level=info msg="Memory available for map entries (0.003% of 67421634560B): 168554086B" subsys=config level=info msg="option bpf-ct-global-tcp-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-ct-global-any-max set by dynamic sizing to 295708" subsys=config level=info msg="option bpf-nat-global-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-neigh-global-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-sock-rev-map-max set by dynamic sizing to 295708" subsys=config level=info msg=" --agent-health-port='9879'" subsys=daemon level=info msg=" --agent-labels=''" subsys=daemon level=info msg=" --agent-liveness-update-interval='1s'" subsys=daemon level=info msg=" --agent-not-ready-taint-key='node.cilium.io/agent-not-ready'" subsys=daemon level=info msg=" --allocator-list-timeout='3m0s'" subsys=daemon level=info msg=" --allow-icmp-frag-needed='true'" subsys=daemon level=info msg=" --allow-localhost='auto'" subsys=daemon level=info msg=" --annotate-k8s-node='false'" subsys=daemon level=info msg=" --api-rate-limit=''" subsys=daemon level=info msg=" --arping-refresh-period='30s'" subsys=daemon level=info msg=" --auto-create-cilium-node-resource='true'" subsys=daemon level=info msg=" --auto-direct-node-routes='false'" subsys=daemon level=info msg=" --bgp-announce-lb-ip='false'" subsys=daemon level=info msg=" --bgp-announce-pod-cidr='false'" subsys=daemon level=info msg=" --bgp-config-path='/var/lib/cilium/bgp/config.yaml'" subsys=daemon level=info msg=" --bpf-auth-map-max='524288'" subsys=daemon level=info msg=" --bpf-ct-global-any-max='262144'" subsys=daemon level=info msg=" --bpf-ct-global-tcp-max='524288'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-any='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp='6h0m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp-fin='10s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp-syn='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-any='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-tcp='6h0m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-tcp-grace='1m0s'" subsys=daemon level=info msg=" --bpf-filter-priority='1'" subsys=daemon level=info msg=" --bpf-fragments-map-max='8192'" subsys=daemon level=info msg=" --bpf-lb-acceleration='disabled'" subsys=daemon level=info msg=" --bpf-lb-affinity-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-algorithm='random'" subsys=daemon level=info msg=" --bpf-lb-dev-ip-addr-inherit=''" subsys=daemon level=info msg=" --bpf-lb-dsr-dispatch='opt'" subsys=daemon level=info msg=" --bpf-lb-dsr-l4-xlate='frontend'" subsys=daemon level=info msg=" --bpf-lb-external-clusterip='false'" subsys=daemon level=info msg=" --bpf-lb-maglev-hash-seed='JLfvgnHc2kaSUFaI'" subsys=daemon level=info msg=" --bpf-lb-maglev-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-maglev-table-size='16381'" subsys=daemon level=info msg=" --bpf-lb-map-max='65536'" subsys=daemon level=info msg=" --bpf-lb-mode='snat'" subsys=daemon level=info msg=" --bpf-lb-rev-nat-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-rss-ipv4-src-cidr=''" subsys=daemon level=info msg=" --bpf-lb-rss-ipv6-src-cidr=''" subsys=daemon level=info msg=" --bpf-lb-service-backend-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-service-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-sock='false'" subsys=daemon level=info