level=info msg="Memory available for map entries (0.003% of 67421638656B): 168554096B" subsys=config level=info msg="option bpf-ct-global-tcp-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-ct-global-any-max set by dynamic sizing to 295708" subsys=config level=info msg="option bpf-nat-global-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-neigh-global-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-sock-rev-map-max set by dynamic sizing to 295708" subsys=config level=info msg=" --agent-health-port='9879'" subsys=daemon level=info msg=" --agent-labels=''" subsys=daemon level=info msg=" --agent-liveness-update-interval='1s'" subsys=daemon level=info msg=" --agent-not-ready-taint-key='node.cilium.io/agent-not-ready'" subsys=daemon level=info msg=" --allocator-list-timeout='3m0s'" subsys=daemon level=info msg=" --allow-icmp-frag-needed='true'" subsys=daemon level=info msg=" --allow-localhost='auto'" subsys=daemon level=info msg=" --annotate-k8s-node='false'" subsys=daemon level=info msg=" --api-rate-limit=''" subsys=daemon level=info msg=" --arping-refresh-period='30s'" subsys=daemon level=info msg=" --auto-create-cilium-node-resource='true'" subsys=daemon level=info msg=" --auto-direct-node-routes='false'" subsys=daemon level=info msg=" --bgp-announce-lb-ip='false'" subsys=daemon level=info msg=" --bgp-announce-pod-cidr='false'" subsys=daemon level=info msg=" --bgp-config-path='/var/lib/cilium/bgp/config.yaml'" subsys=daemon level=info msg=" --bpf-auth-map-max='524288'" subsys=daemon level=info msg=" --bpf-ct-global-any-max='262144'" subsys=daemon level=info msg=" --bpf-ct-global-tcp-max='524288'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-any='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp='6h0m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp-fin='10s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp-syn='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-any='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-tcp='6h0m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-tcp-grace='1m0s'" subsys=daemon level=info msg=" --bpf-filter-priority='1'" subsys=daemon level=info msg=" --bpf-fragments-map-max='8192'" subsys=daemon level=info msg=" --bpf-lb-acceleration='disabled'" subsys=daemon level=info msg=" --bpf-lb-affinity-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-algorithm='random'" subsys=daemon level=info msg=" --bpf-lb-dev-ip-addr-inherit=''" subsys=daemon level=info msg=" --bpf-lb-dsr-dispatch='opt'" subsys=daemon level=info msg=" --bpf-lb-dsr-l4-xlate='frontend'" subsys=daemon level=info msg=" --bpf-lb-external-clusterip='false'" subsys=daemon level=info msg=" --bpf-lb-maglev-hash-seed='JLfvgnHc2kaSUFaI'" subsys=daemon level=info msg=" --bpf-lb-maglev-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-maglev-table-size='16381'" subsys=daemon level=info msg=" --bpf-lb-map-max='65536'" subsys=daemon level=info msg=" --bpf-lb-mode='snat'" subsys=daemon level=info msg=" --bpf-lb-rev-nat-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-rss-ipv4-src-cidr=''" subsys=daemon level=info msg=" --bpf-lb-rss-ipv6-src-cidr=''" subsys=daemon level=info msg=" --bpf-lb-service-backend-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-service-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-sock='false'" subsys=daemon level=info msg=" --bpf-lb-sock-hostns-only='false'" subsys=daemon level=info msg=" --bpf-lb-source-range-map-max='0'" subsys=daemon level=info msg=" --bpf-map-dynamic-size-ratio='0.0025'" subsys=daemon level=info msg=" --bpf-map-event-buffers=''" subsys=daemon level=info msg=" --bpf-nat-global-max='524288'" subsys=daemon level=info msg=" --bpf-neigh-global-max='524288'" subsys=daemon level=info msg=" --bpf-policy-map-full-reconciliation-interval='15m0s'" subsys=daemon level=info msg=" --bpf-policy-map-max='16384'" subsys=daemon level=info msg=" --bpf-root='/sys/fs/bpf'" subsys=daemon level=info msg=" --bpf-sock-rev-map-max='262144'" subsys=daemon level=info msg=" --bypass-ip-availability-upon-restore='false'" subsys=daemon level=info msg=" --certificates-directory='/var/run/cilium/certs'" subsys=daemon level=info msg=" --cflags=''" subsys=daemon level=info msg=" --cgroup-root='/run/cilium/cgroupv2'" subsys=daemon level=info msg=" --cilium-endpoint-gc-interval='5m0s'" subsys=daemon level=info msg=" --cluster-health-port='4240'" subsys=daemon level=info msg=" --cluster-id='0'" subsys=daemon level=info msg=" --cluster-name='default'" subsys=daemon level=info msg=" --cluster-pool-ipv4-cidr='10.0.0.0/8'" subsys=daemon level=info msg=" --cluster-pool-ipv4-mask-size='24'" subsys=daemon level=info msg=" --clustermesh-config='/var/lib/cilium/clustermesh/'" subsys=daemon level=info msg=" --clustermesh-ip-identities-sync-timeout='1m0s'" subsys=daemon level=info msg=" --cmdref=''" subsys=daemon level=info msg=" --cni-chaining-mode='none'" subsys=daemon level=info msg=" --cni-chaining-target=''" subsys=daemon level=info msg=" --cni-exclusive='true'" subsys=daemon level=info msg=" --cni-external-routing='false'" subsys=daemon level=info msg=" --cni-log-file='/var/run/cilium/cilium-cni.log'" subsys=daemon level=info msg=" --cnp-node-status-gc-interval='0s'" subsys=daemon level=info msg=" --config=''" subsys=daemon level=info msg=" --config-dir='/tmp/cilium/config-map'" subsys=daemon level=info msg=" --config-sources='config-map:kube-system/cilium-config'" subsys=daemon level=info msg=" --conntrack-gc-interval='0s'" subsys=daemon level=info msg=" --conntrack-gc-max-interval='0s'" subsys=daemon level=info msg=" --crd-wait-timeout='5m0s'" subsys=daemon level=info msg=" --custom-cni-conf='false'" subsys=daemon level=info msg=" --datapath-mode='veth'" subsys=daemon level=info msg=" --debug='false'" subsys=daemon level=info msg=" --debug-verbose=''" subsys=daemon level=info msg=" --derive-masquerade-ip-addr-from-device=''" subsys=daemon level=info msg=" --devices=''" subsys=daemon level=info msg=" --direct-routing-device=''" subsys=daemon level=info msg=" --disable-cnp-status-updates='true'" subsys=daemon level=info msg=" --disable-endpoint-crd='false'" subsys=daemon level=info msg=" --disable-envoy-version-check='false'" subsys=daemon level=info msg=" --disable-iptables-feeder-rules=''" subsys=daemon level=info msg=" --dns-max-ips-per-restored-rule='1000'" subsys=daemon level=info msg=" --dns-policy-unload-on-shutdown='false'" subsys=daemon level=info msg=" --dnsproxy-concurrency-limit='0'" subsys=daemon level=info msg=" --dnsproxy-concurrency-processing-grace-period='0s'" subsys=daemon level=info msg=" --dnsproxy-enable-transparent-mode='true'" subsys=daemon level=info msg=" --dnsproxy-lock-count='128'" subsys=daemon level=info msg=" --dnsproxy-lock-timeout='500ms'" subsys=daemon level=info msg=" --egress-gateway-policy-map-max='16384'" subsys=daemon level=info msg=" --egress-gateway-reconciliation-trigger-interval='1s'" subsys=daemon level=info msg=" --egress-masquerade-interfaces=''" subsys=daemon level=info msg=" --egress-multi-home-ip-rule-compat='false'" subsys=daemon level=info msg=" --enable-auto-protect-node-port-range='true'" subsys=daemon level=info msg=" --enable-bandwidth-manager='false'" subsys=daemon level=info msg=" --enable-bbr='false'" subsys=daemon level=info msg=" --enable-bgp-control-plane='false'" subsys=daemon level=info msg=" --enable-bpf-clock-probe='false'" subsys=daemon level=info msg=" --enable-bpf-masquerade='false'" subsys=daemon level=info msg=" --enable-bpf-tproxy='false'" subsys=daemon level=info msg=" --enable-cilium-api-server-access='*'" subsys=daemon level=info msg=" --enable-cilium-endpoint-slice='false'" subsys=daemon level=info msg=" --enable-cilium-health-api-server-access='*'" subsys=daemon level=info msg=" --enable-custom-calls='false'" subsys=daemon level=info msg=" --enable-endpoint-health-checking='true'" subsys=daemon level=info msg=" --enable-endpoint-routes='false'" subsys=daemon level=info msg=" --enable-envoy-config='false'" subsys=daemon level=info msg=" --enable-external-ips='false'" subsys=daemon level=info msg=" --enable-health-check-nodeport='true'" subsys=daemon level=info msg=" --enable-health-checking='true'" subsys=daemon level=info msg=" --enable-high-scale-ipcache='false'" subsys=daemon level=info msg=" --enable-host-firewall='false'" subsys=daemon level=info msg=" --enable-host-legacy-routing='false'" subsys=daemon level=info msg=" --enable-host-port='false'" subsys=daemon level=info msg=" --enable-hubble='false'" subsys=daemon level=info msg=" --enable-hubble-recorder-api='true'" subsys=daemon level=info msg=" --enable-icmp-rules='true'" subsys=daemon level=info msg=" --enable-identity-mark='true'" subsys=daemon level=info msg=" --enable-ip-masq-agent='false'" subsys=daemon level=info msg=" --enable-ipsec='false'" subsys=daemon level=info msg=" --enable-ipsec-key-watcher='true'" subsys=daemon level=info msg=" --enable-ipv4='true'" subsys=daemon level=info msg=" --enable-ipv4-big-tcp='false'" subsys=daemon level=info msg=" --enable-ipv4-egress-gateway='false'" subsys=daemon level=info msg=" --enable-ipv4-fragment-tracking='true'" subsys=daemon level=info msg=" --enable-ipv4-masquerade='true'" subsys=daemon level=info msg=" --enable-ipv6='false'" subsys=daemon level=info msg=" --enable-ipv6-big-tcp='false'" subsys=daemon level=info msg=" --enable-ipv6-masquerade='true'" subsys=daemon level=info msg=" --enable-ipv6-ndp='false'" subsys=daemon level=info msg=" --enable-k8s='true'" subsys=daemon level=info msg=" --enable-k8s-api-discovery='false'" subsys=daemon level=info msg=" --enable-k8s-endpoint-slice='true'" subsys=daemon level=info msg=" --enable-k8s-event-handover='false'" subsys=daemon level=info msg=" --enable-k8s-networkpolicy='true'" subsys=daemon level=info msg=" --enable-k8s-terminating-endpoint='true'" subsys=daemon level=info msg=" --enable-l2-announcements='false'" subsys=daemon level=info msg=" --enable-l2-neigh-discovery='true'" subsys=daemon level=info msg=" --enable-l2-pod-announcements='false'" subsys=daemon level=info msg=" --enable-l7-proxy='true'" subsys=daemon level=info msg=" --enable-local-node-route='true'" subsys=daemon level=info msg=" --enable-local-redirect-policy='false'" subsys=daemon level=info msg=" --enable-mke='false'" subsys=daemon level=info msg=" --enable-monitor='true'" subsys=daemon level=info msg=" --enable-nat46x64-gateway='false'" subsys=daemon level=info msg=" --enable-node-port='false'" subsys=daemon level=info msg=" --enable-pmtu-discovery='false'" subsys=daemon level=info msg=" --enable-policy='default'" subsys=daemon level=info msg=" --enable-recorder='false'" subsys=daemon level=info msg=" --enable-remote-node-identity='true'" subsys=daemon level=info msg=" --enable-runtime-device-detection='false'" subsys=daemon level=info msg=" --enable-sctp='false'" subsys=daemon level=info msg=" --enable-service-topology='false'" subsys=daemon level=info msg=" --enable-session-affinity='false'" subsys=daemon level=info msg=" --enable-srv6='false'" subsys=daemon level=info msg=" --enable-stale-cilium-endpoint-cleanup='true'" subsys=daemon level=info msg=" --enable-svc-source-range-check='true'" subsys=daemon level=info msg=" --enable-tracing='false'" subsys=daemon level=info msg=" --enable-unreachable-routes='false'" subsys=daemon level=info msg=" --enable-vtep='false'" subsys=daemon level=info msg=" --enable-well-known-identities='false'" subsys=daemon level=info msg=" --enable-wireguard='false'" subsys=daemon level=info msg=" --enable-wireguard-userspace-fallback='false'" subsys=daemon level=info msg=" --enable-xdp-prefilter='false'" subsys=daemon level=info msg=" --enable-xt-socket-fallback='true'" subsys=daemon level=info msg=" --encrypt-interface=''" subsys=daemon level=info msg=" --encrypt-node='false'" subsys=daemon level=info msg=" --endpoint-gc-interval='5m0s'" subsys=daemon level=info msg=" --endpoint-queue-size='25'" subsys=daemon level=info msg=" --endpoint-status=''" subsys=daemon level=info msg=" --envoy-config-timeout='2m0s'" subsys=daemon level=info msg=" --envoy-log=''" subsys=daemon level=info msg=" --exclude-local-address=''" subsys=daemon level=info msg=" --external-envoy-proxy='false'" subsys=daemon level=info msg=" --fixed-identity-mapping=''" subsys=daemon level=info msg=" --fqdn-regex-compile-lru-size='1024'" subsys=daemon level=info msg=" --gops-port='9890'" subsys=daemon level=info msg=" --http-403-msg=''" subsys=daemon level=info msg=" --http-idle-timeout='0'" subsys=daemon level=info msg=" --http-max-grpc-timeout='0'" subsys=daemon level=info msg=" --http-normalize-path='true'" subsys=daemon level=info msg=" --http-request-timeout='3600'" subsys=daemon level=info msg=" --http-retry-count='3'" subsys=daemon level=info msg=" --http-retry-timeout='0'" subsys=daemon level=info msg=" --hubble-disable-tls='false'" subsys=daemon level=info msg=" --hubble-event-buffer-capacity='4095'" subsys=daemon level=info msg=" --hubble-event-queue-size='0'" subsys=daemon level=info msg=" --hubble-export-file-compress='false'" subsys=daemon level=info msg=" --hubble-export-file-max-backups='5'" subsys=daemon level=info msg=" --hubble-export-file-max-size-mb='10'" subsys=daemon level=info msg=" --hubble-export-file-path=''" subsys=daemon level=info msg=" --hubble-listen-address=''" subsys=daemon level=info msg=" --hubble-metrics=''" subsys=daemon level=info msg=" --hubble-metrics-server=''" subsys=daemon level=info msg=" --hubble-monitor-events=''" subsys=daemon level=info msg=" --hubble-prefer-ipv6='false'" subsys=daemon level=info msg=" --hubble-recorder-sink-queue-size='1024'" subsys=daemon level=info msg=" --hubble-recorder-storage-path='/var/run/cilium/pcaps'" subsys=daemon level=info msg=" --hubble-skip-unknown-cgroup-ids='true'" subsys=daemon level=info msg=" --hubble-socket-path='/var/run/cilium/hubble.sock'" subsys=daemon level=info msg=" --hubble-tls-cert-file=''" subsys=daemon level=info msg=" --hubble-tls-client-ca-files=''" subsys=daemon level=info msg=" --hubble-tls-key-file=''" subsys=daemon level=info msg=" --identity-allocation-mode='crd'" subsys=daemon level=info msg=" --identity-change-grace-period='5s'" subsys=daemon level=info msg=" --identity-gc-interval='15m0s'" subsys=daemon level=info msg=" --identity-heartbeat-timeout='30m0s'" subsys=daemon level=info msg=" --identity-restore-grace-period='10m0s'" subsys=daemon level=info msg=" --install-egress-gateway-routes='false'" subsys=daemon level=info msg=" --install-iptables-rules='true'" subsys=daemon level=info msg=" --install-no-conntrack-iptables-rules='false'" subsys=daemon level=info msg=" --ip-allocation-timeout='2m0s'" subsys=daemon level=info msg=" --ip-masq-agent-config-path='/etc/config/ip-masq-agent'" subsys=daemon level=info msg=" --ipam='cluster-pool'" subsys=daemon level=info msg=" --ipam-cilium-node-update-rate='15s'" subsys=daemon level=info msg=" --ipam-multi-pool-pre-allocation='default=8'" subsys=daemon level=info msg=" --ipsec-key-file=''" subsys=daemon level=info msg=" --ipsec-key-rotation-duration='5m0s'" subsys=daemon level=info msg=" --iptables-lock-timeout='5s'" subsys=daemon level=info msg=" --iptables-random-fully='false'" subsys=daemon level=info msg=" --ipv4-native-routing-cidr=''" subsys=daemon level=info msg=" --ipv4-node='auto'" subsys=daemon level=info msg=" --ipv4-pod-subnets=''" subsys=daemon level=info msg=" --ipv4-range='auto'" subsys=daemon level=info msg=" --ipv4-service-loopback-address='169.254.42.1'" subsys=daemon level=info msg=" --ipv4-service-range='auto'" subsys=daemon level=info msg=" --ipv6-cluster-alloc-cidr='f00d::/64'" subsys=daemon level=info msg=" --ipv6-mcast-device=''" subsys=daemon level=info msg=" --ipv6-native-routing-cidr=''" subsys=daemon level=info msg=" --ipv6-node='auto'" subsys=daemon level=info msg=" --ipv6-pod-subnets=''" subsys=daemon level=info msg=" --ipv6-range='auto'" subsys=daemon level=info msg=" --ipv6-service-range='auto'" subsys=daemon level=info msg=" --join-cluster='false'" subsys=daemon level=info msg=" --k8s-api-server=''" subsys=daemon level=info msg=" --k8s-client-burst='10'" subsys=daemon level=info msg=" --k8s-client-qps='5'" subsys=daemon level=info msg=" --k8s-heartbeat-timeout='30s'" subsys=daemon level=info msg=" --k8s-kubeconfig-path=''" subsys=daemon level=info msg=" --k8s-namespace='kube-system'" subsys=daemon level=info msg=" --k8s-require-ipv4-pod-cidr='false'" subsys=daemon level=info msg=" --k8s-require-ipv6-pod-cidr='false'" subsys=daemon level=info msg=" --k8s-service-cache-size='128'" subsys=daemon level=info msg=" --k8s-service-proxy-name=''" subsys=daemon level=info msg=" --k8s-sync-timeout='3m0s'" subsys=daemon level=info msg=" --k8s-watcher-endpoint-selector='metadata.name!=kube-scheduler,metadata.name!=kube-controller-manager,metadata.name!=etcd-operator,metadata.name!=gcp-controller-manager'" subsys=daemon level=info msg=" --keep-config='false'" subsys=daemon level=info msg=" --kube-proxy-replacement='disabled'" subsys=daemon level=info msg=" --kube-proxy-replacement-healthz-bind-address=''" subsys=daemon level=info msg=" --kvstore=''" subsys=daemon level=info msg=" --kvstore-connectivity-timeout='2m0s'" subsys=daemon level=info msg=" --kvstore-lease-ttl='15m0s'" subsys=daemon level=info msg=" --kvstore-max-consecutive-quorum-errors='2'" subsys=daemon level=info msg=" --kvstore-opt=''" subsys=daemon level=info msg=" --kvstore-periodic-sync='5m0s'" subsys=daemon level=info msg=" --l2-announcements-lease-duration='15s'" subsys=daemon level=info msg=" --l2-announcements-renew-deadline='5s'" subsys=daemon level=info msg=" --l2-announcements-retry-period='2s'" subsys=daemon level=info msg=" --l2-pod-announcements-interface=''" subsys=daemon level=info msg=" --label-prefix-file=''" subsys=daemon level=info msg=" --labels=''" subsys=daemon level=info msg=" --lib-dir='/var/lib/cilium'" subsys=daemon level=info msg=" --local-max-addr-scope='252'" subsys=daemon level=info msg=" --local-router-ipv4=''" subsys=daemon level=info msg=" --local-router-ipv6=''" subsys=daemon level=info msg=" --log-driver=''" subsys=daemon level=info msg=" --log-opt=''" subsys=daemon level=info msg=" --log-system-load='false'" subsys=daemon level=info msg=" --max-controller-interval='0'" subsys=daemon level=info msg=" --mesh-auth-enabled='true'" subsys=daemon level=info msg=" --mesh-auth-gc-interval='5m0s'" subsys=daemon level=info msg=" --mesh-auth-mutual-listener-port='0'" subsys=daemon level=info msg=" --mesh-auth-queue-size='1024'" subsys=daemon level=info msg=" --mesh-auth-rotated-identities-queue-size='1024'" subsys=daemon level=info msg=" --mesh-auth-signal-backoff-duration='1s'" subsys=daemon level=info msg=" --mesh-auth-spiffe-trust-domain='spiffe.cilium'" subsys=daemon level=info msg=" --mesh-auth-spire-admin-socket=''" subsys=daemon level=info msg=" --metrics=''" subsys=daemon level=info msg=" --mke-cgroup-mount=''" subsys=daemon level=info msg=" --monitor-aggregation='medium'" subsys=daemon level=info msg=" --monitor-aggregation-flags='all'" subsys=daemon level=info msg=" --monitor-aggregation-interval='5s'" subsys=daemon level=info msg=" --monitor-queue-size='0'" subsys=daemon level=info msg=" --mtu='0'" subsys=daemon level=info msg=" --node-encryption-opt-out-labels='node-role.kubernetes.io/control-plane'" subsys=daemon level=info msg=" --node-port-acceleration='disabled'" subsys=daemon level=info msg=" --node-port-algorithm='random'" subsys=daemon level=info msg=" --node-port-bind-protection='true'" subsys=daemon level=info msg=" --node-port-mode='snat'" subsys=daemon level=info msg=" --node-port-range='30000,32767'" subsys=daemon level=info msg=" --nodes-gc-interval='5m0s'" subsys=daemon level=info msg=" --operator-api-serve-addr='127.0.0.1:9234'" subsys=daemon level=info msg=" --policy-audit-mode='false'" subsys=daemon level=info msg=" --policy-queue-size='100'" subsys=daemon level=info msg=" --policy-trigger-interval='1s'" subsys=daemon level=info msg=" --pprof='false'" subsys=daemon level=info msg=" --pprof-address='localhost'" subsys=daemon level=info msg=" --pprof-port='6060'" subsys=daemon level=info msg=" --preallocate-bpf-maps='false'" subsys=daemon level=info msg=" --prepend-iptables-chains='true'" subsys=daemon level=info msg=" --procfs='/host/proc'" subsys=daemon level=info msg=" --prometheus-serve-addr=':9962'" subsys=daemon level=info msg=" --proxy-connect-timeout='2'" subsys=daemon level=info msg=" --proxy-gid='1337'" subsys=daemon level=info msg=" --proxy-idle-timeout-seconds='60'" subsys=daemon level=info msg=" --proxy-max-connection-duration-seconds='0'" subsys=daemon level=info msg=" --proxy-max-requests-per-connection='0'" subsys=daemon level=info msg=" --proxy-prometheus-port='9964'" subsys=daemon level=info msg=" --read-cni-conf=''" subsys=daemon level=info msg=" --remove-cilium-node-taints='true'" subsys=daemon level=info msg=" --restore='true'" subsys=daemon level=info msg=" --route-metric='0'" subsys=daemon level=info msg=" --routing-mode='tunnel'" subsys=daemon level=info msg=" --set-cilium-is-up-condition='true'" subsys=daemon level=info msg=" --set-cilium-node-taints='true'" subsys=daemon level=info msg=" --sidecar-istio-proxy-image='cilium/istio_proxy'" subsys=daemon level=info msg=" --single-cluster-route='false'" subsys=daemon level=info msg=" --skip-cnp-status-startup-clean='false'" subsys=daemon level=info msg=" --socket-path='/var/run/cilium/cilium.sock'" subsys=daemon level=info msg=" --srv6-encap-mode='reduced'" subsys=daemon level=info msg=" --state-dir='/var/run/cilium'" subsys=daemon level=info msg=" --synchronize-k8s-nodes='true'" subsys=daemon level=info msg=" --tofqdns-dns-reject-response-code='refused'" subsys=daemon level=info msg=" --tofqdns-enable-dns-compression='true'" subsys=daemon level=info msg=" --tofqdns-endpoint-max-ip-per-hostname='50'" subsys=daemon level=info msg=" --tofqdns-idle-connection-grace-period='0s'" subsys=daemon level=info msg=" --tofqdns-max-deferred-connection-deletes='10000'" subsys=daemon level=info msg=" --tofqdns-min-ttl='0'" subsys=daemon level=info msg=" --tofqdns-pre-cache=''" subsys=daemon level=info msg=" --tofqdns-proxy-port='0'" subsys=daemon level=info msg=" --tofqdns-proxy-response-max-delay='100ms'" subsys=daemon level=info msg=" --trace-payloadlen='128'" subsys=daemon level=info msg=" --trace-sock='true'" subsys=daemon level=info msg=" --tunnel=''" subsys=daemon level=info msg=" --tunnel-port='6082'" subsys=daemon level=info msg=" --tunnel-protocol='geneve'" subsys=daemon level=info msg=" --unmanaged-pod-watcher-interval='15'" subsys=daemon level=info msg=" --use-cilium-internal-ip-for-ipsec='false'" subsys=daemon level=info msg=" --version='false'" subsys=daemon level=info msg=" --vlan-bpf-bypass=''" subsys=daemon level=info msg=" --vtep-cidr=''" subsys=daemon level=info msg=" --vtep-endpoint=''" subsys=daemon level=info msg=" --vtep-mac=''" subsys=daemon level=info msg=" --vtep-mask=''" subsys=daemon level=info msg=" --wireguard-encapsulate='false'" subsys=daemon level=info msg=" --write-cni-conf-when-ready='/host/etc/cni/net.d/05-cilium.conflist'" subsys=daemon level=info msg=" _ _ _" subsys=daemon level=info msg=" ___|_| |_|_ _ _____" subsys=daemon level=info msg="| _| | | | | | |" subsys=daemon level=info msg="|___|_|_|_|___|_|_|_|" subsys=daemon level=info msg="Cilium 1.14.8 cf6e022e 2024-03-13T12:23:35-04:00 go version go1.21.8 linux/amd64" subsys=daemon level=info msg="clang (10.0.0) and kernel (5.15.0) versions: OK!" subsys=linux-datapath level=info msg="linking environment: OK!" subsys=linux-datapath level=info msg="Kernel config file not found: if the agent fails to start, check the system requirements at https://docs.cilium.io/en/stable/operations/system_requirements" subsys=probes level=info msg="Detected mounted BPF filesystem at /sys/fs/bpf" subsys=bpf level=info msg="Mounted cgroupv2 filesystem at /run/cilium/cgroupv2" subsys=cgroups level=info msg="Parsing base label prefixes from default label list" subsys=labels-filter level=info msg="Parsing additional label prefixes from user inputs: []" subsys=labels-filter level=info msg="Final label prefixes to be used for identity evaluation:" subsys=labels-filter level=info msg=" - reserved:.*" subsys=labels-filter level=info msg=" - :io\\.kubernetes\\.pod\\.namespace" subsys=labels-filter level=info msg=" - :io\\.cilium\\.k8s\\.namespace\\.labels" subsys=labels-filter level=info msg=" - :app\\.kubernetes\\.io" subsys=labels-filter level=info msg=" - !:io\\.kubernetes" subsys=labels-filter level=info msg=" - !:kubernetes\\.io" subsys=labels-filter level=info msg=" - !:.*beta\\.kubernetes\\.io" subsys=labels-filter level=info msg=" - !:k8s\\.io" subsys=labels-filter level=info msg=" - !:pod-template-generation" subsys=labels-filter level=info msg=" - !:pod-template-hash" subsys=labels-filter level=info msg=" - !:controller-revision-hash" subsys=labels-filter level=info msg=" - !:annotation.*" subsys=labels-filter level=info msg=" - !:etcd_node" subsys=labels-filter level=info msg=Invoked duration="905.386µs" function="pprof.glob..func1 (cell.go:50)" subsys=hive level=info msg=Invoked duration="43.682µs" function="gops.registerGopsHooks (cell.go:38)" subsys=hive level=info msg=Invoked duration="708.23µs" function="metrics.NewRegistry (registry.go:65)" subsys=hive level=info msg=Invoked duration="4.89µs" function="metrics.glob..func1 (cell.go:12)" subsys=hive level=info msg="Spire Delegate API Client is disabled as no socket path is configured" subsys=spire-delegate level=info msg="Mutual authentication handler is disabled as no port is configured" subsys=auth level=info msg=Invoked duration=108.109481ms function="cmd.glob..func4 (daemon_main.go:1607)" subsys=hive level=info msg=Invoked duration="12.4µs" function="gc.registerSignalHandler (cell.go:47)" subsys=hive level=info msg=Invoked duration="18.751µs" function="utime.initUtimeSync (cell.go:29)" subsys=hive level=info msg=Invoked duration="60.542µs" function="agentliveness.newAgentLivenessUpdater (agent_liveness.go:43)" subsys=hive level=info msg=Invoked duration="67.472µs" function="l2responder.NewL2ResponderReconciler (l2responder.go:63)" subsys=hive level=info msg=Invoked duration="78.954µs" function="garp.newGARPProcessor (processor.go:27)" subsys=hive level=info msg=Starting subsys=hive level=info msg="Started gops server" address="127.0.0.1:9890" subsys=gops level=info msg="Start hook executed" duration="449.533µs" function="gops.registerGopsHooks.func1 (cell.go:43)" subsys=hive level=info msg="Start hook executed" duration="1.47µs" function="metrics.NewRegistry.func1 (registry.go:86)" subsys=hive level=info msg="Establishing connection to apiserver" host="https://10.96.0.1:443" subsys=k8s-client level=info msg="Serving prometheus metrics on :9962" subsys=metrics level=info msg="Connected to apiserver" subsys=k8s-client level=info msg="Start hook executed" duration=12.009973ms function="client.(*compositeClientset).onStart" subsys=hive level=info msg="Start hook executed" duration=7.651408ms function="authmap.newAuthMap.func1 (cell.go:27)" subsys=hive level=info msg="Start hook executed" duration="49.161µs" function="configmap.newMap.func1 (cell.go:23)" subsys=hive level=info msg="Start hook executed" duration="45.871µs" function="signalmap.newMap.func1 (cell.go:44)" subsys=hive level=info msg="Start hook executed" duration="211.246µs" function="nodemap.newNodeMap.func1 (cell.go:23)" subsys=hive level=info msg="Start hook executed" duration="107.113µs" function="eventsmap.newEventsMap.func1 (cell.go:35)" subsys=hive level=info msg="Start hook executed" duration="83.483µs" function="*cni.cniConfigManager.Start" subsys=hive level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Wrote CNI configuration file to /host/etc/cni/net.d/05-cilium.conflist" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Start hook executed" duration=48.008974ms function="datapath.newDatapath.func1 (cells.go:113)" subsys=hive level=info msg="Restored 0 node IDs from the BPF map" subsys=linux-datapath level=info msg="Start hook executed" duration="118.163µs" function="datapath.newDatapath.func2 (cells.go:126)" subsys=hive level=info msg="Start hook executed" duration="12.36µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Node].Start" subsys=hive level=info msg="Start hook executed" duration="5.24µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumNode].Start" subsys=hive level=info msg="Using autogenerated IPv4 allocation range" subsys=node v4Prefix=10.184.0.0/16 level=info msg="no local ciliumnode found, will not restore cilium internal ips from k8s" subsys=daemon level=info msg="Start hook executed" duration=103.109669ms function="node.NewLocalNodeStore.func1 (local_node_store.go:76)" subsys=hive level=info msg="Start hook executed" duration="4.02µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Start" subsys=hive level=info msg="Start hook executed" duration=100.197786ms function="*manager.diffStore[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Start" subsys=hive level=info msg="Start hook executed" duration="4.96µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s.Endpoints].Start" subsys=hive level=info msg="Using discoveryv1.EndpointSlice" subsys=k8s level=info msg="Start hook executed" duration=100.914537ms function="*manager.diffStore[*github.com/cilium/cilium/pkg/k8s.Endpoints].Start" subsys=hive level=info msg="Start hook executed" duration="4.041µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Pod].Start" subsys=hive level=info msg="Start hook executed" duration="1.25µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Namespace].Start" subsys=hive level=info msg="Start hook executed" duration="3.06µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumNetworkPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="3.83µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumClusterwideNetworkPolicy].Start" subsys=hive level=info msg="Start hook executed" duration=981ns function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumCIDRGroup].Start" subsys=hive level=info msg="Start hook executed" duration="21.821µs" function="endpointmanager.newDefaultEndpointManager.func1 (cell.go:203)" subsys=hive level=info msg="Start hook executed" duration="12.981µs" function="cmd.newPolicyTrifecta.func1 (policy.go:135)" subsys=hive level=info msg="Start hook executed" duration="116.073µs" function="*manager.manager.Start" subsys=hive level=info msg="Serving cilium node monitor v1.2 API at unix:///var/run/cilium/monitor1_2.sock" subsys=monitor-agent level=info msg="Start hook executed" duration="890.525µs" function="agent.newMonitorAgent.func1 (cell.go:61)" subsys=hive level=info msg="Start hook executed" duration="4.851µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumL2AnnouncementPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="53.332µs" function="*job.group.Start" subsys=hive level=info msg="Start hook executed" duration="578.816µs" function="proxy.newProxy.func1 (cell.go:55)" subsys=hive level=info msg="Envoy: Starting xDS gRPC server listening on /var/run/cilium/envoy/sockets/xds.sock" subsys=envoy-manager level=info msg="Start hook executed" duration=1.845123ms function="signal.provideSignalManager.func1 (cell.go:25)" subsys=hive level=info msg="Datapath signal listener running" subsys=signal level=info msg="Start hook executed" duration=1.702638ms function="auth.registerAuthManager.func1 (cell.go:109)" subsys=hive level=info msg="Start hook executed" duration="6.21µs" function="auth.registerGCJobs.func1 (cell.go:158)" subsys=hive level=info msg="Start hook executed" duration="18.93µs" function="*job.group.Start" subsys=hive level=warning msg="Deprecated value for --kube-proxy-replacement: disabled (use either \"true\", or \"false\")" subsys=daemon level=info msg="Auto-disabling \"enable-node-port\", \"enable-external-ips\", \"bpf-lb-sock\", \"enable-host-port\" features and falling back to \"enable-host-legacy-routing\"" subsys=daemon level=info msg="Inheriting MTU from external network interface" device=ens3 ipAddr=199.19.213.184 mtu=1500 subsys=mtu level=info msg="Removed map pin at /sys/fs/bpf/tc/globals/cilium_ipcache, recreating and re-pinning map cilium_ipcache" file-path=/sys/fs/bpf/tc/globals/cilium_ipcache name=cilium_ipcache subsys=bpf level=info msg="Removed map pin at /sys/fs/bpf/tc/globals/cilium_tunnel_map, recreating and re-pinning map cilium_tunnel_map" file-path=/sys/fs/bpf/tc/globals/cilium_tunnel_map name=cilium_tunnel_map subsys=bpf level=info msg="Restored services from maps" failedServices=0 restoredServices=0 subsys=service level=info msg="Restored backends from maps" failedBackends=0 restoredBackends=0 skippedBackends=0 subsys=service level=info msg="Reading old endpoints..." subsys=daemon level=info msg="No old endpoints found." subsys=daemon level=info msg="Waiting until all Cilium CRDs are available" subsys=k8s level=info msg="All Cilium CRDs have been found and are available" subsys=k8s level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=warning msg="Unable to get node resource" error="ciliumnodes.cilium.io \"instance\" not found" subsys=nodediscovery level=warning msg="Unable to get node resource" error="ciliumnodes.cilium.io \"instance\" not found" subsys=nodediscovery level=info msg="Successfully created CiliumNode resource" subsys=nodediscovery level=warning msg="Unable to create CiliumNode resource, will retry" error="ciliumnodes.cilium.io \"instance\" already exists" subsys=nodediscovery level=info msg="Retrieved node information from cilium node" nodeName=instance subsys=k8s level=info msg="Received own node information from API server" ipAddr.ipv4=199.19.213.184 ipAddr.ipv6="" k8sNodeIP=199.19.213.184 labels="map[beta.kubernetes.io/arch:amd64 beta.kubernetes.io/os:linux kubernetes.io/arch:amd64 kubernetes.io/hostname:instance kubernetes.io/os:linux node-role.kubernetes.io/control-plane: node.kubernetes.io/exclude-from-external-load-balancers:]" nodeName=instance subsys=k8s v4Prefix=10.0.0.0/24 v6Prefix="" level=info msg="k8s mode: Allowing localhost to reach local endpoints" subsys=daemon level=info msg="Detected devices" devices="[]" subsys=linux-datapath level=info msg="Enabling k8s event listener" subsys=k8s-watcher level=info msg="Removing stale endpoint interfaces" subsys=daemon level=info msg="Waiting until local node addressing before starting watchers depending on it" subsys=k8s-watcher level=info msg="Skipping kvstore configuration" subsys=daemon level=info msg="Initializing node addressing" subsys=daemon level=info msg="Initializing cluster-pool IPAM" subsys=ipam v4Prefix=10.0.0.0/24 v6Prefix="" level=info msg="Restoring endpoints..." subsys=daemon level=info msg="Endpoints restored" failed=0 restored=0 subsys=daemon level=info msg="Addressing information:" subsys=daemon level=info msg=" Cluster-Name: default" subsys=daemon level=info msg=" Cluster-ID: 0" subsys=daemon level=info msg=" Local node-name: instance" subsys=daemon level=info msg=" Node-IPv6: " subsys=daemon level=info msg=" External-Node IPv4: 199.19.213.184" subsys=daemon level=info msg=" Internal-Node IPv4: 10.0.0.25" subsys=daemon level=info msg=" IPv4 allocation prefix: 10.0.0.0/24" subsys=daemon level=info msg=" Loopback IPv4: 169.254.42.1" subsys=daemon level=info msg=" Local IPv4 addresses:" subsys=daemon level=info msg=" - 199.19.213.184" subsys=daemon level=info msg=" - 172.17.0.100" subsys=daemon level=info msg=" - 10.96.240.200" subsys=daemon level=info msg="Node updated" clusterName=default nodeName=instance subsys=nodemanager level=info msg="Adding local node to cluster" node="{instance default [{InternalIP 199.19.213.184} {CiliumInternalIP 10.0.0.25}] 10.0.0.0/24 [] [] 10.0.0.242 0 local 0 map[beta.kubernetes.io/arch:amd64 beta.kubernetes.io/os:linux kubernetes.io/arch:amd64 kubernetes.io/hostname:instance kubernetes.io/os:linux node-role.kubernetes.io/control-plane: node.kubernetes.io/exclude-from-external-load-balancers:] map[] 1 }" subsys=nodediscovery level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Waiting until all pre-existing resources have been received" subsys=k8s-watcher level=info msg="Initializing identity allocator" subsys=identity-cache level=info msg="Allocating identities between range" cluster-id=0 max=65535 min=256 subsys=identity-cache level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.forwarding sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.accept_local sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.send_redirects sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.forwarding sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.accept_local sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.send_redirects sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.core.bpf_jit_enable sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.all.