc,k8s:batch.kubernetes.io/job-name=heat-engine-cleaner-29766340,k8s:component=engine-cleaner,k8s:controller-uid=9d50673b-28b3-4e77-ad6e-345b79f3c8fc,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=heat-engine-cleaner,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=heat-engine-cleaner-29766340,k8s:release_group=heat" ipv4=10.0.0.245 ipv6= k8sPodName=openstack/heat-engine-cleaner-29766340-s5jmk subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=heat;k8s:batch.kubernetes.io/controller-uid=9d50673b-28b3-4e77-ad6e-345b79f3c8fc;k8s:batch.kubernetes.io/job-name=heat-engine-cleaner-29766340;k8s:component=engine-cleaner;k8s:controller-uid=9d50673b-28b3-4e77-ad6e-345b79f3c8fc;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=heat-engine-cleaner;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=heat-engine-cleaner-29766340;k8s:release_group=heat;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=043635580d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1916 identity=7482 identityLabels="k8s:application=heat,k8s:batch.kubernetes.io/controller-uid=9d50673b-28b3-4e77-ad6e-345b79f3c8fc,k8s:batch.kubernetes.io/job-name=heat-engine-cleaner-29766340,k8s:component=engine-cleaner,k8s:controller-uid=9d50673b-28b3-4e77-ad6e-345b79f3c8fc,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=heat-engine-cleaner,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=heat-engine-cleaner-29766340,k8s:release_group=heat" ipv4=10.0.0.245 ipv6= k8sPodName=openstack/heat-engine-cleaner-29766340-s5jmk oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=043635580d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1916 identity=7482 ipv4=10.0.0.245 ipv6= k8sPodName=openstack/heat-engine-cleaner-29766340-s5jmk subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=043635580d datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1916 identity=7482 ipv4=10.0.0.245 ipv6= k8sPodName=openstack/heat-engine-cleaner-29766340-s5jmk subsys=endpoint level=info msg="Successful endpoint creation" containerID=043635580d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1916 identity=7482 ipv4=10.0.0.245 ipv6= k8sPodName=openstack/heat-engine-cleaner-29766340-s5jmk subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=ee3d7d6513 endpointID=3672 k8sNamespace=openstack k8sPodName=heat-bootstrap-75jcx subsys=daemon level=info msg="Releasing key" key="[k8s:application=heat k8s:batch.kubernetes.io/controller-uid=462c3c92-f0b3-417d-9ad2-23c694428edb k8s:batch.kubernetes.io/job-name=heat-bootstrap k8s:component=bootstrap k8s:controller-uid=462c3c92-f0b3-417d-9ad2-23c694428edb k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=heat-bootstrap k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=heat-bootstrap k8s:release_group=heat]" subsys=allocator level=info msg="Removed endpoint" containerID=ee3d7d6513 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3672 identity=28417 ipv4=10.0.0.42 ipv6= k8sPodName=openstack/heat-bootstrap-75jcx subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.100 07527846-20b9-4cad-b3e2-8e358f62d410 default }" containerID=18893649134749bad0be57d10123ab92492786b7539d8d0458a64ab4d6c58db4 datapathConfiguration="&{false false false false false }" interface=lxc9df80d63f54f k8sPodName=openstack/heat-domain-ks-user-fxgk4 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1889364913 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=493 ipv4=10.0.0.100 ipv6= k8sPodName=openstack/heat-domain-ks-user-fxgk4 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1889364913 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=493 identityLabels="k8s:application=heat,k8s:batch.kubernetes.io/controller-uid=b3ebcf73-25a6-4105-b621-7729317b80cd,k8s:batch.kubernetes.io/job-name=heat-domain-ks-user,k8s:component=ks-user,k8s:controller-uid=b3ebcf73-25a6-4105-b621-7729317b80cd,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=heat-ks-user-domain,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=heat-domain-ks-user,k8s:release_group=heat" ipv4=10.0.0.100 ipv6= k8sPodName=openstack/heat-domain-ks-user-fxgk4 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=heat;k8s:batch.kubernetes.io/controller-uid=b3ebcf73-25a6-4105-b621-7729317b80cd;k8s:batch.kubernetes.io/job-name=heat-domain-ks-user;k8s:component=ks-user;k8s:controller-uid=b3ebcf73-25a6-4105-b621-7729317b80cd;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=heat-ks-user-domain;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=heat-domain-ks-user;k8s:release_group=heat;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1889364913 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=493 identity=50601 identityLabels="k8s:application=heat,k8s:batch.kubernetes.io/controller-uid=b3ebcf73-25a6-4105-b621-7729317b80cd,k8s:batch.kubernetes.io/job-name=heat-domain-ks-user,k8s:component=ks-user,k8s:controller-uid=b3ebcf73-25a6-4105-b621-7729317b80cd,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=heat-ks-user-domain,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=heat-domain-ks-user,k8s:release_group=heat" ipv4=10.0.0.100 ipv6= k8sPodName=openstack/heat-domain-ks-user-fxgk4 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1889364913 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=493 identity=50601 ipv4=10.0.0.100 ipv6= k8sPodName=openstack/heat-domain-ks-user-fxgk4 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=1889364913 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=493 identity=50601 ipv4=10.0.0.100 ipv6= k8sPodName=openstack/heat-domain-ks-user-fxgk4 subsys=endpoint level=info msg="Successful endpoint creation" containerID=1889364913 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=493 identity=50601 ipv4=10.0.0.100 ipv6= k8sPodName=openstack/heat-domain-ks-user-fxgk4 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=1889364913 endpointID=493 k8sNamespace=openstack k8sPodName=heat-domain-ks-user-fxgk4 subsys=daemon level=info msg="Releasing key" key="[k8s:application=heat k8s:batch.kubernetes.io/controller-uid=b3ebcf73-25a6-4105-b621-7729317b80cd k8s:batch.kubernetes.io/job-name=heat-domain-ks-user k8s:component=ks-user k8s:controller-uid=b3ebcf73-25a6-4105-b621-7729317b80cd k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=heat-ks-user-domain k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=heat-domain-ks-user k8s:release_group=heat]" subsys=allocator level=info msg="Removed endpoint" containerID=1889364913 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=493 identity=50601 ipv4=10.0.0.100 ipv6= k8sPodName=openstack/heat-domain-ks-user-fxgk4 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.207 ab7174b9-510d-4fbf-bb08-4064dde86998 default }" containerID=105b455bc7c61c052bb08fbd97e979ba4808bdbbaa0b482b8504d871e45291b8 datapathConfiguration="&{false false false false false }" interface=lxcc031cab14f7b k8sPodName=openstack/heat-trusts-vms2z labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=105b455bc7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=794 ipv4=10.0.0.207 ipv6= k8sPodName=openstack/heat-trusts-vms2z subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=105b455bc7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=794 identityLabels="k8s:application=heat,k8s:batch.kubernetes.io/controller-uid=a145c07c-9c54-4124-ad7f-24bdf4bf04f5,k8s:batch.kubernetes.io/job-name=heat-trusts,k8s:component=trusts,k8s:controller-uid=a145c07c-9c54-4124-ad7f-24bdf4bf04f5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=heat-trusts,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=heat-trusts,k8s:release_group=heat" ipv4=10.0.0.207 ipv6= k8sPodName=openstack/heat-trusts-vms2z subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=heat;k8s:batch.kubernetes.io/controller-uid=a145c07c-9c54-4124-ad7f-24bdf4bf04f5;k8s:batch.kubernetes.io/job-name=heat-trusts;k8s:component=trusts;k8s:controller-uid=a145c07c-9c54-4124-ad7f-24bdf4bf04f5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=heat-trusts;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=heat-trusts;k8s:release_group=heat;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=105b455bc7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=794 identity=7630 identityLabels="k8s:application=heat,k8s:batch.kubernetes.io/controller-uid=a145c07c-9c54-4124-ad7f-24bdf4bf04f5,k8s:batch.kubernetes.io/job-name=heat-trusts,k8s:component=trusts,k8s:controller-uid=a145c07c-9c54-4124-ad7f-24bdf4bf04f5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=heat-trusts,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=heat-trusts,k8s:release_group=heat" ipv4=10.0.0.207 ipv6= k8sPodName=openstack/heat-trusts-vms2z oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=105b455bc7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=794 identity=7630 ipv4=10.0.0.207 ipv6= k8sPodName=openstack/heat-trusts-vms2z subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=105b455bc7 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=794 identity=7630 ipv4=10.0.0.207 ipv6= k8sPodName=openstack/heat-trusts-vms2z subsys=endpoint level=info msg="Successful endpoint creation" containerID=105b455bc7 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=794 identity=7630 ipv4=10.0.0.207 ipv6= k8sPodName=openstack/heat-trusts-vms2z subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=043635580d endpointID=1916 k8sNamespace=openstack k8sPodName=heat-engine-cleaner-29766340-s5jmk subsys=daemon level=info msg="Releasing key" key="[k8s:application=heat k8s:batch.kubernetes.io/controller-uid=9d50673b-28b3-4e77-ad6e-345b79f3c8fc k8s:batch.kubernetes.io/job-name=heat-engine-cleaner-29766340 k8s:component=engine-cleaner k8s:controller-uid=9d50673b-28b3-4e77-ad6e-345b79f3c8fc k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=heat-engine-cleaner k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=heat-engine-cleaner-29766340 k8s:release_group=heat]" subsys=allocator level=info msg="Removed endpoint" containerID=043635580d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1916 identity=7482 ipv4=10.0.0.245 ipv6= k8sPodName=openstack/heat-engine-cleaner-29766340-s5jmk subsys=endpoint level=info msg="Delete endpoint request" containerID=105b455bc7 endpointID=794 k8sNamespace=openstack k8sPodName=heat-trusts-vms2z subsys=daemon level=info msg="Releasing key" key="[k8s:application=heat k8s:batch.kubernetes.io/controller-uid=a145c07c-9c54-4124-ad7f-24bdf4bf04f5 k8s:batch.kubernetes.io/job-name=heat-trusts k8s:component=trusts k8s:controller-uid=a145c07c-9c54-4124-ad7f-24bdf4bf04f5 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=heat-trusts k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=heat-trusts k8s:release_group=heat]" subsys=allocator level=info msg="Removed endpoint" containerID=105b455bc7 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=794 identity=7630 ipv4=10.0.0.207 ipv6= k8sPodName=openstack/heat-trusts-vms2z subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.127 88dab6db-1fc5-4ede-818d-ff5ce7944043 default }" containerID=af1eb371ce8062ac092ab286fabbc7e96b662de19adfd4b125b5fea543a4ae2d datapathConfiguration="&{false false false false false }" interface=lxcd17864a0aebd k8sPodName=local-path-storage/helper-pod-create-pvc-772e066e-c48e-41f6-9fab-e600677d50bb labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=af1eb371ce datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=269 ipv4=10.0.0.127 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-772e066e-c48e-41f6-9fab-e600677d50bb subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=af1eb371ce datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=269 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.127 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-772e066e-c48e-41f6-9fab-e600677d50bb subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=af1eb371ce datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=269 identity=2052 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.127 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-772e066e-c48e-41f6-9fab-e600677d50bb oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=af1eb371ce datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=269 identity=2052 ipv4=10.0.0.127 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-772e066e-c48e-41f6-9fab-e600677d50bb subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=af1eb371ce datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=269 identity=2052 ipv4=10.0.0.127 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-772e066e-c48e-41f6-9fab-e600677d50bb subsys=endpoint level=info msg="Successful endpoint creation" containerID=af1eb371ce datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=269 identity=2052 ipv4=10.0.0.127 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-772e066e-c48e-41f6-9fab-e600677d50bb subsys=daemon level=info msg="Delete endpoint request" containerID=af1eb371ce endpointID=269 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-772e066e-c48e-41f6-9fab-e600677d50bb subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=af1eb371ce datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=269 identity=2052 ipv4=10.0.0.127 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-772e066e-c48e-41f6-9fab-e600677d50bb subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.42 622cbace-5e67-4804-9a6d-eb2b025ab77b default }" containerID=206877b495afa0e8f57c0209ec369083827fa4bb93a055319ea6dd2eacc4b254 datapathConfiguration="&{false false false false false }" interface=lxc391a6b39e8b6 k8sPodName=openstack/rabbitmq-octavia-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=206877b495 