msg=" --bpf-lb-sock-hostns-only='false'" subsys=daemon level=info msg=" --bpf-lb-source-range-map-max='0'" subsys=daemon level=info msg=" --bpf-map-dynamic-size-ratio='0.0025'" subsys=daemon level=info msg=" --bpf-map-event-buffers=''" subsys=daemon level=info msg=" --bpf-nat-global-max='524288'" subsys=daemon level=info msg=" --bpf-neigh-global-max='524288'" subsys=daemon level=info msg=" --bpf-policy-map-full-reconciliation-interval='15m0s'" subsys=daemon level=info msg=" --bpf-policy-map-max='16384'" subsys=daemon level=info msg=" --bpf-root='/sys/fs/bpf'" subsys=daemon level=info msg=" --bpf-sock-rev-map-max='262144'" subsys=daemon level=info msg=" --bypass-ip-availability-upon-restore='false'" subsys=daemon level=info msg=" --certificates-directory='/var/run/cilium/certs'" subsys=daemon level=info msg=" --cflags=''" subsys=daemon level=info msg=" --cgroup-root='/run/cilium/cgroupv2'" subsys=daemon level=info msg=" --cilium-endpoint-gc-interval='5m0s'" subsys=daemon level=info msg=" --cluster-health-port='4240'" subsys=daemon level=info msg=" --cluster-id='0'" subsys=daemon level=info msg=" --cluster-name='default'" subsys=daemon level=info msg=" --cluster-pool-ipv4-cidr='10.0.0.0/8'" subsys=daemon level=info msg=" --cluster-pool-ipv4-mask-size='24'" subsys=daemon level=info msg=" --clustermesh-config='/var/lib/cilium/clustermesh/'" subsys=daemon level=info msg=" --clustermesh-ip-identities-sync-timeout='1m0s'" subsys=daemon level=info msg=" --cmdref=''" subsys=daemon level=info msg=" --cni-chaining-mode='none'" subsys=daemon level=info msg=" --cni-chaining-target=''" subsys=daemon level=info msg=" --cni-exclusive='true'" subsys=daemon level=info msg=" --cni-external-routing='false'" subsys=daemon level=info msg=" --cni-log-file='/var/run/cilium/cilium-cni.log'" subsys=daemon level=info msg=" --cnp-node-status-gc-interval='0s'" subsys=daemon level=info msg=" --config=''" subsys=daemon level=info msg=" --config-dir='/tmp/cilium/config-map'" subsys=daemon level=info msg=" --config-sources='config-map:kube-system/cilium-config'" subsys=daemon level=info msg=" --conntrack-gc-interval='0s'" subsys=daemon level=info msg=" --conntrack-gc-max-interval='0s'" subsys=daemon level=info msg=" --crd-wait-timeout='5m0s'" subsys=daemon level=info msg=" --custom-cni-conf='false'" subsys=daemon level=info msg=" --datapath-mode='veth'" subsys=daemon level=info msg=" --debug='false'" subsys=daemon level=info msg=" --debug-verbose=''" subsys=daemon level=info msg=" --derive-masquerade-ip-addr-from-device=''" subsys=daemon level=info msg=" --devices=''" subsys=daemon level=info msg=" --direct-routing-device=''" subsys=daemon level=info msg=" --disable-cnp-status-updates='true'" subsys=daemon level=info msg=" --disable-endpoint-crd='false'" subsys=daemon level=info msg=" --disable-envoy-version-check='false'" subsys=daemon level=info msg=" --disable-iptables-feeder-rules=''" subsys=daemon level=info msg=" --dns-max-ips-per-restored-rule='1000'" subsys=daemon level=info msg=" --dns-policy-unload-on-shutdown='false'" subsys=daemon level=info msg=" --dnsproxy-concurrency-limit='0'" subsys=daemon level=info msg=" --dnsproxy-concurrency-processing-grace-period='0s'" subsys=daemon level=info msg=" --dnsproxy-enable-transparent-mode='true'" subsys=daemon level=info msg=" --dnsproxy-lock-count='128'" subsys=daemon level=info msg=" --dnsproxy-lock-timeout='500ms'" subsys=daemon