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.fib_multipath_use_neigh sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=kernel.unprivileged_bpf_disabled sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=kernel.timer_migration sysParamValue=0 level=info msg="Setting up BPF datapath" bpfClockSource=ktime bpfInsnSet="" subsys=datapath-loader level=info msg="Iptables rules installed" subsys=iptables level=info msg="Adding new proxy port rules for cilium-dns-egress:40631" id=cilium-dns-egress subsys=proxy level=info msg="Iptables proxy rules installed" subsys=iptables level=info msg="Start hook executed" duration=2.651144743s function="cmd.newDaemonPromise.func1 (daemon_main.go:1663)" subsys=hive level=info msg="Starting IP identity watcher" subsys=ipcache level=info msg="Start hook executed" duration="23.271µs" function="utime.initUtimeSync.func1 (cell.go:33)" subsys=hive level=info msg="Initializing daemon" subsys=daemon level=info msg="Validating configured node address ranges" subsys=daemon level=info msg="Start hook executed" duration="28.301µs" function="*job.group.Start" subsys=hive level=info msg="Starting connection tracking garbage collector" subsys=daemon level=info msg="Start hook executed" duration="81.283µs" function="l2respondermap.newMap.func1 (l2_responder_map4.go:44)" subsys=hive level=info msg="Start hook executed" duration="20.5µs" function="*job.group.Start" subsys=hive level=info msg="Initial scan of connection tracking completed" subsys=ct-gc level=info msg="Regenerating restored endpoints" numRestored=0 subsys=daemon level=info msg="Creating host endpoint" subsys=daemon level=info msg="Finished regenerating restored endpoints" regenerated=0 subsys=daemon total=0 level=info msg="Deleted orphan backends" orphanBackends=0 subsys=service level=info msg="New endpoint" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3073 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3073 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Identity of endpoint changed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3073 identity=1 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,reserved:host" ipv4= ipv6= k8sPodName=/ oldIdentity="no identity" subsys=endpoint level=info msg="Launching Cilium health daemon" subsys=daemon level=info msg="Launching Cilium health endpoint" subsys=daemon level=info msg="Started healthz status API server" address="127.0.0.1:9879" subsys=daemon level=info msg="Processing queued endpoint deletion requests from /var/run/cilium/deleteQueue" subsys=daemon level=info msg="processing 0 queued deletion requests" subsys=daemon level=info msg="Initializing Cilium API" subsys=daemon level=info msg="Daemon initialization completed" bootstrapTime=3.656799643s subsys=daemon level=info msg="Hubble server is disabled" subsys=hubble level=info msg="Serving cilium API at unix:///var/run/cilium/cilium.sock" subsys=daemon level=info msg="Compiled new BPF template" BPFCompilationTime=310.108149ms file-path=/var/run/cilium/state/templates/8f4848c53bf1b2b3c4663a1436ca836448844ec093b0181fa402424b23dba949/bpf_host.o subsys=datapath-loader level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3073 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="New endpoint" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2168 ipv4=10.0.0.242 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2168 identityLabels="reserved:health" ipv4=10.0.0.242 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Identity of endpoint changed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2168 identity=4 identityLabels="reserved:health" ipv4=10.0.0.242 ipv6= k8sPodName=/ oldIdentity="no identity" subsys=endpoint level=info msg="Serving cilium health API at unix:///var/run/cilium/health.sock" subsys=health-server level=info msg="Create endpoint request" addressing="&{10.0.0.202 f5edc8cb-1839-469c-8816-ff076b34311f default }" containerID=20d1c56dc0f4cdd2e8a5cbe2f770ddb7c4a6a31e4e45268bed10817c46de052f datapathConfiguration="&{false false false false false }" interface=lxca93b1908c05c k8sPodName=kube-system/coredns-7c96b6546b-chmvs labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=20d1c56dc0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=979 ipv4=10.0.0.202 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-chmvs subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=20d1c56dc0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=979 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.202 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-chmvs subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:kube-system]" subsys=crd-allocator level=info msg="Compiled new BPF template" BPFCompilationTime=1.136042411s file-path=/var/run/cilium/state/templates/676685c4da84fbf708a270302cf99f61d2a24619910a84741a30dbb960b1d12a/bpf_lxc.o subsys=datapath-loader level=info msg="Allocated new global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=coredns;k8s:io.kubernetes.pod.namespace=kube-system;k8s:k8s-app=kube-dns;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=20d1c56dc0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=979 identity=11787 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.202 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-chmvs oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=20d1c56dc0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=979 identity=11787 ipv4=10.0.0.202 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-chmvs subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2168 identity=4 ipv4=10.0.0.242 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=20d1c56dc0 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=979 identity=11787 ipv4=10.0.0.202 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-chmvs subsys=endpoint level=info msg="Successful endpoint creation" containerID=20d1c56dc0 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=979 identity=11787 ipv4=10.0.0.202 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-chmvs subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.16 8dd3a3f2-d82c-47be-8f58-cfef2244ccaa default }" containerID=2e63ea0d96f66933ce5a260ecdc451a49a125591ec24264dfe850418284ab8c6 datapathConfiguration="&{false false false false false }" interface=lxcacbe19697449 k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-td47j labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2e63ea0d96 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1215 ipv4=10.0.0.16 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-td47j subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2e63ea0d96 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1215 identityLabels="k8s:app=certgen,k8s:batch.kubernetes.io/controller-uid=befb9f49-28a6-494e-8aed-ca966ea570f9,k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen,k8s:controller-uid=befb9f49-28a6-494e-8aed-ca966ea570f9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen,k8s:io.kubernetes.pod.namespace=envoy-gateway-system,k8s:job-name=envoy-gateway-gateway-helm-certgen" ipv4=10.0.0.16 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-td47j subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name:envoy-gateway-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=certgen;k8s:batch.kubernetes.io/controller-uid=befb9f49-28a6-494e-8aed-ca966ea570f9;k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen;k8s:controller-uid=befb9f49-28a6-494e-8aed-ca966ea570f9;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system;k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen;k8s:io.kubernetes.pod.namespace=envoy-gateway-system;k8s:job-name=envoy-gateway-gateway-helm-certgen;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2e63ea0d96 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1215 identity=58052 identityLabels="k8s:app=certgen,k8s:batch.kubernetes.io/controller-uid=befb9f49-28a6-494e-8aed-ca966ea570f9,k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen,k8s:controller-uid=befb9f49-28a6-494e-8aed-ca966ea570f9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen,k8s:io.kubernetes.pod.namespace=envoy-gateway-system,k8s:job-name=envoy-gateway-gateway-helm-certgen" ipv4=10.0.0.16 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-td47j oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2e63ea0d96 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1215 identity=58052 ipv4=10.0.0.16 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-td47j subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=2e63ea0d96 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1215 identity=58052 ipv4=10.0.0.16 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-td47j subsys=endpoint level=info msg="Successful endpoint creation" containerID=2e63ea0d96 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1215 identity=58052 ipv4=10.0.0.16 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-td47j subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=2e63ea0d96 endpointID=1215 k8sNamespace=envoy-gateway-system k8sPodName=envoy-gateway-gateway-helm-certgen-td47j subsys=daemon level=info msg="Releasing key" key="[k8s:app=certgen k8s:batch.kubernetes.io/controller-uid=befb9f49-28a6-494e-8aed-ca966ea570f9 k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen k8s:controller-uid=befb9f49-28a6-494e-8aed-ca966ea570f9 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen k8s:io.kubernetes.pod.namespace=envoy-gateway-system k8s:job-name=envoy-gateway-gateway-helm-certgen]" subsys=allocator level=info msg="Removed endpoint" containerID=2e63ea0d96 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1215 identity=58052 ipv4=10.0.0.16 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-td47j subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.72 8e3e6967-7bf6-4815-b27c-2aa4fbbd4ad1 default }" containerID=f12af025c155fcf713d6ef125586551857d7b4b805a04410300ff0d8766f6f6d datapathConfiguration="&{false false false false false }" interface=lxc0a4c0a0634e9 k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-65vjl labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f12af025c1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=298 ipv4=10.0.0.72 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-65vjl subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f12af025c1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=298 identityLabels="k8s:app.kubernetes.io/instance=envoy-gateway,k8s:app.kubernetes.io/name=gateway-helm,k8s:control-plane=envoy-gateway,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway,k8s:io.kubernetes.pod.namespace=envoy-gateway-system" ipv4=10.0.0.72 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-65vjl subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name:envoy-gateway-system]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=f12af025c1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=298 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.72 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-65vjl line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=envoy-gateway;k8s:app.kubernetes.io/name=gateway-helm;k8s:control-plane=envoy-gateway;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system;k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway;k8s:io.kubernetes.pod.namespace=envoy-gateway-system;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f12af025c1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=298 identity=28266 identityLabels="k8s:app.kubernetes.io/instance=envoy-gateway,k8s:app.kubernetes.io/name=gateway-helm,k8s:control-plane=envoy-gateway,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway,k8s:io.kubernetes.pod.namespace=envoy-gateway-system" ipv4=10.0.0.72 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-65vjl oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f12af025c1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=298 identity=28266 ipv4=10.0.0.72 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-65vjl subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f12af025c1 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=298 identity=28266 ipv4=10.0.0.72 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-65vjl subsys=endpoint level=info msg="Successful endpoint creation" containerID=f12af025c1 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=298 identity=28266 ipv4=10.0.0.72 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-65vjl subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3073 identity=1 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,k8s:openstack-compute-node=enabled,k8s:openstack-control-plane=enabled,k8s:openvswitch=enabled,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_hostns_03073 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_hostns_03073 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_hostns_03073 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_hostns_03073:pending" subsys=bpf level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_netdev_00005 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_netdev_00005 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005:pending" subsys=bpf level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3073 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.182 21ed84f1-4fbe-4736-9ccc-63487cd25da7 default }" containerID=006010cd7e541a027102271ef7c3a449ee613652cbfbd29f3afa8278e9b2a824 datapathConfiguration="&{false false false false false }" interface=lxcaf18e56db082 k8sPodName=kube-system/coredns-67659f764b-68lcj labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=006010cd7e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2068 ipv4=10.0.0.182 ipv6= k8sPodName=kube-system/coredns-67659f764b-68lcj subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=006010cd7e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2068 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.182 ipv6= k8sPodName=kube-system/coredns-67659f764b-68lcj subsys=endpoint level=info msg="Identity of endpoint changed" containerID=006010cd7e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2068 identity=11787 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.182 ipv6= k8sPodName=kube-system/coredns-67659f764b-68lcj oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=006010cd7e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2068 identity=11787 ipv4=10.0.0.182 ipv6= k8sPodName=kube-system/coredns-67659f764b-68lcj subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=006010cd7e datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2068 identity=11787 ipv4=10.0.0.182 ipv6= k8sPodName=kube-system/coredns-67659f764b-68lcj subsys=endpoint level=info msg="Successful endpoint creation" containerID=006010cd7e datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2068 identity=11787 ipv4=10.0.0.182 ipv6= k8sPodName=kube-system/coredns-67659f764b-68lcj subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.239 328bd19b-23cd-4bab-88e4-ef8033a824bf default }" containerID=cc8e7efb3415047c38b49e8e93d768617da13e8b18306752d11b83d22da47901 datapathConfiguration="&{false false false false false }" interface=lxc1d8cb660f518 k8sPodName=kube-system/coredns-67659f764b-rgdnv labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=cc8e7efb34 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1122 ipv4=10.0.0.239 ipv6= k8sPodName=kube-system/coredns-67659f764b-rgdnv subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=cc8e7efb34 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1122 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.239 ipv6= k8sPodName=kube-system/coredns-67659f764b-rgdnv subsys=endpoint level=info msg="Identity of endpoint changed" containerID=cc8e7efb34 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1122 identity=11787 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.239 ipv6= k8sPodName=kube-system/coredns-67659f764b-rgdnv oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=cc8e7efb34 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1122 identity=11787 ipv4=10.0.0.239 ipv6= k8sPodName=kube-system/coredns-67659f764b-rgdnv subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=cc8e7efb34 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1122 identity=11787 ipv4=10.0.0.239 ipv6= k8sPodName=kube-system/coredns-67659f764b-rgdnv subsys=endpoint level=info msg="Successful endpoint creation" containerID=cc8e7efb34 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1122 identity=11787 ipv4=10.0.0.239 ipv6= k8sPodName=kube-system/coredns-67659f764b-rgdnv subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.191 cd2ffaa6-8605-4521-bfe1-eff015f94cce default }" containerID=7855ddcb1d4fccc3b2170bf64ba22910fa33eae316b469878e5f1133175d37b2 datapathConfiguration="&{false false false false false }" interface=lxccdef5ed58b19 k8sPodName=local-path-storage/local-path-provisioner-679c578f5-nndvk labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7855ddcb1d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2270 ipv4=10.0.0.191 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-nndvk subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7855ddcb1d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2270 identityLabels="k8s:app.kubernetes.io/instance=local-path-provisioner,k8s:app.kubernetes.io/name=local-path-provisioner,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.191 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-nndvk subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:local-path-storage k8s:io.cilium.k8s.namespace.labels.name:local-path-storage]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=local-path-provisioner;k8s:app.kubernetes.io/name=local-path-provisioner;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7855ddcb1d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2270 identity=32971 identityLabels="k8s:app.kubernetes.io/instance=local-path-provisioner,k8s:app.kubernetes.io/name=local-path-provisioner,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.191 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-nndvk oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7855ddcb1d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2270 identity=32971 ipv4=10.0.0.191 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-nndvk subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=7855ddcb1d datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2270 identity=32971 ipv4=10.0.0.191 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-nndvk subsys=endpoint level=info msg="Successful endpoint creation" containerID=7855ddcb1d datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2270 identity=32971 ipv4=10.0.0.191 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-nndvk subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=20d1c56dc0 endpointID=979 k8sNamespace=kube-system k8sPodName=coredns-7c96b6546b-chmvs subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=coredns k8s:io.kubernetes.pod.namespace=kube-system k8s:k8s-app=kube-dns]" subsys=allocator level=info msg="Removed endpoint" containerID=20d1c56dc0 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=979 identity=11787 ipv4=10.0.0.202 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-chmvs subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.114 3be94eac-edb2-43da-990d-a216c0e5df36 default }" containerID=18a62e51dd6b3538415c3c93903a489040bbaa077e758029d4b25ad5779419d4 datapathConfiguration="&{false false false false false }" interface=lxcae1192fa16d4 k8sPodName=cert-manager/cert-manager-75c4c745bc-9r8g9 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=18a62e51dd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=543 ipv4=10.0.0.114 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-9r8g9 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.35 91d4027b-fe99-4f9a-bb19-2bbd5a228203 default }" containerID=793413c8a306692d75846d99e74edc06372556af8578dff97b012ab21057534a datapathConfiguration="&{false false false false false }" interface=lxcc1689276e0b5 k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-tfm7f labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=793413c8a3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=490 ipv4=10.0.0.35 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-tfm7f subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=18a62e51dd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=543 identityLabels="k8s:app.kubernetes.io/component=controller,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cert-manager,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cert-manager,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.114 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-9r8g9 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=793413c8a3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=490 identityLabels="k8s:app.kubernetes.io/component=cainjector,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cainjector,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cainjector,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.35 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-tfm7f subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Create endpoint request" addressing="&{10.0.0.6 884fb782-52d0-4084-902c-2354457c5240 default }" containerID=562b2fd3bf23d618599e332a16720773be44086fcf64119e7fbf14cfbae20eb9 datapathConfiguration="&{false false false false false }" interface=lxcebf2a10fbf3f k8sPodName=cert-manager/cert-manager-webhook-548949fc64-wb7cf labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=562b2fd3bf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2182 ipv4=10.0.0.6 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-wb7cf subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=562b2fd3bf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2182 identityLabels="k8s:app.kubernetes.io/component=webhook,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=webhook,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=webhook,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.6 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-wb7cf subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=cert-manager;k8s:app.kubernetes.io/component=controller;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=cert-manager;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=18a62e51dd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=543 identity=18920 identityLabels="k8s:app.kubernetes.io/component=controller,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cert-manager,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cert-manager,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.114 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-9r8g9 oldIdentity="no identity" subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=793413c8a3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=490 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.35 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-tfm7f line=611 subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=18a62e51dd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=543 identity=18920 ipv4=10.0.0.114 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-9r8g9 subsys=endpoint level=info msg="Invalid state transition skipped" containerID=562b2fd3bf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2182 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.6 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-wb7cf line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=cainjector;k8s:app.kubernetes.io/component=cainjector;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=cainjector;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=793413c8a3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=490 identity=26782 identityLabels="k8s:app.kubernetes.io/component=cainjector,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cainjector,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cainjector,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.35 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-tfm7f oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=793413c8a3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=490 identity=26782 ipv4=10.0.0.35 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-tfm7f subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=webhook;k8s:app.kubernetes.io/component=webhook;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=webhook;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=562b2fd3bf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2182 identity=22627 identityLabels="k8s:app.kubernetes.io/component=webhook,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=webhook,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=webhook,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.6 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-wb7cf oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=562b2fd3bf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2182 identity=22627 ipv4=10.0.0.6 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-wb7cf subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=18a62e51dd datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=543 identity=18920 ipv4=10.0.0.114 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-9r8g9 subsys=endpoint level=info msg="Successful endpoint creation" containerID=18a62e51dd datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=543 identity=18920 ipv4=10.0.0.114 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-9r8g9 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=793413c8a3 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=490 identity=26782 ipv4=10.0.0.35 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-tfm7f subsys=endpoint level=info msg="Successful endpoint creation" containerID=793413c8a3 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=490 identity=26782 ipv4=10.0.0.35 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-tfm7f subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=562b2fd3bf datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2182 identity=22627 ipv4=10.0.0.6 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-wb7cf subsys=endpoint level=info msg="Successful endpoint creation" containerID=562b2fd3bf datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2182 identity=22627 ipv4=10.0.0.6 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-wb7cf subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.61 d69e5de8-6e2f-421d-86a1-66220f0d4616 default }" containerID=3fc3664392830e118f4feffec2c4a165a32de25e08372aa6d9e1f5aa3bd96926 datapathConfiguration="&{false false false false false }" interface=lxcf9deeeeeb13d k8sPodName=cert-manager/cert-manager-startupapicheck-vlt4j labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3fc3664392 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=514 ipv4=10.0.0.61 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-vlt4j subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3fc3664392 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=514 identityLabels="k8s:app.kubernetes.io/component=startupapicheck,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=startupapicheck,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=startupapicheck,k8s:batch.kubernetes.io/controller-uid=ddf4c2e9-e6a7-40de-b852-81fbdab3ba69,k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck,k8s:controller-uid=ddf4c2e9-e6a7-40de-b852-81fbdab3ba69,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck,k8s:io.kubernetes.pod.namespace=cert-manager,k8s:job-name=cert-manager-startupapicheck" ipv4=10.0.0.61 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-vlt4j subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=startupapicheck;k8s:app.kubernetes.io/component=startupapicheck;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=startupapicheck;k8s:app.kubernetes.io/version=v1.11.5;k8s:batch.kubernetes.io/controller-uid=ddf4c2e9-e6a7-40de-b852-81fbdab3ba69;k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck;k8s:controller-uid=ddf4c2e9-e6a7-40de-b852-81fbdab3ba69;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck;k8s:io.kubernetes.pod.namespace=cert-manager;k8s:job-name=cert-manager-startupapicheck;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3fc3664392 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=514 identity=37413 identityLabels="k8s:app.kubernetes.io/component=startupapicheck,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=startupapicheck,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=startupapicheck,k8s:batch.kubernetes.io/controller-uid=ddf4c2e9-e6a7-40de-b852-81fbdab3ba69,k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck,k8s:controller-uid=ddf4c2e9-e6a7-40de-b852-81fbdab3ba69,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck,k8s:io.kubernetes.pod.namespace=cert-manager,k8s:job-name=cert-manager-startupapicheck" ipv4=10.0.0.61 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-vlt4j oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3fc3664392 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=514 identity=37413 ipv4=10.0.0.61 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-vlt4j subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=3fc3664392 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=514 identity=37413 ipv4=10.0.0.61 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-vlt4j subsys=endpoint level=info msg="Successful endpoint creation" containerID=3fc3664392 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=514 identity=37413 ipv4=10.0.0.61 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-vlt4j subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=3fc3664392 endpointID=514 k8sNamespace=cert-manager k8sPodName=cert-manager-startupapicheck-vlt4j subsys=daemon level=info msg="Releasing key" key="[k8s:app=startupapicheck k8s:app.kubernetes.io/component=startupapicheck k8s:app.kubernetes.io/instance=cert-manager k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=startupapicheck k8s:app.kubernetes.io/version=v1.11.5 k8s:batch.kubernetes.io/controller-uid=ddf4c2e9-e6a7-40de-b852-81fbdab3ba69 k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck k8s:controller-uid=ddf4c2e9-e6a7-40de-b852-81fbdab3ba69 k8s:helm.sh/chart=cert-manager-v1.11.5 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager k8s:io.cilium.k8s.namespace.labels.name=cert-manager k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck k8s:io.kubernetes.pod.namespace=cert-manager k8s:job-name=cert-manager-startupapicheck]" subsys=allocator level=info msg="Removed endpoint" containerID=3fc3664392 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=514 identity=37413 ipv4=10.0.0.61 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-vlt4j subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.157 81ed9bb2-677a-454f-8edc-5e27fcb98d5d default }" containerID=5d4b394155a389db50c5fceda51b20afd733e3c506d195a9682c61d9af38171c datapathConfiguration="&{false false false false false }" interface=lxc02b877d5b804 k8sPodName=ingress-nginx/ingress-nginx-admission-create-k84ln labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5d4b394155 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=181 ipv4=10.0.0.157 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-k84ln subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5d4b394155 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=181 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=bf17b0cf-38a0-48ba-b385-d517eaa694fa,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create,k8s:controller-uid=bf17b0cf-38a0-48ba-b385-d517eaa694fa,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-create" ipv4=10.0.0.157 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-k84ln subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=admission-webhook;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:batch.kubernetes.io/controller-uid=bf17b0cf-38a0-48ba-b385-d517eaa694fa;k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create;k8s:controller-uid=bf17b0cf-38a0-48ba-b385-d517eaa694fa;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission;k8s:io.kubernetes.pod.namespace=ingress-nginx;k8s:job-name=ingress-nginx-admission-create;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5d4b394155 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=181 identity=10234 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=bf17b0cf-38a0-48ba-b385-d517eaa694fa,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create,k8s:controller-uid=bf17b0cf-38a0-48ba-b385-d517eaa694fa,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-create" ipv4=10.0.0.157 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-k84ln oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5d4b394155 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=181 identity=10234 ipv4=10.0.0.157 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-k84ln subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=5d4b394155 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=181 identity=10234 ipv4=10.0.0.157 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-k84ln subsys=endpoint level=info msg="Successful endpoint creation" containerID=5d4b394155 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=181 identity=10234 ipv4=10.0.0.157 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-k84ln subsys=daemon level=info msg="Delete endpoint request" containerID=5d4b394155 endpointID=181 k8sNamespace=ingress-nginx k8sPodName=ingress-nginx-admission-create-k84ln subsys=daemon level=info msg="Releasing key" key="[k8s:app.kubernetes.io/component=admission-webhook k8s:app.kubernetes.io/instance=ingress-nginx k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=ingress-nginx k8s:app.kubernetes.io/part-of=ingress-nginx k8s:app.kubernetes.io/version=1.12.1 k8s:batch.kubernetes.io/controller-uid=bf17b0cf-38a0-48ba-b385-d517eaa694fa k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create k8s:controller-uid=bf17b0cf-38a0-48ba-b385-d517eaa694fa k8s:helm.sh/chart=ingress-nginx-4.12.1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission k8s:io.kubernetes.pod.namespace=ingress-nginx k8s:job-name=ingress-nginx-admission-create]" subsys=allocator level=info msg="Removed endpoint" containerID=5d4b394155 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=181 identity=10234 ipv4=10.0.0.157 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-k84ln subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.172 2185ab33-7427-4786-98dc-6a1dac01feab default }" containerID=2dfbd77d7a60700937dcf6fd31f509164daf761ffbc320aec96d392d16a9dfed datapathConfiguration="&{false false false false false }" interface=lxca48cdb41e729 k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-26nkb labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2dfbd77d7a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=254 ipv4=10.0.0.172 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-26nkb subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2dfbd77d7a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=254 identityLabels="k8s:app.kubernetes.io/component=default-backend,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend,k8s:io.kubernetes.pod.namespace=ingress-nginx" ipv4=10.0.0.172 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-26nkb subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=default-backend;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend;k8s:io.kubernetes.pod.namespace=ingress-nginx;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2dfbd77d7a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=254 identity=11519 identityLabels="k8s:app.kubernetes.io/component=default-backend,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend,k8s:io.kubernetes.pod.namespace=ingress-nginx" ipv4=10.0.0.172 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-26nkb oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2dfbd77d7a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=254 identity=11519 ipv4=10.0.0.172 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-26nkb subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=2dfbd77d7a datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=254 identity=11519 ipv4=10.0.0.172 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-26nkb subsys=endpoint level=info msg="Successful endpoint creation" containerID=2dfbd77d7a datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=254 identity=11519 ipv4=10.0.0.172 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-26nkb subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.201 dde91b1b-19d9-491f-8772-f222ab6afea1 default }" containerID=5eedecf5998f2ee2596129322ca84b5e1a791b5d6bb24d24c08f08568905ea46 datapathConfiguration="&{false false false false false }" interface=lxceaefb75db803 k8sPodName=ingress-nginx/ingress-nginx-admission-patch-znpz2 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5eedecf599 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3011 ipv4=10.0.0.201 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-znpz2 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5eedecf599 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3011 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=a7ad6fb7-f7ae-4090-b43d-2082877bd7a1,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch,k8s:controller-uid=a7ad6fb7-f7ae-4090-b43d-2082877bd7a1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-patch" ipv4=10.0.0.201 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-znpz2 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=admission-webhook;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:batch.kubernetes.io/controller-uid=a7ad6fb7-f7ae-4090-b43d-2082877bd7a1;k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch;k8s:controller-uid=a7ad6fb7-f7ae-4090-b43d-2082877bd7a1;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission;k8s:io.kubernetes.pod.namespace=ingress-nginx;k8s:job-name=ingress-nginx-admission-patch;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5eedecf599 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3011 identity=16354 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=a7ad6fb7-f7ae-4090-b43d-2082877bd7a1,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch,k8s:controller-uid=a7ad6fb7-f7ae-4090-b43d-2082877bd7a1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-patch" ipv4=10.0.0.201 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-znpz2 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5eedecf599 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3011 identity=16354 ipv4=10.0.0.201 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-znpz2 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=5eedecf599 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3011 identity=16354 ipv4=10.0.0.201 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-znpz2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=5eedecf599 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3011 identity=16354 ipv4=10.0.0.201 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-znpz2 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=5eedecf599 endpointID=3011 k8sNamespace=ingress-nginx k8sPodName=ingress-nginx-admission-patch-znpz2 subsys=daemon level=info msg="Releasing key" key="[k8s:app.kubernetes.io/component=admission-webhook k8s:app.kubernetes.io/instance=ingress-nginx k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=ingress-nginx k8s:app.kubernetes.io/part-of=ingress-nginx k8s:app.kubernetes.io/version=1.12.1 k8s:batch.kubernetes.io/controller-uid=a7ad6fb7-f7ae-4090-b43d-2082877bd7a1 k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch k8s:controller-uid=a7ad6fb7-f7ae-4090-b43d-2082877bd7a1 k8s:helm.sh/chart=ingress-nginx-4.12.1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission k8s:io.kubernetes.pod.namespace=ingress-nginx k8s:job-name=ingress-nginx-admission-patch]" subsys=allocator level=info msg="Removed endpoint" containerID=5eedecf599 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3011 identity=16354 ipv4=10.0.0.201 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-znpz2 subsys=endpoint level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"messaging-topology-operator\",\"k8s:app.kubernetes.io/instance\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/name\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/part-of\":\"rabbitmq\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:9443 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=rabbitmq-messaging-topology-operator k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=99511033-5f17-4a56-8521-98d7e8c6b41e] Description:}]" policyAddRequest=26d6de77-a8b6-4251-8f47-1a452a81b85e subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=26d6de77-a8b6-4251-8f47-1a452a81b85e policyRevision=2 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=rabbitmq-messaging-topology-operator subsys=k8s-watcher level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"rabbitmq-operator\",\"k8s:app.kubernetes.io/instance\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/name\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/part-of\":\"rabbitmq\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=rabbitmq-cluster-operator k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=fdb3e104-89fe-4d14-a7b4-27379b2f504f] Description:}]" policyAddRequest=1842e687-2aa2-43bc-b76b-5ac39ec34da9 subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=1842e687-2aa2-43bc-b76b-5ac39ec34da9 policyRevision=3 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=rabbitmq-cluster-operator subsys=k8s-watcher level=info msg="Create endpoint request" addressing="&{10.0.0.117 b37f6f76-8bcb-41ba-bb50-f8d8dec561b8 default }" containerID=0bb52cfc7bcc16cbc83ae67c8bf7686641624f9950d505caaaaa2d95fc86591e datapathConfiguration="&{false false false false false }" interface=lxcb1a0739783df k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-6bqvr labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0bb52cfc7b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1074 ipv4=10.0.0.117 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-6bqvr subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0bb52cfc7b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1074 identityLabels="k8s:app.kubernetes.io/component=rabbitmq-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=2.16.1,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.117 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-6bqvr subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq-operator;k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=rabbitmq-cluster-operator;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:app.kubernetes.io/version=2.16.1;k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0bb52cfc7b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1074 identity=15243 identityLabels="k8s:app.kubernetes.io/component=rabbitmq-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=2.16.1,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.117 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-6bqvr oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=0bb52cfc7b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1074 identity=15243 ipv4=10.0.0.117 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-6bqvr subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=0bb52cfc7b datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=1074 identity=15243 ipv4=10.0.0.117 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-6bqvr subsys=endpoint level=info msg="Successful endpoint creation" containerID=0bb52cfc7b datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=1074 identity=15243 ipv4=10.0.0.117 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-6bqvr subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.220 87bf7f44-209f-4301-95e3-28222d035102 default }" containerID=4eae26d4adbc898f804ada943edb5c71553d38a9075c1c4d570e0d82211ed455 datapathConfiguration="&{false false false false false }" interface=lxcf46ef046037b k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-kjb4t labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4eae26d4ad datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1985 ipv4=10.0.0.220 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-kjb4t subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4eae26d4ad datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1985 identityLabels="k8s:app.kubernetes.io/component=messaging-topology-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=1.17.4,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.220 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-kjb4t subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=messaging-topology-operator;k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=rabbitmq-cluster-operator;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:app.kubernetes.io/version=1.17.4;k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4eae26d4ad datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1985 identity=16879 identityLabels="k8s:app.kubernetes.io/component=messaging-topology-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=1.17.4,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.220 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-kjb4t oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4eae26d4ad datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1985 identity=16879 ipv4=10.0.0.220 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-kjb4t subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=4eae26d4ad datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=1985 identity=16879 ipv4=10.0.0.220 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-kjb4t subsys=endpoint level=info msg="Successful endpoint creation" containerID=4eae26d4ad datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=1985 identity=16879 ipv4=10.0.0.220 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-kjb4t subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.64 1295f6f2-3464-43a8-b018-7c1ddd6355b8 default }" containerID=0f6f577fae3ca15d864b62b1cc5a229b4fac970f1c3a845ab8902aff280a18f1 datapathConfiguration="&{false false false false false }" interface=lxc7c9463a6b149 k8sPodName=openstack/pxc-operator-69cb5bbdb9-64svn labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0f6f577fae datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1015 ipv4=10.0.0.64 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-64svn subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0f6f577fae datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1015 identityLabels="k8s:app.kubernetes.io/component=operator,k8s:app.kubernetes.io/instance=pxc-operator,k8s:app.kubernetes.io/name=pxc-operator,k8s:app.kubernetes.io/part-of=pxc-operator,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.64 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-64svn subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=operator;k8s:app.kubernetes.io/instance=pxc-operator;k8s:app.kubernetes.io/name=pxc-operator;k8s:app.kubernetes.io/part-of=pxc-operator;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0f6f577fae datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1015 identity=10650 identityLabels="k8s:app.kubernetes.io/component=operator,k8s:app.kubernetes.io/instance=pxc-operator,k8s:app.kubernetes.io/name=pxc-operator,k8s:app.kubernetes.io/part-of=pxc-operator,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.64 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-64svn oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0f6f577fae datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1015 identity=10650 ipv4=10.0.0.64 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-64svn subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=0f6f577fae datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=1015 identity=10650 ipv4=10.0.0.64 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-64svn subsys=endpoint level=info msg="Successful endpoint creation" containerID=0f6f577fae datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=1015 identity=10650 ipv4=10.0.0.64 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-64svn subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.90 217818d5-fd34-4d0b-a2dd-9f208f2ac42b default }" containerID=52085b31cd5decdb6d154f5fbdf2cbff12f04cdc2e410ec7c348e1e0c9e3cceb datapathConfiguration="&{false false false false false }" interface=lxcda8b7394f7a2 k8sPodName=openstack/percona-xtradb-haproxy-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=52085b31cd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1616 ipv4=10.0.0.90 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=52085b31cd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1616 identityLabels="k8s:app.kubernetes.io/component=haproxy,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0" ipv4=10.0.0.90 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=52085b31cd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1616 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.90 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=haproxy;k8s:app.kubernetes.io/instance=percona-xtradb;k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator;k8s:app.kubernetes.io/name=percona-xtradb-cluster;k8s:app.kubernetes.io/part-of=percona-xtradb-cluster;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=52085b31cd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1616 identity=22963 identityLabels="k8s:app.kubernetes.io/component=haproxy,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0" ipv4=10.0.0.90 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=52085b31cd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1616 identity=22963 ipv4=10.0.0.90 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=52085b31cd datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=1616 identity=22963 ipv4=10.0.0.90 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=52085b31cd datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=1616 identity=22963 ipv4=10.0.0.90 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.193 3c187e3a-af6c-4365-bea3-cecbb32506be default }" containerID=b72552a1d7dcc5dbb46711bfc1585ab99a8b28903a2c3bb9ab3946095d951c46 datapathConfiguration="&{false false false false false }" interface=lxc76c81eb708d5 k8sPodName=local-path-storage/helper-pod-create-pvc-da9196df-2dad-414e-815d-eb18049b2411 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b72552a1d7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2436 ipv4=10.0.0.193 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-da9196df-2dad-414e-815d-eb18049b2411 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b72552a1d7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2436 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.193 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-da9196df-2dad-414e-815d-eb18049b2411 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:local-path-storage k8s:io.cilium.k8s.namespace.labels.name:local-path-storage]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b72552a1d7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2436 identity=15841 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.193 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-da9196df-2dad-414e-815d-eb18049b2411 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b72552a1d7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2436 identity=15841 ipv4=10.0.0.193 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-da9196df-2dad-414e-815d-eb18049b2411 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b72552a1d7 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=2436 identity=15841 ipv4=10.0.0.193 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-da9196df-2dad-414e-815d-eb18049b2411 subsys=endpoint level=info msg="Successful endpoint creation" containerID=b72552a1d7 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=2436 identity=15841 ipv4=10.0.0.193 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-da9196df-2dad-414e-815d-eb18049b2411 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=b72552a1d7 endpointID=2436 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-da9196df-2dad-414e-815d-eb18049b2411 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=b72552a1d7 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=2436 identity=15841 ipv4=10.0.0.193 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-da9196df-2dad-414e-815d-eb18049b2411 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.62 5dffac06-1837-4f2a-9df9-c7235450ae56 default }" containerID=95b6257260d05626248ef5384441ad04bc134ca74963fb5aba6caa78340e5228 datapathConfiguration="&{false false false false false }" interface=lxc80b5695f707e k8sPodName=openstack/percona-xtradb-pxc-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=95b6257260 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3935 ipv4=10.0.0.62 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=95b6257260 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3935 identityLabels="k8s:app.kubernetes.io/component=pxc,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0" ipv4=10.0.0.62 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=pxc;k8s:app.kubernetes.io/instance=percona-xtradb;k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator;k8s:app.kubernetes.io/name=percona-xtradb-cluster;k8s:app.kubernetes.io/part-of=percona-xtradb-cluster;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=95b6257260 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3935 identity=13725 identityLabels="k8s:app.kubernetes.io/component=pxc,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0" ipv4=10.0.0.62 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=95b6257260 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3935 identity=13725 ipv4=10.0.0.62 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=95b6257260 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=3935 identity=13725 ipv4=10.0.0.62 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=95b6257260 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=3935 identity=13725 ipv4=10.0.0.62 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/instance\":\"valkey\",\"k8s:app.kubernetes.io/name\":\"valkey\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:6379 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:} {Ports:[{Port:26379 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:} {IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:9121 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=valkey k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=48ef8da7-7b22-4541-978f-4dec99308149] Description:}]" policyAddRequest=27d8e9c6-b82b-4c75-99de-b1db6ee99e03 subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=27d8e9c6-b82b-4c75-99de-b1db6ee99e03 policyRevision=4 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=valkey subsys=k8s-watcher level=info msg="Create endpoint request" addressing="&{10.0.0.14 cede3e04-2bad-4308-972e-9579f74f51fa default }" containerID=bab77bfbe4dbe90dc60dd70b686b920037415e8905f3dd4016c7c673cbb7f3c2 datapathConfiguration="&{false false false false false }" interface=lxc4e4082e8a499 k8sPodName=local-path-storage/helper-pod-create-pvc-5819eeae-76d1-4f37-a781-bffec39283aa labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=bab77bfbe4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=502 ipv4=10.0.0.14 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-5819eeae-76d1-4f37-a781-bffec39283aa subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=bab77bfbe4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=502 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.14 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-5819eeae-76d1-4f37-a781-bffec39283aa subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=bab77bfbe4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=502 identity=15841 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.14 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-5819eeae-76d1-4f37-a781-bffec39283aa oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=bab77bfbe4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=502 identity=15841 ipv4=10.0.0.14 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-5819eeae-76d1-4f37-a781-bffec39283aa subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=bab77bfbe4 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=502 identity=15841 ipv4=10.0.0.14 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-5819eeae-76d1-4f37-a781-bffec39283aa subsys=endpoint level=info msg="Successful endpoint creation" containerID=bab77bfbe4 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=502 identity=15841 ipv4=10.0.0.14 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-5819eeae-76d1-4f37-a781-bffec39283aa subsys=daemon level=info msg="Delete endpoint request" containerID=bab77bfbe4 endpointID=502 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-5819eeae-76d1-4f37-a781-bffec39283aa subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=bab77bfbe4 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=502 identity=15841 ipv4=10.0.0.14 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-5819eeae-76d1-4f37-a781-bffec39283aa subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.179 ea86e7d2-895d-4ee7-8d9d-a940e16b71d6 default }" containerID=0c366e41e42e41b6cc057d7f810a8868dee3a2c9fb598d2dcacbd99450ed164c datapathConfiguration="&{false false false false false }" interface=lxc191c5dadb20a k8sPodName=openstack/valkey-node-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0c366e41e4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1274 ipv4=10.0.0.179 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0c366e41e4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1274 identityLabels="k8s:app.kubernetes.io/component=node,k8s:app.kubernetes.io/instance=valkey,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=valkey,k8s:app.kubernetes.io/version=8.0.2,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=valkey-2.4.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=valkey,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=valkey-node-0" ipv4=10.0.0.179 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=node;k8s:app.kubernetes.io/instance=valkey;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=valkey;k8s:app.kubernetes.io/version=8.0.2;k8s:apps.kubernetes.io/pod-index=0;k8s:helm.sh/chart=valkey-2.4.6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=valkey;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=valkey-node-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0c366e41e4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1274 identity=14366 identityLabels="k8s:app.kubernetes.io/component=node,k8s:app.kubernetes.io/instance=valkey,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=valkey,k8s:app.kubernetes.io/version=8.0.2,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=valkey-2.4.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=valkey,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=valkey-node-0" ipv4=10.0.0.179 ipv6= k8sPodName=openstack/valkey-node-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0c366e41e4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1274 identity=14366 ipv4=10.0.0.179 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=0c366e41e4 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1274 identity=14366 ipv4=10.0.0.179 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=0c366e41e4 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1274 identity=14366 ipv4=10.0.0.179 ipv6= k8sPodName=openstack/valkey-node-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"keycloak\",\"k8s:app.kubernetes.io/instance\":\"keycloak\",\"k8s:app.kubernetes.io/name\":\"keycloak\",\"k8s:io.kubernetes.pod.namespace\":\"auth-system\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:7800 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:} {Ports:[{Port:8080 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=keycloak k8s:io.cilium.k8s.policy.namespace=auth-system k8s:io.cilium.k8s.policy.uid=b9222d32-06b3-40e6-8f76-9d88a7eb4a8d] Description:}]" policyAddRequest=00b038f6-7631-4f85-8f71-7923dd839741 subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=00b038f6-7631-4f85-8f71-7923dd839741 policyRevision=5 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=keycloak subsys=k8s-watcher level=info msg="Create endpoint request" addressing="&{10.0.0.4 0d9aec54-e6ae-4bf3-9b87-e570a3845c0b default }" containerID=f8bada725f77216cd80f8014e083da7695cb58eaaf5111437eab2932d0bdd455 datapathConfiguration="&{false false false false false }" interface=lxce21a933ccb17 k8sPodName=auth-system/keycloak-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f8bada725f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3431 ipv4=10.0.0.4 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f8bada725f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3431 identityLabels="k8s:app.kubernetes.io/component=keycloak,k8s:app.kubernetes.io/instance=keycloak,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=keycloak,k8s:app.kubernetes.io/version=24.0.5,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=keycloak-21.4.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system,k8s:io.cilium.k8s.namespace.labels.name=auth-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keycloak,k8s:io.kubernetes.pod.namespace=auth-system,k8s:statefulset.kubernetes.io/pod-name=keycloak-0" ipv4=10.0.0.4 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:auth-system k8s:io.cilium.k8s.namespace.labels.name:auth-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=keycloak;k8s:app.kubernetes.io/instance=keycloak;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=keycloak;k8s:app.kubernetes.io/version=24.0.5;k8s:apps.kubernetes.io/pod-index=0;k8s:helm.sh/chart=keycloak-21.4.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system;k8s:io.cilium.k8s.namespace.labels.name=auth-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keycloak;k8s:io.kubernetes.pod.namespace=auth-system;k8s:statefulset.kubernetes.io/pod-name=keycloak-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f8bada725f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3431 identity=49837 identityLabels="k8s:app.kubernetes.io/component=keycloak,k8s:app.kubernetes.io/instance=keycloak,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=keycloak,k8s:app.kubernetes.io/version=24.0.5,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=keycloak-21.4.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system,k8s:io.cilium.k8s.namespace.labels.name=auth-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keycloak,k8s:io.kubernetes.pod.namespace=auth-system,k8s:statefulset.kubernetes.io/pod-name=keycloak-0" ipv4=10.0.0.4 ipv6= k8sPodName=auth-system/keycloak-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f8bada725f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3431 identity=49837 ipv4=10.0.0.4 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=f8bada725f datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3431 identity=49837 ipv4=10.0.0.4 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=f8bada725f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3431 identity=49837 ipv4=10.0.0.4 ipv6= k8sPodName=auth-system/keycloak-0 subsys=daemon level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Conntrack garbage collector interval recalculated" deleteRatio=0.009093430005275474 newInterval=7m30s subsys=map-ct level=info msg="Create endpoint request" addressing="&{10.0.0.91 dca727c9-ae10-4bed-a440-0e10056ab3ae default }" containerID=d1ea754955806ae056178f53328d244356a7615794d9e1df2d4af2e31e7a6df0 datapathConfiguration="&{false false false false false }" interface=lxcdfaf426f7532 k8sPodName=monitoring/node-feature-discovery-worker-j4fml labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d1ea754955 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2200 ipv4=10.0.0.91 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-j4fml subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d1ea754955 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2200 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=worker" ipv4=10.0.0.91 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-j4fml subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=worker;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d1ea754955 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2200 identity=3282 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=worker" ipv4=10.0.0.91 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-j4fml oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d1ea754955 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2200 identity=3282 ipv4=10.0.0.91 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-j4fml subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.221 43f09ef9-45aa-4cbd-a5e4-c6eceed255c3 default }" containerID=b75d2e1b80d502f65ca7098ddc0039a51a00924fd8399b19789f116a43356140 datapathConfiguration="&{false false false false false }" interface=lxcfcf48fabe482 k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-p4mqc labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b75d2e1b80 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2285 ipv4=10.0.0.221 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-p4mqc subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b75d2e1b80 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2285 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=gc" ipv4=10.0.0.221 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-p4mqc subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=gc;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b75d2e1b80 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2285 identity=14648 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=gc" ipv4=10.0.0.221 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-p4mqc oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b75d2e1b80 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2285 identity=14648 ipv4=10.0.0.221 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-p4mqc subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d1ea754955 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2200 identity=3282 ipv4=10.0.0.91 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-j4fml subsys=endpoint level=info msg="Successful endpoint creation" containerID=d1ea754955 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2200 identity=3282 ipv4=10.0.0.91 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-j4fml subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.60 f4926775-4dbc-4138-b790-95dcaedaa740 default }" containerID=76c908dd1d67b0c05c1b8085bb6c3d2d43a0ce34b78eb1672ea3f52156a4b934 datapathConfiguration="&{false false false false false }" interface=lxcd8c4c8f10b4b k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-7xmv5 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=76c908dd1d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4093 ipv4=10.0.0.60 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-7xmv5 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=76c908dd1d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4093 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=master" ipv4=10.0.0.60 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-7xmv5 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=master;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=76c908dd1d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4093 identity=43396 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=master" ipv4=10.0.0.60 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-7xmv5 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=76c908dd1d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4093 identity=43396 ipv4=10.0.0.60 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-7xmv5 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b75d2e1b80 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2285 identity=14648 ipv4=10.0.0.221 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-p4mqc subsys=endpoint level=info msg="Successful endpoint creation" containerID=b75d2e1b80 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2285 identity=14648 ipv4=10.0.0.221 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-p4mqc subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=76c908dd1d datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=4093 identity=43396 ipv4=10.0.0.60 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-7xmv5 subsys=endpoint level=info msg="Successful endpoint creation" containerID=76c908dd1d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=4093 identity=43396 ipv4=10.0.0.60 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-7xmv5 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.252 cb015e57-8273-4b2d-adbc-cc38c9ecf053 default }" containerID=699e30f370850d0839862122e8ab041e84aa6f9b447ee4f653aa4339e7237e42 datapathConfiguration="&{false false false false false }" interface=lxca238c0a59767 k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-79gmk labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=699e30f370 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1575 ipv4=10.0.0.252 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-79gmk subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=699e30f370 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1575 identityLabels="k8s:app=secretgen-controller,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa,k8s:io.kubernetes.pod.namespace=secretgen-controller" ipv4=10.0.0.252 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-79gmk subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:secretgen-controller]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=secretgen-controller;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa;k8s:io.kubernetes.pod.namespace=secretgen-controller;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=699e30f370 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1575 identity=44015 identityLabels="k8s:app=secretgen-controller,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa,k8s:io.kubernetes.pod.namespace=secretgen-controller" ipv4=10.0.0.252 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-79gmk oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=699e30f370 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1575 identity=44015 ipv4=10.0.0.252 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-79gmk subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=699e30f370 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1575 identity=44015 ipv4=10.0.0.252 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-79gmk subsys=endpoint level=info msg="Successful endpoint creation" containerID=699e30f370 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1575 identity=44015 ipv4=10.0.0.252 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-79gmk subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3073 identity=1 identityLabels="k8s:feature.node.kubernetes.io/cpu-cpuid.ADX=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AESNI=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AVX2=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AVX=true,k8s:feature.node.kubernetes.io/cpu-cpuid.CLZERO=true,k8s:feature.node.kubernetes.io/cpu-cpuid.CMPXCHG8=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FMA3=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FXSR=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FXSROPT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.HYPERVISOR=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IA32_ARCH_CAP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IBPB=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IBRS=true,k8s:feature.node.kubernetes.io/cpu-cpuid.LAHF=true,k8s:feature.node.kubernetes.io/cpu-cpuid.MOVBE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.NRIPS=true,k8s:feature.node.kubernetes.io/cpu-cpuid.OSXSAVE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SHA=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SPEC_CTRL_SSBD=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SSE4A=true,k8s:feature.node.kubernetes.io/cpu-cpuid.STIBP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SVM=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SVMNP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SYSCALL=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SYSEE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.TOPEXT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.WBNOINVD=true,k8s:feature.node.kubernetes.io/cpu-cpuid.X87=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XGETBV1=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVEC=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVEOPT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVES=true,k8s:feature.node.kubernetes.io/cpu-hardware_multithreading=false,k8s:feature.node.kubernetes.io/cpu-model.family=23,k8s:feature.node.kubernetes.io/cpu-model.id=49,k8s:feature.node.kubernetes.io/cpu-model.vendor_id=AMD,k8s:feature.node.kubernetes.io/kernel-config.NO_HZ=true,k8s:feature.node.kubernetes.io/kernel-config.NO_HZ_IDLE=true,k8s:feature.node.kubernetes.io/kernel-version.full=5.15.0-176-generic,k8s:feature.node.kubernetes.io/kernel-version.major=5,k8s:feature.node.kubernetes.io/kernel-version.minor=15,k8s:feature.node.kubernetes.io/kernel-version.revision=0,k8s:feature.node.kubernetes.io/pci-0300_1af4.present=true,k8s:feature.node.kubernetes.io/system-os_release.ID=ubuntu,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID.major=22,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID.minor=04,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID=22.04,k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,k8s:openstack-compute-node=enabled,k8s:openstack-control-plane=enabled,k8s:openvswitch=enabled,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_hostns_03073 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_hostns_03073 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_hostns_03073 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_hostns_03073:pending" subsys=bpf level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_netdev_00005 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_netdev_00005 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005:pending" subsys=bpf level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3073 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.98 52b71267-7592-45c1-9237-338405834d36 default }" containerID=0e76d5092cca2630dd68f6455117e94ce380a195cc856bc5c8a3f37bdb02e33b datapathConfiguration="&{false false false false false }" interface=lxcaf821c8d4a3b k8sPodName=monitoring/kube-prometheus-stack-admission-create-q9gft labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0e76d5092c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1222 ipv4=10.0.0.98 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-q9gft subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0e76d5092c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1222 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-create,k8s:batch.kubernetes.io/controller-uid=18dfaaab-5b90-4dee-91d9-564614b908aa,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=18dfaaab-5b90-4dee-91d9-564614b908aa,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-create,k8s:release=kube-prometheus-stack" ipv4=10.0.0.98 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-q9gft subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-admission-create;k8s:app.kubernetes.io/component=prometheus-operator-webhook;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:batch.kubernetes.io/controller-uid=18dfaaab-5b90-4dee-91d9-564614b908aa;k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create;k8s:chart=kube-prometheus-stack-60.2.0;k8s:controller-uid=18dfaaab-5b90-4dee-91d9-564614b908aa;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission;k8s:io.kubernetes.pod.namespace=monitoring;k8s:job-name=kube-prometheus-stack-admission-create;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0e76d5092c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1222 identity=13178 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-create,k8s:batch.kubernetes.io/controller-uid=18dfaaab-5b90-4dee-91d9-564614b908aa,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=18dfaaab-5b90-4dee-91d9-564614b908aa,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-create,k8s:release=kube-prometheus-stack" ipv4=10.0.0.98 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-q9gft oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0e76d5092c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1222 identity=13178 ipv4=10.0.0.98 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-q9gft subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=0e76d5092c datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1222 identity=13178 ipv4=10.0.0.98 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-q9gft subsys=endpoint level=info msg="Successful endpoint creation" containerID=0e76d5092c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1222 identity=13178 ipv4=10.0.0.98 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-q9gft subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=0e76d5092c endpointID=1222 k8sNamespace=monitoring k8sPodName=kube-prometheus-stack-admission-create-q9gft subsys=daemon level=info msg="Releasing key" key="[k8s:app=kube-prometheus-stack-admission-create k8s:app.kubernetes.io/component=prometheus-operator-webhook k8s:app.kubernetes.io/instance=kube-prometheus-stack k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator k8s:app.kubernetes.io/part-of=kube-prometheus-stack k8s:app.kubernetes.io/version=60.2.0 k8s:batch.kubernetes.io/controller-uid=18dfaaab-5b90-4dee-91d9-564614b908aa k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create k8s:chart=kube-prometheus-stack-60.2.0 k8s:controller-uid=18dfaaab-5b90-4dee-91d9-564614b908aa k8s:heritage=Helm k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring k8s:io.cilium.k8s.namespace.labels.name=monitoring k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission k8s:io.kubernetes.pod.namespace=monitoring k8s:job-name=kube-prometheus-stack-admission-create k8s:release=kube-prometheus-stack]" subsys=allocator level=info msg="Removed endpoint" containerID=0e76d5092c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1222 identity=13178 ipv4=10.0.0.98 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-q9gft subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.13 e9124d9f-5577-4577-85a2-c7cf15e9ab31 default }" containerID=c4b1083ba1ff967dad1cd51cb3433959d5c5e3343698c132685066d87138157f datapathConfiguration="&{false false false false false }" interface=lxc73245664b411 k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-zx8xb labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c4b1083ba1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=263 ipv4=10.0.0.13 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-zx8xb subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c4b1083ba1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=263 identityLabels="k8s:app.kubernetes.io/component=metrics,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-state-metrics,k8s:app.kubernetes.io/part-of=kube-state-metrics,k8s:app.kubernetes.io/version=2.12.0,k8s:helm.sh/chart=kube-state-metrics-5.20.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.13 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-zx8xb subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Create endpoint request" addressing="&{10.0.0.49 89026527-c6c9-4873-a595-74f8e55a847b default }" containerID=d2e273feec1f31ff164e02cdc187c52685bffb090f988497e9591d8ac951e5f4 datapathConfiguration="&{false false false false false }" interface=lxcbcada12e842a k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-q42bn labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d2e273feec datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=63 ipv4=10.0.0.49 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-q42bn subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d2e273feec datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=63 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-operator,k8s:chart=kube-prometheus-stack-60.2.0,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.49 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-q42bn subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=d2e273feec datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=63 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.49 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-q42bn line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=metrics;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-state-metrics;k8s:app.kubernetes.io/part-of=kube-state-metrics;k8s:app.kubernetes.io/version=2.12.0;k8s:helm.sh/chart=kube-state-metrics-5.20.0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics;k8s:io.kubernetes.pod.namespace=monitoring;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c4b1083ba1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=263 identity=27061 identityLabels="k8s:app.kubernetes.io/component=metrics,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-state-metrics,k8s:app.kubernetes.io/part-of=kube-state-metrics,k8s:app.kubernetes.io/version=2.12.0,k8s:helm.sh/chart=kube-state-metrics-5.20.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.13 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-zx8xb oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c4b1083ba1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=263 identity=27061 ipv4=10.0.0.13 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-zx8xb subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-operator;k8s:app.kubernetes.io/component=prometheus-operator;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:chart=kube-prometheus-stack-60.2.0;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator;k8s:io.kubernetes.pod.namespace=monitoring;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d2e273feec datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=63 identity=45687 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-operator,k8s:chart=kube-prometheus-stack-60.2.0,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.49 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-q42bn oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d2e273feec datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=63 identity=45687 ipv4=10.0.0.49 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-q42bn subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.106 194ffffd-34e6-44f0-809d-a9c686e26921 default }" containerID=b4ee1ccb8ddd7780dde03de9a886188f85cb76ee0003274324c0f70799e1b773 datapathConfiguration="&{false false false false false }" interface=lxc1ee67312a7ea k8sPodName=monitoring/kube-prometheus-stack-grafana-78898b7b8f-l8whf labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b4ee1ccb8d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=439 ipv4=10.0.0.106 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-78898b7b8f-l8whf subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b4ee1ccb8d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=439 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/name=grafana,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.106 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-78898b7b8f-l8whf subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/name=grafana;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b4ee1ccb8d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=439 identity=6453 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/name=grafana,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.106 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-78898b7b8f-l8whf oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b4ee1ccb8d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=439 identity=6453 ipv4=10.0.0.106 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-78898b7b8f-l8whf subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c4b1083ba1 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=263 identity=27061 ipv4=10.0.0.13 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-zx8xb subsys=endpoint level=info msg="Successful endpoint creation" containerID=c4b1083ba1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=263 identity=27061 ipv4=10.0.0.13 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-zx8xb subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=d2e273feec datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=63 identity=45687 ipv4=10.0.0.49 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-q42bn subsys=endpoint level=info msg="Successful endpoint creation" containerID=d2e273feec datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=63 identity=45687 ipv4=10.0.0.49 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-q42bn subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=b4ee1ccb8d datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=439 identity=6453 ipv4=10.0.0.106 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-78898b7b8f-l8whf subsys=endpoint level=info msg="Successful endpoint creation" containerID=b4ee1ccb8d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=439 identity=6453 ipv4=10.0.0.106 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-78898b7b8f-l8whf subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.39 77dd8c92-9f95-47eb-b57a-0b83cfe4aaeb default }" containerID=ae62615b7319f7456faa070daa667f0231fc0d31074a32c30020de9326cb850b datapathConfiguration="&{false false false false false }" interface=lxc08ba3b42be91 k8sPodName=monitoring/kube-prometheus-stack-admission-patch-k7zxg labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ae62615b73 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=908 ipv4=10.0.0.39 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-k7zxg subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ae62615b73 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=908 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-patch,k8s:batch.kubernetes.io/controller-uid=68c77a30-e40f-4047-914a-7aad578ef7d4,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=68c77a30-e40f-4047-914a-7aad578ef7d4,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-patch,k8s:release=kube-prometheus-stack" ipv4=10.0.0.39 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-k7zxg subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-admission-patch;k8s:app.kubernetes.io/component=prometheus-operator-webhook;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:batch.kubernetes.io/controller-uid=68c77a30-e40f-4047-914a-7aad578ef7d4;k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch;k8s:chart=kube-prometheus-stack-60.2.0;k8s:controller-uid=68c77a30-e40f-4047-914a-7aad578ef7d4;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission;k8s:io.kubernetes.pod.namespace=monitoring;k8s:job-name=kube-prometheus-stack-admission-patch;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ae62615b73 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=908 identity=27092 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-patch,k8s:batch.kubernetes.io/controller-uid=68c77a30-e40f-4047-914a-7aad578ef7d4,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=68c77a30-e40f-4047-914a-7aad578ef7d4,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-patch,k8s:release=kube-prometheus-stack" ipv4=10.0.0.39 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-k7zxg oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ae62615b73 