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1803 ipv4=10.0.0.42 ipv6= k8sPodName=openstack/rabbitmq-octavia-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=206877b495 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1803 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-octavia,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-octavia-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-octavia-server-0" ipv4=10.0.0.42 ipv6= k8sPodName=openstack/rabbitmq-octavia-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-octavia;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-octavia-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-octavia-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=206877b495 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1803 identity=25368 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-octavia,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-octavia-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-octavia-server-0" ipv4=10.0.0.42 ipv6= k8sPodName=openstack/rabbitmq-octavia-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=206877b495 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1803 identity=25368 ipv4=10.0.0.42 ipv6= k8sPodName=openstack/rabbitmq-octavia-server-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=206877b495 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1803 identity=25368 ipv4=10.0.0.42 ipv6= k8sPodName=openstack/rabbitmq-octavia-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=206877b495 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1803 identity=25368 ipv4=10.0.0.42 ipv6= k8sPodName=openstack/rabbitmq-octavia-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.100 e1a27b5b-95a7-489c-8577-5eb9ac456d3a default }" containerID=5ae93981e32282c8a95d855e4a7d290b2f73e50426efc457d47d7676d48f37e9 datapathConfiguration="&{false false false false false }" interface=lxc9e2b007ff824 k8sPodName=openstack/octavia-db-init-brzpv labels="[]" subsys=daemon sync-build=true level=info msg="Create endpoint request" addressing="&{10.0.0.95 03619989-7a42-42c4-afca-e234d24bd8e2 default }" containerID=633d3afc5bba768004099a606d2d7199e00c215620b0aa2a1e23fdcb4ed22dd7 datapathConfiguration="&{false false false false false }" interface=lxc9dbc2d96be94 k8sPodName=openstack/octavia-api-d85968b67-xwsz9 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5ae93981e3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2197 ipv4=10.0.0.100 ipv6= k8sPodName=openstack/octavia-db-init-brzpv subsys=endpoint level=info msg="New endpoint" containerID=633d3afc5b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=35 ipv4=10.0.0.95 ipv6= k8sPodName=openstack/octavia-api-d85968b67-xwsz9 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5ae93981e3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2197 identityLabels="k8s:application=octavia,k8s:batch.kubernetes.io/controller-uid=14f51bd6-965b-48b4-9bde-899a7d410029,k8s:batch.kubernetes.io/job-name=octavia-db-init,k8s:component=db-init,k8s:controller-uid=14f51bd6-965b-48b4-9bde-899a7d410029,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=octavia-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=octavia-db-init,k8s:release_group=octavia" ipv4=10.0.0.100 ipv6= k8sPodName=openstack/octavia-db-init-brzpv subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Resolving identity labels (blocking)" containerID=633d3afc5b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=35 identityLabels="k8s:application=octavia,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=octavia-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=octavia" ipv4=10.0.0.95 ipv6= k8sPodName=openstack/octavia-api-d85968b67-xwsz9 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=octavia;k8s:batch.kubernetes.io/controller-uid=14f51bd6-965b-48b4-9bde-899a7d410029;k8s:batch.kubernetes.io/job-name=octavia-db-init;k8s:component=db-init;k8s:controller-uid=14f51bd6-965b-48b4-9bde-899a7d410029;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=octavia-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=octavia-db-init;k8s:release_group=octavia;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5ae93981e3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2197 identity=58012 identityLabels="k8s:application=octavia,k8s:batch.kubernetes.io/controller-uid=14f51bd6-965b-48b4-9bde-899a7d410029,k8s:batch.kubernetes.io/job-name=octavia-db-init,k8s:component=db-init,k8s:controller-uid=14f51bd6-965b-48b4-9bde-899a7d410029,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=octavia-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=octavia-db-init,k8s:release_group=octavia" ipv4=10.0.0.100 ipv6= k8sPodName=openstack/octavia-db-init-brzpv oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5ae93981e3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2197 identity=58012 ipv4=10.0.0.100 ipv6= k8sPodName=openstack/octavia-db-init-brzpv subsys=endpoint level=info msg="Invalid state transition skipped" containerID=633d3afc5b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=35 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.95 ipv6= k8sPodName=openstack/octavia-api-d85968b67-xwsz9 line=611 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=octavia;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=octavia-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=octavia;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=633d3afc5b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=35 identity=6549 identityLabels="k8s:application=octavia,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=octavia-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=octavia" ipv4=10.0.0.95 ipv6= k8sPodName=openstack/octavia-api-d85968b67-xwsz9 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=633d3afc5b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=35 identity=6549 ipv4=10.0.0.95 ipv6= k8sPodName=openstack/octavia-api-d85968b67-xwsz9 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=5ae93981e3 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2197 identity=58012 ipv4=10.0.0.100 ipv6= k8sPodName=openstack/octavia-db-init-brzpv subsys=endpoint level=info msg="Successful endpoint creation" containerID=5ae93981e3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2197 identity=58012 ipv4=10.0.0.100 ipv6= k8sPodName=openstack/octavia-db-init-brzpv subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=633d3afc5b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=35 identity=6549 ipv4=10.0.0.95 ipv6= k8sPodName=openstack/octavia-api-d85968b67-xwsz9 subsys=endpoint level=info msg="Successful endpoint creation" containerID=633d3afc5b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=35 identity=6549 ipv4=10.0.0.95 ipv6= k8sPodName=openstack/octavia-api-d85968b67-xwsz9 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=5ae93981e3 endpointID=2197 k8sNamespace=openstack k8sPodName=octavia-db-init-brzpv subsys=daemon level=info msg="Releasing key" key="[k8s:application=octavia k8s:batch.kubernetes.io/controller-uid=14f51bd6-965b-48b4-9bde-899a7d410029 k8s:batch.kubernetes.io/job-name=octavia-db-init k8s:component=db-init k8s:controller-uid=14f51bd6-965b-48b4-9bde-899a7d410029 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=octavia-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=octavia-db-init k8s:release_group=octavia]" subsys=allocator level=info msg="Removed endpoint" containerID=5ae93981e3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2197 identity=58012 ipv4=10.0.0.100 ipv6= k8sPodName=openstack/octavia-db-init-brzpv subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.178 fdc7ede1-d600-4285-9736-a2bcf1b5f221 default }" containerID=30d7c9c393898167421ec0fcad3009dd91a5f46a5a2e3d5cd800efc88471a28e datapathConfiguration="&{false false false false false }" interface=lxce3bbf424b7c7 k8sPodName=openstack/octavia-db-sync-9hzmw labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=30d7c9c393 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=958 ipv4=10.0.0.178 ipv6= k8sPodName=openstack/octavia-db-sync-9hzmw subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=30d7c9c393 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=958 identityLabels="k8s:application=octavia,k8s:batch.kubernetes.io/controller-uid=2c635a82-09cb-4fde-beb3-70768d65cd32,k8s:batch.kubernetes.io/job-name=octavia-db-sync,k8s:component=db-sync,k8s:controller-uid=2c635a82-09cb-4fde-beb3-70768d65cd32,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=octavia-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=octavia-db-sync,k8s:release_group=octavia" ipv4=10.0.0.178 ipv6= k8sPodName=openstack/octavia-db-sync-9hzmw subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=octavia;k8s:batch.kubernetes.io/controller-uid=2c635a82-09cb-4fde-beb3-70768d65cd32;k8s:batch.kubernetes.io/job-name=octavia-db-sync;k8s:component=db-sync;k8s:controller-uid=2c635a82-09cb-4fde-beb3-70768d65cd32;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=octavia-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=octavia-db-sync;k8s:release_group=octavia;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=30d7c9c393 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=958 identity=19476 identityLabels="k8s:application=octavia,k8s:batch.kubernetes.io/controller-uid=2c635a82-09cb-4fde-beb3-70768d65cd32,k8s:batch.kubernetes.io/job-name=octavia-db-sync,k8s:component=db-sync,k8s:controller-uid=2c635a82-09cb-4fde-beb3-70768d65cd32,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=octavia-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=octavia-db-sync,k8s:release_group=octavia" ipv4=10.0.0.178 ipv6= k8sPodName=openstack/octavia-db-sync-9hzmw oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=30d7c9c393 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=958 identity=19476 ipv4=10.0.0.178 ipv6= k8sPodName=openstack/octavia-db-sync-9hzmw subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=30d7c9c393 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=958 identity=19476 ipv4=10.0.0.178 ipv6= k8sPodName=openstack/octavia-db-sync-9hzmw subsys=endpoint level=info msg="Successful endpoint creation" containerID=30d7c9c393 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=958 identity=19476 ipv4=10.0.0.178 ipv6= k8sPodName=openstack/octavia-db-sync-9hzmw subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=30d7c9c393 endpointID=958 k8sNamespace=openstack k8sPodName=octavia-db-sync-9hzmw subsys=daemon level=info msg="Releasing key" key="[k8s:application=octavia k8s:batch.kubernetes.io/controller-uid=2c635a82-09cb-4fde-beb3-70768d65cd32 k8s:batch.kubernetes.io/job-name=octavia-db-sync k8s:component=db-sync k8s:controller-uid=2c635a82-09cb-4fde-beb3-70768d65cd32 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=octavia-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=octavia-db-sync k8s:release_group=octavia]" subsys=allocator level=info msg="Removed endpoint" containerID=30d7c9c393 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=958 identity=19476 ipv4=10.0.0.178 ipv6= k8sPodName=openstack/octavia-db-sync-9hzmw subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.41 9fa30acd-7c4b-412b-9a3d-f15885494d19 default }" containerID=4260aa8c221751972ff15314146a2d6e1b117145df2e9b9492b71c1039dbba11 datapathConfiguration="&{false false false false false }" interface=lxc132fbfd38661 k8sPodName=openstack/octavia-rabbit-init-ldw6p labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4260aa8c22 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1497 ipv4=10.0.0.41 ipv6= k8sPodName=openstack/octavia-rabbit-init-ldw6p subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4260aa8c22 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1497 identityLabels="k8s:application=octavia,k8s:batch.kubernetes.io/controller-uid=eec4ed70-1ec8-4826-9373-cce8689d0e56,k8s:batch.kubernetes.io/job-name=octavia-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=eec4ed70-1ec8-4826-9373-cce8689d0e56,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=octavia-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=octavia-rabbit-init,k8s:release_group=octavia" ipv4=10.0.0.41 ipv6= k8sPodName=openstack/octavia-rabbit-init-ldw6p subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=octavia;k8s:batch.kubernetes.io/controller-uid=eec4ed70-1ec8-4826-9373-cce8689d0e56;k8s:batch.kubernetes.io/job-name=octavia-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=eec4ed70-1ec8-4826-9373-cce8689d0e56;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=octavia-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=octavia-rabbit-init;k8s:release_group=octavia;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4260aa8c22 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1497 identity=1358 identityLabels="k8s:application=octavia,k8s:batch.kubernetes.io/controller-uid=eec4ed70-1ec8-4826-9373-cce8689d0e56,k8s:batch.kubernetes.io/job-name=octavia-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=eec4ed70-1ec8-4826-9373-cce8689d0e56,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=octavia-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=octavia-rabbit-init,k8s:release_group=octavia" ipv4=10.0.0.41 ipv6= k8sPodName=openstack/octavia-rabbit-init-ldw6p oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4260aa8c22 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1497 identity=1358 ipv4=10.0.0.41 ipv6= k8sPodName=openstack/octavia-rabbit-init-ldw6p subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=4260aa8c22 