level=info msg=" --egress-gateway-policy-map-max='16384'" subsys=daemon level=info msg=" --egress-gateway-reconciliation-trigger-interval='1s'" subsys=daemon level=info msg=" --egress-masquerade-interfaces=''" subsys=daemon level=info msg=" --egress-multi-home-ip-rule-compat='false'" subsys=daemon level=info msg=" --enable-auto-protect-node-port-range='true'" subsys=daemon level=info msg=" --enable-bandwidth-manager='false'" subsys=daemon level=info msg=" --enable-bbr='false'" subsys=daemon level=info msg=" --enable-bgp-control-plane='false'" subsys=daemon level=info msg=" --enable-bpf-clock-probe='false'" subsys=daemon level=info msg=" --enable-bpf-masquerade='false'" subsys=daemon level=info msg=" --enable-bpf-tproxy='false'" subsys=daemon level=info msg=" --enable-cilium-api-server-access='*'" subsys=daemon level=info msg=" --enable-cilium-endpoint-slice='false'" subsys=daemon level=info msg=" --enable-cilium-health-api-server-access='*'" subsys=daemon level=info msg=" --enable-custom-calls='false'" subsys=daemon level=info msg=" --enable-endpoint-health-checking='true'" subsys=daemon level=info msg=" --enable-endpoint-routes='false'" subsys=daemon level=info msg=" --enable-envoy-config='false'" subsys=daemon level=info msg=" --enable-external-ips='false'" subsys=daemon level=info msg=" --enable-health-check-nodeport='true'" subsys=daemon level=info msg=" --enable-health-checking='true'" subsys=daemon level=info msg=" --enable-high-scale-ipcache='false'" subsys=daemon level=info msg=" --enable-host-firewall='false'" subsys=daemon level=info msg=" --enable-host-legacy-routing='false'" subsys=daemon level=info msg=" --enable-host-port='false'" subsys=daemon level=info msg=" --enable-hubble='false'" subsys=daemon level=info msg=" --enable-hubble-recorder-api='true'" subsys=daemon level=info msg=" --enable-icmp-rules='true'" subsys=daemon level=info msg=" --enable-identity-mark='true'" subsys=daemon level=info msg=" --enable-ip-masq-agent='false'" subsys=daemon level=info msg=" --enable-ipsec='false'" subsys=daemon level=info msg=" --enable-ipsec-key-watcher='true'" subsys=daemon level=info msg=" --enable-ipv4='true'" subsys=daemon level=info msg=" --enable-ipv4-big-tcp='false'" subsys=daemon level=info msg=" --enable-ipv4-egress-gateway='false'" subsys=daemon level=info msg=" --enable-ipv4-fragment-tracking='true'" subsys=daemon level=info msg=" --enable-ipv4-masquerade='true'" subsys=daemon level=info msg=" --enable-ipv6='false'" subsys=daemon level=info msg=" --enable-ipv6-big-tcp='false'" subsys=daemon level=info msg=" --enable-ipv6-masquerade='true'" subsys=daemon level=info msg=" --enable-ipv6-ndp='false'" subsys=daemon level=info msg=" --enable-k8s='true'" subsys=daemon level=info msg=" --enable-k8s-api-discovery='false'" subsys=daemon level=info msg=" --enable-k8s-endpoint-slice='true'" subsys=daemon level=info msg=" --enable-k8s-event-handover='false'" subsys=daemon level=info msg=" --enable-k8s-networkpolicy='true'" subsys=daemon level=info msg=" --enable-k8s-terminating-endpoint='true'" subsys=daemon level=info msg=" --enable-l2-announcements='false'" subsys=daemon level=info msg=" --enable-l2-neigh-discovery='true'" subsys=daemon level=info msg=" --enable-l2-pod-announcements='false'" subsys=daemon level=info msg=" --enable-l7-proxy='true'" subsys=daemon level=info msg=" --enable-local-node-route='true'" subsys=daemon