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=908 identity=27092 ipv4=10.0.0.39 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-k7zxg subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ae62615b73 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=908 identity=27092 ipv4=10.0.0.39 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-k7zxg subsys=endpoint level=info msg="Successful endpoint creation" containerID=ae62615b73 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=908 identity=27092 ipv4=10.0.0.39 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-k7zxg subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=ae62615b73 endpointID=908 k8sNamespace=monitoring k8sPodName=kube-prometheus-stack-admission-patch-k7zxg subsys=daemon level=info msg="Releasing key" key="[k8s:app=kube-prometheus-stack-admission-patch k8s:app.kubernetes.io/component=prometheus-operator-webhook k8s:app.kubernetes.io/instance=kube-prometheus-stack k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator k8s:app.kubernetes.io/part-of=kube-prometheus-stack k8s:app.kubernetes.io/version=60.2.0 k8s:batch.kubernetes.io/controller-uid=68c77a30-e40f-4047-914a-7aad578ef7d4 k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch k8s:chart=kube-prometheus-stack-60.2.0 k8s:controller-uid=68c77a30-e40f-4047-914a-7aad578ef7d4 k8s:heritage=Helm k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring k8s:io.cilium.k8s.namespace.labels.name=monitoring k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission k8s:io.kubernetes.pod.namespace=monitoring k8s:job-name=kube-prometheus-stack-admission-patch k8s:release=kube-prometheus-stack]" subsys=allocator level=info msg="Removed endpoint" containerID=ae62615b73 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=908 identity=27092 ipv4=10.0.0.39 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-k7zxg subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.101 d263a26b-e1b5-44c1-bee8-43ea7bd4473c default }" containerID=3dae44d2f926693d4c078a905fc1a7f765a50c16e20b286460eaa1a545c9b836 datapathConfiguration="&{false false false false false }" interface=lxcec22b85a8165 k8sPodName=local-path-storage/helper-pod-create-pvc-aa29872e-4e23-4d29-87e3-f6ddda49ed6e labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3dae44d2f9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=745 ipv4=10.0.0.101 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-aa29872e-4e23-4d29-87e3-f6ddda49ed6e subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3dae44d2f9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=745 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.101 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-aa29872e-4e23-4d29-87e3-f6ddda49ed6e subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3dae44d2f9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=745 identity=15841 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.101 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-aa29872e-4e23-4d29-87e3-f6ddda49ed6e oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3dae44d2f9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=745 identity=15841 ipv4=10.0.0.101 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-aa29872e-4e23-4d29-87e3-f6ddda49ed6e subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=3dae44d2f9 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=745 identity=15841 ipv4=10.0.0.101 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-aa29872e-4e23-4d29-87e3-f6ddda49ed6e subsys=endpoint level=info msg="Successful endpoint creation" containerID=3dae44d2f9 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=745 identity=15841 ipv4=10.0.0.101 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-aa29872e-4e23-4d29-87e3-f6ddda49ed6e subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.118 1e99084e-4235-4f4e-9766-545fc710c8fc default }" containerID=2f559aea4a599ba7fb61bb6e3a8df09b103182fa311c5e6092ac3739d8d7ba38 datapathConfiguration="&{false false false false false }" interface=lxc8dcb08e6d4fc k8sPodName=local-path-storage/helper-pod-create-pvc-5ac17a2d-9286-4945-8400-f990cd92e6e4 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2f559aea4a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2198 ipv4=10.0.0.118 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-5ac17a2d-9286-4945-8400-f990cd92e6e4 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2f559aea4a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2198 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.118 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-5ac17a2d-9286-4945-8400-f990cd92e6e4 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=2f559aea4a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2198 identity=15841 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.118 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-5ac17a2d-9286-4945-8400-f990cd92e6e4 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2f559aea4a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2198 identity=15841 ipv4=10.0.0.118 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-5ac17a2d-9286-4945-8400-f990cd92e6e4 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=2f559aea4a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2198 identity=15841 ipv4=10.0.0.118 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-5ac17a2d-9286-4945-8400-f990cd92e6e4 subsys=endpoint level=info msg="Successful endpoint creation" containerID=2f559aea4a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2198 identity=15841 ipv4=10.0.0.118 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-5ac17a2d-9286-4945-8400-f990cd92e6e4 subsys=daemon level=info msg="Delete endpoint request" containerID=3dae44d2f9 endpointID=745 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-aa29872e-4e23-4d29-87e3-f6ddda49ed6e subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=3dae44d2f9 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=745 identity=15841 ipv4=10.0.0.101 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-aa29872e-4e23-4d29-87e3-f6ddda49ed6e subsys=endpoint level=info msg="Delete endpoint request" containerID=2f559aea4a endpointID=2198 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-5ac17a2d-9286-4945-8400-f990cd92e6e4 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=2f559aea4a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2198 identity=15841 ipv4=10.0.0.118 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-5ac17a2d-9286-4945-8400-f990cd92e6e4 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.18 ce9692e6-3cf6-4bbe-bd6a-228d125d725c default }" containerID=973f427ab678b919702dfd5239d7ea5beb82d6de17f74ac715a6d607c5cb9ece datapathConfiguration="&{false false false false false }" interface=lxce3886954783b k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=973f427ab6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3506 ipv4=10.0.0.18 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=973f427ab6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3506 identityLabels="k8s:alertmanager=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=alertmanager,k8s:app.kubernetes.io/version=0.27.0,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0" ipv4=10.0.0.18 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:alertmanager=kube-prometheus-stack-alertmanager;k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager;k8s:app.kubernetes.io/managed-by=prometheus-operator;k8s:app.kubernetes.io/name=alertmanager;k8s:app.kubernetes.io/version=0.27.0;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager;k8s:io.kubernetes.pod.namespace=monitoring;k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=973f427ab6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3506 identity=5678 identityLabels="k8s:alertmanager=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=alertmanager,k8s:app.kubernetes.io/version=0.27.0,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0" ipv4=10.0.0.18 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=973f427ab6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3506 identity=5678 ipv4=10.0.0.18 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=973f427ab6 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3506 identity=5678 ipv4=10.0.0.18 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=973f427ab6 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3506 identity=5678 ipv4=10.0.0.18 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.32 83882ee6-c852-4dbc-bcdb-510a8720d5eb default }" containerID=b7953b7bbd004deeb5c00924b156cb4f484ff360e05681e5a2ded243130fc0b1 datapathConfiguration="&{false false false false false }" interface=lxc293c0dda89a1 k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b7953b7bbd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3124 ipv4=10.0.0.32 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b7953b7bbd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3124 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=prometheus,k8s:app.kubernetes.io/version=2.51.2,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus,k8s:io.kubernetes.pod.namespace=monitoring,k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus,k8s:operator.prometheus.io/shard=0,k8s:prometheus=kube-prometheus-stack-prometheus,k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0" ipv4=10.0.0.32 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus;k8s:app.kubernetes.io/managed-by=prometheus-operator;k8s:app.kubernetes.io/name=prometheus;k8s:app.kubernetes.io/version=2.51.2;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus;k8s:io.kubernetes.pod.namespace=monitoring;k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus;k8s:operator.prometheus.io/shard=0;k8s:prometheus=kube-prometheus-stack-prometheus;k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b7953b7bbd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3124 identity=51042 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=prometheus,k8s:app.kubernetes.io/version=2.51.2,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus,k8s:io.kubernetes.pod.namespace=monitoring,k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus,k8s:operator.prometheus.io/shard=0,k8s:prometheus=kube-prometheus-stack-prometheus,k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0" ipv4=10.0.0.32 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b7953b7bbd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3124 identity=51042 ipv4=10.0.0.32 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b7953b7bbd datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3124 identity=51042 ipv4=10.0.0.32 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=b7953b7bbd datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3124 identity=51042 ipv4=10.0.0.32 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.8 ede3911c-0ae1-4191-9078-4f976b6846f0 default }" containerID=82c7b86fd280c1568a3db7bf0f12b369bff47d00c293a3136202de56025eef0d datapathConfiguration="&{false false false false false }" interface=lxcd9e7891f3a44 k8sPodName=monitoring/loki-gateway-cf54cb88c-fbjdk labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=82c7b86fd2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2322 ipv4=10.0.0.8 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-fbjdk subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=82c7b86fd2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2322 identityLabels="k8s:app.kubernetes.io/component=gateway,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.8 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-fbjdk subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=gateway;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=82c7b86fd2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2322 identity=63647 identityLabels="k8s:app.kubernetes.io/component=gateway,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.8 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-fbjdk oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=82c7b86fd2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2322 identity=63647 ipv4=10.0.0.8 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-fbjdk subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=82c7b86fd2 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2322 identity=63647 ipv4=10.0.0.8 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-fbjdk subsys=endpoint level=info msg="Successful endpoint creation" containerID=82c7b86fd2 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2322 identity=63647 ipv4=10.0.0.8 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-fbjdk subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.135 be7a718e-a5a1-4c46-b78e-dcf6ab989214 default }" containerID=a072cb30b28ed997a0dce731877c312d96cf03e9873314839abc413ce07cc0d1 datapathConfiguration="&{false false false false false }" interface=lxcf5bc2a0e3aab k8sPodName=monitoring/loki-chunks-cache-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a072cb30b2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3724 ipv4=10.0.0.135 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a072cb30b2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3724 identityLabels="k8s:app.kubernetes.io/component=memcached-chunks-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-chunks-cache,k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0" ipv4=10.0.0.135 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Create endpoint request" addressing="&{10.0.0.246 022a7160-b47e-4e78-a9ee-d77058d5bed5 default }" containerID=db5487abe357ccde9d77f6598d37114264d47ded1d5178b8ffe02cf7734ab2bc datapathConfiguration="&{false false false false false }" interface=lxca054a134762e k8sPodName=monitoring/loki-results-cache-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=db5487abe3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=136 ipv4=10.0.0.246 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=db5487abe3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=136 identityLabels="k8s:app.kubernetes.io/component=memcached-results-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-results-cache,k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0" ipv4=10.0.0.246 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=memcached-chunks-cache;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:name=memcached-chunks-cache;k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a072cb30b2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3724 identity=5861 identityLabels="k8s:app.kubernetes.io/component=memcached-chunks-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-chunks-cache,k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0" ipv4=10.0.0.135 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 oldIdentity="no identity" subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Waiting for endpoint to be generated" containerID=a072cb30b2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3724 identity=5861 ipv4=10.0.0.135 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=memcached-results-cache;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:name=memcached-results-cache;k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=db5487abe3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=136 identity=19209 identityLabels="k8s:app.kubernetes.io/component=memcached-results-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-results-cache,k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0" ipv4=10.0.0.246 ipv6= k8sPodName=monitoring/loki-results-cache-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=db5487abe3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=136 identity=19209 ipv4=10.0.0.246 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a072cb30b2 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3724 identity=5861 ipv4=10.0.0.135 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=a072cb30b2 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3724 identity=5861 ipv4=10.0.0.135 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=db5487abe3 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=136 identity=19209 ipv4=10.0.0.246 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=db5487abe3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=136 identity=19209 ipv4=10.0.0.246 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.130 4f5e5826-9ef6-4c49-b48b-07cdaae5521d default }" containerID=f7e07ef39dc9be7ac5d13e24e157241218a1419e11de0755292b7e983e32f74f datapathConfiguration="&{false false false false false }" interface=lxc95778aaeda7a k8sPodName=local-path-storage/helper-pod-create-pvc-83be3e7a-19f9-448a-84bd-d296b72a868f labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f7e07ef39d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=193 ipv4=10.0.0.130 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-83be3e7a-19f9-448a-84bd-d296b72a868f subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f7e07ef39d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=193 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.130 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-83be3e7a-19f9-448a-84bd-d296b72a868f subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f7e07ef39d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=193 identity=15841 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.130 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-83be3e7a-19f9-448a-84bd-d296b72a868f oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f7e07ef39d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=193 identity=15841 ipv4=10.0.0.130 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-83be3e7a-19f9-448a-84bd-d296b72a868f subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f7e07ef39d datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=193 identity=15841 ipv4=10.0.0.130 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-83be3e7a-19f9-448a-84bd-d296b72a868f subsys=endpoint level=info msg="Successful endpoint creation" containerID=f7e07ef39d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=193 identity=15841 ipv4=10.0.0.130 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-83be3e7a-19f9-448a-84bd-d296b72a868f subsys=daemon level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.33 8c3f281a-6e34-439f-bc2b-e580b9f53479 default }" containerID=07ff0e41d7eba5c32b15eba122eeeb7511dad6bb5c27e5864942f9aed5cc9da6 datapathConfiguration="&{false false false false false }" interface=lxcd6191d76f8a7 k8sPodName=monitoring/vector-4wxz4 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=07ff0e41d7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=449 ipv4=10.0.0.33 ipv6= k8sPodName=monitoring/vector-4wxz4 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=07ff0e41d7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=449 identityLabels="k8s:app.kubernetes.io/component=Agent,k8s:app.kubernetes.io/instance=vector,k8s:app.kubernetes.io/name=vector,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=vector,k8s:io.kubernetes.pod.namespace=monitoring,k8s:vector.dev/exclude=true" ipv4=10.0.0.33 ipv6= k8sPodName=monitoring/vector-4wxz4 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=Agent;k8s:app.kubernetes.io/instance=vector;k8s:app.kubernetes.io/name=vector;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=vector;k8s:io.kubernetes.pod.namespace=monitoring;k8s:vector.dev/exclude=true;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=07ff0e41d7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=449 identity=17826 identityLabels="k8s:app.kubernetes.io/component=Agent,k8s:app.kubernetes.io/instance=vector,k8s:app.kubernetes.io/name=vector,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=vector,k8s:io.kubernetes.pod.namespace=monitoring,k8s:vector.dev/exclude=true" ipv4=10.0.0.33 ipv6= k8sPodName=monitoring/vector-4wxz4 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=07ff0e41d7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=449 identity=17826 ipv4=10.0.0.33 ipv6= k8sPodName=monitoring/vector-4wxz4 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=07ff0e41d7 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=449 identity=17826 ipv4=10.0.0.33 ipv6= k8sPodName=monitoring/vector-4wxz4 subsys=endpoint level=info msg="Successful endpoint creation" containerID=07ff0e41d7 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=449 identity=17826 ipv4=10.0.0.33 ipv6= k8sPodName=monitoring/vector-4wxz4 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=f7e07ef39d endpointID=193 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-83be3e7a-19f9-448a-84bd-d296b72a868f subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=f7e07ef39d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=193 identity=15841 ipv4=10.0.0.130 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-83be3e7a-19f9-448a-84bd-d296b72a868f subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.124 59cc43c7-0165-4e2a-afc1-c189bc63ee43 default }" containerID=1450bf0b530574ffbc1e8f6d8a9597032aac1d7ff9718f895b1e5834943db3fe datapathConfiguration="&{false false false false false }" interface=lxcb401ebab89f2 k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-th2sg labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1450bf0b53 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=57 ipv4=10.0.0.124 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-th2sg subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1450bf0b53 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=57 identityLabels="k8s:app.kubernetes.io/instance=prometheus-pushgateway,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=prometheus-pushgateway,k8s:app.kubernetes.io/version=v1.8.0,k8s:helm.sh/chart=prometheus-pushgateway-2.13.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.124 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-th2sg subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=1450bf0b53 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=57 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.124 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-th2sg line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=prometheus-pushgateway;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=prometheus-pushgateway;k8s:app.kubernetes.io/version=v1.8.0;k8s:helm.sh/chart=prometheus-pushgateway-2.13.0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1450bf0b53 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=57 identity=49053 identityLabels="k8s:app.kubernetes.io/instance=prometheus-pushgateway,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=prometheus-pushgateway,k8s:app.kubernetes.io/version=v1.8.0,k8s:helm.sh/chart=prometheus-pushgateway-2.13.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.124 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-th2sg oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1450bf0b53 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=57 identity=49053 ipv4=10.0.0.124 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-th2sg subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.14 f2f2996c-dc86-424b-9647-56f73f0b8021 default }" containerID=947cdab149e054ede1cd26d66c827283c3a99f848fac785b6ddf63b95d1ea1dc datapathConfiguration="&{false false false false false }" interface=lxc46d99455e354 k8sPodName=monitoring/loki-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=947cdab149 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=976 ipv4=10.0.0.14 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=947cdab149 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=976 identityLabels="k8s:app.kubernetes.io/component=single-binary,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:app.kubernetes.io/part-of=memberlist,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=loki-0" ipv4=10.0.0.14 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=single-binary;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:app.kubernetes.io/part-of=memberlist;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:statefulset.kubernetes.io/pod-name=loki-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=947cdab149 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=976 identity=22400 identityLabels="k8s:app.kubernetes.io/component=single-binary,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:app.kubernetes.io/part-of=memberlist,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=loki-0" ipv4=10.0.0.14 ipv6= k8sPodName=monitoring/loki-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=947cdab149 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=976 identity=22400 ipv4=10.0.0.14 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=1450bf0b53 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=57 identity=49053 ipv4=10.0.0.124 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-th2sg subsys=endpoint level=info msg="Successful endpoint creation" containerID=1450bf0b53 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=57 identity=49053 ipv4=10.0.0.124 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-th2sg subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=947cdab149 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=976 identity=22400 ipv4=10.0.0.14 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=947cdab149 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=976 identity=22400 ipv4=10.0.0.14 ipv6= k8sPodName=monitoring/loki-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.197 11a718e4-8dbb-45fe-bf0c-bea61ff537ca default }" containerID=baab4dba71ffc4634d55560cc2be99e03fdd0b912726e6aa40e21be218b6481a datapathConfiguration="&{false false false false false }" interface=lxc054c9d66b376 k8sPodName=openstack/memcached-memcached-6479589586-kj8rk labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=baab4dba71 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1579 ipv4=10.0.0.197 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-kj8rk subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=baab4dba71 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1579 identityLabels="k8s:application=memcached,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=memcached" ipv4=10.0.0.197 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-kj8rk subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=memcached;k8s:component=server;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=memcached;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=baab4dba71 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1579 identity=52944 identityLabels="k8s:application=memcached,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=memcached" ipv4=10.0.0.197 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-kj8rk oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=baab4dba71 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1579 identity=52944 ipv4=10.0.0.197 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-kj8rk subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=baab4dba71 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1579 identity=52944 ipv4=10.0.0.197 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-kj8rk subsys=endpoint level=info msg="Successful endpoint creation" containerID=baab4dba71 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1579 identity=52944 ipv4=10.0.0.197 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-kj8rk subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.171 c52b0469-d104-458a-bd9b-295783496f3a default }" containerID=1f2c68d5d998f49f6fa61d6322291f0b09be8136a49482b68f5e3c53210606a0 datapathConfiguration="&{false false false false false }" interface=lxc75e872155a33 k8sPodName=local-path-storage/helper-pod-create-pvc-6656f5f7-b75e-4e56-8743-d5b428b52d0d labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1f2c68d5d9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1531 ipv4=10.0.0.171 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-6656f5f7-b75e-4e56-8743-d5b428b52d0d subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1f2c68d5d9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1531 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.171 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-6656f5f7-b75e-4e56-8743-d5b428b52d0d subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1f2c68d5d9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1531 identity=15841 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.171 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-6656f5f7-b75e-4e56-8743-d5b428b52d0d oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1f2c68d5d9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1531 identity=15841 ipv4=10.0.0.171 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-6656f5f7-b75e-4e56-8743-d5b428b52d0d subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=1f2c68d5d9 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1531 identity=15841 ipv4=10.0.0.171 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-6656f5f7-b75e-4e56-8743-d5b428b52d0d subsys=endpoint level=info msg="Successful endpoint creation" containerID=1f2c68d5d9 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1531 identity=15841 ipv4=10.0.0.171 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-6656f5f7-b75e-4e56-8743-d5b428b52d0d subsys=daemon level=info msg="Delete endpoint request" containerID=1f2c68d5d9 endpointID=1531 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-6656f5f7-b75e-4e56-8743-d5b428b52d0d subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=1f2c68d5d9 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1531 identity=15841 ipv4=10.0.0.171 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-6656f5f7-b75e-4e56-8743-d5b428b52d0d subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.133 9015990b-1f6a-4a8c-8e5a-bbdda6b73335 default }" containerID=a35ee47400a9c0275bb3d41fa380ead4db368c071c62fcb3fe3c62b1094de353 datapathConfiguration="&{false false false false false }" interface=lxca99f84a87c7d k8sPodName=openstack/rabbitmq-keystone-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a35ee47400 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1785 ipv4=10.0.0.133 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a35ee47400 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1785 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-keystone,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0" ipv4=10.0.0.133 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-keystone;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=a35ee47400 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1785 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.133 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=a35ee47400 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1785 identity=20593 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-keystone,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0" ipv4=10.0.0.133 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a35ee47400 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1785 identity=20593 ipv4=10.0.0.133 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a35ee47400 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1785 identity=20593 ipv4=10.0.0.133 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=a35ee47400 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1785 identity=20593 ipv4=10.0.0.133 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.34 0ac1558b-9117-4082-b494-9bb341a0e2e8 default }" containerID=0e3140c6567cb3bbbde055f142cd33d429747e13453514ea5c2d56c6470e7d25 datapathConfiguration="&{false false false false false }" interface=lxcbd1162d02c86 k8sPodName=openstack/keystone-api-756fd495cd-qkbbb labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0e3140c656 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3786 ipv4=10.0.0.34 ipv6= k8sPodName=openstack/keystone-api-756fd495cd-qkbbb subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0e3140c656 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3786 identityLabels="k8s:application=keystone,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=keystone" ipv4=10.0.0.34 ipv6= k8sPodName=openstack/keystone-api-756fd495cd-qkbbb subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0e3140c656 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3786 identity=29715 identityLabels="k8s:application=keystone,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=keystone" ipv4=10.0.0.34 ipv6= k8sPodName=openstack/keystone-api-756fd495cd-qkbbb oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0e3140c656 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3786 identity=29715 ipv4=10.0.0.34 ipv6= k8sPodName=openstack/keystone-api-756fd495cd-qkbbb subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.5 329d18f1-dc52-4062-a334-901b62f009d0 default }" containerID=2a13d906714c3f3d73e32884df7fbc282e2b30d038ffa8161e69c0e5f26295df datapathConfiguration="&{false false false false false }" interface=lxcc5fd6a096885 k8sPodName=openstack/keystone-credential-setup-xtwbx labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2a13d90671 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=681 ipv4=10.0.0.5 ipv6= k8sPodName=openstack/keystone-credential-setup-xtwbx subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2a13d90671 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=681 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=23d847de-a866-4093-b915-eb79dbc6704a,k8s:batch.kubernetes.io/job-name=keystone-credential-setup,k8s:component=credential-setup,k8s:controller-uid=23d847de-a866-4093-b915-eb79dbc6704a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-credential-setup,k8s:release_group=keystone" ipv4=10.0.0.5 ipv6= k8sPodName=openstack/keystone-credential-setup-xtwbx subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=23d847de-a866-4093-b915-eb79dbc6704a;k8s:batch.kubernetes.io/job-name=keystone-credential-setup;k8s:component=credential-setup;k8s:controller-uid=23d847de-a866-4093-b915-eb79dbc6704a;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-credential-setup;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2a13d90671 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=681 identity=43479 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=23d847de-a866-4093-b915-eb79dbc6704a,k8s:batch.kubernetes.io/job-name=keystone-credential-setup,k8s:component=credential-setup,k8s:controller-uid=23d847de-a866-4093-b915-eb79dbc6704a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-credential-setup,k8s:release_group=keystone" ipv4=10.0.0.5 ipv6= k8sPodName=openstack/keystone-credential-setup-xtwbx oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2a13d90671 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=681 identity=43479 ipv4=10.0.0.5 ipv6= k8sPodName=openstack/keystone-credential-setup-xtwbx subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=0e3140c656 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3786 identity=29715 ipv4=10.0.0.34 ipv6= k8sPodName=openstack/keystone-api-756fd495cd-qkbbb subsys=endpoint level=info msg="Successful endpoint creation" containerID=0e3140c656 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3786 identity=29715 ipv4=10.0.0.34 ipv6= k8sPodName=openstack/keystone-api-756fd495cd-qkbbb subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=2a13d90671 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=681 identity=43479 ipv4=10.0.0.5 ipv6= k8sPodName=openstack/keystone-credential-setup-xtwbx subsys=endpoint level=info msg="Successful endpoint creation" containerID=2a13d90671 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=681 identity=43479 ipv4=10.0.0.5 ipv6= k8sPodName=openstack/keystone-credential-setup-xtwbx subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=2a13d90671 endpointID=681 k8sNamespace=openstack k8sPodName=keystone-credential-setup-xtwbx subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=23d847de-a866-4093-b915-eb79dbc6704a k8s:batch.kubernetes.io/job-name=keystone-credential-setup k8s:component=credential-setup k8s:controller-uid=23d847de-a866-4093-b915-eb79dbc6704a k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-credential-setup k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=2a13d90671 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=681 identity=43479 ipv4=10.0.0.5 ipv6= k8sPodName=openstack/keystone-credential-setup-xtwbx subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.156 13f9865c-639e-4c06-839c-af74b144c1a0 default }" containerID=a858c5cfd284a60feb640e372681d439b5f91b6e4b01810dd8a38dd486cf459b datapathConfiguration="&{false false false false false }" interface=lxcc2d0b7fd7c6a k8sPodName=openstack/keystone-db-init-8qbp2 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a858c5cfd2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1331 ipv4=10.0.0.156 ipv6= k8sPodName=openstack/keystone-db-init-8qbp2 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a858c5cfd2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1331 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=fd291da2-dd0f-4ae2-997a-c516e1ac7284,k8s:batch.kubernetes.io/job-name=keystone-db-init,k8s:component=db-init,k8s:controller-uid=fd291da2-dd0f-4ae2-997a-c516e1ac7284,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-init,k8s:release_group=keystone" ipv4=10.0.0.156 ipv6= k8sPodName=openstack/keystone-db-init-8qbp2 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=a858c5cfd2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1331 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.156 ipv6= k8sPodName=openstack/keystone-db-init-8qbp2 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=fd291da2-dd0f-4ae2-997a-c516e1ac7284;k8s:batch.kubernetes.io/job-name=keystone-db-init;k8s:component=db-init;k8s:controller-uid=fd291da2-dd0f-4ae2-997a-c516e1ac7284;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-db-init;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a858c5cfd2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1331 identity=25026 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=fd291da2-dd0f-4ae2-997a-c516e1ac7284,k8s:batch.kubernetes.io/job-name=keystone-db-init,k8s:component=db-init,k8s:controller-uid=fd291da2-dd0f-4ae2-997a-c516e1ac7284,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-init,k8s:release_group=keystone" ipv4=10.0.0.156 ipv6= k8sPodName=openstack/keystone-db-init-8qbp2 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a858c5cfd2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1331 identity=25026 ipv4=10.0.0.156 ipv6= k8sPodName=openstack/keystone-db-init-8qbp2 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a858c5cfd2 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1331 identity=25026 ipv4=10.0.0.156 ipv6= k8sPodName=openstack/keystone-db-init-8qbp2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=a858c5cfd2 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1331 identity=25026 ipv4=10.0.0.156 ipv6= k8sPodName=openstack/keystone-db-init-8qbp2 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=a858c5cfd2 endpointID=1331 k8sNamespace=openstack k8sPodName=keystone-db-init-8qbp2 subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=fd291da2-dd0f-4ae2-997a-c516e1ac7284 k8s:batch.kubernetes.io/job-name=keystone-db-init k8s:component=db-init k8s:controller-uid=fd291da2-dd0f-4ae2-997a-c516e1ac7284 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-db-init k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=a858c5cfd2 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1331 identity=25026 ipv4=10.0.0.156 ipv6= k8sPodName=openstack/keystone-db-init-8qbp2 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.56 6eadb449-3634-4fa3-b3e5-b6308b8dfe17 default }" containerID=8617f4e30e61305fd0253034b4928122fcb99bc8a1f96c9de5835296d1e441e2 datapathConfiguration="&{false false false false false }" interface=lxc7a946f1c3531 k8sPodName=openstack/keystone-fernet-setup-p2zbv labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8617f4e30e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=955 ipv4=10.0.0.56 ipv6= k8sPodName=openstack/keystone-fernet-setup-p2zbv subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8617f4e30e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=955 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=f0d49332-fc9c-4314-a750-4c091eac0d73,k8s:batch.kubernetes.io/job-name=keystone-fernet-setup,k8s:component=fernet-setup,k8s:controller-uid=f0d49332-fc9c-4314-a750-4c091eac0d73,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-setup,k8s:release_group=keystone" ipv4=10.0.0.56 ipv6= k8sPodName=openstack/keystone-fernet-setup-p2zbv subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=f0d49332-fc9c-4314-a750-4c091eac0d73;k8s:batch.kubernetes.io/job-name=keystone-fernet-setup;k8s:component=fernet-setup;k8s:controller-uid=f0d49332-fc9c-4314-a750-4c091eac0d73;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-fernet-setup;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8617f4e30e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=955 identity=62843 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=f0d49332-fc9c-4314-a750-4c091eac0d73,k8s:batch.kubernetes.io/job-name=keystone-fernet-setup,k8s:component=fernet-setup,k8s:controller-uid=f0d49332-fc9c-4314-a750-4c091eac0d73,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-setup,k8s:release_group=keystone" ipv4=10.0.0.56 ipv6= k8sPodName=openstack/keystone-fernet-setup-p2zbv oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8617f4e30e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=955 