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1497 identity=1358 ipv4=10.0.0.41 ipv6= k8sPodName=openstack/octavia-rabbit-init-ldw6p subsys=endpoint level=info msg="Successful endpoint creation" containerID=4260aa8c22 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1497 identity=1358 ipv4=10.0.0.41 ipv6= k8sPodName=openstack/octavia-rabbit-init-ldw6p subsys=daemon level=info msg="Delete endpoint request" containerID=4260aa8c22 endpointID=1497 k8sNamespace=openstack k8sPodName=octavia-rabbit-init-ldw6p subsys=daemon level=info msg="Releasing key" key="[k8s:application=octavia k8s:batch.kubernetes.io/controller-uid=eec4ed70-1ec8-4826-9373-cce8689d0e56 k8s:batch.kubernetes.io/job-name=octavia-rabbit-init k8s:component=rabbit-init k8s:controller-uid=eec4ed70-1ec8-4826-9373-cce8689d0e56 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=octavia-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=octavia-rabbit-init k8s:release_group=octavia]" subsys=allocator level=info msg="Removed endpoint" containerID=4260aa8c22 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1497 identity=1358 ipv4=10.0.0.41 ipv6= k8sPodName=openstack/octavia-rabbit-init-ldw6p subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.126 e762f32f-75da-447b-acb2-ff0ea410a70d default }" containerID=41e00423c96a9435647dc63ff2355b749e42a08903c730c706dfaa77e970f2c2 datapathConfiguration="&{false false false false false }" interface=lxc7999c6061016 k8sPodName=openstack/octavia-ks-service-pndjr labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=41e00423c9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1451 ipv4=10.0.0.126 ipv6= k8sPodName=openstack/octavia-ks-service-pndjr subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=41e00423c9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1451 identityLabels="k8s:application=octavia,k8s:batch.kubernetes.io/controller-uid=0993d1c0-f534-41a8-959d-97a943bacf57,k8s:batch.kubernetes.io/job-name=octavia-ks-service,k8s:component=ks-service,k8s:controller-uid=0993d1c0-f534-41a8-959d-97a943bacf57,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=octavia-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=octavia-ks-service,k8s:release_group=octavia" ipv4=10.0.0.126 ipv6= k8sPodName=openstack/octavia-ks-service-pndjr subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=octavia;k8s:batch.kubernetes.io/controller-uid=0993d1c0-f534-41a8-959d-97a943bacf57;k8s:batch.kubernetes.io/job-name=octavia-ks-service;k8s:component=ks-service;k8s:controller-uid=0993d1c0-f534-41a8-959d-97a943bacf57;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=octavia-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=octavia-ks-service;k8s:release_group=octavia;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=41e00423c9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1451 identity=44802 identityLabels="k8s:application=octavia,k8s:batch.kubernetes.io/controller-uid=0993d1c0-f534-41a8-959d-97a943bacf57,k8s:batch.kubernetes.io/job-name=octavia-ks-service,k8s:component=ks-service,k8s:controller-uid=0993d1c0-f534-41a8-959d-97a943bacf57,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=octavia-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=octavia-ks-service,k8s:release_group=octavia" ipv4=10.0.0.126 ipv6= k8sPodName=openstack/octavia-ks-service-pndjr oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=41e00423c9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1451 identity=44802 ipv4=10.0.0.126 ipv6= k8sPodName=openstack/octavia-ks-service-pndjr subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=41e00423c9 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1451 identity=44802 ipv4=10.0.0.126 ipv6= k8sPodName=openstack/octavia-ks-service-pndjr subsys=endpoint level=info msg="Successful endpoint creation" containerID=41e00423c9 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1451 identity=44802 ipv4=10.0.0.126 ipv6= k8sPodName=openstack/octavia-ks-service-pndjr subsys=daemon level=info msg="Delete endpoint request" containerID=41e00423c9 endpointID=1451 k8sNamespace=openstack k8sPodName=octavia-ks-service-pndjr subsys=daemon level=info msg="Releasing key" key="[k8s:application=octavia k8s:batch.kubernetes.io/controller-uid=0993d1c0-f534-41a8-959d-97a943bacf57 k8s:batch.kubernetes.io/job-name=octavia-ks-service k8s:component=ks-service k8s:controller-uid=0993d1c0-f534-41a8-959d-97a943bacf57 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=octavia-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=octavia-ks-service k8s:release_group=octavia]" subsys=allocator level=info msg="Removed endpoint" containerID=41e00423c9 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1451 identity=44802 ipv4=10.0.0.126 ipv6= k8sPodName=openstack/octavia-ks-service-pndjr subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.57 b0f45db6-b388-42b6-8eb4-f04f0658194f default }" containerID=e23e4f46fbfadf6e911bccbc0c3ad8948fa9f3651d3b545fb9c377dc66c58b79 datapathConfiguration="&{false false false false false }" interface=lxcc294cc5cf03f k8sPodName=openstack/octavia-ks-endpoints-2gcfh labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e23e4f46fb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1389 ipv4=10.0.0.57 ipv6= k8sPodName=openstack/octavia-ks-endpoints-2gcfh subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e23e4f46fb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1389 identityLabels="k8s:application=octavia,k8s:batch.kubernetes.io/controller-uid=e533f1ae-8f12-4a60-9eac-5261f170348a,k8s:batch.kubernetes.io/job-name=octavia-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=e533f1ae-8f12-4a60-9eac-5261f170348a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=octavia-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=octavia-ks-endpoints,k8s:release_group=octavia" ipv4=10.0.0.57 ipv6= k8sPodName=openstack/octavia-ks-endpoints-2gcfh subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=octavia;k8s:batch.kubernetes.io/controller-uid=e533f1ae-8f12-4a60-9eac-5261f170348a;k8s:batch.kubernetes.io/job-name=octavia-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=e533f1ae-8f12-4a60-9eac-5261f170348a;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=octavia-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=octavia-ks-endpoints;k8s:release_group=octavia;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=e23e4f46fb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1389 identity=596 identityLabels="k8s:application=octavia,k8s:batch.kubernetes.io/controller-uid=e533f1ae-8f12-4a60-9eac-5261f170348a,k8s:batch.kubernetes.io/job-name=octavia-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=e533f1ae-8f12-4a60-9eac-5261f170348a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=octavia-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=octavia-ks-endpoints,k8s:release_group=octavia" ipv4=10.0.0.57 ipv6= k8sPodName=openstack/octavia-ks-endpoints-2gcfh oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e23e4f46fb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1389 identity=596 ipv4=10.0.0.57 ipv6= k8sPodName=openstack/octavia-ks-endpoints-2gcfh subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e23e4f46fb datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1389 identity=596 ipv4=10.0.0.57 ipv6= k8sPodName=openstack/octavia-ks-endpoints-2gcfh subsys=endpoint level=info msg="Successful endpoint creation" containerID=e23e4f46fb datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1389 identity=596 ipv4=10.0.0.57 ipv6= k8sPodName=openstack/octavia-ks-endpoints-2gcfh subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.223 307e833a-166c-44c0-b149-e399d6724193 default }" containerID=379d009c25ffa1a4414ce84af0bba0e321be68e0b903ab7a914da559ea44a87a datapathConfiguration="&{false false false false false }" interface=lxc10385db76701 k8sPodName=openstack/heat-engine-cleaner-29766345-sk468 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=379d009c25 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=758 ipv4=10.0.0.223 ipv6= k8sPodName=openstack/heat-engine-cleaner-29766345-sk468 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=379d009c25 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=758 identityLabels="k8s:application=heat,k8s:batch.kubernetes.io/controller-uid=4a9a91e4-d68a-4d5b-b597-46b7afa4425e,k8s:batch.kubernetes.io/job-name=heat-engine-cleaner-29766345,k8s:component=engine-cleaner,k8s:controller-uid=4a9a91e4-d68a-4d5b-b597-46b7afa4425e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=heat-engine-cleaner,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=heat-engine-cleaner-29766345,k8s:release_group=heat" ipv4=10.0.0.223 ipv6= k8sPodName=openstack/heat-engine-cleaner-29766345-sk468 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=heat;k8s:batch.kubernetes.io/controller-uid=4a9a91e4-d68a-4d5b-b597-46b7afa4425e;k8s:batch.kubernetes.io/job-name=heat-engine-cleaner-29766345;k8s:component=engine-cleaner;k8s:controller-uid=4a9a91e4-d68a-4d5b-b597-46b7afa4425e;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=heat-engine-cleaner;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=heat-engine-cleaner-29766345;k8s:release_group=heat;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=379d009c25 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=758 identity=20545 identityLabels="k8s:application=heat,k8s:batch.kubernetes.io/controller-uid=4a9a91e4-d68a-4d5b-b597-46b7afa4425e,k8s:batch.kubernetes.io/job-name=heat-engine-cleaner-29766345,k8s:component=engine-cleaner,k8s:controller-uid=4a9a91e4-d68a-4d5b-b597-46b7afa4425e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=heat-engine-cleaner,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=heat-engine-cleaner-29766345,k8s:release_group=heat" ipv4=10.0.0.223 ipv6= k8sPodName=openstack/heat-engine-cleaner-29766345-sk468 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=379d009c25 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=758 identity=20545 ipv4=10.0.0.223 ipv6= k8sPodName=openstack/heat-engine-cleaner-29766345-sk468 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=379d009c25 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=758 identity=20545 ipv4=10.0.0.223 ipv6= k8sPodName=openstack/heat-engine-cleaner-29766345-sk468 subsys=endpoint level=info msg="Successful endpoint creation" containerID=379d009c25 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=758 identity=20545 ipv4=10.0.0.223 ipv6= k8sPodName=openstack/heat-engine-cleaner-29766345-sk468 subsys=daemon level=info msg="Delete endpoint request" containerID=e23e4f46fb endpointID=1389 k8sNamespace=openstack k8sPodName=octavia-ks-endpoints-2gcfh subsys=daemon level=info msg="Releasing key" key="[k8s:application=octavia k8s:batch.kubernetes.io/controller-uid=e533f1ae-8f12-4a60-9eac-5261f170348a k8s:batch.kubernetes.io/job-name=octavia-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=e533f1ae-8f12-4a60-9eac-5261f170348a k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=octavia-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=octavia-ks-endpoints k8s:release_group=octavia]" subsys=allocator level=info msg="Removed endpoint" containerID=e23e4f46fb datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1389 identity=596 ipv4=10.0.0.57 ipv6= k8sPodName=openstack/octavia-ks-endpoints-2gcfh subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.185 58d31323-ad27-4979-a820-0c16625ae13f default }" containerID=5e4a29982aedd43904ef80fe2449f6ab4fc8de215408b1e14435768fc17ed430 datapathConfiguration="&{false false false false false }" interface=lxcc01ec03f1eb3 k8sPodName=openstack/octavia-ks-user-6m9cf labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5e4a29982a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=272 ipv4=10.0.0.185 ipv6= k8sPodName=openstack/octavia-ks-user-6m9cf subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5e4a29982a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=272 identityLabels="k8s:application=octavia,k8s:batch.kubernetes.io/controller-uid=0509dee5-bd1a-47ea-a2d3-0fb6c6ffb92b,k8s:batch.kubernetes.io/job-name=octavia-ks-user,k8s:component=ks-user,k8s:controller-uid=0509dee5-bd1a-47ea-a2d3-0fb6c6ffb92b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=octavia-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=octavia-ks-user,k8s:release_group=octavia" ipv4=10.0.0.185 ipv6= k8sPodName=openstack/octavia-ks-user-6m9cf subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=octavia;k8s:batch.kubernetes.io/controller-uid=0509dee5-bd1a-47ea-a2d3-0fb6c6ffb92b;k8s:batch.kubernetes.io/job-name=octavia-ks-user;k8s:component=ks-user;k8s:controller-uid=0509dee5-bd1a-47ea-a2d3-0fb6c6ffb92b;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=octavia-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=octavia-ks-user;k8s:release_group=octavia;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5e4a29982a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=272 identity=51080 identityLabels="k8s:application=octavia,k8s:batch.kubernetes.io/controller-uid=0509dee5-bd1a-47ea-a2d3-0fb6c6ffb92b,k8s:batch.kubernetes.io/job-name=octavia-ks-user,k8s:component=ks-user,k8s:controller-uid=0509dee5-bd1a-47ea-a2d3-0fb6c6ffb92b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=octavia-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=octavia-ks-user,k8s:release_group=octavia" ipv4=10.0.0.185 ipv6= k8sPodName=openstack/octavia-ks-user-6m9cf oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5e4a29982a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=272 