level=info msg=" --enable-local-redirect-policy='false'" subsys=daemon level=info msg=" --enable-mke='false'" subsys=daemon level=info msg=" --enable-monitor='true'" subsys=daemon level=info msg=" --enable-nat46x64-gateway='false'" subsys=daemon level=info msg=" --enable-node-port='false'" subsys=daemon level=info msg=" --enable-pmtu-discovery='false'" subsys=daemon level=info msg=" --enable-policy='default'" subsys=daemon level=info msg=" --enable-recorder='false'" subsys=daemon level=info msg=" --enable-remote-node-identity='true'" subsys=daemon level=info msg=" --enable-runtime-device-detection='false'" subsys=daemon level=info msg=" --enable-sctp='false'" subsys=daemon level=info msg=" --enable-service-topology='false'" subsys=daemon level=info msg=" --enable-session-affinity='false'" subsys=daemon level=info msg=" --enable-srv6='false'" subsys=daemon level=info msg=" --enable-stale-cilium-endpoint-cleanup='true'" subsys=daemon level=info msg=" --enable-svc-source-range-check='true'" subsys=daemon level=info msg=" --enable-tracing='false'" subsys=daemon level=info msg=" --enable-unreachable-routes='false'" subsys=daemon level=info msg=" --enable-vtep='false'" subsys=daemon level=info msg=" --enable-well-known-identities='false'" subsys=daemon level=info msg=" --enable-wireguard='false'" subsys=daemon level=info msg=" --enable-wireguard-userspace-fallback='false'" subsys=daemon level=info msg=" --enable-xdp-prefilter='false'" subsys=daemon level=info msg=" --enable-xt-socket-fallback='true'" subsys=daemon level=info msg=" --encrypt-interface=''" subsys=daemon level=info msg=" --encrypt-node='false'" subsys=daemon level=info msg=" --endpoint-gc-interval='5m0s'" subsys=daemon level=info msg=" --endpoint-queue-size='25'" subsys=daemon level=info msg=" --endpoint-status=''" subsys=daemon level=info msg=" --envoy-config-timeout='2m0s'" subsys=daemon level=info msg=" --envoy-log=''" subsys=daemon level=info msg=" --exclude-local-address=''" subsys=daemon level=info msg=" --external-envoy-proxy='false'" subsys=daemon level=info msg=" --fixed-identity-mapping=''" subsys=daemon level=info msg=" --fqdn-regex-compile-lru-size='1024'" subsys=daemon level=info msg=" --gops-port='9890'" subsys=daemon level=info msg=" --http-403-msg=''" subsys=daemon level=info msg=" --http-idle-timeout='0'" subsys=daemon level=info msg=" --http-max-grpc-timeout='0'" subsys=daemon level=info msg=" --http-normalize-path='true'" subsys=daemon level=info msg=" --http-request-timeout='3600'" subsys=daemon level=info msg=" --http-retry-count='3'" subsys=daemon level=info msg=" --http-retry-timeout='0'" subsys=daemon level=info msg=" --hubble-disable-tls='false'" subsys=daemon level=info msg=" --hubble-event-buffer-capacity='4095'" subsys=daemon level=info msg=" --hubble-event-queue-size='0'" subsys=daemon level=info msg=" --hubble-export-file-compress='false'" subsys=daemon level=info msg=" --hubble-export-file-max-backups='5'" subsys=daemon level=info msg=" --hubble-export-file-max-size-mb='10'" subsys=daemon level=info msg=" --hubble-export-file-path=''" subsys=daemon level=info msg=" --hubble-listen-address=''" subsys=daemon level=info msg=" --hubble-metrics=''" subsys=daemon level=info msg=" --hubble-metrics-server=''" subsys=daemon level=info msg=" --hubble-monitor-events=''" subsys=daemon level=info