identity=62843 ipv4=10.0.0.56 ipv6= k8sPodName=openstack/keystone-fernet-setup-p2zbv subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=8617f4e30e datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=955 identity=62843 ipv4=10.0.0.56 ipv6= k8sPodName=openstack/keystone-fernet-setup-p2zbv subsys=endpoint level=info msg="Successful endpoint creation" containerID=8617f4e30e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=955 identity=62843 ipv4=10.0.0.56 ipv6= k8sPodName=openstack/keystone-fernet-setup-p2zbv subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=8617f4e30e endpointID=955 k8sNamespace=openstack k8sPodName=keystone-fernet-setup-p2zbv subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=f0d49332-fc9c-4314-a750-4c091eac0d73 k8s:batch.kubernetes.io/job-name=keystone-fernet-setup k8s:component=fernet-setup k8s:controller-uid=f0d49332-fc9c-4314-a750-4c091eac0d73 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-fernet-setup k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=8617f4e30e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=955 identity=62843 ipv4=10.0.0.56 ipv6= k8sPodName=openstack/keystone-fernet-setup-p2zbv subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.254 b350c027-1746-48e9-94e4-b72d08ba274c default }" containerID=f26986207b78ef89be80b6f34b7d683b7bfe3867c1cba0774a2cd5560c284a04 datapathConfiguration="&{false false false false false }" interface=lxc652db355e20f k8sPodName=openstack/keystone-db-sync-bll7b labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f26986207b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2301 ipv4=10.0.0.254 ipv6= k8sPodName=openstack/keystone-db-sync-bll7b subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f26986207b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2301 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=251e4a84-14aa-48a5-8a7c-63abed2c7b02,k8s:batch.kubernetes.io/job-name=keystone-db-sync,k8s:component=db-sync,k8s:controller-uid=251e4a84-14aa-48a5-8a7c-63abed2c7b02,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-sync,k8s:release_group=keystone" ipv4=10.0.0.254 ipv6= k8sPodName=openstack/keystone-db-sync-bll7b subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=251e4a84-14aa-48a5-8a7c-63abed2c7b02;k8s:batch.kubernetes.io/job-name=keystone-db-sync;k8s:component=db-sync;k8s:controller-uid=251e4a84-14aa-48a5-8a7c-63abed2c7b02;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-db-sync;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f26986207b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2301 identity=45356 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=251e4a84-14aa-48a5-8a7c-63abed2c7b02,k8s:batch.kubernetes.io/job-name=keystone-db-sync,k8s:component=db-sync,k8s:controller-uid=251e4a84-14aa-48a5-8a7c-63abed2c7b02,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-sync,k8s:release_group=keystone" ipv4=10.0.0.254 ipv6= k8sPodName=openstack/keystone-db-sync-bll7b oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=f26986207b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2301 identity=45356 ipv4=10.0.0.254 ipv6= k8sPodName=openstack/keystone-db-sync-bll7b subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f26986207b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2301 identity=45356 ipv4=10.0.0.254 ipv6= k8sPodName=openstack/keystone-db-sync-bll7b subsys=endpoint level=info msg="Successful endpoint creation" containerID=f26986207b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2301 identity=45356 ipv4=10.0.0.254 ipv6= k8sPodName=openstack/keystone-db-sync-bll7b subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=f26986207b endpointID=2301 k8sNamespace=openstack k8sPodName=keystone-db-sync-bll7b subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=251e4a84-14aa-48a5-8a7c-63abed2c7b02 k8s:batch.kubernetes.io/job-name=keystone-db-sync k8s:component=db-sync k8s:controller-uid=251e4a84-14aa-48a5-8a7c-63abed2c7b02 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-db-sync k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=f26986207b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2301 identity=45356 ipv4=10.0.0.254 ipv6= k8sPodName=openstack/keystone-db-sync-bll7b subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.26 a5f7a3d9-3de8-47da-9c13-e48aca155aa5 default }" containerID=3b0ac4d5c3bac61730cb5f6fbd32bfdff8f769d3eb30953b4cfb8c21d7282bb9 datapathConfiguration="&{false false false false false }" interface=lxc941ce3ef7757 k8sPodName=openstack/keystone-rabbit-init-rtsh6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3b0ac4d5c3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3909 ipv4=10.0.0.26 ipv6= k8sPodName=openstack/keystone-rabbit-init-rtsh6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3b0ac4d5c3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3909 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=0831278e-1744-40ca-80f4-2a1d1c8bfd7c,k8s:batch.kubernetes.io/job-name=keystone-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=0831278e-1744-40ca-80f4-2a1d1c8bfd7c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-rabbit-init,k8s:release_group=keystone" ipv4=10.0.0.26 ipv6= k8sPodName=openstack/keystone-rabbit-init-rtsh6 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=0831278e-1744-40ca-80f4-2a1d1c8bfd7c;k8s:batch.kubernetes.io/job-name=keystone-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=0831278e-1744-40ca-80f4-2a1d1c8bfd7c;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-rabbit-init;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3b0ac4d5c3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3909 identity=45630 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=0831278e-1744-40ca-80f4-2a1d1c8bfd7c,k8s:batch.kubernetes.io/job-name=keystone-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=0831278e-1744-40ca-80f4-2a1d1c8bfd7c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-rabbit-init,k8s:release_group=keystone" ipv4=10.0.0.26 ipv6= k8sPodName=openstack/keystone-rabbit-init-rtsh6 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=3b0ac4d5c3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3909 identity=45630 ipv4=10.0.0.26 ipv6= k8sPodName=openstack/keystone-rabbit-init-rtsh6 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=3b0ac4d5c3 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3909 identity=45630 ipv4=10.0.0.26 ipv6= k8sPodName=openstack/keystone-rabbit-init-rtsh6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=3b0ac4d5c3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3909 identity=45630 ipv4=10.0.0.26 ipv6= k8sPodName=openstack/keystone-rabbit-init-rtsh6 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=3b0ac4d5c3 endpointID=3909 k8sNamespace=openstack k8sPodName=keystone-rabbit-init-rtsh6 subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=0831278e-1744-40ca-80f4-2a1d1c8bfd7c k8s:batch.kubernetes.io/job-name=keystone-rabbit-init k8s:component=rabbit-init k8s:controller-uid=0831278e-1744-40ca-80f4-2a1d1c8bfd7c k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-rabbit-init k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=3b0ac4d5c3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3909 identity=45630 ipv4=10.0.0.26 ipv6= k8sPodName=openstack/keystone-rabbit-init-rtsh6 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.42 6804270c-a56f-45b4-aac4-e05e658dbfa0 default }" containerID=71c885bab4dc0b1f1edf87f26e8a971191312756ad578014151154d0487f8b00 datapathConfiguration="&{false false false false false }" interface=lxc72e2658c0870 k8sPodName=openstack/keystone-domain-manage-w5qdr labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=71c885bab4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2870 ipv4=10.0.0.42 ipv6= k8sPodName=openstack/keystone-domain-manage-w5qdr subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=71c885bab4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2870 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=bc63c88a-3446-4a2d-ad33-e60f6dfe51a1,k8s:batch.kubernetes.io/job-name=keystone-domain-manage,k8s:component=domain-manage,k8s:controller-uid=bc63c88a-3446-4a2d-ad33-e60f6dfe51a1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-domain-manage,k8s:release_group=keystone" ipv4=10.0.0.42 ipv6= k8sPodName=openstack/keystone-domain-manage-w5qdr subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=71c885bab4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2870 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.42 ipv6= k8sPodName=openstack/keystone-domain-manage-w5qdr line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=bc63c88a-3446-4a2d-ad33-e60f6dfe51a1;k8s:batch.kubernetes.io/job-name=keystone-domain-manage;k8s:component=domain-manage;k8s:controller-uid=bc63c88a-3446-4a2d-ad33-e60f6dfe51a1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-domain-manage;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=71c885bab4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2870 identity=4326 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=bc63c88a-3446-4a2d-ad33-e60f6dfe51a1,k8s:batch.kubernetes.io/job-name=keystone-domain-manage,k8s:component=domain-manage,k8s:controller-uid=bc63c88a-3446-4a2d-ad33-e60f6dfe51a1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-domain-manage,k8s:release_group=keystone" ipv4=10.0.0.42 ipv6= k8sPodName=openstack/keystone-domain-manage-w5qdr oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=71c885bab4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2870 identity=4326 ipv4=10.0.0.42 ipv6= k8sPodName=openstack/keystone-domain-manage-w5qdr subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=71c885bab4 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2870 identity=4326 ipv4=10.0.0.42 ipv6= k8sPodName=openstack/keystone-domain-manage-w5qdr subsys=endpoint level=info msg="Successful endpoint creation" containerID=71c885bab4 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2870 identity=4326 ipv4=10.0.0.42 ipv6= k8sPodName=openstack/keystone-domain-manage-w5qdr subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=71c885bab4 endpointID=2870 k8sNamespace=openstack k8sPodName=keystone-domain-manage-w5qdr subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=bc63c88a-3446-4a2d-ad33-e60f6dfe51a1 k8s:batch.kubernetes.io/job-name=keystone-domain-manage k8s:component=domain-manage k8s:controller-uid=bc63c88a-3446-4a2d-ad33-e60f6dfe51a1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-domain-manage k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=71c885bab4 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2870 identity=4326 ipv4=10.0.0.42 ipv6= k8sPodName=openstack/keystone-domain-manage-w5qdr subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.82 f83dc921-236f-4db6-aab0-f46b43ce2637 default }" containerID=dbb3ae5c1faa7e6e48401047199996788f8d0e6d1c7ad2271b20b810ddb60b1c datapathConfiguration="&{false false false false false }" interface=lxc82449e5d7383 k8sPodName=openstack/keystone-bootstrap-k2hrb labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=dbb3ae5c1f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3759 ipv4=10.0.0.82 ipv6= k8sPodName=openstack/keystone-bootstrap-k2hrb subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=dbb3ae5c1f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3759 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=25629c3f-a552-4cb0-866c-3443f3a81df9,k8s:batch.kubernetes.io/job-name=keystone-bootstrap,k8s:component=bootstrap,k8s:controller-uid=25629c3f-a552-4cb0-866c-3443f3a81df9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-bootstrap,k8s:release_group=keystone" ipv4=10.0.0.82 ipv6= k8sPodName=openstack/keystone-bootstrap-k2hrb subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=25629c3f-a552-4cb0-866c-3443f3a81df9;k8s:batch.kubernetes.io/job-name=keystone-bootstrap;k8s:component=bootstrap;k8s:controller-uid=25629c3f-a552-4cb0-866c-3443f3a81df9;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-bootstrap;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=dbb3ae5c1f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3759 identity=35143 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=25629c3f-a552-4cb0-866c-3443f3a81df9,k8s:batch.kubernetes.io/job-name=keystone-bootstrap,k8s:component=bootstrap,k8s:controller-uid=25629c3f-a552-4cb0-866c-3443f3a81df9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-bootstrap,k8s:release_group=keystone" ipv4=10.0.0.82 ipv6= k8sPodName=openstack/keystone-bootstrap-k2hrb oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=dbb3ae5c1f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3759 identity=35143 ipv4=10.0.0.82 ipv6= k8sPodName=openstack/keystone-bootstrap-k2hrb subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=dbb3ae5c1f datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3759 identity=35143 ipv4=10.0.0.82 ipv6= k8sPodName=openstack/keystone-bootstrap-k2hrb subsys=endpoint level=info msg="Successful endpoint creation" containerID=dbb3ae5c1f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3759 identity=35143 ipv4=10.0.0.82 ipv6= k8sPodName=openstack/keystone-bootstrap-k2hrb subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=dbb3ae5c1f endpointID=3759 k8sNamespace=openstack k8sPodName=keystone-bootstrap-k2hrb subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=25629c3f-a552-4cb0-866c-3443f3a81df9 k8s:batch.kubernetes.io/job-name=keystone-bootstrap k8s:component=bootstrap k8s:controller-uid=25629c3f-a552-4cb0-866c-3443f3a81df9 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-bootstrap k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=dbb3ae5c1f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3759 identity=35143 ipv4=10.0.0.82 ipv6= k8sPodName=openstack/keystone-bootstrap-k2hrb subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.138 d49dab4a-f62c-4754-9e9e-cdcdcc362cae default }" containerID=b34b35e65977f6a5a416194ee711ea0e386dafe9138275b8d51636a10555062e datapathConfiguration="&{false false false false false }" interface=lxc90b7556cfdab k8sPodName=local-path-storage/helper-pod-create-pvc-ef3972b1-e3b4-417b-bd36-ea719d56ae92 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b34b35e659 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=151 ipv4=10.0.0.138 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-ef3972b1-e3b4-417b-bd36-ea719d56ae92 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b34b35e659 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=151 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.138 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-ef3972b1-e3b4-417b-bd36-ea719d56ae92 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b34b35e659 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=151 identity=15841 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.138 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-ef3972b1-e3b4-417b-bd36-ea719d56ae92 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b34b35e659 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=151 identity=15841 ipv4=10.0.0.138 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-ef3972b1-e3b4-417b-bd36-ea719d56ae92 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b34b35e659 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=151 identity=15841 ipv4=10.0.0.138 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-ef3972b1-e3b4-417b-bd36-ea719d56ae92 subsys=endpoint level=info msg="Successful endpoint creation" containerID=b34b35e659 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=151 identity=15841 ipv4=10.0.0.138 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-ef3972b1-e3b4-417b-bd36-ea719d56ae92 subsys=daemon level=info msg="Delete endpoint request" containerID=b34b35e659 endpointID=151 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-ef3972b1-e3b4-417b-bd36-ea719d56ae92 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=b34b35e659 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=151 identity=15841 ipv4=10.0.0.138 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-ef3972b1-e3b4-417b-bd36-ea719d56ae92 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.136 9bd95a76-d486-49a2-8120-086148c5bf90 default }" containerID=f243277961a46db37b238176ab69341403c5c08369351e6281a23c3a1fbd476e datapathConfiguration="&{false false false false false }" interface=lxc4ed132c07c10 k8sPodName=openstack/rabbitmq-barbican-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f243277961 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1362 ipv4=10.0.0.136 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f243277961 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1362 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-barbican,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0" ipv4=10.0.0.136 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-barbican;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f243277961 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1362 identity=52417 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-barbican,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0" ipv4=10.0.0.136 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f243277961 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1362 identity=52417 ipv4=10.0.0.136 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=f243277961 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1362 identity=52417 ipv4=10.0.0.136 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=f243277961 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1362 identity=52417 ipv4=10.0.0.136 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Conntrack garbage collector interval recalculated" deleteRatio=0.035379495989286726 newInterval=11m15s subsys=map-ct level=info msg="Create endpoint request" addressing="&{10.0.0.125 4f1a116e-aea2-4513-8c13-7a01e9289a53 default }" containerID=c677213f8aed083d3c758a1091685bb1f6d4613051d69aead62a6fb5c7afd7d6 datapathConfiguration="&{false false false false false }" interface=lxc83b470010c30 k8sPodName=openstack/barbican-api-9b55dbd9f-btd7q labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c677213f8a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1994 ipv4=10.0.0.125 ipv6= k8sPodName=openstack/barbican-api-9b55dbd9f-btd7q subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c677213f8a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1994 identityLabels="k8s:application=barbican,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=barbican" ipv4=10.0.0.125 ipv6= k8sPodName=openstack/barbican-api-9b55dbd9f-btd7q subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=barbican;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=c677213f8a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1994 identity=52001 identityLabels="k8s:application=barbican,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=barbican" ipv4=10.0.0.125 ipv6= k8sPodName=openstack/barbican-api-9b55dbd9f-btd7q oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c677213f8a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1994 identity=52001 ipv4=10.0.0.125 ipv6= k8sPodName=openstack/barbican-api-9b55dbd9f-btd7q subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.219 f3a50b7b-3075-4c49-86a5-b2d848259639 default }" containerID=86e8c69c0a40343149e348c43e37c6a6df9c061faffc56f75145e7cfa1f63960 datapathConfiguration="&{false false false false false }" interface=lxcc8f0b591e1d1 k8sPodName=openstack/barbican-db-init-vq5z9 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=86e8c69c0a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3314 ipv4=10.0.0.219 ipv6= k8sPodName=openstack/barbican-db-init-vq5z9 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=86e8c69c0a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3314 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=4880b495-924e-4bfe-b17e-474e703ef08f,k8s:batch.kubernetes.io/job-name=barbican-db-init,k8s:component=db-init,k8s:controller-uid=4880b495-924e-4bfe-b17e-474e703ef08f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-init,k8s:release_group=barbican" ipv4=10.0.0.219 ipv6= k8sPodName=openstack/barbican-db-init-vq5z9 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=4880b495-924e-4bfe-b17e-474e703ef08f;k8s:batch.kubernetes.io/job-name=barbican-db-init;k8s:component=db-init;k8s:controller-uid=4880b495-924e-4bfe-b17e-474e703ef08f;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-db-init;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=86e8c69c0a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3314 identity=10059 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=4880b495-924e-4bfe-b17e-474e703ef08f,k8s:batch.kubernetes.io/job-name=barbican-db-init,k8s:component=db-init,k8s:controller-uid=4880b495-924e-4bfe-b17e-474e703ef08f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-init,k8s:release_group=barbican" ipv4=10.0.0.219 ipv6= k8sPodName=openstack/barbican-db-init-vq5z9 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=86e8c69c0a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3314 identity=10059 ipv4=10.0.0.219 ipv6= k8sPodName=openstack/barbican-db-init-vq5z9 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c677213f8a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1994 identity=52001 ipv4=10.0.0.125 ipv6= k8sPodName=openstack/barbican-api-9b55dbd9f-btd7q subsys=endpoint level=info msg="Successful endpoint creation" containerID=c677213f8a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1994 identity=52001 ipv4=10.0.0.125 ipv6= k8sPodName=openstack/barbican-api-9b55dbd9f-btd7q subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=86e8c69c0a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3314 identity=10059 ipv4=10.0.0.219 ipv6= k8sPodName=openstack/barbican-db-init-vq5z9 subsys=endpoint level=info msg="Successful endpoint creation" containerID=86e8c69c0a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3314 identity=10059 ipv4=10.0.0.219 ipv6= k8sPodName=openstack/barbican-db-init-vq5z9 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=86e8c69c0a endpointID=3314 k8sNamespace=openstack k8sPodName=barbican-db-init-vq5z9 subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=4880b495-924e-4bfe-b17e-474e703ef08f k8s:batch.kubernetes.io/job-name=barbican-db-init k8s:component=db-init k8s:controller-uid=4880b495-924e-4bfe-b17e-474e703ef08f k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-db-init k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=86e8c69c0a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3314 identity=10059 ipv4=10.0.0.219 ipv6= k8sPodName=openstack/barbican-db-init-vq5z9 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.95 f015c5f1-6720-47f9-a842-202130559e11 default }" containerID=e877143f0e70c76cbbce9e68d0e74eb293f89227e1f49beca146919236b12d1f datapathConfiguration="&{false false false false false }" interface=lxc02abb18f79f1 k8sPodName=openstack/barbican-db-sync-dj87z labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e877143f0e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=743 ipv4=10.0.0.95 ipv6= k8sPodName=openstack/barbican-db-sync-dj87z subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e877143f0e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=743 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=395c1e2a-ba7b-44bd-8d5a-a6965eae23d4,k8s:batch.kubernetes.io/job-name=barbican-db-sync,k8s:component=db-sync,k8s:controller-uid=395c1e2a-ba7b-44bd-8d5a-a6965eae23d4,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-sync,k8s:release_group=barbican" ipv4=10.0.0.95 ipv6= k8sPodName=openstack/barbican-db-sync-dj87z subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=e877143f0e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=743 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.95 ipv6= k8sPodName=openstack/barbican-db-sync-dj87z line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=395c1e2a-ba7b-44bd-8d5a-a6965eae23d4;k8s:batch.kubernetes.io/job-name=barbican-db-sync;k8s:component=db-sync;k8s:controller-uid=395c1e2a-ba7b-44bd-8d5a-a6965eae23d4;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-db-sync;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e877143f0e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=743 identity=65086 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=395c1e2a-ba7b-44bd-8d5a-a6965eae23d4,k8s:batch.kubernetes.io/job-name=barbican-db-sync,k8s:component=db-sync,k8s:controller-uid=395c1e2a-ba7b-44bd-8d5a-a6965eae23d4,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-sync,k8s:release_group=barbican" ipv4=10.0.0.95 ipv6= k8sPodName=openstack/barbican-db-sync-dj87z oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e877143f0e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=743 identity=65086 ipv4=10.0.0.95 ipv6= k8sPodName=openstack/barbican-db-sync-dj87z subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e877143f0e datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=743 identity=65086 ipv4=10.0.0.95 ipv6= k8sPodName=openstack/barbican-db-sync-dj87z subsys=endpoint level=info msg="Successful endpoint creation" containerID=e877143f0e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=743 identity=65086 ipv4=10.0.0.95 ipv6= k8sPodName=openstack/barbican-db-sync-dj87z subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=e877143f0e endpointID=743 k8sNamespace=openstack k8sPodName=barbican-db-sync-dj87z subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=395c1e2a-ba7b-44bd-8d5a-a6965eae23d4 k8s:batch.kubernetes.io/job-name=barbican-db-sync k8s:component=db-sync k8s:controller-uid=395c1e2a-ba7b-44bd-8d5a-a6965eae23d4 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-db-sync k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=e877143f0e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=743 identity=65086 ipv4=10.0.0.95 ipv6= k8sPodName=openstack/barbican-db-sync-dj87z subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.157 d53bc505-ebf3-42a0-a249-af91d08a7d2d default }" containerID=7c29912fe9dfe21963186a3ae63aa5160c4c17812719696104e1b403ab9392c6 datapathConfiguration="&{false false false false false }" interface=lxce3ef78eb0df6 k8sPodName=openstack/barbican-rabbit-init-lfvjg labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7c29912fe9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=421 ipv4=10.0.0.157 ipv6= k8sPodName=openstack/barbican-rabbit-init-lfvjg subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7c29912fe9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=421 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=a395a961-830a-4d2c-9162-915d29e2ab68,k8s:batch.kubernetes.io/job-name=barbican-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=a395a961-830a-4d2c-9162-915d29e2ab68,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-rabbit-init,k8s:release_group=barbican" ipv4=10.0.0.157 ipv6= k8sPodName=openstack/barbican-rabbit-init-lfvjg subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=a395a961-830a-4d2c-9162-915d29e2ab68;k8s:batch.kubernetes.io/job-name=barbican-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=a395a961-830a-4d2c-9162-915d29e2ab68;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-rabbit-init;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7c29912fe9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=421 identity=29055 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=a395a961-830a-4d2c-9162-915d29e2ab68,k8s:batch.kubernetes.io/job-name=barbican-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=a395a961-830a-4d2c-9162-915d29e2ab68,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-rabbit-init,k8s:release_group=barbican" ipv4=10.0.0.157 ipv6= k8sPodName=openstack/barbican-rabbit-init-lfvjg oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=7c29912fe9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=421 identity=29055 ipv4=10.0.0.157 ipv6= k8sPodName=openstack/barbican-rabbit-init-lfvjg subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=7c29912fe9 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=421 identity=29055 ipv4=10.0.0.157 ipv6= k8sPodName=openstack/barbican-rabbit-init-lfvjg subsys=endpoint level=info msg="Successful endpoint creation" containerID=7c29912fe9 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=421 identity=29055 ipv4=10.0.0.157 ipv6= k8sPodName=openstack/barbican-rabbit-init-lfvjg subsys=daemon level=info msg="Delete endpoint request" containerID=7c29912fe9 endpointID=421 k8sNamespace=openstack k8sPodName=barbican-rabbit-init-lfvjg subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=a395a961-830a-4d2c-9162-915d29e2ab68 k8s:batch.kubernetes.io/job-name=barbican-rabbit-init k8s:component=rabbit-init k8s:controller-uid=a395a961-830a-4d2c-9162-915d29e2ab68 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-rabbit-init k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=7c29912fe9 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=421 identity=29055 ipv4=10.0.0.157 ipv6= k8sPodName=openstack/barbican-rabbit-init-lfvjg subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.47 1afd08c0-dca1-4bfd-86bc-a9b24ead676d default }" containerID=d7bbf3d8ea11f31048936d41054d8300bcebd9c800a0dfb4b228ae61226aac7a datapathConfiguration="&{false false false false false }" interface=lxc6c50145960ae k8sPodName=openstack/barbican-ks-service-zm7jc labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d7bbf3d8ea datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1228 ipv4=10.0.0.47 ipv6= k8sPodName=openstack/barbican-ks-service-zm7jc subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d7bbf3d8ea datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1228 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=a9f2d539-efbe-4bbb-bf77-ea348aeaaff8,k8s:batch.kubernetes.io/job-name=barbican-ks-service,k8s:component=ks-service,k8s:controller-uid=a9f2d539-efbe-4bbb-bf77-ea348aeaaff8,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-service,k8s:release_group=barbican" ipv4=10.0.0.47 ipv6= k8sPodName=openstack/barbican-ks-service-zm7jc subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=a9f2d539-efbe-4bbb-bf77-ea348aeaaff8;k8s:batch.kubernetes.io/job-name=barbican-ks-service;k8s:component=ks-service;k8s:controller-uid=a9f2d539-efbe-4bbb-bf77-ea348aeaaff8;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-service;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d7bbf3d8ea datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1228 identity=40520 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=a9f2d539-efbe-4bbb-bf77-ea348aeaaff8,k8s:batch.kubernetes.io/job-name=barbican-ks-service,k8s:component=ks-service,k8s:controller-uid=a9f2d539-efbe-4bbb-bf77-ea348aeaaff8,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-service,k8s:release_group=barbican" ipv4=10.0.0.47 ipv6= k8sPodName=openstack/barbican-ks-service-zm7jc oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d7bbf3d8ea datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1228 identity=40520 ipv4=10.0.0.47 ipv6= k8sPodName=openstack/barbican-ks-service-zm7jc subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d7bbf3d8ea datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1228 identity=40520 ipv4=10.0.0.47 ipv6= k8sPodName=openstack/barbican-ks-service-zm7jc subsys=endpoint level=info msg="Successful endpoint creation" containerID=d7bbf3d8ea datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1228 identity=40520 ipv4=10.0.0.47 ipv6= k8sPodName=openstack/barbican-ks-service-zm7jc subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=d7bbf3d8ea endpointID=1228 k8sNamespace=openstack k8sPodName=barbican-ks-service-zm7jc subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=a9f2d539-efbe-4bbb-bf77-ea348aeaaff8 k8s:batch.kubernetes.io/job-name=barbican-ks-service k8s:component=ks-service k8s:controller-uid=a9f2d539-efbe-4bbb-bf77-ea348aeaaff8 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-service k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=d7bbf3d8ea datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1228 identity=40520 ipv4=10.0.0.47 ipv6= k8sPodName=openstack/barbican-ks-service-zm7jc subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.67 6381caf1-81e7-4483-b635-96806b1f4e7d default }" containerID=62c6506fb6c17c04a7b0ddc9cbe87e7991d7b3bbf5fbfdc58163b0674acafdc3 datapathConfiguration="&{false false false false false }" interface=lxc8283dec5baa8 k8sPodName=openstack/barbican-ks-endpoints-wkcdd labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=62c6506fb6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2816 ipv4=10.0.0.67 ipv6= k8sPodName=openstack/barbican-ks-endpoints-wkcdd subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=62c6506fb6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2816 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=099a3349-3bf6-46bd-868c-d4f5793a7dfa,k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=099a3349-3bf6-46bd-868c-d4f5793a7dfa,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-endpoints,k8s:release_group=barbican" ipv4=10.0.0.67 ipv6= k8sPodName=openstack/barbican-ks-endpoints-wkcdd subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=099a3349-3bf6-46bd-868c-d4f5793a7dfa;k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=099a3349-3bf6-46bd-868c-d4f5793a7dfa;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-endpoints;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=62c6506fb6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2816 identity=28246 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=099a3349-3bf6-46bd-868c-d4f5793a7dfa,k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=099a3349-3bf6-46bd-868c-d4f5793a7dfa,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-endpoints,k8s:release_group=barbican" ipv4=10.0.0.67 ipv6= k8sPodName=openstack/barbican-ks-endpoints-wkcdd oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=62c6506fb6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2816 identity=28246 ipv4=10.0.0.67 ipv6= k8sPodName=openstack/barbican-ks-endpoints-wkcdd subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=62c6506fb6 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2816 identity=28246 ipv4=10.0.0.67 ipv6= k8sPodName=openstack/barbican-ks-endpoints-wkcdd subsys=endpoint level=info msg="Successful endpoint creation" containerID=62c6506fb6 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2816 identity=28246 ipv4=10.0.0.67 ipv6= k8sPodName=openstack/barbican-ks-endpoints-wkcdd subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=62c6506fb6 endpointID=2816 k8sNamespace=openstack k8sPodName=barbican-ks-endpoints-wkcdd subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=099a3349-3bf6-46bd-868c-d4f5793a7dfa k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=099a3349-3bf6-46bd-868c-d4f5793a7dfa k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-endpoints k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=62c6506fb6 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2816 identity=28246 ipv4=10.0.0.67 ipv6= k8sPodName=openstack/barbican-ks-endpoints-wkcdd subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.55 51dd5673-3da4-48ef-89bc-da7e972babc8 default }" containerID=830fecc8717dc64ee2bd23d42df18a7fcc0bba147cdda653ffc8fef16b05b24d datapathConfiguration="&{false false false false false }" interface=lxcf75bb1143171 k8sPodName=openstack/barbican-ks-user-cvg2f labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=830fecc871 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2207 ipv4=10.0.0.55 ipv6= k8sPodName=openstack/barbican-ks-user-cvg2f subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=830fecc871 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2207 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=f64c53ed-53b2-4b3d-9125-e6acc5df973d,k8s:batch.kubernetes.io/job-name=barbican-ks-user,k8s:component=ks-user,k8s:controller-uid=f64c53ed-53b2-4b3d-9125-e6acc5df973d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-user,k8s:release_group=barbican" ipv4=10.0.0.55 ipv6= k8sPodName=openstack/barbican-ks-user-cvg2f subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=f64c53ed-53b2-4b3d-9125-e6acc5df973d;k8s:batch.kubernetes.io/job-name=barbican-ks-user;k8s:component=ks-user;k8s:controller-uid=f64c53ed-53b2-4b3d-9125-e6acc5df973d;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-user;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=830fecc871 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2207 identity=40973 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=f64c53ed-53b2-4b3d-9125-e6acc5df973d,k8s:batch.kubernetes.io/job-name=barbican-ks-user,k8s:component=ks-user,k8s:controller-uid=f64c53ed-53b2-4b3d-9125-e6acc5df973d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-user,k8s:release_group=barbican" ipv4=10.0.0.55 ipv6= k8sPodName=openstack/barbican-ks-user-cvg2f oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=830fecc871 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2207 identity=40973 ipv4=10.0.0.55 ipv6= k8sPodName=openstack/barbican-ks-user-cvg2f subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=830fecc871 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2207 identity=40973 ipv4=10.0.0.55 ipv6= k8sPodName=openstack/barbican-ks-user-cvg2f subsys=endpoint level=info msg="Successful endpoint creation" containerID=830fecc871 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2207 identity=40973 ipv4=10.0.0.55 ipv6= k8sPodName=openstack/barbican-ks-user-cvg2f subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=830fecc871 endpointID=2207 k8sNamespace=openstack k8sPodName=barbican-ks-user-cvg2f subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=f64c53ed-53b2-4b3d-9125-e6acc5df973d k8s:batch.kubernetes.io/job-name=barbican-ks-user k8s:component=ks-user k8s:controller-uid=f64c53ed-53b2-4b3d-9125-e6acc5df973d k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-user k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=830fecc871 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2207 identity=40973 ipv4=10.0.0.55 ipv6= k8sPodName=openstack/barbican-ks-user-cvg2f subsys=endpoint level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Create endpoint request" addressing="&{10.0.0.244 be28fcf9-deeb-4e9f-a795-936544abb2e2 default }" containerID=d6f372991779cf4b670949612814b26287264f33410a1f9894c86648d28184d6 datapathConfiguration="&{false false false false false }" interface=lxcc1558bd5713c k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-p9xkq labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d6f3729917 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3242 ipv4=10.0.0.244 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-p9xkq subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d6f3729917 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3242 identityLabels="k8s:app=rook-ceph-operator,k8s:helm.sh/chart=rook-ceph-v1.15.9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph,k8s:io.cilium.k8s.namespace.labels.name=rook-ceph,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system,k8s:io.kubernetes.pod.namespace=rook-ceph" ipv4=10.0.0.244 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-p9xkq subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:rook-ceph k8s:io.cilium.k8s.namespace.labels.name:rook-ceph]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app=rook-ceph-operator;k8s:helm.sh/chart=rook-ceph-v1.15.9;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph;k8s:io.cilium.k8s.namespace.labels.name=rook-ceph;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system;k8s:io.kubernetes.pod.namespace=rook-ceph;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d6f3729917 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3242 identity=60660 identityLabels="k8s:app=rook-ceph-operator,k8s:helm.sh/chart=rook-ceph-v1.15.9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph,k8s:io.cilium.k8s.namespace.labels.name=rook-ceph,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system,k8s:io.kubernetes.pod.namespace=rook-ceph" ipv4=10.0.0.244 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-p9xkq oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d6f3729917 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3242 identity=60660 ipv4=10.0.0.244 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-p9xkq subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d6f3729917 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3242 identity=60660 ipv4=10.0.0.244 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-p9xkq subsys=endpoint level=info msg="Successful endpoint creation" containerID=d6f3729917 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3242 identity=60660 ipv4=10.0.0.244 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-p9xkq subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.131 c1fcb980-b13a-4b2a-8b7a-c878f9e9edc7 default }" containerID=96b1b7f8009b0b80967a0d570a02c3181810d7b3064c5b547313c566e12f5b96 datapathConfiguration="&{false false false false false }" interface=lxc6f588811df00 k8sPodName=openstack/rook-ceph-detect-version-fjbxv labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=96b1b7f800 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=373 ipv4=10.0.0.131 ipv6= k8sPodName=openstack/rook-ceph-detect-version-fjbxv subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=96b1b7f800 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=373 