identity=51080 ipv4=10.0.0.185 ipv6= k8sPodName=openstack/octavia-ks-user-6m9cf subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=5e4a29982a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=272 identity=51080 ipv4=10.0.0.185 ipv6= k8sPodName=openstack/octavia-ks-user-6m9cf subsys=endpoint level=info msg="Successful endpoint creation" containerID=5e4a29982a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=272 identity=51080 ipv4=10.0.0.185 ipv6= k8sPodName=openstack/octavia-ks-user-6m9cf subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=379d009c25 endpointID=758 k8sNamespace=openstack k8sPodName=heat-engine-cleaner-29766345-sk468 subsys=daemon level=info msg="Releasing key" key="[k8s:application=heat k8s:batch.kubernetes.io/controller-uid=4a9a91e4-d68a-4d5b-b597-46b7afa4425e k8s:batch.kubernetes.io/job-name=heat-engine-cleaner-29766345 k8s:component=engine-cleaner k8s:controller-uid=4a9a91e4-d68a-4d5b-b597-46b7afa4425e k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=heat-engine-cleaner k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=heat-engine-cleaner-29766345 k8s:release_group=heat]" subsys=allocator level=info msg="Removed endpoint" containerID=379d009c25 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=758 identity=20545 ipv4=10.0.0.223 ipv6= k8sPodName=openstack/heat-engine-cleaner-29766345-sk468 subsys=endpoint level=info msg="Delete endpoint request" containerID=5e4a29982a endpointID=272 k8sNamespace=openstack k8sPodName=octavia-ks-user-6m9cf subsys=daemon level=info msg="Releasing key" key="[k8s:application=octavia k8s:batch.kubernetes.io/controller-uid=0509dee5-bd1a-47ea-a2d3-0fb6c6ffb92b k8s:batch.kubernetes.io/job-name=octavia-ks-user k8s:component=ks-user k8s:controller-uid=0509dee5-bd1a-47ea-a2d3-0fb6c6ffb92b k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=octavia-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=octavia-ks-user k8s:release_group=octavia]" subsys=allocator level=info msg="Removed endpoint" containerID=5e4a29982a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=272 identity=51080 ipv4=10.0.0.185 ipv6= k8sPodName=openstack/octavia-ks-user-6m9cf subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.34 9cdde3a9-fb29-4e97-a5c0-be2a75a718e1 default }" containerID=777372dffb1acb327724559f4e3d234c210a1c7d305abac3d99e5fef21bec69f datapathConfiguration="&{false false false false false }" interface=lxc4980f797086b k8sPodName=openstack/octavia-bootstrap-x2bh9 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=777372dffb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1868 ipv4=10.0.0.34 ipv6= k8sPodName=openstack/octavia-bootstrap-x2bh9 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=777372dffb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1868 identityLabels="k8s:application=octavia,k8s:batch.kubernetes.io/controller-uid=8b8053da-7ec9-4024-a803-01804ad15469,k8s:batch.kubernetes.io/job-name=octavia-bootstrap,k8s:component=bootstrap,k8s:controller-uid=8b8053da-7ec9-4024-a803-01804ad15469,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=octavia-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=octavia-bootstrap,k8s:release_group=octavia" ipv4=10.0.0.34 ipv6= k8sPodName=openstack/octavia-bootstrap-x2bh9 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=octavia;k8s:batch.kubernetes.io/controller-uid=8b8053da-7ec9-4024-a803-01804ad15469;k8s:batch.kubernetes.io/job-name=octavia-bootstrap;k8s:component=bootstrap;k8s:controller-uid=8b8053da-7ec9-4024-a803-01804ad15469;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=octavia-bootstrap;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=octavia-bootstrap;k8s:release_group=octavia;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=777372dffb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1868 identity=21568 identityLabels="k8s:application=octavia,k8s:batch.kubernetes.io/controller-uid=8b8053da-7ec9-4024-a803-01804ad15469,k8s:batch.kubernetes.io/job-name=octavia-bootstrap,k8s:component=bootstrap,k8s:controller-uid=8b8053da-7ec9-4024-a803-01804ad15469,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=octavia-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=octavia-bootstrap,k8s:release_group=octavia" ipv4=10.0.0.34 ipv6= k8sPodName=openstack/octavia-bootstrap-x2bh9 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=777372dffb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1868 identity=21568 ipv4=10.0.0.34 ipv6= k8sPodName=openstack/octavia-bootstrap-x2bh9 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=777372dffb datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1868 identity=21568 ipv4=10.0.0.34 ipv6= k8sPodName=openstack/octavia-bootstrap-x2bh9 subsys=endpoint level=info msg="Successful endpoint creation" containerID=777372dffb datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1868 identity=21568 ipv4=10.0.0.34 ipv6= k8sPodName=openstack/octavia-bootstrap-x2bh9 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=777372dffb endpointID=1868 k8sNamespace=openstack k8sPodName=octavia-bootstrap-x2bh9 subsys=daemon level=info msg="Releasing key" key="[k8s:application=octavia k8s:batch.kubernetes.io/controller-uid=8b8053da-7ec9-4024-a803-01804ad15469 k8s:batch.kubernetes.io/job-name=octavia-bootstrap k8s:component=bootstrap k8s:controller-uid=8b8053da-7ec9-4024-a803-01804ad15469 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=octavia-bootstrap k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=octavia-bootstrap k8s:release_group=octavia]" subsys=allocator level=info msg="Removed endpoint" containerID=777372dffb datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1868 identity=21568 ipv4=10.0.0.34 ipv6= k8sPodName=openstack/octavia-bootstrap-x2bh9 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.133 14a2c73f-e921-4338-aa41-ec08d000f67e default }" containerID=5b4f524364ee10ba2250f9d04a0f2b119f01fdd5b27553247e62c5aea8892dfe datapathConfiguration="&{false false false false false }" interface=lxc9178792876ad k8sPodName=local-path-storage/helper-pod-create-pvc-25a6da4e-e30a-4530-9285-4ee9a1e79538 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5b4f524364 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=411 ipv4=10.0.0.133 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-25a6da4e-e30a-4530-9285-4ee9a1e79538 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5b4f524364 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=411 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.133 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-25a6da4e-e30a-4530-9285-4ee9a1e79538 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5b4f524364 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=411 identity=2052 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.133 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-25a6da4e-e30a-4530-9285-4ee9a1e79538 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5b4f524364 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=411 identity=2052 ipv4=10.0.0.133 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-25a6da4e-e30a-4530-9285-4ee9a1e79538 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=5b4f524364 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=411 identity=2052 ipv4=10.0.0.133 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-25a6da4e-e30a-4530-9285-4ee9a1e79538 subsys=endpoint level=info msg="Successful endpoint creation" containerID=5b4f524364 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=411 identity=2052 ipv4=10.0.0.133 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-25a6da4e-e30a-4530-9285-4ee9a1e79538 subsys=daemon level=info msg="Delete endpoint request" containerID=5b4f524364 endpointID=411 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-25a6da4e-e30a-4530-9285-4ee9a1e79538 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=5b4f524364 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=411 identity=2052 ipv4=10.0.0.133 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-25a6da4e-e30a-4530-9285-4ee9a1e79538 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.16 c7306b67-dbd7-420d-81c9-4fa973fb4e07 default }" containerID=e0e8d11d8e6860ccf645af39998d30cd5008e8eb74e08ce051da2cfadeb176ff datapathConfiguration="&{false false false false false }" interface=lxcb4a57ad16130 k8sPodName=openstack/rabbitmq-magnum-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e0e8d11d8e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3596 ipv4=10.0.0.16 ipv6= k8sPodName=openstack/rabbitmq-magnum-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e0e8d11d8e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3596 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-magnum,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-magnum-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-magnum-server-0" ipv4=10.0.0.16 ipv6= k8sPodName=openstack/rabbitmq-magnum-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=e0e8d11d8e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3596 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.16 ipv6= k8sPodName=openstack/rabbitmq-magnum-server-0 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-magnum;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-magnum-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-magnum-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e0e8d11d8e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3596 identity=24782 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-magnum,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-magnum-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-magnum-server-0" ipv4=10.0.0.16 ipv6= k8sPodName=openstack/rabbitmq-magnum-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e0e8d11d8e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3596 identity=24782 ipv4=10.0.0.16 ipv6= k8sPodName=openstack/rabbitmq-magnum-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e0e8d11d8e datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3596 identity=24782 ipv4=10.0.0.16 ipv6= k8sPodName=openstack/rabbitmq-magnum-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=e0e8d11d8e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3596 identity=24782 ipv4=10.0.0.16 ipv6= k8sPodName=openstack/rabbitmq-magnum-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.10 c260a931-b52b-489a-b1dc-165f4d2ad475 default }" containerID=aac68f34eb4bb4a3aaf1005c4c2e5e299d2bd9b3e80784151cabaa8f8e7e9a3b datapathConfiguration="&{false false false false false }" interface=lxcc2400f3eba62 k8sPodName=orc-system/orc-controller-manager-6cb597b5d4-zhkzh labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=aac68f34eb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3704 ipv4=10.0.0.10 ipv6= k8sPodName=orc-system/orc-controller-manager-6cb597b5d4-zhkzh subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=aac68f34eb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3704 identityLabels="k8s:control-plane=controller-manager,k8s:io.cilium.k8s.namespace.labels.app.kubernetes.io/managed-by=kustomize,k8s:io.cilium.k8s.namespace.labels.app.kubernetes.io/name=orc,k8s:io.cilium.k8s.namespace.labels.control-plane=controller-manager,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=orc-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=orc-controller-manager,k8s:io.kubernetes.pod.namespace=orc-system" ipv4=10.0.0.10 ipv6= k8sPodName=orc-system/orc-controller-manager-6cb597b5d4-zhkzh subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.app.kubernetes.io/managed-by:kustomize k8s:io.cilium.k8s.namespace.labels.app.kubernetes.io/name:orc k8s:io.cilium.k8s.namespace.labels.control-plane:controller-manager k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:orc-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:control-plane=controller-manager;k8s:io.cilium.k8s.namespace.labels.app.kubernetes.io/managed-by=kustomize;k8s:io.cilium.k8s.namespace.labels.app.kubernetes.io/name=orc;k8s:io.cilium.k8s.namespace.labels.control-plane=controller-manager;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=orc-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=orc-controller-manager;k8s:io.kubernetes.pod.namespace=orc-system;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=aac68f34eb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3704 identity=3696 identityLabels="k8s:control-plane=controller-manager,k8s:io.cilium.k8s.namespace.labels.app.kubernetes.io/managed-by=kustomize,k8s:io.cilium.k8s.namespace.labels.app.kubernetes.io/name=orc,k8s:io.cilium.k8s.namespace.labels.control-plane=controller-manager,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=orc-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=orc-controller-manager,k8s:io.kubernetes.pod.namespace=orc-system" ipv4=10.0.0.10 ipv6= k8sPodName=orc-system/orc-controller-manager-6cb597b5d4-zhkzh oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=aac68f34eb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3704 identity=3696 ipv4=10.0.0.10 ipv6= k8sPodName=orc-system/orc-controller-manager-6cb597b5d4-zhkzh subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=aac68f34eb datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3704 identity=3696 ipv4=10.0.0.10 ipv6= k8sPodName=orc-system/orc-controller-manager-6cb597b5d4-zhkzh subsys=endpoint level=info msg="Successful endpoint creation" containerID=aac68f34eb datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3704 identity=3696 ipv4=10.0.0.10 ipv6= k8sPodName=orc-system/orc-controller-manager-6cb597b5d4-zhkzh subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.170 05622ed7-08f6-4bea-959a-c0d04ef6167e default }" containerID=7847d74f3e5a2232e070ecdee8cd3db324878f10103c54841a7a7035943ca1ae datapathConfiguration="&{false false false false false }" interface=lxc0ca5f75c5457 k8sPodName=capi-system/capi-controller-manager-69f9d56d75-sm74q labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7847d74f3e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=992 ipv4=10.0.0.170 ipv6= k8sPodName=capi-system/capi-controller-manager-69f9d56d75-sm74q subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7847d74f3e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=992 identityLabels="k8s:cluster.x-k8s.io/provider=cluster-api,k8s:control-plane=controller-manager,k8s:io.cilium.k8s.namespace.labels.cluster.x-k8s.io/provider=cluster-api,k8s:io.cilium.k8s.namespace.labels.clusterctl.cluster.x-k8s.io,k8s:io.cilium.k8s.namespace.labels.control-plane=controller-manager,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=capi-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=capi-manager,k8s:io.kubernetes.pod.namespace=capi-system" ipv4=10.0.0.170 ipv6= k8sPodName=capi-system/capi-controller-manager-69f9d56d75-sm74q subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.cluster.x-k8s.io/provider:cluster-api k8s:io.cilium.k8s.namespace.labels.clusterctl.cluster.x-k8s.io: k8s:io.cilium.k8s.namespace.labels.control-plane:controller-manager k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:capi-system]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=7847d74f3e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=992 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.170 ipv6= k8sPodName=capi-system/capi-controller-manager-69f9d56d75-sm74q line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:cluster.x-k8s.io/provider=cluster-api;k8s:control-plane=controller-manager;k8s:io.cilium.k8s.namespace.labels.cluster.x-k8s.io/provider=cluster-api;k8s:io.cilium.k8s.namespace.labels.clusterctl.cluster.x-k8s.io=;k8s:io.cilium.k8s.namespace.labels.control-plane=controller-manager;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=capi-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=capi-manager;k8s:io.kubernetes.pod.namespace=capi-system;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7847d74f3e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=992 identity=56578 identityLabels="k8s:cluster.x-k8s.io/provider=cluster-api,k8s:control-plane=controller-manager,k8s:io.cilium.k8s.namespace.labels.cluster.x-k8s.io/provider=cluster-api,k8s:io.cilium.k8s.namespace.labels.clusterctl.cluster.x-k8s.io,k8s:io.cilium.k8s.namespace.labels.control-plane=controller-manager,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=capi-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=capi-manager,k8s:io.kubernetes.pod.namespace=capi-system" ipv4=10.0.0.170 ipv6= k8sPodName=capi-system/capi-controller-manager-69f9d56d75-sm74q oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7847d74f3e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=992 identity=56578 ipv4=10.0.0.170 ipv6= k8sPodName=capi-system/capi-controller-manager-69f9d56d75-sm74q subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=7847d74f3e datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=992 identity=56578 ipv4=10.0.0.170 ipv6= k8sPodName=capi-system/capi-controller-manager-69f9d56d75-sm74q subsys=endpoint level=info msg="Successful endpoint creation" containerID=7847d74f3e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=992 identity=56578 ipv4=10.0.0.170 ipv6= k8sPodName=capi-system/capi-controller-manager-69f9d56d75-sm74q subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.34 a9b1ecc0-407b-4407-a29c-b748e947d103 default }" containerID=440357a435f8af1a15d3db109e36fe125f6df3dae9ec5f2927297a3fd02309a2 datapathConfiguration="&{false false false false false }" interface=lxc8549f792fbfc k8sPodName=capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-controller-manager-6f6766ffcc-sr2q4 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=440357a435 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2087 ipv4=10.0.0.34 ipv6= k8sPodName=capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-controller-manager-6f6766ffcc-sr2q4 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=440357a435 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2087 identityLabels="k8s:cluster.x-k8s.io/provider=bootstrap-kubeadm,k8s:control-plane=controller-manager,k8s:io.cilium.k8s.namespace.labels.cluster.x-k8s.io/provider=bootstrap-kubeadm,k8s:io.cilium.k8s.namespace.labels.clusterctl.cluster.x-k8s.io,k8s:io.cilium.k8s.namespace.labels.control-plane=controller-manager,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=capi-kubeadm-bootstrap-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=capi-kubeadm-bootstrap-manager,k8s:io.kubernetes.pod.namespace=capi-kubeadm-bootstrap-system" ipv4=10.0.0.34 ipv6= k8sPodName=capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-controller-manager-6f6766ffcc-sr2q4 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.cluster.x-k8s.io/provider:bootstrap-kubeadm k8s:io.cilium.k8s.namespace.labels.clusterctl.cluster.x-k8s.io: k8s:io.cilium.k8s.namespace.labels.control-plane:controller-manager k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:capi-kubeadm-bootstrap-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:cluster.x-k8s.io/provider=bootstrap-kubeadm;k8s:control-plane=controller-manager;k8s:io.cilium.k8s.namespace.labels.cluster.x-k8s.io/provider=bootstrap-kubeadm;k8s:io.cilium.k8s.namespace.labels.clusterctl.cluster.x-k8s.io=;k8s:io.cilium.k8s.namespace.labels.control-plane=controller-manager;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=capi-kubeadm-bootstrap-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=capi-kubeadm-bootstrap-manager;k8s:io.kubernetes.pod.namespace=capi-kubeadm-bootstrap-system;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=440357a435 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2087 identity=3737 identityLabels="k8s:cluster.x-k8s.io/provider=bootstrap-kubeadm,k8s:control-plane=controller-manager,k8s:io.cilium.k8s.namespace.labels.cluster.x-k8s.io/provider=bootstrap-kubeadm,k8s:io.cilium.k8s.namespace.labels.clusterctl.cluster.x-k8s.io,k8s:io.cilium.k8s.namespace.labels.control-plane=controller-manager,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=capi-kubeadm-bootstrap-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=capi-kubeadm-bootstrap-manager,k8s:io.kubernetes.pod.namespace=capi-kubeadm-bootstrap-system" ipv4=10.0.0.34 ipv6= k8sPodName=capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-controller-manager-6f6766ffcc-sr2q4 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=440357a435 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2087 identity=3737 ipv4=10.0.0.34 ipv6= k8sPodName=capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-controller-manager-6f6766ffcc-sr2q4 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=440357a435 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2087 identity=3737 ipv4=10.0.0.34 ipv6= k8sPodName=capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-controller-manager-6f6766ffcc-sr2q4 subsys=endpoint level=info msg="Successful endpoint creation" containerID=440357a435 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2087 identity=3737 ipv4=10.0.0.34 ipv6= k8sPodName=capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-controller-manager-6f6766ffcc-sr2q4 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.234 05bb6de9-96d0-47dc-8d2b-d619ccf7d923 default }" containerID=847cae6e8b557ac8b895614cad298b8914f7f7b6b7434f92f9c759cca6f47fcc datapathConfiguration="&{false false false false false }" interface=lxc985642f2023b k8sPodName=capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-controller-manager-7db57f6cd7-8q6dw labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=847cae6e8b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3235 ipv4=10.0.0.234 ipv6= k8sPodName=capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-controller-manager-7db57f6cd7-8q6dw subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=847cae6e8b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3235 identityLabels="k8s:cluster.x-k8s.io/provider=control-plane-kubeadm,k8s:control-plane=controller-manager,k8s:io.cilium.k8s.namespace.labels.cluster.x-k8s.io/provider=control-plane-kubeadm,k8s:io.cilium.k8s.namespace.labels.clusterctl.cluster.x-k8s.io,k8s:io.cilium.k8s.namespace.labels.control-plane=controller-manager,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=capi-kubeadm-control-plane-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=capi-kubeadm-control-plane-manager,k8s:io.kubernetes.pod.namespace=capi-kubeadm-control-plane-system" ipv4=10.0.0.234 ipv6= k8sPodName=capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-controller-manager-7db57f6cd7-8q6dw subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.cluster.x-k8s.io/provider:control-plane-kubeadm k8s:io.cilium.k8s.namespace.labels.clusterctl.cluster.x-k8s.io: k8s:io.cilium.k8s.namespace.labels.control-plane:controller-manager k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:capi-kubeadm-control-plane-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:cluster.x-k8s.io/provider=control-plane-kubeadm;k8s:control-plane=controller-manager;k8s:io.cilium.k8s.namespace.labels.cluster.x-k8s.io/provider=control-plane-kubeadm;k8s:io.cilium.k8s.namespace.labels.clusterctl.cluster.x-k8s.io=;k8s:io.cilium.k8s.namespace.labels.control-plane=controller-manager;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=capi-kubeadm-control-plane-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=capi-kubeadm-control-plane-manager;k8s:io.kubernetes.pod.namespace=capi-kubeadm-control-plane-system;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=847cae6e8b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3235 identity=44022 identityLabels="k8s:cluster.x-k8s.io/provider=control-plane-kubeadm,k8s:control-plane=controller-manager,k8s:io.cilium.k8s.namespace.labels.cluster.x-k8s.io/provider=control-plane-kubeadm,k8s:io.cilium.k8s.namespace.labels.clusterctl.cluster.x-k8s.io,k8s:io.cilium.k8s.namespace.labels.control-plane=controller-manager,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=capi-kubeadm-control-plane-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=capi-kubeadm-control-plane-manager,k8s:io.kubernetes.pod.namespace=capi-kubeadm-control-plane-system" ipv4=10.0.0.234 ipv6= k8sPodName=capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-controller-manager-7db57f6cd7-8q6dw oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=847cae6e8b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3235 identity=44022 ipv4=10.0.0.234 ipv6= k8sPodName=capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-controller-manager-7db57f6cd7-8q6dw subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=847cae6e8b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3235 identity=44022 ipv4=10.0.0.234 ipv6= k8sPodName=capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-controller-manager-7db57f6cd7-8q6dw subsys=endpoint level=info msg="Successful endpoint creation" containerID=847cae6e8b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3235 identity=44022 ipv4=10.0.0.234 ipv6= k8sPodName=capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-controller-manager-7db57f6cd7-8q6dw subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.89 ed54e1b8-65e3-45ef-a73a-5851c2514bbb default }" containerID=6124e16f6639b8c24078b8eed410a1e836cb909e229b8d5a17e1cceed0d89156 datapathConfiguration="&{false false false false false }" interface=lxc30edcc5835f5 k8sPodName=capo-system/capo-controller-manager-8c5df4f-6tlmf labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6124e16f66 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=339 ipv4=10.0.0.89 ipv6= k8sPodName=capo-system/capo-controller-manager-8c5df4f-6tlmf subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6124e16f66 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=339 identityLabels="k8s:cluster.x-k8s.io/provider=infrastructure-openstack,k8s:control-plane=capo-controller-manager,k8s:io.cilium.k8s.namespace.labels.cluster.x-k8s.io/provider=infrastructure-openstack,k8s:io.cilium.k8s.namespace.labels.clusterctl.cluster.x-k8s.io,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=capo-system,k8s:io.cilium.k8s.namespace.labels.pod-security.kubernetes.io/audit=restricted,k8s:io.cilium.k8s.namespace.labels.pod-security.kubernetes.io/enforce=restricted,k8s:io.cilium.k8s.namespace.labels.pod-security.kubernetes.io/warn=restricted,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=capo-manager,k8s:io.kubernetes.pod.namespace=capo-system" ipv4=10.0.0.89 ipv6= k8sPodName=capo-system/capo-controller-manager-8c5df4f-6tlmf subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.cluster.x-k8s.io/provider:infrastructure-openstack k8s:io.cilium.k8s.namespace.labels.clusterctl.cluster.x-k8s.io: k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:capo-system k8s:io.cilium.k8s.namespace.labels.pod-security.kubernetes.io/audit:restricted k8s:io.cilium.k8s.namespace.labels.pod-security.kubernetes.io/enforce:restricted