msg=" --hubble-prefer-ipv6='false'" subsys=daemon level=info msg=" --hubble-recorder-sink-queue-size='1024'" subsys=daemon level=info msg=" --hubble-recorder-storage-path='/var/run/cilium/pcaps'" subsys=daemon level=info msg=" --hubble-skip-unknown-cgroup-ids='true'" subsys=daemon level=info msg=" --hubble-socket-path='/var/run/cilium/hubble.sock'" subsys=daemon level=info msg=" --hubble-tls-cert-file=''" subsys=daemon level=info msg=" --hubble-tls-client-ca-files=''" subsys=daemon level=info msg=" --hubble-tls-key-file=''" subsys=daemon level=info msg=" --identity-allocation-mode='crd'" subsys=daemon level=info msg=" --identity-change-grace-period='5s'" subsys=daemon level=info msg=" --identity-gc-interval='15m0s'" subsys=daemon level=info msg=" --identity-heartbeat-timeout='30m0s'" subsys=daemon level=info msg=" --identity-restore-grace-period='10m0s'" subsys=daemon level=info msg=" --install-egress-gateway-routes='false'" subsys=daemon level=info msg=" --install-iptables-rules='true'" subsys=daemon level=info msg=" --install-no-conntrack-iptables-rules='false'" subsys=daemon level=info msg=" --ip-allocation-timeout='2m0s'" subsys=daemon level=info msg=" --ip-masq-agent-config-path='/etc/config/ip-masq-agent'" subsys=daemon level=info msg=" --ipam='cluster-pool'" subsys=daemon level=info msg=" --ipam-cilium-node-update-rate='15s'" subsys=daemon level=info msg=" --ipam-multi-pool-pre-allocation='default=8'" subsys=daemon level=info msg=" --ipsec-key-file=''" subsys=daemon level=info msg=" --ipsec-key-rotation-duration='5m0s'" subsys=daemon level=info msg=" --iptables-lock-timeout='5s'" subsys=daemon level=info msg=" --iptables-random-fully='false'" subsys=daemon level=info msg=" --ipv4-native-routing-cidr=''" subsys=daemon level=info msg=" --ipv4-node='auto'" subsys=daemon level=info msg=" --ipv4-pod-subnets=''" subsys=daemon level=info msg=" --ipv4-range='auto'" subsys=daemon level=info msg=" --ipv4-service-loopback-address='169.254.42.1'" subsys=daemon level=info msg=" --ipv4-service-range='auto'" subsys=daemon level=info msg=" --ipv6-cluster-alloc-cidr='f00d::/64'" subsys=daemon level=info msg=" --ipv6-mcast-device=''" subsys=daemon level=info msg=" --ipv6-native-routing-cidr=''" subsys=daemon level=info msg=" --ipv6-node='auto'" subsys=daemon level=info msg=" --ipv6-pod-subnets=''" subsys=daemon level=info msg=" --ipv6-range='auto'" subsys=daemon level=info msg=" --ipv6-service-range='auto'" subsys=daemon level=info msg=" --join-cluster='false'" subsys=daemon level=info msg=" --k8s-api-server=''" subsys=daemon level=info msg=" --k8s-client-burst='10'" subsys=daemon level=info msg=" --k8s-client-qps='5'" subsys=daemon level=info msg=" --k8s-heartbeat-timeout='30s'" subsys=daemon level=info msg=" --k8s-kubeconfig-path=''" subsys=daemon level=info msg=" --k8s-namespace='kube-system'" subsys=daemon level=info msg=" --k8s-require-ipv4-pod-cidr='false'" subsys=daemon level=info msg=" --k8s-require-ipv6-pod-cidr='false'" subsys=daemon level=info msg=" --k8s-service-cache-size='128'" subsys=daemon level=info msg=" --k8s-service-proxy-name=''" subsys=daemon level=info msg=" --k8s-sync-timeout='3m0s'" subsys=daemon level=info msg=" --k8s-watcher-endpoint-selector='metadata.name!=kube-scheduler,metadata.name!=kube-controller-manager,metadata.name!=etcd-operator,metadata.name!