identityLabels="k8s:app=rook-ceph-detect-version,k8s:batch.kubernetes.io/controller-uid=b7ac80ae-fa6c-4b74-81c7-cccbed8058e7,k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version,k8s:controller-uid=b7ac80ae-fa6c-4b74-81c7-cccbed8058e7,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=rook-ceph-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.131 ipv6= k8sPodName=openstack/rook-ceph-detect-version-fjbxv subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-detect-version;k8s:batch.kubernetes.io/controller-uid=b7ac80ae-fa6c-4b74-81c7-cccbed8058e7;k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version;k8s:controller-uid=b7ac80ae-fa6c-4b74-81c7-cccbed8058e7;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=rook-ceph-detect-version;k8s:rook-version=v1.15.9;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=96b1b7f800 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=373 identity=15515 identityLabels="k8s:app=rook-ceph-detect-version,k8s:batch.kubernetes.io/controller-uid=b7ac80ae-fa6c-4b74-81c7-cccbed8058e7,k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version,k8s:controller-uid=b7ac80ae-fa6c-4b74-81c7-cccbed8058e7,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=rook-ceph-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.131 ipv6= k8sPodName=openstack/rook-ceph-detect-version-fjbxv oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=96b1b7f800 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=373 identity=15515 ipv4=10.0.0.131 ipv6= k8sPodName=openstack/rook-ceph-detect-version-fjbxv subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=96b1b7f800 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=373 identity=15515 ipv4=10.0.0.131 ipv6= k8sPodName=openstack/rook-ceph-detect-version-fjbxv subsys=endpoint level=info msg="Successful endpoint creation" containerID=96b1b7f800 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=373 identity=15515 ipv4=10.0.0.131 ipv6= k8sPodName=openstack/rook-ceph-detect-version-fjbxv subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=96b1b7f800 endpointID=373 k8sNamespace=openstack k8sPodName=rook-ceph-detect-version-fjbxv subsys=daemon level=info msg="Releasing key" key="[k8s:app=rook-ceph-detect-version k8s:batch.kubernetes.io/controller-uid=b7ac80ae-fa6c-4b74-81c7-cccbed8058e7 k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version k8s:controller-uid=b7ac80ae-fa6c-4b74-81c7-cccbed8058e7 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=rook-ceph-detect-version k8s:rook-version=v1.15.9]" subsys=allocator level=info msg="Removed endpoint" containerID=96b1b7f800 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=373 identity=15515 ipv4=10.0.0.131 ipv6= k8sPodName=openstack/rook-ceph-detect-version-fjbxv subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.137 07728f14-b2ee-4d85-ba0f-f9675b117a23 default }" containerID=ab059e81a3466e9c030d09a818b980dddbdcdb3a5fc88f54de1305a450813e61 datapathConfiguration="&{false false false false false }" interface=lxcb2c67c35fae5 k8sPodName=openstack/ceph-object-controller-detect-version-4zz9h labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ab059e81a3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2482 ipv4=10.0.0.137 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-4zz9h subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ab059e81a3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2482 identityLabels="k8s:app=ceph-object-controller-detect-version,k8s:batch.kubernetes.io/controller-uid=8fb873c0-c9f8-4c5c-85e6-173f7cb0010a,k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version,k8s:controller-uid=8fb873c0-c9f8-4c5c-85e6-173f7cb0010a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=ceph-object-controller-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.137 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-4zz9h subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app=ceph-object-controller-detect-version;k8s:batch.kubernetes.io/controller-uid=8fb873c0-c9f8-4c5c-85e6-173f7cb0010a;k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version;k8s:controller-uid=8fb873c0-c9f8-4c5c-85e6-173f7cb0010a;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=ceph-object-controller-detect-version;k8s:rook-version=v1.15.9;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ab059e81a3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2482 identity=18776 identityLabels="k8s:app=ceph-object-controller-detect-version,k8s:batch.kubernetes.io/controller-uid=8fb873c0-c9f8-4c5c-85e6-173f7cb0010a,k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version,k8s:controller-uid=8fb873c0-c9f8-4c5c-85e6-173f7cb0010a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=ceph-object-controller-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.137 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-4zz9h oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ab059e81a3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2482 identity=18776 ipv4=10.0.0.137 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-4zz9h subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ab059e81a3 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2482 identity=18776 ipv4=10.0.0.137 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-4zz9h subsys=endpoint level=info msg="Successful endpoint creation" containerID=ab059e81a3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2482 identity=18776 ipv4=10.0.0.137 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-4zz9h subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=ab059e81a3 endpointID=2482 k8sNamespace=openstack k8sPodName=ceph-object-controller-detect-version-4zz9h subsys=daemon level=info msg="Releasing key" key="[k8s:app=ceph-object-controller-detect-version k8s:batch.kubernetes.io/controller-uid=8fb873c0-c9f8-4c5c-85e6-173f7cb0010a k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version k8s:controller-uid=8fb873c0-c9f8-4c5c-85e6-173f7cb0010a k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=ceph-object-controller-detect-version k8s:rook-version=v1.15.9]" subsys=allocator level=info msg="Removed endpoint" containerID=ab059e81a3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2482 identity=18776 ipv4=10.0.0.137 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-4zz9h subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.209 51426e98-d0fc-4a11-a4fa-bf48fcdd88ae default }" containerID=fb83291cbc8b23c1d983831a81bdbd2d1ad48d1f293132f481262857c9d551e9 datapathConfiguration="&{false false false false false }" interface=lxcdbb86ffa1d52 k8sPodName=local-path-storage/helper-pod-create-pvc-4780ca25-8e15-478c-99b4-660f18020ed3 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=fb83291cbc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=634 ipv4=10.0.0.209 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-4780ca25-8e15-478c-99b4-660f18020ed3 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=fb83291cbc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=634 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.209 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-4780ca25-8e15-478c-99b4-660f18020ed3 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=fb83291cbc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=634 identity=15841 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.209 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-4780ca25-8e15-478c-99b4-660f18020ed3 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=fb83291cbc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=634 identity=15841 ipv4=10.0.0.209 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-4780ca25-8e15-478c-99b4-660f18020ed3 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=fb83291cbc datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=634 identity=15841 ipv4=10.0.0.209 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-4780ca25-8e15-478c-99b4-660f18020ed3 subsys=endpoint level=info msg="Successful endpoint creation" containerID=fb83291cbc datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=634 identity=15841 ipv4=10.0.0.209 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-4780ca25-8e15-478c-99b4-660f18020ed3 subsys=daemon level=info msg="Delete endpoint request" containerID=fb83291cbc endpointID=634 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-4780ca25-8e15-478c-99b4-660f18020ed3 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=fb83291cbc datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=634 identity=15841 ipv4=10.0.0.209 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-4780ca25-8e15-478c-99b4-660f18020ed3 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.170 30e92b0f-7847-4392-8789-027b1d9364b6 default }" containerID=017abcd09ba5252a56366b7a821aeff4f75cbcb8f621c90a12387670c3c23c19 datapathConfiguration="&{false false false false false }" interface=lxc5c2ba558acfc k8sPodName=openstack/rabbitmq-glance-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=017abcd09b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2129 ipv4=10.0.0.170 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=017abcd09b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2129 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-glance,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0" ipv4=10.0.0.170 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-glance;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=017abcd09b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2129 identity=42588 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-glance,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0" ipv4=10.0.0.170 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=017abcd09b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2129 identity=42588 ipv4=10.0.0.170 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=017abcd09b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2129 identity=42588 ipv4=10.0.0.170 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=017abcd09b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2129 identity=42588 ipv4=10.0.0.170 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.27 852d947f-a079-4d71-a4a9-32b0e7764c33 default }" containerID=069953f0714dde9651a9ec5507f7a945ca5f61624c0107ce91e0bae7a43ad808 datapathConfiguration="&{false false false false false }" interface=lxc349c5f9a14ff k8sPodName=openstack/glance-db-init-gxcbj labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=069953f071 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=100 ipv4=10.0.0.27 ipv6= k8sPodName=openstack/glance-db-init-gxcbj subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=069953f071 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=100 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=a1d56790-8094-481c-b64b-84b362fae62b,k8s:batch.kubernetes.io/job-name=glance-db-init,k8s:component=db-init,k8s:controller-uid=a1d56790-8094-481c-b64b-84b362fae62b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-init,k8s:release_group=glance" ipv4=10.0.0.27 ipv6= k8sPodName=openstack/glance-db-init-gxcbj subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=a1d56790-8094-481c-b64b-84b362fae62b;k8s:batch.kubernetes.io/job-name=glance-db-init;k8s:component=db-init;k8s:controller-uid=a1d56790-8094-481c-b64b-84b362fae62b;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-db-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=069953f071 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=100 identity=54995 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=a1d56790-8094-481c-b64b-84b362fae62b,k8s:batch.kubernetes.io/job-name=glance-db-init,k8s:component=db-init,k8s:controller-uid=a1d56790-8094-481c-b64b-84b362fae62b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-init,k8s:release_group=glance" ipv4=10.0.0.27 ipv6= k8sPodName=openstack/glance-db-init-gxcbj oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=069953f071 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=100 identity=54995 ipv4=10.0.0.27 ipv6= k8sPodName=openstack/glance-db-init-gxcbj subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=069953f071 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=100 identity=54995 ipv4=10.0.0.27 ipv6= k8sPodName=openstack/glance-db-init-gxcbj subsys=endpoint level=info msg="Successful endpoint creation" containerID=069953f071 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=100 identity=54995 ipv4=10.0.0.27 ipv6= k8sPodName=openstack/glance-db-init-gxcbj subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.147 cb67994b-1d2c-4c93-80d2-2b8c47ef35fe default }" containerID=010e84dc88be53f021f01e13779e8f3f043b895c03b82a3572094f3982710d53 datapathConfiguration="&{false false false false false }" interface=lxc9d7454546c74 k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-m8vf9 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=010e84dc88 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=420 ipv4=10.0.0.147 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-m8vf9 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=010e84dc88 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=420 identityLabels="k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io,k8s:app.kubernetes.io/created-by=rook-ceph-operator,k8s:app.kubernetes.io/instance=ceph,k8s:app.kubernetes.io/managed-by=rook-ceph-operator,k8s:app.kubernetes.io/name=ceph-rgw,k8s:app.kubernetes.io/part-of=ceph,k8s:app=rook-ceph-rgw,k8s:ceph_daemon_id=ceph,k8s:ceph_daemon_type=rgw,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw,k8s:io.kubernetes.pod.namespace=openstack,k8s:rgw=ceph,k8s:rook.io/operator-namespace=rook-ceph,k8s:rook_cluster=openstack,k8s:rook_object_store=ceph" ipv4=10.0.0.147 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-m8vf9 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-rgw;k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io;k8s:app.kubernetes.io/created-by=rook-ceph-operator;k8s:app.kubernetes.io/instance=ceph;k8s:app.kubernetes.io/managed-by=rook-ceph-operator;k8s:app.kubernetes.io/name=ceph-rgw;k8s:app.kubernetes.io/part-of=ceph;k8s:ceph_daemon_id=ceph;k8s:ceph_daemon_type=rgw;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw;k8s:io.kubernetes.pod.namespace=openstack;k8s:rgw=ceph;k8s:rook.io/operator-namespace=rook-ceph;k8s:rook_cluster=openstack;k8s:rook_object_store=ceph;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=010e84dc88 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=420 identity=34262 identityLabels="k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io,k8s:app.kubernetes.io/created-by=rook-ceph-operator,k8s:app.kubernetes.io/instance=ceph,k8s:app.kubernetes.io/managed-by=rook-ceph-operator,k8s:app.kubernetes.io/name=ceph-rgw,k8s:app.kubernetes.io/part-of=ceph,k8s:app=rook-ceph-rgw,k8s:ceph_daemon_id=ceph,k8s:ceph_daemon_type=rgw,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw,k8s:io.kubernetes.pod.namespace=openstack,k8s:rgw=ceph,k8s:rook.io/operator-namespace=rook-ceph,k8s:rook_cluster=openstack,k8s:rook_object_store=ceph" ipv4=10.0.0.147 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-m8vf9 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=010e84dc88 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=420 identity=34262 ipv4=10.0.0.147 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-m8vf9 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.63 b94edce6-d148-469c-90eb-4c4015f7460c default }" containerID=11cd3c2e9743fdbd65b37a0d3a3fa6f9c9890a798fa4084d513a860b53b93faa datapathConfiguration="&{false false false false false }" interface=lxccc3485c1695e k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-hpmg9 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=11cd3c2e97 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3062 ipv4=10.0.0.63 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-hpmg9 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=11cd3c2e97 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3062 identityLabels="k8s:app=rook-ceph-crashcollector,k8s:ceph-version=18.2.7-0,k8s:ceph_daemon_id=crash,k8s:crashcollector=crash,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default,k8s:io.kubernetes.pod.namespace=openstack,k8s:node_name=instance,k8s:rook_cluster=openstack" ipv4=10.0.0.63 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-hpmg9 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-crashcollector;k8s:ceph-version=18.2.7-0;k8s:ceph_daemon_id=crash;k8s:crashcollector=crash;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default;k8s:io.kubernetes.pod.namespace=openstack;k8s:node_name=instance;k8s:rook_cluster=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=11cd3c2e97 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3062 identity=34718 identityLabels="k8s:app=rook-ceph-crashcollector,k8s:ceph-version=18.2.7-0,k8s:ceph_daemon_id=crash,k8s:crashcollector=crash,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default,k8s:io.kubernetes.pod.namespace=openstack,k8s:node_name=instance,k8s:rook_cluster=openstack" ipv4=10.0.0.63 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-hpmg9 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=11cd3c2e97 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3062 identity=34718 ipv4=10.0.0.63 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-hpmg9 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=010e84dc88 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=420 identity=34262 ipv4=10.0.0.147 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-m8vf9 subsys=endpoint level=info msg="Successful endpoint creation" containerID=010e84dc88 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=420 identity=34262 ipv4=10.0.0.147 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-m8vf9 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=11cd3c2e97 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3062 identity=34718 ipv4=10.0.0.63 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-hpmg9 subsys=endpoint level=info msg="Successful endpoint creation" containerID=11cd3c2e97 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3062 identity=34718 ipv4=10.0.0.63 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-hpmg9 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=069953f071 endpointID=100 k8sNamespace=openstack k8sPodName=glance-db-init-gxcbj subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=a1d56790-8094-481c-b64b-84b362fae62b k8s:batch.kubernetes.io/job-name=glance-db-init k8s:component=db-init k8s:controller-uid=a1d56790-8094-481c-b64b-84b362fae62b k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-db-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=069953f071 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=100 identity=54995 ipv4=10.0.0.27 ipv6= k8sPodName=openstack/glance-db-init-gxcbj subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.126 8661bb28-3f35-4ac6-88b0-86d10e90eb5a default }" containerID=71fe7b64c4ce7d5fe07a52f82f0d93b41d18abcf50aa395e1893e4c6539c8beb datapathConfiguration="&{false false false false false }" interface=lxce99485e2db30 k8sPodName=openstack/glance-db-sync-wj9j7 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=71fe7b64c4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3280 ipv4=10.0.0.126 ipv6= k8sPodName=openstack/glance-db-sync-wj9j7 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=71fe7b64c4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3280 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=84508e45-1d98-4ad4-a2a0-40fdff5256f1,k8s:batch.kubernetes.io/job-name=glance-db-sync,k8s:component=db-sync,k8s:controller-uid=84508e45-1d98-4ad4-a2a0-40fdff5256f1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-sync,k8s:release_group=glance" ipv4=10.0.0.126 ipv6= k8sPodName=openstack/glance-db-sync-wj9j7 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=84508e45-1d98-4ad4-a2a0-40fdff5256f1;k8s:batch.kubernetes.io/job-name=glance-db-sync;k8s:component=db-sync;k8s:controller-uid=84508e45-1d98-4ad4-a2a0-40fdff5256f1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-db-sync;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=71fe7b64c4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3280 identity=21280 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=84508e45-1d98-4ad4-a2a0-40fdff5256f1,k8s:batch.kubernetes.io/job-name=glance-db-sync,k8s:component=db-sync,k8s:controller-uid=84508e45-1d98-4ad4-a2a0-40fdff5256f1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-sync,k8s:release_group=glance" ipv4=10.0.0.126 ipv6= k8sPodName=openstack/glance-db-sync-wj9j7 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=71fe7b64c4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3280 identity=21280 ipv4=10.0.0.126 ipv6= k8sPodName=openstack/glance-db-sync-wj9j7 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=71fe7b64c4 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3280 identity=21280 ipv4=10.0.0.126 ipv6= k8sPodName=openstack/glance-db-sync-wj9j7 subsys=endpoint level=info msg="Successful endpoint creation" containerID=71fe7b64c4 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3280 identity=21280 ipv4=10.0.0.126 ipv6= k8sPodName=openstack/glance-db-sync-wj9j7 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=71fe7b64c4 endpointID=3280 k8sNamespace=openstack k8sPodName=glance-db-sync-wj9j7 subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=84508e45-1d98-4ad4-a2a0-40fdff5256f1 k8s:batch.kubernetes.io/job-name=glance-db-sync k8s:component=db-sync k8s:controller-uid=84508e45-1d98-4ad4-a2a0-40fdff5256f1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-db-sync k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=71fe7b64c4 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3280 identity=21280 ipv4=10.0.0.126 ipv6= k8sPodName=openstack/glance-db-sync-wj9j7 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.56 7c229608-d0ba-4327-a04e-b30a8090a0c8 default }" containerID=140647c31fd379f4ff81c075a9971681ea7cfd627d99697b7c8dc6d05faa04d9 datapathConfiguration="&{false false false false false }" interface=lxce8c7ec2804e1 k8sPodName=openstack/glance-rabbit-init-cqh5c labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=140647c31f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1081 ipv4=10.0.0.56 ipv6= k8sPodName=openstack/glance-rabbit-init-cqh5c subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=140647c31f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1081 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=3fd55764-d92a-4326-bf1f-5c374d4a340d,k8s:batch.kubernetes.io/job-name=glance-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=3fd55764-d92a-4326-bf1f-5c374d4a340d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-rabbit-init,k8s:release_group=glance" ipv4=10.0.0.56 ipv6= k8sPodName=openstack/glance-rabbit-init-cqh5c subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=3fd55764-d92a-4326-bf1f-5c374d4a340d;k8s:batch.kubernetes.io/job-name=glance-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=3fd55764-d92a-4326-bf1f-5c374d4a340d;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-rabbit-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=140647c31f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1081 identity=29416 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=3fd55764-d92a-4326-bf1f-5c374d4a340d,k8s:batch.kubernetes.io/job-name=glance-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=3fd55764-d92a-4326-bf1f-5c374d4a340d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-rabbit-init,k8s:release_group=glance" ipv4=10.0.0.56 ipv6= k8sPodName=openstack/glance-rabbit-init-cqh5c oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=140647c31f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1081 identity=29416 ipv4=10.0.0.56 ipv6= k8sPodName=openstack/glance-rabbit-init-cqh5c subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=140647c31f datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1081 identity=29416 ipv4=10.0.0.56 ipv6= k8sPodName=openstack/glance-rabbit-init-cqh5c subsys=endpoint level=info msg="Successful endpoint creation" containerID=140647c31f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1081 identity=29416 ipv4=10.0.0.56 ipv6= k8sPodName=openstack/glance-rabbit-init-cqh5c subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=140647c31f endpointID=1081 k8sNamespace=openstack k8sPodName=glance-rabbit-init-cqh5c subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=3fd55764-d92a-4326-bf1f-5c374d4a340d k8s:batch.kubernetes.io/job-name=glance-rabbit-init k8s:component=rabbit-init k8s:controller-uid=3fd55764-d92a-4326-bf1f-5c374d4a340d k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-rabbit-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=140647c31f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1081 identity=29416 ipv4=10.0.0.56 ipv6= k8sPodName=openstack/glance-rabbit-init-cqh5c subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.152 cd2b7b9b-45e5-46f8-8464-6f3b7cc5edf7 default }" containerID=173ef788bce78445e81783a83321ec5c66bcca62b8fc8d6261c2887672c78d44 datapathConfiguration="&{false false false false false }" interface=lxc7d22af7885d6 k8sPodName=openstack/glance-ks-service-9kj6q labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=173ef788bc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1044 ipv4=10.0.0.152 ipv6= k8sPodName=openstack/glance-ks-service-9kj6q subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=173ef788bc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1044 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=1d342478-2e5f-4e7f-ad97-92d32456fc66,k8s:batch.kubernetes.io/job-name=glance-ks-service,k8s:component=ks-service,k8s:controller-uid=1d342478-2e5f-4e7f-ad97-92d32456fc66,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-service,k8s:release_group=glance" ipv4=10.0.0.152 ipv6= k8sPodName=openstack/glance-ks-service-9kj6q subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=1d342478-2e5f-4e7f-ad97-92d32456fc66;k8s:batch.kubernetes.io/job-name=glance-ks-service;k8s:component=ks-service;k8s:controller-uid=1d342478-2e5f-4e7f-ad97-92d32456fc66;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-service;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=173ef788bc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1044 identity=24305 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=1d342478-2e5f-4e7f-ad97-92d32456fc66,k8s:batch.kubernetes.io/job-name=glance-ks-service,k8s:component=ks-service,k8s:controller-uid=1d342478-2e5f-4e7f-ad97-92d32456fc66,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-service,k8s:release_group=glance" ipv4=10.0.0.152 ipv6= k8sPodName=openstack/glance-ks-service-9kj6q oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=173ef788bc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1044 identity=24305 ipv4=10.0.0.152 ipv6= k8sPodName=openstack/glance-ks-service-9kj6q subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=173ef788bc datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1044 identity=24305 ipv4=10.0.0.152 ipv6= k8sPodName=openstack/glance-ks-service-9kj6q subsys=endpoint level=info msg="Successful endpoint creation" containerID=173ef788bc datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1044 identity=24305 ipv4=10.0.0.152 ipv6= k8sPodName=openstack/glance-ks-service-9kj6q subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=173ef788bc endpointID=1044 k8sNamespace=openstack k8sPodName=glance-ks-service-9kj6q subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=1d342478-2e5f-4e7f-ad97-92d32456fc66 k8s:batch.kubernetes.io/job-name=glance-ks-service k8s:component=ks-service k8s:controller-uid=1d342478-2e5f-4e7f-ad97-92d32456fc66 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-service k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=173ef788bc datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1044 identity=24305 ipv4=10.0.0.152 ipv6= k8sPodName=openstack/glance-ks-service-9kj6q subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.119 1ad9e608-35c1-4e92-9177-cadbbdb20e29 default }" containerID=c335e0a0bf7e7b05b2634d3672eee46e9009cde2e88166b63d64a9693191e31f datapathConfiguration="&{false false false false false }" interface=lxc8849422b8020 k8sPodName=openstack/glance-ks-endpoints-v9vcw labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c335e0a0bf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=54 ipv4=10.0.0.119 ipv6= k8sPodName=openstack/glance-ks-endpoints-v9vcw subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c335e0a0bf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=54 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=45214e21-aad8-42b6-951a-2e587ad6a718,k8s:batch.kubernetes.io/job-name=glance-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=45214e21-aad8-42b6-951a-2e587ad6a718,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-endpoints,k8s:release_group=glance" ipv4=10.0.0.119 ipv6= k8sPodName=openstack/glance-ks-endpoints-v9vcw subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=45214e21-aad8-42b6-951a-2e587ad6a718;k8s:batch.kubernetes.io/job-name=glance-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=45214e21-aad8-42b6-951a-2e587ad6a718;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-endpoints;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c335e0a0bf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=54 identity=61399 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=45214e21-aad8-42b6-951a-2e587ad6a718,k8s:batch.kubernetes.io/job-name=glance-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=45214e21-aad8-42b6-951a-2e587ad6a718,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-endpoints,k8s:release_group=glance" ipv4=10.0.0.119 ipv6= k8sPodName=openstack/glance-ks-endpoints-v9vcw oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=c335e0a0bf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=54 identity=61399 ipv4=10.0.0.119 ipv6= k8sPodName=openstack/glance-ks-endpoints-v9vcw subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c335e0a0bf datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=54 identity=61399 ipv4=10.0.0.119 ipv6= k8sPodName=openstack/glance-ks-endpoints-v9vcw subsys=endpoint level=info msg="Successful endpoint creation" containerID=c335e0a0bf datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=54 identity=61399 ipv4=10.0.0.119 ipv6= k8sPodName=openstack/glance-ks-endpoints-v9vcw subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=c335e0a0bf endpointID=54 k8sNamespace=openstack k8sPodName=glance-ks-endpoints-v9vcw subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=45214e21-aad8-42b6-951a-2e587ad6a718 k8s:batch.kubernetes.io/job-name=glance-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=45214e21-aad8-42b6-951a-2e587ad6a718 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-endpoints k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=c335e0a0bf datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=54 identity=61399 ipv4=10.0.0.119 ipv6= k8sPodName=openstack/glance-ks-endpoints-v9vcw subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.104 0732ef5c-f374-4a27-86de-36b2475e6e94 default }" containerID=44ac0656cea95ea9e4f672ec75e23def8a4376fb4b179762bd3ee1c722a188d5 datapathConfiguration="&{false false false false false }" interface=lxc618d3a6ae30b k8sPodName=openstack/glance-ks-user-rmqqh labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=44ac0656ce datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=438 ipv4=10.0.0.104 ipv6= k8sPodName=openstack/glance-ks-user-rmqqh subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=44ac0656ce datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=438 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=46912a2c-9011-4634-b040-10d6d642262f,k8s:batch.kubernetes.io/job-name=glance-ks-user,k8s:component=ks-user,k8s:controller-uid=46912a2c-9011-4634-b040-10d6d642262f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-user,k8s:release_group=glance" ipv4=10.0.0.104 ipv6= k8sPodName=openstack/glance-ks-user-rmqqh subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=44ac0656ce datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=438 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.104 ipv6= k8sPodName=openstack/glance-ks-user-rmqqh line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=46912a2c-9011-4634-b040-10d6d642262f;k8s:batch.kubernetes.io/job-name=glance-ks-user;k8s:component=ks-user;k8s:controller-uid=46912a2c-9011-4634-b040-10d6d642262f;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-user;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=44ac0656ce datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=438 identity=18387 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=46912a2c-9011-4634-b040-10d6d642262f,k8s:batch.kubernetes.io/job-name=glance-ks-user,k8s:component=ks-user,k8s:controller-uid=46912a2c-9011-4634-b040-10d6d642262f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-user,k8s:release_group=glance" ipv4=10.0.0.104 ipv6= k8sPodName=openstack/glance-ks-user-rmqqh oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=44ac0656ce datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=438 identity=18387 ipv4=10.0.0.104 ipv6= k8sPodName=openstack/glance-ks-user-rmqqh subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=44ac0656ce datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=438 identity=18387 ipv4=10.0.0.104 ipv6= k8sPodName=openstack/glance-ks-user-rmqqh subsys=endpoint level=info msg="Successful endpoint creation" containerID=44ac0656ce datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=438 identity=18387 ipv4=10.0.0.104 ipv6= k8sPodName=openstack/glance-ks-user-rmqqh subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=44ac0656ce endpointID=438 k8sNamespace=openstack k8sPodName=glance-ks-user-rmqqh subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=46912a2c-9011-4634-b040-10d6d642262f k8s:batch.kubernetes.io/job-name=glance-ks-user k8s:component=ks-user k8s:controller-uid=46912a2c-9011-4634-b040-10d6d642262f k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-user k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=44ac0656ce datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=438 identity=18387 ipv4=10.0.0.104 ipv6= k8sPodName=openstack/glance-ks-user-rmqqh subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.107 989b0d2f-8c75-4d37-af6f-0c226646caed default }" containerID=d96ec11975b4da8b2e813afd19c94c7a31476dd37b66781135e4fc38d6f95fc4 datapathConfiguration="&{false false false false false }" interface=lxce655df41e1f4 k8sPodName=openstack/glance-metadefs-load-2zsbn labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d96ec11975 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1789 ipv4=10.0.0.107 ipv6= k8sPodName=openstack/glance-metadefs-load-2zsbn subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d96ec11975 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1789 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=b2b10a5f-9615-495b-a869-788a005d4d87,k8s:batch.kubernetes.io/job-name=glance-metadefs-load,k8s:component=metadefs_load,k8s:controller-uid=b2b10a5f-9615-495b-a869-788a005d4d87,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-metadefs-load,k8s:release_group=glance" ipv4=10.0.0.107 ipv6= k8sPodName=openstack/glance-metadefs-load-2zsbn subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=d96ec11975 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1789 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.107 ipv6= k8sPodName=openstack/glance-metadefs-load-2zsbn line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=b2b10a5f-9615-495b-a869-788a005d4d87;k8s:batch.kubernetes.io/job-name=glance-metadefs-load;k8s:component=metadefs_load;k8s:controller-uid=b2b10a5f-9615-495b-a869-788a005d4d87;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-metadefs-load;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d96ec11975 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1789 identity=38174 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=b2b10a5f-9615-495b-a869-788a005d4d87,k8s:batch.kubernetes.io/job-name=glance-metadefs-load,k8s:component=metadefs_load,k8s:controller-uid=b2b10a5f-9615-495b-a869-788a005d4d87,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-metadefs-load,k8s:release_group=glance" ipv4=10.0.0.107 ipv6= k8sPodName=openstack/glance-metadefs-load-2zsbn oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d96ec11975 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1789 identity=38174 ipv4=10.0.0.107 ipv6= k8sPodName=openstack/glance-metadefs-load-2zsbn subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d96ec11975 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1789 identity=38174 ipv4=10.0.0.107 ipv6= k8sPodName=openstack/glance-metadefs-load-2zsbn subsys=endpoint level=info msg="Successful endpoint creation" containerID=d96ec11975 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1789 identity=38174 ipv4=10.0.0.107 ipv6= k8sPodName=openstack/glance-metadefs-load-2zsbn subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=d96ec11975 endpointID=1789 k8sNamespace=openstack k8sPodName=glance-metadefs-load-2zsbn subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=b2b10a5f-9615-495b-a869-788a005d4d87 k8s:batch.kubernetes.io/job-name=glance-metadefs-load k8s:component=metadefs_load k8s:controller-uid=b2b10a5f-9615-495b-a869-788a005d4d87 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-metadefs-load k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=d96ec11975 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1789 identity=38174 ipv4=10.0.0.107 ipv6= k8sPodName=openstack/glance-metadefs-load-2zsbn subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.123 a6dfc654-a9e1-465d-b6d4-24cf2da33fb7 default }" containerID=ef5b8d4cdd766a320528baca0977afb538b005260950d28cdaa02154904075b5 datapathConfiguration="&{false false false false false }" interface=lxc9674add432af k8sPodName=openstack/glance-storage-init-c7vkb labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ef5b8d4cdd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1976 ipv4=10.0.0.123 ipv6= k8sPodName=openstack/glance-storage-init-c7vkb subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ef5b8d4cdd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1976 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=0984ef4f-465c-414e-b9f7-d1146ff9ddd9,k8s:batch.kubernetes.io/job-name=glance-storage-init,k8s:component=storage-init,k8s:controller-uid=0984ef4f-465c-414e-b9f7-d1146ff9ddd9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-storage-init,k8s:release_group=glance" ipv4=10.0.0.123 ipv6= k8sPodName=openstack/glance-storage-init-c7vkb subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=0984ef4f-465c-414e-b9f7-d1146ff9ddd9;k8s:batch.kubernetes.io/job-name=glance-storage-init;k8s:component=storage-init;k8s:controller-uid=0984ef4f-465c-414e-b9f7-d1146ff9ddd9;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-storage-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ef5b8d4cdd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1976 identity=9279 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=0984ef4f-465c-414e-b9f7-d1146ff9ddd9,k8s:batch.kubernetes.io/job-name=glance-storage-init,k8s:component=storage-init,k8s:controller-uid=0984ef4f-465c-414e-b9f7-d1146ff9ddd9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-storage-init,k8s:release_group=glance" ipv4=10.0.0.123 ipv6= k8sPodName=openstack/glance-storage-init-c7vkb oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ef5b8d4cdd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1976 identity=9279 ipv4=10.0.0.123 ipv6= k8sPodName=openstack/glance-storage-init-c7vkb subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=ef5b8d4cdd datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1976 identity=9279 ipv4=10.0.0.123 ipv6= k8sPodName=openstack/glance-storage-init-c7vkb subsys=endpoint level=info msg="Successful endpoint creation" containerID=ef5b8d4cdd datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1976 identity=9279 ipv4=10.0.0.123 ipv6= k8sPodName=openstack/glance-storage-init-c7vkb subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=ef5b8d4cdd endpointID=1976 k8sNamespace=openstack k8sPodName=glance-storage-init-c7vkb subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=0984ef4f-465c-414e-b9f7-d1146ff9ddd9 k8s:batch.kubernetes.io/job-name=glance-storage-init k8s:component=storage-init k8s:controller-uid=0984ef4f-465c-414e-b9f7-d1146ff9ddd9 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-storage-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=ef5b8d4cdd datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1976 identity=9279 ipv4=10.0.0.123 ipv6= k8sPodName=openstack/glance-storage-init-c7vkb subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.134 bdc694bc-1a7f-467f-9ea0-c394cdeb3f28 default }" containerID=571e2f93b3cbe371221cc4660af3c21076ec209f9bff3c38d66bb5d7b0f09bb9 datapathConfiguration="&{false false false false false }" interface=lxc6b26c9617dcb k8sPodName=openstack/glance-api-d9776b7c4-hwp7k labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=571e2f93b3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1221 ipv4=10.0.0.134 ipv6= k8sPodName=openstack/glance-api-d9776b7c4-hwp7k subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=571e2f93b3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1221 identityLabels="k8s:application=glance,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=glance" ipv4=10.0.0.134 ipv6= k8sPodName=openstack/glance-api-d9776b7c4-hwp7k subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=571e2f93b3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1221 