k8s:io.cilium.k8s.namespace.labels.pod-security.kubernetes.io/warn:restricted]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:cluster.x-k8s.io/provider=infrastructure-openstack;k8s:control-plane=capo-controller-manager;k8s:io.cilium.k8s.namespace.labels.cluster.x-k8s.io/provider=infrastructure-openstack;k8s:io.cilium.k8s.namespace.labels.clusterctl.cluster.x-k8s.io=;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=capo-system;k8s:io.cilium.k8s.namespace.labels.pod-security.kubernetes.io/audit=restricted;k8s:io.cilium.k8s.namespace.labels.pod-security.kubernetes.io/enforce=restricted;k8s:io.cilium.k8s.namespace.labels.pod-security.kubernetes.io/warn=restricted;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=capo-manager;k8s:io.kubernetes.pod.namespace=capo-system;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6124e16f66 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=339 identity=725 identityLabels="k8s:cluster.x-k8s.io/provider=infrastructure-openstack,k8s:control-plane=capo-controller-manager,k8s:io.cilium.k8s.namespace.labels.cluster.x-k8s.io/provider=infrastructure-openstack,k8s:io.cilium.k8s.namespace.labels.clusterctl.cluster.x-k8s.io,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=capo-system,k8s:io.cilium.k8s.namespace.labels.pod-security.kubernetes.io/audit=restricted,k8s:io.cilium.k8s.namespace.labels.pod-security.kubernetes.io/enforce=restricted,k8s:io.cilium.k8s.namespace.labels.pod-security.kubernetes.io/warn=restricted,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=capo-manager,k8s:io.kubernetes.pod.namespace=capo-system" ipv4=10.0.0.89 ipv6= k8sPodName=capo-system/capo-controller-manager-8c5df4f-6tlmf oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6124e16f66 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=339 identity=725 ipv4=10.0.0.89 ipv6= k8sPodName=capo-system/capo-controller-manager-8c5df4f-6tlmf subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=6124e16f66 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=339 identity=725 ipv4=10.0.0.89 ipv6= k8sPodName=capo-system/capo-controller-manager-8c5df4f-6tlmf subsys=endpoint level=info msg="Successful endpoint creation" containerID=6124e16f66 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=339 identity=725 ipv4=10.0.0.89 ipv6= k8sPodName=capo-system/capo-controller-manager-8c5df4f-6tlmf subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.183 410ea171-e31f-4a31-9b79-d7489be111fb default }" containerID=df136418ecf660f9d520715407a947d0c4d43509e76c2b03091d8097ed4dd097 datapathConfiguration="&{false false false false false }" interface=lxce8a4e3f5bb3e k8sPodName=capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-controller-manager-67b8b974d6-68gdc labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=df136418ec datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=65 ipv4=10.0.0.183 ipv6= k8sPodName=capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-controller-manager-67b8b974d6-68gdc subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=df136418ec datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=65 identityLabels="k8s:cluster.x-k8s.io/provider=bootstrap-kubeadm,k8s:control-plane=controller-manager,k8s:io.cilium.k8s.namespace.labels.cluster.x-k8s.io/provider=bootstrap-kubeadm,k8s:io.cilium.k8s.namespace.labels.clusterctl.cluster.x-k8s.io,k8s:io.cilium.k8s.namespace.labels.control-plane=controller-manager,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=capi-kubeadm-bootstrap-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=capi-kubeadm-bootstrap-manager,k8s:io.kubernetes.pod.namespace=capi-kubeadm-bootstrap-system" ipv4=10.0.0.183 ipv6= k8sPodName=capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-controller-manager-67b8b974d6-68gdc subsys=endpoint level=info msg="Identity of endpoint changed" containerID=df136418ec datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=65 identity=3737 identityLabels="k8s:cluster.x-k8s.io/provider=bootstrap-kubeadm,k8s:control-plane=controller-manager,k8s:io.cilium.k8s.namespace.labels.cluster.x-k8s.io/provider=bootstrap-kubeadm,k8s:io.cilium.k8s.namespace.labels.clusterctl.cluster.x-k8s.io,k8s:io.cilium.k8s.namespace.labels.control-plane=controller-manager,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=capi-kubeadm-bootstrap-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=capi-kubeadm-bootstrap-manager,k8s:io.kubernetes.pod.namespace=capi-kubeadm-bootstrap-system" ipv4=10.0.0.183 ipv6= k8sPodName=capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-controller-manager-67b8b974d6-68gdc oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=df136418ec datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=65 identity=3737 ipv4=10.0.0.183 ipv6= k8sPodName=capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-controller-manager-67b8b974d6-68gdc subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=df136418ec datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=65 identity=3737 ipv4=10.0.0.183 ipv6= k8sPodName=capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-controller-manager-67b8b974d6-68gdc subsys=endpoint level=info msg="Successful endpoint creation" containerID=df136418ec datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=65 identity=3737 ipv4=10.0.0.183 ipv6= k8sPodName=capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-controller-manager-67b8b974d6-68gdc subsys=daemon level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=440357a435 endpointID=2087 k8sNamespace=capi-kubeadm-bootstrap-system k8sPodName=capi-kubeadm-bootstrap-controller-manager-6f6766ffcc-sr2q4 subsys=daemon level=info msg="Releasing key" key="[k8s:cluster.x-k8s.io/provider=bootstrap-kubeadm k8s:control-plane=controller-manager k8s:io.cilium.k8s.namespace.labels.cluster.x-k8s.io/provider=bootstrap-kubeadm k8s:io.cilium.k8s.namespace.labels.clusterctl.cluster.x-k8s.io k8s:io.cilium.k8s.namespace.labels.control-plane=controller-manager k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=capi-kubeadm-bootstrap-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=capi-kubeadm-bootstrap-manager k8s:io.kubernetes.pod.namespace=capi-kubeadm-bootstrap-system]" subsys=allocator level=info msg="Removed endpoint" containerID=440357a435 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2087 identity=3737 ipv4=10.0.0.34 ipv6= k8sPodName=capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-controller-manager-6f6766ffcc-sr2q4 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.117 209e9de4-2174-43b2-88d9-383e52c0a7ef default }" containerID=e3f5cf082a6772802cabe9d39b30046a65cbbe40046ebfa645b79892a4aa6ed6 datapathConfiguration="&{false false false false false }" interface=lxc12dea8c13493 k8sPodName=capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-controller-manager-6b6ccbf6b8-4rfmr labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e3f5cf082a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1576 ipv4=10.0.0.117 ipv6= k8sPodName=capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-controller-manager-6b6ccbf6b8-4rfmr subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e3f5cf082a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1576 identityLabels="k8s:cluster.x-k8s.io/provider=control-plane-kubeadm,k8s:control-plane=controller-manager,k8s:io.cilium.k8s.namespace.labels.cluster.x-k8s.io/provider=control-plane-kubeadm,k8s:io.cilium.k8s.namespace.labels.clusterctl.cluster.x-k8s.io,k8s:io.cilium.k8s.namespace.labels.control-plane=controller-manager,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=capi-kubeadm-control-plane-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=capi-kubeadm-control-plane-manager,k8s:io.kubernetes.pod.namespace=capi-kubeadm-control-plane-system" ipv4=10.0.0.117 ipv6= k8sPodName=capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-controller-manager-6b6ccbf6b8-4rfmr subsys=endpoint level=info msg="Identity of endpoint changed" containerID=e3f5cf082a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1576 identity=44022 identityLabels="k8s:cluster.x-k8s.io/provider=control-plane-kubeadm,k8s:control-plane=controller-manager,k8s:io.cilium.k8s.namespace.labels.cluster.x-k8s.io/provider=control-plane-kubeadm,k8s:io.cilium.k8s.namespace.labels.clusterctl.cluster.x-k8s.io,k8s:io.cilium.k8s.namespace.labels.control-plane=controller-manager,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=capi-kubeadm-control-plane-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=capi-kubeadm-control-plane-manager,k8s:io.kubernetes.pod.namespace=capi-kubeadm-control-plane-system" ipv4=10.0.0.117 ipv6= k8sPodName=capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-controller-manager-6b6ccbf6b8-4rfmr oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e3f5cf082a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1576 identity=44022 ipv4=10.0.0.117 ipv6= k8sPodName=capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-controller-manager-6b6ccbf6b8-4rfmr subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e3f5cf082a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1576 identity=44022 ipv4=10.0.0.117 ipv6= k8sPodName=capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-controller-manager-6b6ccbf6b8-4rfmr subsys=endpoint level=info msg="Successful endpoint creation" containerID=e3f5cf082a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1576 identity=44022 ipv4=10.0.0.117 ipv6= k8sPodName=capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-controller-manager-6b6ccbf6b8-4rfmr subsys=daemon level=info msg="Delete endpoint request" containerID=847cae6e8b endpointID=3235 k8sNamespace=capi-kubeadm-control-plane-system k8sPodName=capi-kubeadm-control-plane-controller-manager-7db57f6cd7-8q6dw subsys=daemon level=info msg="Releasing key" key="[k8s:cluster.x-k8s.io/provider=control-plane-kubeadm k8s:control-plane=controller-manager k8s:io.cilium.k8s.namespace.labels.cluster.x-k8s.io/provider=control-plane-kubeadm k8s:io.cilium.k8s.namespace.labels.clusterctl.cluster.x-k8s.io k8s:io.cilium.k8s.namespace.labels.control-plane=controller-manager k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=capi-kubeadm-control-plane-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=capi-kubeadm-control-plane-manager k8s:io.kubernetes.pod.namespace=capi-kubeadm-control-plane-system]" subsys=allocator level=info msg="Removed endpoint" containerID=847cae6e8b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3235 identity=44022 ipv4=10.0.0.234 ipv6= k8sPodName=capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-controller-manager-7db57f6cd7-8q6dw subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.105 609cb4ef-6f88-4f27-bfbd-ecbb41bb39c6 default }" containerID=1c8c1844b4d6cb0fd608a2bdfdaf21ef5532f79b7ae232b639b84870ba58f83a datapathConfiguration="&{false false false false false }" interface=lxc3fcd91b93fa7 k8sPodName=capi-system/capi-controller-manager-5647546676-xl964 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1c8c1844b4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=525 ipv4=10.0.0.105 ipv6= k8sPodName=capi-system/capi-controller-manager-5647546676-xl964 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1c8c1844b4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=525 identityLabels="k8s:cluster.x-k8s.io/provider=cluster-api,k8s:control-plane=controller-manager,k8s:io.cilium.k8s.namespace.labels.cluster.x-k8s.io/provider=cluster-api,k8s:io.cilium.k8s.namespace.labels.clusterctl.cluster.x-k8s.io,k8s:io.cilium.k8s.namespace.labels.control-plane=controller-manager,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=capi-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=capi-manager,k8s:io.kubernetes.pod.namespace=capi-system" ipv4=10.0.0.105 ipv6= k8sPodName=capi-system/capi-controller-manager-5647546676-xl964 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=1c8c1844b4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=525 identity=56578 identityLabels="k8s:cluster.x-k8s.io/provider=cluster-api,k8s:control-plane=controller-manager,k8s:io.cilium.k8s.namespace.labels.cluster.x-k8s.io/provider=cluster-api,k8s:io.cilium.k8s.namespace.labels.clusterctl.cluster.x-k8s.io,k8s:io.cilium.k8s.namespace.labels.control-plane=controller-manager,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=capi-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=capi-manager,k8s:io.kubernetes.pod.namespace=capi-system" ipv4=10.0.0.105 ipv6= k8sPodName=capi-system/capi-controller-manager-5647546676-xl964 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1c8c1844b4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=525 identity=56578 ipv4=10.0.0.105 ipv6= k8sPodName=capi-system/capi-controller-manager-5647546676-xl964 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=1c8c1844b4 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=525 identity=56578 ipv4=10.0.0.105 ipv6= k8sPodName=capi-system/capi-controller-manager-5647546676-xl964 subsys=endpoint level=info msg="Successful endpoint creation" containerID=1c8c1844b4 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=525 identity=56578 ipv4=10.0.0.105 ipv6= k8sPodName=capi-system/capi-controller-manager-5647546676-xl964 subsys=daemon level=info msg="Delete endpoint request" containerID=7847d74f3e endpointID=992 k8sNamespace=capi-system k8sPodName=capi-controller-manager-69f9d56d75-sm74q subsys=daemon level=info msg="Releasing key" key="[k8s:cluster.x-k8s.io/provider=cluster-api k8s:control-plane=controller-manager k8s:io.cilium.k8s.namespace.labels.cluster.x-k8s.io/provider=cluster-api k8s:io.cilium.k8s.namespace.labels.clusterctl.cluster.x-k8s.io k8s:io.cilium.k8s.namespace.labels.control-plane=controller-manager k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=capi-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=capi-manager k8s:io.kubernetes.pod.namespace=capi-system]" subsys=allocator level=info msg="Removed endpoint" containerID=7847d74f3e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=992 identity=56578 ipv4=10.0.0.170 ipv6= k8sPodName=capi-system/capi-controller-manager-69f9d56d75-sm74q subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.75 7c3bea20-1e11-4f01-9db3-60ceb0d77a98 default }" containerID=1449386aeb0d5ff1c278678d4bbae582cc7eea0f51677175b860b6d8642b5bd6 datapathConfiguration="&{false false false false false }" interface=lxcb9e4382bc11a k8sPodName=capo-system/capo-controller-manager-6f649456cd-kmklv labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1449386aeb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2103 ipv4=10.0.0.75 ipv6= k8sPodName=capo-system/capo-controller-manager-6f649456cd-kmklv subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1449386aeb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2103 identityLabels="k8s:cluster.x-k8s.io/provider=infrastructure-openstack,k8s:control-plane=capo-controller-manager,k8s:io.cilium.k8s.namespace.labels.cluster.x-k8s.io/provider=infrastructure-openstack,k8s:io.cilium.k8s.namespace.labels.clusterctl.cluster.x-k8s.io,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=capo-system,k8s:io.cilium.k8s.namespace.labels.pod-security.kubernetes.io/audit=restricted,k8s:io.cilium.k8s.namespace.labels.pod-security.kubernetes.io/enforce=restricted,k8s:io.cilium.k8s.namespace.labels.pod-security.kubernetes.io/warn=restricted,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=capo-manager,k8s:io.kubernetes.pod.namespace=capo-system" ipv4=10.0.0.75 ipv6= k8sPodName=capo-system/capo-controller-manager-6f649456cd-kmklv subsys=endpoint level=info msg="Identity of endpoint changed" containerID=1449386aeb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2103 identity=725 identityLabels="k8s:cluster.x-k8s.io/provider=infrastructure-openstack,k8s:control-plane=capo-controller-manager,k8s:io.cilium.k8s.namespace.labels.cluster.x-k8s.io/provider=infrastructure-openstack,k8s:io.cilium.k8s.namespace.labels.clusterctl.cluster.x-k8s.io,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=capo-system,k8s:io.cilium.k8s.namespace.labels.pod-security.kubernetes.io/audit=restricted,k8s:io.cilium.k8s.namespace.labels.pod-security.kubernetes.io/enforce=restricted,k8s:io.cilium.k8s.namespace.labels.pod-security.kubernetes.io/warn=restricted,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=capo-manager,k8s:io.kubernetes.pod.namespace=capo-system" ipv4=10.0.0.75 ipv6= k8sPodName=capo-system/capo-controller-manager-6f649456cd-kmklv oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1449386aeb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2103 identity=725 ipv4=10.0.0.75 ipv6= k8sPodName=capo-system/capo-controller-manager-6f649456cd-kmklv subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=1449386aeb datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2103 identity=725 ipv4=10.0.0.75 ipv6= k8sPodName=capo-system/capo-controller-manager-6f649456cd-kmklv subsys=endpoint level=info msg="Successful endpoint creation" containerID=1449386aeb datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2103 identity=725 ipv4=10.0.0.75 ipv6= k8sPodName=capo-system/capo-controller-manager-6f649456cd-kmklv subsys=daemon level=info msg="Delete endpoint request" containerID=6124e16f66 endpointID=339 k8sNamespace=capo-system k8sPodName=capo-controller-manager-8c5df4f-6tlmf subsys=daemon level=info msg="Releasing key" key="[k8s:cluster.x-k8s.io/provider=infrastructure-openstack k8s:control-plane=capo-controller-manager k8s:io.cilium.k8s.namespace.labels.cluster.x-k8s.io/provider=infrastructure-openstack k8s:io.cilium.k8s.namespace.labels.clusterctl.cluster.x-k8s.io k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=capo-system k8s:io.cilium.k8s.namespace.labels.pod-security.kubernetes.io/audit=restricted k8s:io.cilium.k8s.namespace.labels.pod-security.kubernetes.io/enforce=restricted k8s:io.cilium.k8s.namespace.labels.pod-security.kubernetes.io/warn=restricted k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=capo-manager k8s:io.kubernetes.pod.namespace=capo-system]" subsys=allocator level=info msg="Removed endpoint" containerID=6124e16f66 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=339 identity=725 ipv4=10.0.0.89 ipv6= k8sPodName=capo-system/capo-controller-manager-8c5df4f-6tlmf subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.122 ccc5b859-104d-4d80-9b89-05df1f4ed0e9 default }" containerID=db75cb978082dbc6da42413fa30c29bc1bc58bf324043bd96129e9133ebf2ddd datapathConfiguration="&{false false false false false }" interface=lxcb34654c901c6 k8sPodName=capo-system/capo-controller-manager-56cf844ccd-n7zqg labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=db75cb9780 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=450 ipv4=10.0.0.122 ipv6= k8sPodName=capo-system/capo-controller-manager-56cf844ccd-n7zqg subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=db75cb9780 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=450 identityLabels="k8s:cluster.x-k8s.io/provider=infrastructure-openstack,k8s:control-plane=capo-controller-manager,k8s:io.cilium.k8s.namespace.labels.cluster.x-k8s.io/provider=infrastructure-openstack,k8s:io.cilium.k8s.namespace.labels.clusterctl.cluster.x-k8s.io,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=capo-system,k8s:io.cilium.k8s.namespace.labels.pod-security.kubernetes.io/audit=restricted,k8s:io.cilium.k8s.namespace.labels.pod-security.kubernetes.io/enforce=restricted,k8s:io.cilium.k8s.namespace.labels.pod-security.kubernetes.io/warn=restricted,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=capo-manager,k8s:io.kubernetes.pod.namespace=capo-system" ipv4=10.0.0.122 ipv6= k8sPodName=capo-system/capo-controller-manager-56cf844ccd-n7zqg subsys=endpoint level=info msg="Identity of endpoint changed" containerID=db75cb9780 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=450 identity=725 identityLabels="k8s:cluster.x-k8s.io/provider=infrastructure-openstack,k8s:control-plane=capo-controller-manager,k8s:io.cilium.k8s.namespace.labels.cluster.x-k8s.io/provider=infrastructure-openstack,k8s:io.cilium.k8s.namespace.labels.clusterctl.cluster.x-k8s.io,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=capo-system,k8s:io.cilium.k8s.namespace.labels.pod-security.kubernetes.io/audit=restricted,k8s:io.cilium.k8s.namespace.labels.pod-security.kubernetes.io/enforce=restricted,k8s:io.cilium.k8s.namespace.labels.pod-security.kubernetes.io/warn=restricted,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=capo-manager,k8s:io.kubernetes.pod.namespace=capo-system" ipv4=10.0.0.122 ipv6= k8sPodName=capo-system/capo-controller-manager-56cf844ccd-n7zqg oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=db75cb9780 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=450 identity=725 ipv4=10.0.0.122 ipv6= k8sPodName=capo-system/capo-controller-manager-56cf844ccd-n7zqg subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=db75cb9780 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=450 identity=725 ipv4=10.0.0.122 ipv6= k8sPodName=capo-system/capo-controller-manager-56cf844ccd-n7zqg subsys=endpoint level=info msg="Successful endpoint creation" containerID=db75cb9780 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=450 identity=725 ipv4=10.0.0.122 ipv6= k8sPodName=capo-system/capo-controller-manager-56cf844ccd-n7zqg subsys=daemon level=info msg="Delete endpoint request" containerID=1449386aeb endpointID=2103 k8sNamespace=capo-system k8sPodName=capo-controller-manager-6f649456cd-kmklv subsys=daemon level=info msg="Releasing key" key="[k8s:cluster.x-k8s.io/provider=infrastructure-openstack k8s:control-plane=capo-controller-manager k8s:io.cilium.k8s.namespace.labels.cluster.x-k8s.io/provider=infrastructure-openstack k8s:io.cilium.k8s.namespace.labels.clusterctl.cluster.x-k8s.io k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=capo-system k8s:io.cilium.k8s.namespace.labels.pod-security.kubernetes.io/audit=restricted k8s:io.cilium.k8s.namespace.labels.pod-security.kubernetes.io/enforce=restricted k8s:io.cilium.k8s.namespace.labels.pod-security.kubernetes.io/warn=restricted k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=capo-manager k8s:io.kubernetes.pod.namespace=capo-system]" subsys=allocator level=info msg="Removed endpoint" containerID=1449386aeb datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2103 identity=725 ipv4=10.0.0.75 ipv6= k8sPodName=capo-system/capo-controller-manager-6f649456cd-kmklv subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.67 b3edff77-70e6-47fa-8525-77ae681cbe6e default }" containerID=38dca2ced4da5fe0ed7afcd348afd32469d7ac1ab9a14d3d3c9942189581903a datapathConfiguration="&{false false false false false }" interface=lxc675c1779de05 k8sPodName=openstack/magnum-api-7fb9685bf8-hxfz7 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=38dca2ced4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3 ipv4=10.0.0.67 ipv6= k8sPodName=openstack/magnum-api-7fb9685bf8-hxfz7 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=38dca2ced4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3 identityLabels="k8s:application=magnum,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=magnum-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=magnum" ipv4=10.0.0.67 ipv6= k8sPodName=openstack/magnum-api-7fb9685bf8-hxfz7 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=magnum;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=magnum-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=magnum;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=38dca2ced4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3 identity=61372 identityLabels="k8s:application=magnum,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=magnum-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=magnum" ipv4=10.0.0.67 ipv6= k8sPodName=openstack/magnum-api-7fb9685bf8-hxfz7 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=38dca2ced4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3 identity=61372 ipv4=10.0.0.67 ipv6= k8sPodName=openstack/magnum-api-7fb9685bf8-hxfz7 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.232 34b4ab6b-c12e-480c-9b88-b502f12298b6 default }" containerID=170d59e9e54e1af1474ff154ff64c6c0ac87be7775e672c7bedd21b901f10cd6 datapathConfiguration="&{false false false false false }" interface=lxcb045bbc5e240 k8sPodName=openstack/magnum-conductor-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=170d59e9e5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2608 ipv4=10.0.0.232 ipv6= k8sPodName=openstack/magnum-conductor-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=170d59e9e5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2608 identityLabels="k8s:application=magnum,k8s:apps.kubernetes.io/pod-index=0,k8s:component=conductor,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=magnum-conductor,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=magnum,k8s:statefulset.kubernetes.io/pod-name=magnum-conductor-0" ipv4=10.0.0.232 ipv6= k8sPodName=openstack/magnum-conductor-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=magnum;k8s:apps.kubernetes.io/pod-index=0;k8s:component=conductor;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=magnum-conductor;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=magnum;k8s:statefulset.kubernetes.io/pod-name=magnum-conductor-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=170d59e9e5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2608 identity=10395 identityLabels="k8s:application=magnum,k8s:apps.kubernetes.io/pod-index=0,k8s:component=conductor,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=magnum-conductor,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=magnum,k8s:statefulset.kubernetes.io/pod-name=magnum-conductor-0" ipv4=10.0.0.232 ipv6= k8sPodName=openstack/magnum-conductor-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=170d59e9e5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2608 identity=10395 ipv4=10.0.0.232 ipv6= k8sPodName=openstack/magnum-conductor-0 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.35 dbb1cea7-e089-455d-88ed-eef0207b21c9 default }" containerID=74c3c11e3a52c65e4f8c402725b9252cc5c5394cacd8fa1cbf53eecd14026721 datapathConfiguration="&{false false false false false }" interface=lxc812a8acca438 k8sPodName=openstack/magnum-db-init-xg8rj labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=74c3c11e3a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=354 ipv4=10.0.0.35 ipv6= k8sPodName=openstack/magnum-db-init-xg8rj subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=74c3c11e3a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=354 identityLabels="k8s:application=magnum,k8s:batch.kubernetes.io/controller-uid=a1592672-c80c-40c3-82ef-ba3929f8893f,k8s:batch.kubernetes.io/job-name=magnum-db-init,k8s:component=db-init,k8s:controller-uid=a1592672-c80c-40c3-82ef-ba3929f8893f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=magnum-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=magnum-db-init,k8s:release_group=magnum" ipv4=10.0.0.35 ipv6= k8sPodName=openstack/magnum-db-init-xg8rj subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=magnum;k8s:batch.kubernetes.io/controller-uid=a1592672-c80c-40c3-82ef-ba3929f8893f;k8s:batch.kubernetes.io/job-name=magnum-db-init;k8s:component=db-init;k8s:controller-uid=a1592672-c80c-40c3-82ef-ba3929f8893f;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=magnum-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=magnum-db-init;k8s:release_group=magnum;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=74c3c11e3a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=354 