identity=62703 identityLabels="k8s:application=glance,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=glance" ipv4=10.0.0.134 ipv6= k8sPodName=openstack/glance-api-d9776b7c4-hwp7k oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=571e2f93b3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1221 identity=62703 ipv4=10.0.0.134 ipv6= k8sPodName=openstack/glance-api-d9776b7c4-hwp7k subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=571e2f93b3 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1221 identity=62703 ipv4=10.0.0.134 ipv6= k8sPodName=openstack/glance-api-d9776b7c4-hwp7k subsys=endpoint level=info msg="Successful endpoint creation" containerID=571e2f93b3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1221 identity=62703 ipv4=10.0.0.134 ipv6= k8sPodName=openstack/glance-api-d9776b7c4-hwp7k subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.145 f4ef8c72-8632-400a-83f7-66db545538ee default }" containerID=a764e24dd714400691310d902cf512e7b2450cb4f8ee2b39cf63eac105804d53 datapathConfiguration="&{false false false false false }" interface=lxc3bad303ed120 k8sPodName=openstack/staffeln-api-6d97d69c5f-xx4d9 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a764e24dd7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=416 ipv4=10.0.0.145 ipv6= k8sPodName=openstack/staffeln-api-6d97d69c5f-xx4d9 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a764e24dd7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=416 identityLabels="k8s:application=staffeln,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.145 ipv6= k8sPodName=openstack/staffeln-api-6d97d69c5f-xx4d9 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Create endpoint request" addressing="&{10.0.0.137 c33731d6-356e-433a-b31b-71b5c97e8af2 default }" containerID=fa41caa863e0d314f6264b286a8898fd90fba05ad93d15a433d2f2cec264184b datapathConfiguration="&{false false false false false }" interface=lxc6b6617f0eb7f k8sPodName=openstack/staffeln-conductor-6f44c674f6-mvwv7 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=fa41caa863 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1081 ipv4=10.0.0.137 ipv6= k8sPodName=openstack/staffeln-conductor-6f44c674f6-mvwv7 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=fa41caa863 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1081 identityLabels="k8s:application=staffeln,k8s:component=conductor,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.137 ipv6= k8sPodName=openstack/staffeln-conductor-6f44c674f6-mvwv7 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=staffeln;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Invalid state transition skipped" containerID=fa41caa863 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1081 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.137 ipv6= k8sPodName=openstack/staffeln-conductor-6f44c674f6-mvwv7 line=611 subsys=endpoint level=info msg="Invalid state transition skipped" containerID=a764e24dd7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=416 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.145 ipv6= k8sPodName=openstack/staffeln-api-6d97d69c5f-xx4d9 line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=a764e24dd7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=416 identity=27758 identityLabels="k8s:application=staffeln,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.145 ipv6= k8sPodName=openstack/staffeln-api-6d97d69c5f-xx4d9 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a764e24dd7 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=416 identity=27758 ipv4=10.0.0.145 ipv6= k8sPodName=openstack/staffeln-api-6d97d69c5f-xx4d9 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:component=conductor;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=fa41caa863 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1081 identity=32714 identityLabels="k8s:application=staffeln,k8s:component=conductor,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.137 ipv6= k8sPodName=openstack/staffeln-conductor-6f44c674f6-mvwv7 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=fa41caa863 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1081 identity=32714 ipv4=10.0.0.137 ipv6= k8sPodName=openstack/staffeln-conductor-6f44c674f6-mvwv7 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.210 75700e32-bb0b-49fd-82e4-94dcaa065363 default }" containerID=6b2eb0ea887c5613f54e9f074677551a96bdf75eeadab0688e196cf94dd6a0b6 datapathConfiguration="&{false false false false false }" interface=lxcc15493679f5b k8sPodName=openstack/staffeln-db-init-fv2k2 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6b2eb0ea88 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=283 ipv4=10.0.0.210 ipv6= k8sPodName=openstack/staffeln-db-init-fv2k2 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6b2eb0ea88 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=283 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=e9b97656-ff7e-491a-a211-3563663f7cdf,k8s:batch.kubernetes.io/job-name=staffeln-db-init,k8s:component=db-init,k8s:controller-uid=e9b97656-ff7e-491a-a211-3563663f7cdf,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-init,k8s:release_group=staffeln" ipv4=10.0.0.210 ipv6= k8sPodName=openstack/staffeln-db-init-fv2k2 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:batch.kubernetes.io/controller-uid=e9b97656-ff7e-491a-a211-3563663f7cdf;k8s:batch.kubernetes.io/job-name=staffeln-db-init;k8s:component=db-init;k8s:controller-uid=e9b97656-ff7e-491a-a211-3563663f7cdf;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=staffeln-db-init;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6b2eb0ea88 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=283 identity=23591 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=e9b97656-ff7e-491a-a211-3563663f7cdf,k8s:batch.kubernetes.io/job-name=staffeln-db-init,k8s:component=db-init,k8s:controller-uid=e9b97656-ff7e-491a-a211-3563663f7cdf,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-init,k8s:release_group=staffeln" ipv4=10.0.0.210 ipv6= k8sPodName=openstack/staffeln-db-init-fv2k2 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6b2eb0ea88 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=283 identity=23591 ipv4=10.0.0.210 ipv6= k8sPodName=openstack/staffeln-db-init-fv2k2 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a764e24dd7 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=416 identity=27758 ipv4=10.0.0.145 ipv6= k8sPodName=openstack/staffeln-api-6d97d69c5f-xx4d9 subsys=endpoint level=info msg="Successful endpoint creation" containerID=a764e24dd7 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=416 identity=27758 ipv4=10.0.0.145 ipv6= k8sPodName=openstack/staffeln-api-6d97d69c5f-xx4d9 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=fa41caa863 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1081 identity=32714 ipv4=10.0.0.137 ipv6= k8sPodName=openstack/staffeln-conductor-6f44c674f6-mvwv7 subsys=endpoint level=info msg="Successful endpoint creation" containerID=fa41caa863 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1081 identity=32714 ipv4=10.0.0.137 ipv6= k8sPodName=openstack/staffeln-conductor-6f44c674f6-mvwv7 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=6b2eb0ea88 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=283 identity=23591 ipv4=10.0.0.210 ipv6= k8sPodName=openstack/staffeln-db-init-fv2k2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=6b2eb0ea88 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=283 identity=23591 ipv4=10.0.0.210 ipv6= k8sPodName=openstack/staffeln-db-init-fv2k2 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=6b2eb0ea88 endpointID=283 k8sNamespace=openstack k8sPodName=staffeln-db-init-fv2k2 subsys=daemon level=info msg="Releasing key" key="[k8s:application=staffeln k8s:batch.kubernetes.io/controller-uid=e9b97656-ff7e-491a-a211-3563663f7cdf k8s:batch.kubernetes.io/job-name=staffeln-db-init k8s:component=db-init k8s:controller-uid=e9b97656-ff7e-491a-a211-3563663f7cdf k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=staffeln-db-init k8s:release_group=staffeln]" subsys=allocator level=info msg="Removed endpoint" containerID=6b2eb0ea88 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=283 identity=23591 ipv4=10.0.0.210 ipv6= k8sPodName=openstack/staffeln-db-init-fv2k2 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.29 9829e54c-1cd5-40ca-a8bc-dd6605501807 default }" containerID=531fe0a8f1aff13bac2b00578f0a91519268a64933331c3afd4ca89d7ddc1de5 datapathConfiguration="&{false false false false false }" interface=lxc73445b0b2d23 k8sPodName=openstack/staffeln-db-sync-tnklz labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=531fe0a8f1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=701 ipv4=10.0.0.29 ipv6= k8sPodName=openstack/staffeln-db-sync-tnklz subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=531fe0a8f1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=701 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=728a3599-94c1-49c2-857b-8bf4814bce98,k8s:batch.kubernetes.io/job-name=staffeln-db-sync,k8s:component=db-sync,k8s:controller-uid=728a3599-94c1-49c2-857b-8bf4814bce98,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-sync,k8s:release_group=staffeln" ipv4=10.0.0.29 ipv6= k8sPodName=openstack/staffeln-db-sync-tnklz subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:batch.kubernetes.io/controller-uid=728a3599-94c1-49c2-857b-8bf4814bce98;k8s:batch.kubernetes.io/job-name=staffeln-db-sync;k8s:component=db-sync;k8s:controller-uid=728a3599-94c1-49c2-857b-8bf4814bce98;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=staffeln-db-sync;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=531fe0a8f1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=701 identity=17138 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=728a3599-94c1-49c2-857b-8bf4814bce98,k8s:batch.kubernetes.io/job-name=staffeln-db-sync,k8s:component=db-sync,k8s:controller-uid=728a3599-94c1-49c2-857b-8bf4814bce98,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-sync,k8s:release_group=staffeln" ipv4=10.0.0.29 ipv6= k8sPodName=openstack/staffeln-db-sync-tnklz oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=531fe0a8f1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=701 identity=17138 ipv4=10.0.0.29 ipv6= k8sPodName=openstack/staffeln-db-sync-tnklz subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=531fe0a8f1 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=701 identity=17138 ipv4=10.0.0.29 ipv6= k8sPodName=openstack/staffeln-db-sync-tnklz subsys=endpoint level=info msg="Successful endpoint creation" containerID=531fe0a8f1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=701 identity=17138 ipv4=10.0.0.29 ipv6= k8sPodName=openstack/staffeln-db-sync-tnklz subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=531fe0a8f1 endpointID=701 k8sNamespace=openstack k8sPodName=staffeln-db-sync-tnklz subsys=daemon level=info msg="Releasing key" key="[k8s:application=staffeln k8s:batch.kubernetes.io/controller-uid=728a3599-94c1-49c2-857b-8bf4814bce98 k8s:batch.kubernetes.io/job-name=staffeln-db-sync k8s:component=db-sync k8s:controller-uid=728a3599-94c1-49c2-857b-8bf4814bce98 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=staffeln-db-sync k8s:release_group=staffeln]" subsys=allocator level=info msg="Removed endpoint" containerID=531fe0a8f1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=701 identity=17138 ipv4=10.0.0.29 ipv6= k8sPodName=openstack/staffeln-db-sync-tnklz subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.36 efa5f76d-e5d0-4c36-b949-8a7ae5442c33 default }" containerID=305ce2131c7c514a01d5589a55d07436d31c83ac4c79ed9416f074b79ba478af datapathConfiguration="&{false false false false false }" interface=lxc3c53aaf82c84 k8sPodName=local-path-storage/helper-pod-create-pvc-ceed1926-d7b6-4d59-925a-78fecf009576 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=305ce2131c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1597 ipv4=10.0.0.36 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-ceed1926-d7b6-4d59-925a-78fecf009576 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=305ce2131c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1597 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.36 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-ceed1926-d7b6-4d59-925a-78fecf009576 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=305ce2131c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1597 identity=15841 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.36 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-ceed1926-d7b6-4d59-925a-78fecf009576 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=305ce2131c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1597 identity=15841 ipv4=10.0.0.36 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-ceed1926-d7b6-4d59-925a-78fecf009576 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=305ce2131c datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1597 identity=15841 ipv4=10.0.0.36 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-ceed1926-d7b6-4d59-925a-78fecf009576 subsys=endpoint level=info msg="Successful endpoint creation" containerID=305ce2131c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1597 identity=15841 ipv4=10.0.0.36 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-ceed1926-d7b6-4d59-925a-78fecf009576 subsys=daemon level=info msg="Delete endpoint request" containerID=305ce2131c endpointID=1597 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-ceed1926-d7b6-4d59-925a-78fecf009576 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=305ce2131c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1597 identity=15841 ipv4=10.0.0.36 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-ceed1926-d7b6-4d59-925a-78fecf009576 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.195 753b19b9-fee8-44af-a58a-0d66b6da753d default }" containerID=25a2e7fc6ad4758a146caeda5e0e4149df080a9ef0d6b19492091aa29b6bc06a datapathConfiguration="&{false false false false false }" interface=lxc22c411eb0677 k8sPodName=openstack/rabbitmq-cinder-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=25a2e7fc6a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1107 ipv4=10.0.0.195 ipv6= k8sPodName=openstack/rabbitmq-cinder-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=25a2e7fc6a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1107 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-cinder,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cinder-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-cinder-server-0" ipv4=10.0.0.195 ipv6= k8sPodName=openstack/rabbitmq-cinder-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-cinder;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cinder-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-cinder-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=25a2e7fc6a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1107 identity=35437 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-cinder,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cinder-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-cinder-server-0" ipv4=10.0.0.195 ipv6= k8sPodName=openstack/rabbitmq-cinder-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=25a2e7fc6a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1107 identity=35437 ipv4=10.0.0.195 ipv6= k8sPodName=openstack/rabbitmq-cinder-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=25a2e7fc6a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1107 identity=35437 ipv4=10.0.0.195 ipv6= k8sPodName=openstack/rabbitmq-cinder-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=25a2e7fc6a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1107 identity=35437 ipv4=10.0.0.195 ipv6= k8sPodName=openstack/rabbitmq-cinder-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.247 664815d3-dcfc-46a9-88e4-b5b6394a0a57 default }" containerID=9db2ceb36d89716076d0e70cbfd12ff501c40311e395856ee4d38663253ba99b datapathConfiguration="&{false false false false false }" interface=lxc4d80425fadf7 k8sPodName=openstack/cinder-scheduler-5f5b7b8b8-wjb27 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9db2ceb36d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2351 ipv4=10.0.0.247 ipv6= k8sPodName=openstack/cinder-scheduler-5f5b7b8b8-wjb27 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9db2ceb36d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2351 identityLabels="k8s:application=cinder,k8s:component=scheduler,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-scheduler,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=cinder" ipv4=10.0.0.247 ipv6= k8sPodName=openstack/cinder-scheduler-5f5b7b8b8-wjb27 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:component=scheduler;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-scheduler;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9db2ceb36d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2351 identity=14872 identityLabels="k8s:application=cinder,k8s:component=scheduler,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-scheduler,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=cinder" ipv4=10.0.0.247 ipv6= k8sPodName=openstack/cinder-scheduler-5f5b7b8b8-wjb27 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=9db2ceb36d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2351 identity=14872 ipv4=10.0.0.247 ipv6= k8sPodName=openstack/cinder-scheduler-5f5b7b8b8-wjb27 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.77 6a597c4d-19ad-4622-85a2-3ebb051a1cb4 default }" containerID=dd0a0e4c7b9eb292881739c62e8e3d9e17727f38ff86080f61ffbb41279f9dbc datapathConfiguration="&{false false false false false }" interface=lxcd47da0f55153 k8sPodName=openstack/cinder-api-d75bd679b-7bw6w labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=dd0a0e4c7b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3662 ipv4=10.0.0.77 ipv6= k8sPodName=openstack/cinder-api-d75bd679b-7bw6w subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=dd0a0e4c7b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3662 identityLabels="k8s:application=cinder,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=cinder" ipv4=10.0.0.77 ipv6= k8sPodName=openstack/cinder-api-d75bd679b-7bw6w subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=dd0a0e4c7b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3662 identity=4294 identityLabels="k8s:application=cinder,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=cinder" ipv4=10.0.0.77 ipv6= k8sPodName=openstack/cinder-api-d75bd679b-7bw6w oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=dd0a0e4c7b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3662 identity=4294 ipv4=10.0.0.77 ipv6= k8sPodName=openstack/cinder-api-d75bd679b-7bw6w subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=9db2ceb36d datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2351 identity=14872 ipv4=10.0.0.247 ipv6= k8sPodName=openstack/cinder-scheduler-5f5b7b8b8-wjb27 subsys=endpoint level=info msg="Successful endpoint creation" containerID=9db2ceb36d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2351 identity=14872 ipv4=10.0.0.247 ipv6= k8sPodName=openstack/cinder-scheduler-5f5b7b8b8-wjb27 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=dd0a0e4c7b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3662 identity=4294 ipv4=10.0.0.77 ipv6= k8sPodName=openstack/cinder-api-d75bd679b-7bw6w subsys=endpoint level=info msg="Successful endpoint creation" containerID=dd0a0e4c7b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3662 identity=4294 ipv4=10.0.0.77 ipv6= k8sPodName=openstack/cinder-api-d75bd679b-7bw6w subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.65 242c256b-d110-4e28-bce7-7ae135ad49b9 default }" containerID=4fab465318ee67fd569ff694f0522f6cfe693b93a0d3db9f5c02b2d1708db001 datapathConfiguration="&{false false false false false }" interface=lxc608b7f26f157 k8sPodName=openstack/cinder-db-init-frh2d labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4fab465318 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4081 ipv4=10.0.0.65 ipv6= k8sPodName=openstack/cinder-db-init-frh2d subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4fab465318 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4081 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=a35508f9-582c-4ded-82cf-ad311b45e29f,k8s:batch.kubernetes.io/job-name=cinder-db-init,k8s:component=db-init,k8s:controller-uid=a35508f9-582c-4ded-82cf-ad311b45e29f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-db-init,k8s:release_group=cinder" ipv4=10.0.0.65 ipv6= k8sPodName=openstack/cinder-db-init-frh2d subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=a35508f9-582c-4ded-82cf-ad311b45e29f;k8s:batch.kubernetes.io/job-name=cinder-db-init;k8s:component=db-init;k8s:controller-uid=a35508f9-582c-4ded-82cf-ad311b45e29f;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-db-init;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4fab465318 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4081 identity=3045 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=a35508f9-582c-4ded-82cf-ad311b45e29f,k8s:batch.kubernetes.io/job-name=cinder-db-init,k8s:component=db-init,k8s:controller-uid=a35508f9-582c-4ded-82cf-ad311b45e29f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-db-init,k8s:release_group=cinder" ipv4=10.0.0.65 ipv6= k8sPodName=openstack/cinder-db-init-frh2d oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4fab465318 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4081 identity=3045 ipv4=10.0.0.65 ipv6= k8sPodName=openstack/cinder-db-init-frh2d subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=4fab465318 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=4081 identity=3045 ipv4=10.0.0.65 ipv6= k8sPodName=openstack/cinder-db-init-frh2d subsys=endpoint level=info msg="Successful endpoint creation" containerID=4fab465318 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=4081 identity=3045 ipv4=10.0.0.65 ipv6= k8sPodName=openstack/cinder-db-init-frh2d subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=4fab465318 endpointID=4081 k8sNamespace=openstack k8sPodName=cinder-db-init-frh2d subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=a35508f9-582c-4ded-82cf-ad311b45e29f k8s:batch.kubernetes.io/job-name=cinder-db-init k8s:component=db-init k8s:controller-uid=a35508f9-582c-4ded-82cf-ad311b45e29f k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-db-init k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=4fab465318 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=4081 identity=3045 ipv4=10.0.0.65 ipv6= k8sPodName=openstack/cinder-db-init-frh2d subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.53 c58915c9-8be5-4c2a-96d5-1b396390bcda default }" containerID=2a511d55cd77032a88371bb9c642a05ff93e02469596915de012d1fadc0390d7 datapathConfiguration="&{false false false false false }" interface=lxc733d2a261dfa k8sPodName=openstack/cinder-db-sync-qjhq6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2a511d55cd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=461 ipv4=10.0.0.53 ipv6= k8sPodName=openstack/cinder-db-sync-qjhq6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2a511d55cd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=461 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=44237cf1-e342-4ae9-b045-dcaf1204aa06,k8s:batch.kubernetes.io/job-name=cinder-db-sync,k8s:component=db-sync,k8s:controller-uid=44237cf1-e342-4ae9-b045-dcaf1204aa06,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-db-sync,k8s:release_group=cinder" ipv4=10.0.0.53 ipv6= k8sPodName=openstack/cinder-db-sync-qjhq6 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=44237cf1-e342-4ae9-b045-dcaf1204aa06;k8s:batch.kubernetes.io/job-name=cinder-db-sync;k8s:component=db-sync;k8s:controller-uid=44237cf1-e342-4ae9-b045-dcaf1204aa06;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-db-sync;k8s:release_group=cinder;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=2a511d55cd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=461 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.53 ipv6= k8sPodName=openstack/cinder-db-sync-qjhq6 line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=2a511d55cd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=461 identity=64861 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=44237cf1-e342-4ae9-b045-dcaf1204aa06,k8s:batch.kubernetes.io/job-name=cinder-db-sync,k8s:component=db-sync,k8s:controller-uid=44237cf1-e342-4ae9-b045-dcaf1204aa06,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-db-sync,k8s:release_group=cinder" ipv4=10.0.0.53 ipv6= k8sPodName=openstack/cinder-db-sync-qjhq6 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2a511d55cd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=461 identity=64861 ipv4=10.0.0.53 ipv6= k8sPodName=openstack/cinder-db-sync-qjhq6 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=2a511d55cd datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=461 identity=64861 ipv4=10.0.0.53 ipv6= k8sPodName=openstack/cinder-db-sync-qjhq6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=2a511d55cd datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=461 identity=64861 ipv4=10.0.0.53 ipv6= k8sPodName=openstack/cinder-db-sync-qjhq6 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=2a511d55cd endpointID=461 k8sNamespace=openstack k8sPodName=cinder-db-sync-qjhq6 subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=44237cf1-e342-4ae9-b045-dcaf1204aa06 k8s:batch.kubernetes.io/job-name=cinder-db-sync k8s:component=db-sync k8s:controller-uid=44237cf1-e342-4ae9-b045-dcaf1204aa06 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-db-sync k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=2a511d55cd datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=461 identity=64861 ipv4=10.0.0.53 ipv6= k8sPodName=openstack/cinder-db-sync-qjhq6 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.15 4d79a1ad-a59b-4077-a9ad-48bf1123e036 default }" containerID=1bd9953ef75295ad5c1f13fa54ee6dbe6760ff501a4630d43e537a6a5acb052c datapathConfiguration="&{false false false false false }" interface=lxca519e94000f6 k8sPodName=openstack/cinder-rabbit-init-cm5hj labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1bd9953ef7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2157 ipv4=10.0.0.15 ipv6= k8sPodName=openstack/cinder-rabbit-init-cm5hj subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1bd9953ef7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2157 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=35c2cb84-5917-4717-8ad9-3fe8de6540f4,k8s:batch.kubernetes.io/job-name=cinder-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=35c2cb84-5917-4717-8ad9-3fe8de6540f4,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-rabbit-init,k8s:release_group=cinder" ipv4=10.0.0.15 ipv6= k8sPodName=openstack/cinder-rabbit-init-cm5hj subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=1bd9953ef7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2157 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.15 ipv6= k8sPodName=openstack/cinder-rabbit-init-cm5hj line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=35c2cb84-5917-4717-8ad9-3fe8de6540f4;k8s:batch.kubernetes.io/job-name=cinder-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=35c2cb84-5917-4717-8ad9-3fe8de6540f4;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-rabbit-init;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1bd9953ef7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2157 identity=33206 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=35c2cb84-5917-4717-8ad9-3fe8de6540f4,k8s:batch.kubernetes.io/job-name=cinder-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=35c2cb84-5917-4717-8ad9-3fe8de6540f4,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-rabbit-init,k8s:release_group=cinder" ipv4=10.0.0.15 ipv6= k8sPodName=openstack/cinder-rabbit-init-cm5hj oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1bd9953ef7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2157 identity=33206 ipv4=10.0.0.15 ipv6= k8sPodName=openstack/cinder-rabbit-init-cm5hj subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=1bd9953ef7 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2157 identity=33206 ipv4=10.0.0.15 ipv6= k8sPodName=openstack/cinder-rabbit-init-cm5hj subsys=endpoint level=info msg="Successful endpoint creation" containerID=1bd9953ef7 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2157 identity=33206 ipv4=10.0.0.15 ipv6= k8sPodName=openstack/cinder-rabbit-init-cm5hj subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=1bd9953ef7 endpointID=2157 k8sNamespace=openstack k8sPodName=cinder-rabbit-init-cm5hj subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=35c2cb84-5917-4717-8ad9-3fe8de6540f4 k8s:batch.kubernetes.io/job-name=cinder-rabbit-init k8s:component=rabbit-init k8s:controller-uid=35c2cb84-5917-4717-8ad9-3fe8de6540f4 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-rabbit-init k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=1bd9953ef7 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2157 identity=33206 ipv4=10.0.0.15 ipv6= k8sPodName=openstack/cinder-rabbit-init-cm5hj subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.243 13aee0f7-6647-4685-86bf-1876a2a3995a default }" containerID=3a5b3a3859629e28869aace3c7cf55d8e80e983e29fd5e84e36a7cfa21a7a2fc datapathConfiguration="&{false false false false false }" interface=lxcdce7b2bf4236 k8sPodName=openstack/cinder-ks-service-svxjj labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3a5b3a3859 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3423 ipv4=10.0.0.243 ipv6= k8sPodName=openstack/cinder-ks-service-svxjj subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3a5b3a3859 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3423 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=de7fff35-9355-436b-b37f-a778137d64a2,k8s:batch.kubernetes.io/job-name=cinder-ks-service,k8s:component=ks-service,k8s:controller-uid=de7fff35-9355-436b-b37f-a778137d64a2,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-ks-service,k8s:release_group=cinder" ipv4=10.0.0.243 ipv6= k8sPodName=openstack/cinder-ks-service-svxjj subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=de7fff35-9355-436b-b37f-a778137d64a2;k8s:batch.kubernetes.io/job-name=cinder-ks-service;k8s:component=ks-service;k8s:controller-uid=de7fff35-9355-436b-b37f-a778137d64a2;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-ks-service;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3a5b3a3859 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3423 identity=408 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=de7fff35-9355-436b-b37f-a778137d64a2,k8s:batch.kubernetes.io/job-name=cinder-ks-service,k8s:component=ks-service,k8s:controller-uid=de7fff35-9355-436b-b37f-a778137d64a2,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-ks-service,k8s:release_group=cinder" ipv4=10.0.0.243 ipv6= k8sPodName=openstack/cinder-ks-service-svxjj oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3a5b3a3859 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3423 identity=408 ipv4=10.0.0.243 ipv6= k8sPodName=openstack/cinder-ks-service-svxjj subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=3a5b3a3859 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3423 identity=408 ipv4=10.0.0.243 ipv6= k8sPodName=openstack/cinder-ks-service-svxjj subsys=endpoint level=info msg="Successful endpoint creation" containerID=3a5b3a3859 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3423 identity=408 ipv4=10.0.0.243 ipv6= k8sPodName=openstack/cinder-ks-service-svxjj subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=3a5b3a3859 endpointID=3423 k8sNamespace=openstack k8sPodName=cinder-ks-service-svxjj subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=de7fff35-9355-436b-b37f-a778137d64a2 k8s:batch.kubernetes.io/job-name=cinder-ks-service k8s:component=ks-service k8s:controller-uid=de7fff35-9355-436b-b37f-a778137d64a2 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-ks-service k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=3a5b3a3859 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3423 identity=408 ipv4=10.0.0.243 ipv6= k8sPodName=openstack/cinder-ks-service-svxjj subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.128 3e3bb297-d4ec-4ee4-a117-4293e26272ea default }" containerID=0f131ec18a690a50fd71c8575d2bc9751b46bc671604c3f5117717aa9d0c5851 datapathConfiguration="&{false false false false false }" interface=lxc2a1feb219639 k8sPodName=openstack/cinder-ks-endpoints-2tpjj labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0f131ec18a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2941 ipv4=10.0.0.128 ipv6= k8sPodName=openstack/cinder-ks-endpoints-2tpjj subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0f131ec18a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2941 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=db95289e-dcd8-4e17-93a3-4734c8031fd4,k8s:batch.kubernetes.io/job-name=cinder-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=db95289e-dcd8-4e17-93a3-4734c8031fd4,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-ks-endpoints,k8s:release_group=cinder" ipv4=10.0.0.128 ipv6= k8sPodName=openstack/cinder-ks-endpoints-2tpjj subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=0f131ec18a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2941 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.128 ipv6= k8sPodName=openstack/cinder-ks-endpoints-2tpjj line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=db95289e-dcd8-4e17-93a3-4734c8031fd4;k8s:batch.kubernetes.io/job-name=cinder-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=db95289e-dcd8-4e17-93a3-4734c8031fd4;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-ks-endpoints;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0f131ec18a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2941 identity=7810 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=db95289e-dcd8-4e17-93a3-4734c8031fd4,k8s:batch.kubernetes.io/job-name=cinder-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=db95289e-dcd8-4e17-93a3-4734c8031fd4,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-ks-endpoints,k8s:release_group=cinder" ipv4=10.0.0.128 ipv6= k8sPodName=openstack/cinder-ks-endpoints-2tpjj oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0f131ec18a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2941 identity=7810 ipv4=10.0.0.128 ipv6= k8sPodName=openstack/cinder-ks-endpoints-2tpjj subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=0f131ec18a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2941 identity=7810 ipv4=10.0.0.128 ipv6= k8sPodName=openstack/cinder-ks-endpoints-2tpjj subsys=endpoint level=info msg="Successful endpoint creation" containerID=0f131ec18a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2941 identity=7810 ipv4=10.0.0.128 ipv6= k8sPodName=openstack/cinder-ks-endpoints-2tpjj subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=0f131ec18a endpointID=2941 k8sNamespace=openstack k8sPodName=cinder-ks-endpoints-2tpjj subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=db95289e-dcd8-4e17-93a3-4734c8031fd4 k8s:batch.kubernetes.io/job-name=cinder-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=db95289e-dcd8-4e17-93a3-4734c8031fd4 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-ks-endpoints k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=0f131ec18a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2941 identity=7810 ipv4=10.0.0.128 ipv6= k8sPodName=openstack/cinder-ks-endpoints-2tpjj subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.40 7906c16e-f386-4706-adcf-1f58abc4541e default }" containerID=ca427608384a8b5dce28e711f34f44c02a39f098dbdd37ae27dba9976fc468ab datapathConfiguration="&{false false false false false }" interface=lxc80264422392a k8sPodName=openstack/cinder-ks-user-jgdzz labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ca42760838 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=494 ipv4=10.0.0.40 ipv6= k8sPodName=openstack/cinder-ks-user-jgdzz subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ca42760838 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=494 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=0967c293-8e6d-47cb-94c1-51590e8c8751,k8s:batch.kubernetes.io/job-name=cinder-ks-user,k8s:component=ks-user,k8s:controller-uid=0967c293-8e6d-47cb-94c1-51590e8c8751,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-ks-user,k8s:release_group=cinder" ipv4=10.0.0.40 ipv6= k8sPodName=openstack/cinder-ks-user-jgdzz subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=0967c293-8e6d-47cb-94c1-51590e8c8751;k8s:batch.kubernetes.io/job-name=cinder-ks-user;k8s:component=ks-user;k8s:controller-uid=0967c293-8e6d-47cb-94c1-51590e8c8751;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-ks-user;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ca42760838 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=494 identity=4933 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=0967c293-8e6d-47cb-94c1-51590e8c8751,k8s:batch.kubernetes.io/job-name=cinder-ks-user,k8s:component=ks-user,k8s:controller-uid=0967c293-8e6d-47cb-94c1-51590e8c8751,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-ks-user,k8s:release_group=cinder" ipv4=10.0.0.40 ipv6= k8sPodName=openstack/cinder-ks-user-jgdzz oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ca42760838 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=494 identity=4933 ipv4=10.0.0.40 ipv6= k8sPodName=openstack/cinder-ks-user-jgdzz subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=ca42760838 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=494 identity=4933 ipv4=10.0.0.40 ipv6= k8sPodName=openstack/cinder-ks-user-jgdzz subsys=endpoint level=info msg="Successful endpoint creation" containerID=ca42760838 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=494 identity=4933 ipv4=10.0.0.40 ipv6= k8sPodName=openstack/cinder-ks-user-jgdzz subsys=daemon level=info msg="Delete endpoint request" containerID=ca42760838 endpointID=494 k8sNamespace=openstack k8sPodName=cinder-ks-user-jgdzz subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=0967c293-8e6d-47cb-94c1-51590e8c8751 k8s:batch.kubernetes.io/job-name=cinder-ks-user k8s:component=ks-user k8s:controller-uid=0967c293-8e6d-47cb-94c1-51590e8c8751 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-ks-user k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=ca42760838 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=494 identity=4933 ipv4=10.0.0.40 ipv6= k8sPodName=openstack/cinder-ks-user-jgdzz subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.142 01a3da3e-a532-4951-b31d-aadc3fe1bef2 default }" containerID=e573d31c7fa37da095f15f66b19291d4403e932a19361d9c7a1f9aade89270b7 datapathConfiguration="&{false false false false false }" interface=lxc6faf04ca246f k8sPodName=openstack/cinder-backup-storage-init-kfzwr labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e573d31c7f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1227 ipv4=10.0.0.142 ipv6= k8sPodName=openstack/cinder-backup-storage-init-kfzwr subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e573d31c7f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1227 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=29a2f4d8-cec5-459e-8401-00d166f51358,k8s:batch.kubernetes.io/job-name=cinder-backup-storage-init,k8s:component=storage-init,k8s:controller-uid=29a2f4d8-cec5-459e-8401-00d166f51358,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-backup-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-backup-storage-init,k8s:release_group=cinder" ipv4=10.0.0.142 ipv6= k8sPodName=openstack/cinder-backup-storage-init-kfzwr subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=29a2f4d8-cec5-459e-8401-00d166f51358;k8s:batch.kubernetes.io/job-name=cinder-backup-storage-init;k8s:component=storage-init;k8s:controller-uid=29a2f4d8-cec5-459e-8401-00d166f51358;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-backup-storage-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-backup-storage-init;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e573d31c7f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1227 identity=19017 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=29a2f4d8-cec5-459e-8401-00d166f51358,k8s:batch.kubernetes.io/job-name=cinder-backup-storage-init,k8s:component=storage-init,k8s:controller-uid=29a2f4d8-cec5-459e-8401-00d166f51358,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-backup-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-backup-storage-init,k8s:release_group=cinder" ipv4=10.0.0.142 ipv6= k8sPodName=openstack/cinder-backup-storage-init-kfzwr oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=e573d31c7f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1227 identity=19017 ipv4=10.0.0.142 ipv6= k8sPodName=openstack/cinder-backup-storage-init-kfzwr subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e573d31c7f datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1227 identity=19017 ipv4=10.0.0.142 ipv6= k8sPodName=openstack/cinder-backup-storage-init-kfzwr subsys=endpoint level=info msg="Successful endpoint creation" containerID=e573d31c7f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1227 identity=19017 ipv4=10.0.0.142 ipv6= k8sPodName=openstack/cinder-backup-storage-init-kfzwr subsys=daemon level=info msg="Delete endpoint request" containerID=e573d31c7f endpointID=1227 k8sNamespace=openstack k8sPodName=cinder-backup-storage-init-kfzwr subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=29a2f4d8-cec5-459e-8401-00d166f51358 k8s:batch.kubernetes.io/job-name=cinder-backup-storage-init k8s:component=storage-init k8s:controller-uid=29a2f4d8-cec5-459e-8401-00d166f51358 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-backup-storage-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-backup-storage-init k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=e573d31c7f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1227 identity=19017 ipv4=10.0.0.142 ipv6= k8sPodName=openstack/cinder-backup-storage-init-kfzwr subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.229 971e3ef1-884f-4311-9462-6b20150e7ba3 default }" containerID=ecd7959ca7030e9bc249acbf320402da186a5d602bf8df31ee6fbdb1793e94dc datapathConfiguration="&{false false false false false }" interface=lxc3f57f05e6e65 k8sPodName=openstack/cinder-create-internal-tenant-zfngh labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ecd7959ca7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=373 ipv4=10.0.0.229 ipv6= k8sPodName=openstack/cinder-create-internal-tenant-zfngh subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ecd7959ca7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=373 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=60397943-1ff0-4884-a815-e81fbbafb431,k8s:batch.kubernetes.io/job-name=cinder-create-internal-tenant,k8s:component=create-internal-tenant,k8s:controller-uid=60397943-1ff0-4884-a815-e81fbbafb431,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-create-internal-tenant,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-create-internal-tenant,k8s:release_group=cinder" ipv4=10.0.0.229 ipv6= k8sPodName=openstack/cinder-create-internal-tenant-zfngh subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=60397943-1ff0-4884-a815-e81fbbafb431;k8s:batch.kubernetes.io/job-name=cinder-create-internal-tenant;k8s:component=create-internal-tenant;k8s:controller-uid=60397943-1ff0-4884-a815-e81fbbafb431;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-create-internal-tenant;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-create-internal-tenant;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ecd7959ca7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=373 identity=5345 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=60397943-1ff0-4884-a815-e81fbbafb431,k8s:batch.kubernetes.io/job-name=cinder-create-internal-tenant,k8s:component=create-internal-tenant,k8s:controller-uid=60397943-1ff0-4884-a815-e81fbbafb431,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-create-internal-tenant,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-create-internal-tenant,k8s:release_group=cinder" ipv4=10.0.0.229 ipv6= k8sPodName=openstack/cinder-create-internal-tenant-zfngh oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ecd7959ca7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=373 identity=5345 ipv4=10.0.0.229 ipv6= k8sPodName=openstack/cinder-create-internal-tenant-zfngh subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ecd7959ca7 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=373 identity=5345 ipv4=10.0.0.229 ipv6= k8sPodName=openstack/cinder-create-internal-tenant-zfngh subsys=endpoint level=info msg="Successful endpoint creation" containerID=ecd7959ca7 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=373 identity=5345 ipv4=10.0.0.229 ipv6= k8sPodName=openstack/cinder-create-internal-tenant-zfngh subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=ecd7959ca7 endpointID=373 k8sNamespace=openstack k8sPodName=cinder-create-internal-tenant-zfngh subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=60397943-1ff0-4884-a815-e81fbbafb431 k8s:batch.kubernetes.io/job-name=cinder-create-internal-tenant k8s:component=create-internal-tenant k8s:controller-uid=60397943-1ff0-4884-a815-e81fbbafb431 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-create-internal-tenant k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-create-internal-tenant k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=ecd7959ca7 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=373 identity=5345 ipv4=10.0.0.229 ipv6= k8sPodName=openstack/cinder-create-internal-tenant-zfngh subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.17 b716ef4a-690c-440c-8ab4-95cd614da13b default }" containerID=708b75a161bc0d2403e3575a934ffaa203b9c53a13d13e84c359d459a7b01a4e datapathConfiguration="&{false false false false false }" interface=lxc6c575a1e3059 k8sPodName=openstack/cinder-storage-init-25d4d labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=708b75a161 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1240 ipv4=10.0.0.17 ipv6= k8sPodName=openstack/cinder-storage-init-25d4d subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=708b75a161 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1240 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=85630a56-133b-4a20-8461-151da693a2a3,k8s:batch.kubernetes.io/job-name=cinder-storage-init,k8s:component=storage-init,k8s:controller-uid=85630a56-133b-4a20-8461-151da693a2a3,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-storage-init,k8s:release_group=cinder" ipv4=10.0.0.17 ipv6= k8sPodName=openstack/cinder-storage-init-25d4d subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=708b75a161 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1240 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.17 ipv6= k8sPodName=openstack/cinder-storage-init-25d4d line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=85630a56-133b-4a20-8461-151da693a2a3;k8s:batch.kubernetes.io/job-name=cinder-storage-init;k8s:component=storage-init;k8s:controller-uid=85630a56-133b-4a20-8461-151da693a2a3;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-storage-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-storage-init;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=708b75a161 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1240 identity=8582 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=85630a56-133b-4a20-8461-151da693a2a3,k8s:batch.kubernetes.io/job-name=cinder-storage-init,k8s:component=storage-init,k8s:controller-uid=85630a56-133b-4a20-8461-151da693a2a3,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-storage-init,k8s:release_group=cinder" ipv4=10.0.0.17 ipv6= k8sPodName=openstack/cinder-storage-init-25d4d oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=708b75a161 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1240 identity=8582 ipv4=10.0.0.17 ipv6= k8sPodName=openstack/cinder-storage-init-25d4d subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=708b75a161 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1240 identity=8582 ipv4=10.0.0.17 ipv6= k8sPodName=openstack/cinder-storage-init-25d4d subsys=endpoint level=info msg="Successful endpoint creation" containerID=708b75a161 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1240 identity=8582 ipv4=10.0.0.17 ipv6= k8sPodName=openstack/cinder-storage-init-25d4d subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=708b75a161 endpointID=1240 k8sNamespace=openstack k8sPodName=cinder-storage-init-25d4d subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=85630a56-133b-4a20-8461-151da693a2a3 k8s:batch.kubernetes.io/job-name=cinder-storage-init k8s:component=storage-init k8s:controller-uid=85630a56-133b-4a20-8461-151da693a2a3 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-storage-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-storage-init k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=708b75a161 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1240 identity=8582 ipv4=10.0.0.17 ipv6= k8sPodName=openstack/cinder-storage-init-25d4d subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.110 140ec497-734e-48fe-b32e-0f5ebbba9eee default }" containerID=dc5a2925cae237701dae7bb1d0db28cb905fbcb1584119f49f7a57cfb4394bbd datapathConfiguration="&{false false false false false }" interface=lxc3358964fb43d k8sPodName=openstack/cinder-bootstrap-8t9rv labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=dc5a2925ca datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1049 ipv4=10.0.0.110 ipv6= k8sPodName=openstack/cinder-bootstrap-8t9rv subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=dc5a2925ca datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1049 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=1a756f03-9f3d-4182-bbae-7991188e0c21,k8s:batch.kubernetes.io/job-name=cinder-bootstrap,k8s:component=bootstrap,k8s:controller-uid=1a756f03-9f3d-4182-bbae-7991188e0c21,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-bootstrap,k8s:release_group=cinder" ipv4=10.0.0.110 ipv6= k8sPodName=openstack/cinder-bootstrap-8t9rv subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=dc5a2925ca datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1049 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.110 ipv6= k8sPodName=openstack/cinder-bootstrap-8t9rv line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=1a756f03-9f3d-4182-bbae-7991188e0c21;k8s:batch.kubernetes.io/job-name=cinder-bootstrap;k8s:component=bootstrap;k8s:controller-uid=1a756f03-9f3d-4182-bbae-7991188e0c21;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-bootstrap;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-bootstrap;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=dc5a2925ca datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1049 identity=26704 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=1a756f03-9f3d-4182-bbae-7991188e0c21,k8s:batch.kubernetes.io/job-name=cinder-bootstrap,k8s:component=bootstrap,k8s:controller-uid=1a756f03-9f3d-4182-bbae-7991188e0c21,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-bootstrap,k8s:release_group=cinder" ipv4=10.0.0.110 ipv6= k8sPodName=openstack/cinder-bootstrap-8t9rv oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=dc5a2925ca datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1049 identity=26704 ipv4=10.0.0.110 ipv6= k8sPodName=openstack/cinder-bootstrap-8t9rv subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=dc5a2925ca datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1049 identity=26704 ipv4=10.0.0.110 ipv6= k8sPodName=openstack/cinder-bootstrap-8t9rv subsys=endpoint level=info msg="Successful endpoint creation" containerID=dc5a2925ca datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1049 identity=26704 ipv4=10.0.0.110 ipv6= k8sPodName=openstack/cinder-bootstrap-8t9rv subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.43 a2200593-9e20-42a1-9db0-bde1046c9027 default }" containerID=4b70ad04282fbb514e9b1fe1df14f69e088820124310acdc5bc1caf68d352715 datapathConfiguration="&{false false false false false }" interface=lxc07ee5963def4 k8sPodName=openstack/cinder-volume-594b69f7bc-4mkk7 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4b70ad0428 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1733 ipv4=10.0.0.43 ipv6= k8sPodName=openstack/cinder-volume-594b69f7bc-4mkk7 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4b70ad0428 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1733 identityLabels="k8s:application=cinder,k8s:component=volume,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-volume,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=cinder" ipv4=10.0.0.43 ipv6= k8sPodName=openstack/cinder-volume-594b69f7bc-4mkk7 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:component=volume;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-volume;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4b70ad0428 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1733 identity=727 identityLabels="k8s:application=cinder,k8s:component=volume,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-volume,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=cinder" ipv4=10.0.0.43 ipv6= k8sPodName=openstack/cinder-volume-594b69f7bc-4mkk7 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=4b70ad0428 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1733 identity=727 ipv4=10.0.0.43 ipv6= k8sPodName=openstack/cinder-volume-594b69f7bc-4mkk7 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=4b70ad0428 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1733 identity=727 ipv4=10.0.0.43 ipv6= k8sPodName=openstack/cinder-volume-594b69f7bc-4mkk7 subsys=endpoint level=info msg="Successful endpoint creation" containerID=4b70ad0428 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1733 identity=727 ipv4=10.0.0.43 ipv6= k8sPodName=openstack/cinder-volume-594b69f7bc-4mkk7 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.169 2889d88d-ba1f-448c-8b11-9958b554945f default }" containerID=fa1e228fc922ebb3c8aa6dbc7b81e8a7ec14ef0bac36e91f105fb6940cfa0f7e datapathConfiguration="&{false false false false false }" interface=lxc080d72869cac k8sPodName=openstack/cinder-backup-845d6599db-8svg9 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=fa1e228fc9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2392 ipv4=10.0.0.169 ipv6= k8sPodName=openstack/cinder-backup-845d6599db-8svg9 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=fa1e228fc9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2392 identityLabels="k8s:application=cinder,k8s:component=backup,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-backup,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=cinder" ipv4=10.0.0.169 ipv6= k8sPodName=openstack/cinder-backup-845d6599db-8svg9 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:component=backup;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-backup;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=fa1e228fc9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2392 identity=20956 identityLabels="k8s:application=cinder,k8s:component=backup,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-backup,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=cinder" ipv4=10.0.0.169 ipv6= k8sPodName=openstack/cinder-backup-845d6599db-8svg9 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=fa1e228fc9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2392 identity=20956 ipv4=10.0.0.169 ipv6= k8sPodName=openstack/cinder-backup-845d6599db-8svg9 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=fa1e228fc9 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2392 identity=20956 ipv4=10.0.0.169 ipv6= k8sPodName=openstack/cinder-backup-845d6599db-8svg9 subsys=endpoint level=info msg="Successful endpoint creation" containerID=fa1e228fc9 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2392 identity=20956 ipv4=10.0.0.169 ipv6= k8sPodName=openstack/cinder-backup-845d6599db-8svg9 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=dc5a2925ca endpointID=1049 k8sNamespace=openstack k8sPodName=cinder-bootstrap-8t9rv subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=1a756f03-9f3d-4182-bbae-7991188e0c21 k8s:batch.kubernetes.io/job-name=cinder-bootstrap k8s:component=bootstrap k8s:controller-uid=1a756f03-9f3d-4182-bbae-7991188e0c21 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-bootstrap k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-bootstrap k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=dc5a2925ca datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1049 identity=26704 ipv4=10.0.0.110 ipv6= k8sPodName=openstack/cinder-bootstrap-8t9rv subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.36 e3f2566b-a86d-4daf-955a-b5ca76fbe512 default }" containerID=20bab63d5e5bdbd22ea1d43ea6c4e395d13422216f21efff7d7c4efffef921de datapathConfiguration="&{false false false false false }" interface=lxc97a41a306c40 k8sPodName=openstack/placement-api-b69847d75-qz8bl labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=20bab63d5e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=123 ipv4=10.0.0.36 ipv6= k8sPodName=openstack/placement-api-b69847d75-qz8bl subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=20bab63d5e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=123 identityLabels="k8s:application=placement,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=placement" ipv4=10.0.0.36 ipv6= k8sPodName=openstack/placement-api-b69847d75-qz8bl subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=placement;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=placement-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=placement;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=20bab63d5e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=123 identity=14295 identityLabels="k8s:application=placement,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=placement" ipv4=10.0.0.36 ipv6= k8sPodName=openstack/placement-api-b69847d75-qz8bl oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=20bab63d5e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=123 identity=14295 ipv4=10.0.0.36 ipv6= k8sPodName=openstack/placement-api-b69847d75-qz8bl subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.149 b5784fa6-19bc-4659-99b5-aef77a89e577 default }" containerID=7c8c5275d5206dbbcbaa0bc9218ec0462b5cf0ccc0721e6a492b042486a6a11f datapathConfiguration="&{false false false false false }" interface=lxc1952f714c026 k8sPodName=openstack/placement-db-init-g8x9b labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7c8c5275d5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3737 ipv4=10.0.0.149 ipv6= k8sPodName=openstack/placement-db-init-g8x9b subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7c8c5275d5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3737 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=656f461e-29a5-49e0-a078-8dc835d393e1,k8s:batch.kubernetes.io/job-name=placement-db-init,k8s:component=db-init,k8s:controller-uid=656f461e-29a5-49e0-a078-8dc835d393e1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-db-init,k8s:release_group=placement" ipv4=10.0.0.149 ipv6= k8sPodName=openstack/placement-db-init-g8x9b subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=placement;k8s:batch.kubernetes.io/controller-uid=656f461e-29a5-49e0-a078-8dc835d393e1;k8s:batch.kubernetes.io/job-name=placement-db-init;k8s:component=db-init;k8s:controller-uid=656f461e-29a5-49e0-a078-8dc835d393e1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=placement-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=placement-db-init;k8s:release_group=placement;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7c8c5275d5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3737 identity=6055 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=656f461e-29a5-49e0-a078-8dc835d393e1,k8s:batch.kubernetes.io/job-name=placement-db-init,k8s:component=db-init,k8s:controller-uid=656f461e-29a5-49e0-a078-8dc835d393e1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-db-init,k8s:release_group=placement" ipv4=10.0.0.149 ipv6= k8sPodName=openstack/placement-db-init-g8x9b oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7c8c5275d5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3737 identity=6055 ipv4=10.0.0.149 ipv6= k8sPodName=openstack/placement-db-init-g8x9b subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=20bab63d5e datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=123 identity=14295 ipv4=10.0.0.36 ipv6= k8sPodName=openstack/placement-api-b69847d75-qz8bl subsys=endpoint level=info msg="Successful endpoint creation" containerID=20bab63d5e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=123 identity=14295 ipv4=10.0.0.36 ipv6= k8sPodName=openstack/placement-api-b69847d75-qz8bl subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=7c8c5275d5 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3737 identity=6055 ipv4=10.0.0.149 ipv6= k8sPodName=openstack/placement-db-init-g8x9b subsys=endpoint level=info msg="Successful endpoint creation" containerID=7c8c5275d5 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3737 identity=6055 ipv4=10.0.0.149 ipv6= k8sPodName=openstack/placement-db-init-g8x9b subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=7c8c5275d5 endpointID=3737 k8sNamespace=openstack k8sPodName=placement-db-init-g8x9b subsys=daemon level=info msg="Releasing key" key="[k8s:application=placement k8s:batch.kubernetes.io/controller-uid=656f461e-29a5-49e0-a078-8dc835d393e1 k8s:batch.kubernetes.io/job-name=placement-db-init k8s:component=db-init k8s:controller-uid=656f461e-29a5-49e0-a078-8dc835d393e1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=placement-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=placement-db-init k8s:release_group=placement]" subsys=allocator level=info msg="Removed endpoint" containerID=7c8c5275d5 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3737 identity=6055 ipv4=10.0.0.149 ipv6= k8sPodName=openstack/placement-db-init-g8x9b subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.75 f0a15d61-c563-4a15-bb3d-086439446cfc default }" containerID=698c6264457cd486eb01781d05fb9e21683d0d760c5bc35d220ec974ebde2f77 datapathConfiguration="&{false false false false false }" interface=lxca86e42f2e6ad k8sPodName=openstack/placement-db-sync-gxtns labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=698c626445 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3965 ipv4=10.0.0.75 ipv6= k8sPodName=openstack/placement-db-sync-gxtns subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=698c626445 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3965 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=9e656b2d-d007-4975-ad95-f39a413d2bc4,k8s:batch.kubernetes.io/job-name=placement-db-sync,k8s:component=db-sync,k8s:controller-uid=9e656b2d-d007-4975-ad95-f39a413d2bc4,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-db-sync,k8s:release_group=placement" ipv4=10.0.0.75 ipv6= k8sPodName=openstack/placement-db-sync-gxtns subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=placement;k8s:batch.kubernetes.io/controller-uid=9e656b2d-d007-4975-ad95-f39a413d2bc4;k8s:batch.kubernetes.io/job-name=placement-db-sync;k8s:component=db-sync;k8s:controller-uid=9e656b2d-d007-4975-ad95-f39a413d2bc4;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=placement-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=placement-db-sync;k8s:release_group=placement;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=698c626445 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3965 identity=8545 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=9e656b2d-d007-4975-ad95-f39a413d2bc4,k8s:batch.kubernetes.io/job-name=placement-db-sync,k8s:component=db-sync,k8s:controller-uid=9e656b2d-d007-4975-ad95-f39a413d2bc4,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-db-sync,k8s:release_group=placement" ipv4=10.0.0.75 ipv6= k8sPodName=openstack/placement-db-sync-gxtns oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=698c626445 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3965 identity=8545 ipv4=10.0.0.75 ipv6= k8sPodName=openstack/placement-db-sync-gxtns subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=698c626445 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3965 identity=8545 ipv4=10.0.0.75 ipv6= k8sPodName=openstack/placement-db-sync-gxtns subsys=endpoint level=info msg="Successful endpoint creation" containerID=698c626445 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3965 identity=8545 ipv4=10.0.0.75 ipv6= k8sPodName=openstack/placement-db-sync-gxtns subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=698c626445 endpointID=3965 k8sNamespace=openstack k8sPodName=placement-db-sync-gxtns subsys=daemon level=info msg="Releasing key" key="[k8s:application=placement k8s:batch.kubernetes.io/controller-uid=9e656b2d-d007-4975-ad95-f39a413d2bc4 k8s:batch.kubernetes.io/job-name=placement-db-sync k8s:component=db-sync k8s:controller-uid=9e656b2d-d007-4975-ad95-f39a413d2bc4 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=placement-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=placement-db-sync k8s:release_group=placement]" subsys=allocator level=info msg="Removed endpoint" containerID=698c626445 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3965 identity=8545 ipv4=10.0.0.75 ipv6= k8sPodName=openstack/placement-db-sync-gxtns subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.208 38b4d5b3-3916-4ccf-82dd-de3752659eb3 default }" containerID=743e7aab4524245ea3ad0bbc6bfd8eea544a730aa49c9b7192b73466f6dce0df datapathConfiguration="&{false false false false false }" interface=lxc3c83146ed830 k8sPodName=openstack/placement-ks-service-98ff9 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=743e7aab45 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3035 ipv4=10.0.0.208 ipv6= k8sPodName=openstack/placement-ks-service-98ff9 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=743e7aab45 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3035 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=bf40deee-e081-4b7f-8ae9-27c935804c4a,k8s:batch.kubernetes.io/job-name=placement-ks-service,k8s:component=ks-service,k8s:controller-uid=bf40deee-e081-4b7f-8ae9-27c935804c4a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-ks-service,k8s:release_group=placement" ipv4=10.0.0.208 ipv6= k8sPodName=openstack/placement-ks-service-98ff9 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=placement;k8s:batch.kubernetes.io/controller-uid=bf40deee-e081-4b7f-8ae9-27c935804c4a;k8s:batch.kubernetes.io/job-name=placement-ks-service;k8s:component=ks-service;k8s:controller-uid=bf40deee-e081-4b7f-8ae9-27c935804c4a;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=placement-ks-service;k8s:release_group=placement;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=743e7aab45 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3035 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.208 ipv6= k8sPodName=openstack/placement-ks-service-98ff9 line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=743e7aab45 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3035 identity=1925 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=bf40deee-e081-4b7f-8ae9-27c935804c4a,k8s:batch.kubernetes.io/job-name=placement-ks-service,k8s:component=ks-service,k8s:controller-uid=bf40deee-e081-4b7f-8ae9-27c935804c4a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-ks-service,k8s:release_group=placement" ipv4=10.0.0.208 ipv6= k8sPodName=openstack/placement-ks-service-98ff9 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=743e7aab45 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3035 identity=1925 ipv4=10.0.0.208 ipv6= k8sPodName=openstack/placement-ks-service-98ff9 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=743e7aab45 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3035 identity=1925 ipv4=10.0.0.208 ipv6= k8sPodName=openstack/placement-ks-service-98ff9 subsys=endpoint level=info msg="Successful endpoint creation" containerID=743e7aab45 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3035 identity=1925 ipv4=10.0.0.208 ipv6= k8sPodName=openstack/placement-ks-service-98ff9 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=743e7aab45 endpointID=3035 k8sNamespace=openstack k8sPodName=placement-ks-service-98ff9 subsys=daemon level=info msg="Releasing key" key="[k8s:application=placement k8s:batch.kubernetes.io/controller-uid=bf40deee-e081-4b7f-8ae9-27c935804c4a k8s:batch.kubernetes.io/job-name=placement-ks-service k8s:component=ks-service k8s:controller-uid=bf40deee-e081-4b7f-8ae9-27c935804c4a k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=placement-ks-service k8s:release_group=placement]" subsys=allocator level=info msg="Removed endpoint" containerID=743e7aab45 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3035 identity=1925 ipv4=10.0.0.208 ipv6= k8sPodName=openstack/placement-ks-service-98ff9 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.210 2e038438-fff5-4cc0-8a8f-0bc6c95522ac default }" containerID=15c74f7b734dcb31e193bcf7c06725df8314e6e77073138d99f3f6dbabca505c datapathConfiguration="&{false false false false false }" interface=lxca6283ae54098 k8sPodName=openstack/placement-ks-user-42wjd labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=15c74f7b73 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=279 ipv4=10.0.0.210 ipv6= k8sPodName=openstack/placement-ks-user-42wjd subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=15c74f7b73 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=279 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=4b3b2ea5-bdf7-4597-9702-a94384928677,k8s:batch.kubernetes.io/job-name=placement-ks-user,k8s:component=ks-user,k8s:controller-uid=4b3b2ea5-bdf7-4597-9702-a94384928677,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-ks-user,k8s:release_group=placement" ipv4=10.0.0.210 ipv6= k8sPodName=openstack/placement-ks-user-42wjd subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=placement;k8s:batch.kubernetes.io/controller-uid=4b3b2ea5-bdf7-4597-9702-a94384928677;k8s:batch.kubernetes.io/job-name=placement-ks-user;k8s:component=ks-user;k8s:controller-uid=4b3b2ea5-bdf7-4597-9702-a94384928677;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=placement-ks-user;k8s:release_group=placement;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=15c74f7b73 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=279 identity=31873 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=4b3b2ea5-bdf7-4597-9702-a94384928677,k8s:batch.kubernetes.io/job-name=placement-ks-user,k8s:component=ks-user,k8s:controller-uid=4b3b2ea5-bdf7-4597-9702-a94384928677,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-ks-user,k8s:release_group=placement" ipv4=10.0.0.210 ipv6= k8sPodName=openstack/placement-ks-user-42wjd oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=15c74f7b73 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=279 identity=31873 ipv4=10.0.0.210 ipv6= k8sPodName=openstack/placement-ks-user-42wjd subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=15c74f7b73 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=279 identity=31873 ipv4=10.0.0.210 ipv6= k8sPodName=openstack/placement-ks-user-42wjd subsys=endpoint level=info msg="Successful endpoint creation" containerID=15c74f7b73 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=279 identity=31873 ipv4=10.0.0.210 ipv6= k8sPodName=openstack/placement-ks-user-42wjd subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=15c74f7b73 endpointID=279 k8sNamespace=openstack k8sPodName=placement-ks-user-42wjd subsys=daemon level=info msg="Releasing key" key="[k8s:application=placement k8s:batch.kubernetes.io/controller-uid=4b3b2ea5-bdf7-4597-9702-a94384928677 k8s:batch.kubernetes.io/job-name=placement-ks-user k8s:component=ks-user k8s:controller-uid=4b3b2ea5-bdf7-4597-9702-a94384928677 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=placement-ks-user k8s:release_group=placement]" subsys=allocator level=info msg="Removed endpoint" containerID=15c74f7b73 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=279 identity=31873 ipv4=10.0.0.210 ipv6= k8sPodName=openstack/placement-ks-user-42wjd subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.59 ef139019-ea31-4167-87b9-6212e7342085 default }" containerID=9d7f75ffd3c773ac0f5a10f971259581d756102d201ddc5a0ffcbd466e5d3aad datapathConfiguration="&{false false false false false }" interface=lxc0fcb1be4ab86 k8sPodName=openstack/placement-ks-endpoints-24j76 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9d7f75ffd3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2297 ipv4=10.0.0.59 ipv6= k8sPodName=openstack/placement-ks-endpoints-24j76 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9d7f75ffd3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2297 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=c06b8ba9-e348-45e6-a65c-645258cdc8f5,k8s:batch.kubernetes.io/job-name=placement-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=c06b8ba9-e348-45e6-a65c-645258cdc8f5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-ks-endpoints,k8s:release_group=placement" ipv4=10.0.0.59 ipv6= k8sPodName=openstack/placement-ks-endpoints-24j76 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=placement;k8s:batch.kubernetes.io/controller-uid=c06b8ba9-e348-45e6-a65c-645258cdc8f5;k8s:batch.kubernetes.io/job-name=placement-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=c06b8ba9-e348-45e6-a65c-645258cdc8f5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=placement-ks-endpoints;k8s:release_group=placement;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=9d7f75ffd3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2297 identity=25109 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=c06b8ba9-e348-45e6-a65c-645258cdc8f5,k8s:batch.kubernetes.io/job-name=placement-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=c06b8ba9-e348-45e6-a65c-645258cdc8f5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-ks-endpoints,k8s:release_group=placement" ipv4=10.0.0.59 ipv6= k8sPodName=openstack/placement-ks-endpoints-24j76 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9d7f75ffd3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2297 identity=25109 ipv4=10.0.0.59 ipv6= k8sPodName=openstack/placement-ks-endpoints-24j76 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=9d7f75ffd3 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2297 identity=25109 ipv4=10.0.0.59 ipv6= k8sPodName=openstack/placement-ks-endpoints-24j76 subsys=endpoint level=info msg="Successful endpoint creation" containerID=9d7f75ffd3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2297 identity=25109 ipv4=10.0.0.59 ipv6= k8sPodName=openstack/placement-ks-endpoints-24j76 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=9d7f75ffd3 endpointID=2297 k8sNamespace=openstack k8sPodName=placement-ks-endpoints-24j76 subsys=daemon level=info msg="Releasing key" key="[k8s:application=placement k8s:batch.kubernetes.io/controller-uid=c06b8ba9-e348-45e6-a65c-645258cdc8f5 k8s:batch.kubernetes.io/job-name=placement-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=c06b8ba9-e348-45e6-a65c-645258cdc8f5 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=placement-ks-endpoints k8s:release_group=placement]" subsys=allocator level=info msg="Removed endpoint" containerID=9d7f75ffd3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2297 identity=25109 ipv4=10.0.0.59 ipv6= k8sPodName=openstack/placement-ks-endpoints-24j76 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.198 e0a351e0-a866-49d2-b081-47b688f2d6ed default }" containerID=bb219c115ef406211a569013f365decc799c30977355482876e63000b7ac995c datapathConfiguration="&{false false false false false }" interface=lxc8a8965c9cc63 k8sPodName=openstack/keystone-fernet-rotate-29633040-lhtcj labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=bb219c115e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3412 ipv4=10.0.0.198 ipv6= k8sPodName=openstack/keystone-fernet-rotate-29633040-lhtcj subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=bb219c115e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3412 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=5ae9ef7b-9bff-4bec-b974-1fe52ca7f7fe,k8s:batch.kubernetes.io/job-name=keystone-fernet-rotate-29633040,k8s:component=fernet-rotate,k8s:controller-uid=5ae9ef7b-9bff-4bec-b974-1fe52ca7f7fe,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-rotate,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-rotate-29633040,k8s:release_group=keystone" ipv4=10.0.0.198 ipv6= k8sPodName=openstack/keystone-fernet-rotate-29633040-lhtcj subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=5ae9ef7b-9bff-4bec-b974-1fe52ca7f7fe;k8s:batch.kubernetes.io/job-name=keystone-fernet-rotate-29633040;k8s:component=fernet-rotate;k8s:controller-uid=5ae9ef7b-9bff-4bec-b974-1fe52ca7f7fe;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-rotate;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-fernet-rotate-29633040;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=bb219c115e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3412 identity=61212 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=5ae9ef7b-9bff-4bec-b974-1fe52ca7f7fe,k8s:batch.kubernetes.io/job-name=keystone-fernet-rotate-29633040,k8s:component=fernet-rotate,k8s:controller-uid=5ae9ef7b-9bff-4bec-b974-1fe52ca7f7fe,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-rotate,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-rotate-29633040,k8s:release_group=keystone" ipv4=10.0.0.198 ipv6= k8sPodName=openstack/keystone-fernet-rotate-29633040-lhtcj oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=bb219c115e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3412 identity=61212 ipv4=10.0.0.198 ipv6= k8sPodName=openstack/keystone-fernet-rotate-29633040-lhtcj subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=bb219c115e datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3412 identity=61212 ipv4=10.0.0.198 ipv6= k8sPodName=openstack/keystone-fernet-rotate-29633040-lhtcj subsys=endpoint level=info msg="Successful endpoint creation" containerID=bb219c115e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3412 identity=61212 ipv4=10.0.0.198 ipv6= k8sPodName=openstack/keystone-fernet-rotate-29633040-lhtcj subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=bb219c115e endpointID=3412 k8sNamespace=openstack k8sPodName=keystone-fernet-rotate-29633040-lhtcj subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=5ae9ef7b-9bff-4bec-b974-1fe52ca7f7fe k8s:batch.kubernetes.io/job-name=keystone-fernet-rotate-29633040 k8s:component=fernet-rotate k8s:controller-uid=5ae9ef7b-9bff-4bec-b974-1fe52ca7f7fe k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-rotate k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-fernet-rotate-29633040 k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=bb219c115e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3412 identity=61212 ipv4=10.0.0.198 ipv6= k8sPodName=openstack/keystone-fernet-rotate-29633040-lhtcj subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.61 e1feefb5-2db9-4742-bd31-6286f6758801 default }" containerID=abbdb8ab6922fcecf678448f5e3fda91b194544ae82a9ef66184294a3686692e datapathConfiguration="&{false false false false false }" interface=lxcb8f5ce5c8b20 k8sPodName=openstack/cinder-volume-usage-audit-29633045-sxg59 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=abbdb8ab69 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2970 ipv4=10.0.0.61 ipv6= k8sPodName=openstack/cinder-volume-usage-audit-29633045-sxg59 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=abbdb8ab69 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2970 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=c4ddb62f-2729-41ab-8df7-befa53c090f2,k8s:batch.kubernetes.io/job-name=cinder-volume-usage-audit-29633045,k8s:component=volume-usage-audit,k8s:controller-uid=c4ddb62f-2729-41ab-8df7-befa53c090f2,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-volume-usage-audit,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-volume-usage-audit-29633045,k8s:release_group=cinder" ipv4=10.0.0.61 ipv6= k8sPodName=openstack/cinder-volume-usage-audit-29633045-sxg59 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=abbdb8ab69 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2970 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.61 ipv6= k8sPodName=openstack/cinder-volume-usage-audit-29633045-sxg59 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=c4ddb62f-2729-41ab-8df7-befa53c090f2;k8s:batch.kubernetes.io/job-name=cinder-volume-usage-audit-29633045;k8s:component=volume-usage-audit;k8s:controller-uid=c4ddb62f-2729-41ab-8df7-befa53c090f2;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-volume-usage-audit;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-volume-usage-audit-29633045;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=abbdb8ab69 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2970 identity=37084 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=c4ddb62f-2729-41ab-8df7-befa53c090f2,k8s:batch.kubernetes.io/job-name=cinder-volume-usage-audit-29633045,k8s:component=volume-usage-audit,k8s:controller-uid=c4ddb62f-2729-41ab-8df7-befa53c090f2,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-volume-usage-audit,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-volume-usage-audit-29633045,k8s:release_group=cinder" ipv4=10.0.0.61 ipv6= k8sPodName=openstack/cinder-volume-usage-audit-29633045-sxg59 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=abbdb8ab69 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2970 identity=37084 ipv4=10.0.0.61 ipv6= k8sPodName=openstack/cinder-volume-usage-audit-29633045-sxg59 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=abbdb8ab69 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2970 identity=37084 ipv4=10.0.0.61 ipv6= k8sPodName=openstack/cinder-volume-usage-audit-29633045-sxg59 subsys=endpoint level=info msg="Successful endpoint creation" containerID=abbdb8ab69 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2970 identity=37084 ipv4=10.0.0.61 ipv6= k8sPodName=openstack/cinder-volume-usage-audit-29633045-sxg59 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=abbdb8ab69 endpointID=2970 k8sNamespace=openstack k8sPodName=cinder-volume-usage-audit-29633045-sxg59 subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=c4ddb62f-2729-41ab-8df7-befa53c090f2 k8s:batch.kubernetes.io/job-name=cinder-volume-usage-audit-29633045 k8s:component=volume-usage-audit k8s:controller-uid=c4ddb62f-2729-41ab-8df7-befa53c090f2 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-volume-usage-audit k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-volume-usage-audit-29633045 k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=abbdb8ab69 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2970 identity=37084 ipv4=10.0.0.61 ipv6= k8sPodName=openstack/cinder-volume-usage-audit-29633045-sxg59 subsys=endpoint