identity=17191 identityLabels="k8s:application=magnum,k8s:batch.kubernetes.io/controller-uid=a1592672-c80c-40c3-82ef-ba3929f8893f,k8s:batch.kubernetes.io/job-name=magnum-db-init,k8s:component=db-init,k8s:controller-uid=a1592672-c80c-40c3-82ef-ba3929f8893f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=magnum-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=magnum-db-init,k8s:release_group=magnum" ipv4=10.0.0.35 ipv6= k8sPodName=openstack/magnum-db-init-xg8rj oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=74c3c11e3a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=354 identity=17191 ipv4=10.0.0.35 ipv6= k8sPodName=openstack/magnum-db-init-xg8rj subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=38dca2ced4 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3 identity=61372 ipv4=10.0.0.67 ipv6= k8sPodName=openstack/magnum-api-7fb9685bf8-hxfz7 subsys=endpoint level=info msg="Successful endpoint creation" containerID=38dca2ced4 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3 identity=61372 ipv4=10.0.0.67 ipv6= k8sPodName=openstack/magnum-api-7fb9685bf8-hxfz7 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=170d59e9e5 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2608 identity=10395 ipv4=10.0.0.232 ipv6= k8sPodName=openstack/magnum-conductor-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=170d59e9e5 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2608 identity=10395 ipv4=10.0.0.232 ipv6= k8sPodName=openstack/magnum-conductor-0 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=74c3c11e3a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=354 identity=17191 ipv4=10.0.0.35 ipv6= k8sPodName=openstack/magnum-db-init-xg8rj subsys=endpoint level=info msg="Successful endpoint creation" containerID=74c3c11e3a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=354 identity=17191 ipv4=10.0.0.35 ipv6= k8sPodName=openstack/magnum-db-init-xg8rj subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=74c3c11e3a endpointID=354 k8sNamespace=openstack k8sPodName=magnum-db-init-xg8rj subsys=daemon level=info msg="Releasing key" key="[k8s:application=magnum k8s:batch.kubernetes.io/controller-uid=a1592672-c80c-40c3-82ef-ba3929f8893f k8s:batch.kubernetes.io/job-name=magnum-db-init k8s:component=db-init k8s:controller-uid=a1592672-c80c-40c3-82ef-ba3929f8893f k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=magnum-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=magnum-db-init k8s:release_group=magnum]" subsys=allocator level=info msg="Removed endpoint" containerID=74c3c11e3a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=354 identity=17191 ipv4=10.0.0.35 ipv6= k8sPodName=openstack/magnum-db-init-xg8rj subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.13 6e6a899d-c8cc-45f4-a23e-a5eda861f48f default }" containerID=86ef19138bf7937875470655a8165d829e0a66050f95dff7e8c7a70d024eef6b datapathConfiguration="&{false false false false false }" interface=lxc6d4ebaec618a k8sPodName=openstack/magnum-db-sync-sp5jt labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=86ef19138b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3005 ipv4=10.0.0.13 ipv6= k8sPodName=openstack/magnum-db-sync-sp5jt subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=86ef19138b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3005 identityLabels="k8s:application=magnum,k8s:batch.kubernetes.io/controller-uid=6c2110d7-623f-4aef-b51c-3abbdc616722,k8s:batch.kubernetes.io/job-name=magnum-db-sync,k8s:component=db-sync,k8s:controller-uid=6c2110d7-623f-4aef-b51c-3abbdc616722,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=magnum-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=magnum-db-sync,k8s:release_group=magnum" ipv4=10.0.0.13 ipv6= k8sPodName=openstack/magnum-db-sync-sp5jt subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=magnum;k8s:batch.kubernetes.io/controller-uid=6c2110d7-623f-4aef-b51c-3abbdc616722;k8s:batch.kubernetes.io/job-name=magnum-db-sync;k8s:component=db-sync;k8s:controller-uid=6c2110d7-623f-4aef-b51c-3abbdc616722;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=magnum-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=magnum-db-sync;k8s:release_group=magnum;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=86ef19138b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3005 identity=5072 identityLabels="k8s:application=magnum,k8s:batch.kubernetes.io/controller-uid=6c2110d7-623f-4aef-b51c-3abbdc616722,k8s:batch.kubernetes.io/job-name=magnum-db-sync,k8s:component=db-sync,k8s:controller-uid=6c2110d7-623f-4aef-b51c-3abbdc616722,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=magnum-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=magnum-db-sync,k8s:release_group=magnum" ipv4=10.0.0.13 ipv6= k8sPodName=openstack/magnum-db-sync-sp5jt oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=86ef19138b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3005 identity=5072 ipv4=10.0.0.13 ipv6= k8sPodName=openstack/magnum-db-sync-sp5jt subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=86ef19138b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3005 identity=5072 ipv4=10.0.0.13 ipv6= k8sPodName=openstack/magnum-db-sync-sp5jt subsys=endpoint level=info msg="Successful endpoint creation" containerID=86ef19138b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3005 identity=5072 ipv4=10.0.0.13 ipv6= k8sPodName=openstack/magnum-db-sync-sp5jt subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.169 ce04db65-1a64-4bab-9184-01a58765c1fb default }" containerID=c1877b927ab23be0c135b66535b8d1fd94d0afbb784140be9fbbe3a3f37f49fc datapathConfiguration="&{false false false false false }" interface=lxcf25761a888ce k8sPodName=openstack/heat-engine-cleaner-29766350-h56tc labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c1877b927a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=630 ipv4=10.0.0.169 ipv6= k8sPodName=openstack/heat-engine-cleaner-29766350-h56tc subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c1877b927a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=630 identityLabels="k8s:application=heat,k8s:batch.kubernetes.io/controller-uid=3b7bf9a1-c9b1-4e34-aae4-d0a065311192,k8s:batch.kubernetes.io/job-name=heat-engine-cleaner-29766350,k8s:component=engine-cleaner,k8s:controller-uid=3b7bf9a1-c9b1-4e34-aae4-d0a065311192,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=heat-engine-cleaner,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=heat-engine-cleaner-29766350,k8s:release_group=heat" ipv4=10.0.0.169 ipv6= k8sPodName=openstack/heat-engine-cleaner-29766350-h56tc subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=c1877b927a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=630 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.169 ipv6= k8sPodName=openstack/heat-engine-cleaner-29766350-h56tc line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=heat;k8s:batch.kubernetes.io/controller-uid=3b7bf9a1-c9b1-4e34-aae4-d0a065311192;k8s:batch.kubernetes.io/job-name=heat-engine-cleaner-29766350;k8s:component=engine-cleaner;k8s:controller-uid=3b7bf9a1-c9b1-4e34-aae4-d0a065311192;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=heat-engine-cleaner;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=heat-engine-cleaner-29766350;k8s:release_group=heat;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c1877b927a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=630 identity=48184 identityLabels="k8s:application=heat,k8s:batch.kubernetes.io/controller-uid=3b7bf9a1-c9b1-4e34-aae4-d0a065311192,k8s:batch.kubernetes.io/job-name=heat-engine-cleaner-29766350,k8s:component=engine-cleaner,k8s:controller-uid=3b7bf9a1-c9b1-4e34-aae4-d0a065311192,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=heat-engine-cleaner,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=heat-engine-cleaner-29766350,k8s:release_group=heat" ipv4=10.0.0.169 ipv6= k8sPodName=openstack/heat-engine-cleaner-29766350-h56tc oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c1877b927a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=630 identity=48184 ipv4=10.0.0.169 ipv6= k8sPodName=openstack/heat-engine-cleaner-29766350-h56tc subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c1877b927a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=630 identity=48184 ipv4=10.0.0.169 ipv6= k8sPodName=openstack/heat-engine-cleaner-29766350-h56tc subsys=endpoint level=info msg="Successful endpoint creation" containerID=c1877b927a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=630 identity=48184 ipv4=10.0.0.169 ipv6= k8sPodName=openstack/heat-engine-cleaner-29766350-h56tc subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=c1877b927a endpointID=630 k8sNamespace=openstack k8sPodName=heat-engine-cleaner-29766350-h56tc subsys=daemon level=info msg="Releasing key" key="[k8s:application=heat k8s:batch.kubernetes.io/controller-uid=3b7bf9a1-c9b1-4e34-aae4-d0a065311192 k8s:batch.kubernetes.io/job-name=heat-engine-cleaner-29766350 k8s:component=engine-cleaner k8s:controller-uid=3b7bf9a1-c9b1-4e34-aae4-d0a065311192 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=heat-engine-cleaner k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=heat-engine-cleaner-29766350 k8s:release_group=heat]" subsys=allocator level=info msg="Removed endpoint" containerID=c1877b927a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=630 identity=48184 ipv4=10.0.0.169 ipv6= k8sPodName=openstack/heat-engine-cleaner-29766350-h56tc subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.137 8352329f-c46d-4615-a47d-a248e24f7d4c default }" containerID=15c91c12cd480899ded1fc326b3892a987c49ed93d055fcacfe2887560cfec82 datapathConfiguration="&{false false false false false }" interface=lxc93c3e4f60f9d k8sPodName=openstack/heat-engine-cleaner-29766355-9j87b labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=15c91c12cd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=268 ipv4=10.0.0.137 ipv6= k8sPodName=openstack/heat-engine-cleaner-29766355-9j87b subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=15c91c12cd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=268 identityLabels="k8s:application=heat,k8s:batch.kubernetes.io/controller-uid=8fa6895b-b843-4e4c-852b-591db59339d7,k8s:batch.kubernetes.io/job-name=heat-engine-cleaner-29766355,k8s:component=engine-cleaner,k8s:controller-uid=8fa6895b-b843-4e4c-852b-591db59339d7,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=heat-engine-cleaner,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=heat-engine-cleaner-29766355,k8s:release_group=heat" ipv4=10.0.0.137 ipv6= k8sPodName=openstack/heat-engine-cleaner-29766355-9j87b subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=15c91c12cd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=268 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.137 ipv6= k8sPodName=openstack/heat-engine-cleaner-29766355-9j87b line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=heat;k8s:batch.kubernetes.io/controller-uid=8fa6895b-b843-4e4c-852b-591db59339d7;k8s:batch.kubernetes.io/job-name=heat-engine-cleaner-29766355;k8s:component=engine-cleaner;k8s:controller-uid=8fa6895b-b843-4e4c-852b-591db59339d7;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=heat-engine-cleaner;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=heat-engine-cleaner-29766355;k8s:release_group=heat;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=15c91c12cd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=268 identity=5812 identityLabels="k8s:application=heat,k8s:batch.kubernetes.io/controller-uid=8fa6895b-b843-4e4c-852b-591db59339d7,k8s:batch.kubernetes.io/job-name=heat-engine-cleaner-29766355,k8s:component=engine-cleaner,k8s:controller-uid=8fa6895b-b843-4e4c-852b-591db59339d7,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=heat-engine-cleaner,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=heat-engine-cleaner-29766355,k8s:release_group=heat" ipv4=10.0.0.137 ipv6= k8sPodName=openstack/heat-engine-cleaner-29766355-9j87b oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=15c91c12cd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=268 identity=5812 ipv4=10.0.0.137 ipv6= k8sPodName=openstack/heat-engine-cleaner-29766355-9j87b subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=15c91c12cd datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=268 identity=5812 ipv4=10.0.0.137 ipv6= k8sPodName=openstack/heat-engine-cleaner-29766355-9j87b subsys=endpoint level=info msg="Successful endpoint creation" containerID=15c91c12cd datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=268 identity=5812 ipv4=10.0.0.137 ipv6= k8sPodName=openstack/heat-engine-cleaner-29766355-9j87b subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=15c91c12cd endpointID=268 k8sNamespace=openstack k8sPodName=heat-engine-cleaner-29766355-9j87b subsys=daemon level=info msg="Releasing key" key="[k8s:application=heat k8s:batch.kubernetes.io/controller-uid=8fa6895b-b843-4e4c-852b-591db59339d7 k8s:batch.kubernetes.io/job-name=heat-engine-cleaner-29766355 k8s:component=engine-cleaner k8s:controller-uid=8fa6895b-b843-4e4c-852b-591db59339d7 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=heat-engine-cleaner k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=heat-engine-cleaner-29766355 k8s:release_group=heat]" subsys=allocator level=info msg="Removed endpoint" containerID=15c91c12cd datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=268 identity=5812 ipv4=10.0.0.137 ipv6= k8sPodName=openstack/heat-engine-cleaner-29766355-9j87b subsys=endpoint