=gcp-controller-manager'" subsys=daemon level=info msg=" --keep-config='false'" subsys=daemon level=info msg=" --kube-proxy-replacement='disabled'" subsys=daemon level=info msg=" --kube-proxy-replacement-healthz-bind-address=''" subsys=daemon level=info msg=" --kvstore=''" subsys=daemon level=info msg=" --kvstore-connectivity-timeout='2m0s'" subsys=daemon level=info msg=" --kvstore-lease-ttl='15m0s'" subsys=daemon level=info msg=" --kvstore-max-consecutive-quorum-errors='2'" subsys=daemon level=info msg=" --kvstore-opt=''" subsys=daemon level=info msg=" --kvstore-periodic-sync='5m0s'" subsys=daemon level=info msg=" --l2-announcements-lease-duration='15s'" subsys=daemon level=info msg=" --l2-announcements-renew-deadline='5s'" subsys=daemon level=info msg=" --l2-announcements-retry-period='2s'" subsys=daemon level=info msg=" --l2-pod-announcements-interface=''" subsys=daemon level=info msg=" --label-prefix-file=''" subsys=daemon level=info msg=" --labels=''" subsys=daemon level=info msg=" --lib-dir='/var/lib/cilium'" subsys=daemon level=info msg=" --local-max-addr-scope='252'" subsys=daemon level=info msg=" --local-router-ipv4=''" subsys=daemon level=info msg=" --local-router-ipv6=''" subsys=daemon level=info msg=" --log-driver=''" subsys=daemon level=info msg=" --log-opt=''" subsys=daemon level=info msg=" --log-system-load='false'" subsys=daemon level=info msg=" --max-controller-interval='0'" subsys=daemon level=info msg=" --mesh-auth-enabled='true'" subsys=daemon level=info msg=" --mesh-auth-gc-interval='5m0s'" subsys=daemon level=info msg=" --mesh-auth-mutual-listener-port='0'" subsys=daemon level=info msg=" --mesh-auth-queue-size='1024'" subsys=daemon level=info msg=" --mesh-auth-rotated-identities-queue-size='1024'" subsys=daemon level=info msg=" --mesh-auth-signal-backoff-duration='1s'" subsys=daemon level=info msg=" --mesh-auth-spiffe-trust-domain='spiffe.cilium'" subsys=daemon level=info msg=" --mesh-auth-spire-admin-socket=''" subsys=daemon level=info msg=" --metrics=''" subsys=daemon level=info msg=" --mke-cgroup-mount=''" subsys=daemon level=info msg=" --monitor-aggregation='medium'" subsys=daemon level=info msg=" --monitor-aggregation-flags='all'" subsys=daemon level=info msg=" --monitor-aggregation-interval='5s'" subsys=daemon level=info msg=" --monitor-queue-size='0'" subsys=daemon level=info msg=" --mtu='0'" subsys=daemon level=info msg=" --node-encryption-opt-out-labels='node-role.kubernetes.io/control-plane'" subsys=daemon level=info msg=" --node-port-acceleration='disabled'" subsys=daemon level=info msg=" --node-port-algorithm='random'" subsys=daemon level=info msg=" --node-port-bind-protection='true'" subsys=daemon level=info msg=" --node-port-mode='snat'" subsys=daemon level=info msg=" --node-port-range='30000,32767'" subsys=daemon level=info msg=" --nodes-gc-interval='5m0s'" subsys=daemon level=info msg=" --operator-api-serve-addr='127.0.0.1:9234'" subsys=daemon level=info msg=" --policy-audit-mode='false'" subsys=daemon level=info msg=" --policy-queue-size='100'" subsys=daemon level=info msg=" --policy-trigger-interval='1s'" subsys=daemon level=info msg=" --pprof='false'" subsys=daemon level=info msg=" --pprof-address='localhost'" subsys=daemon level=info msg=" --pprof-port='6060'" subsys=daemon level=info msg=" --preallocate-bpf-maps='false'" subsys=daemon level=info msg=" --prepend-iptables-chains='true'" subsys=daemon level=info msg=" --procfs='/host/proc'" subsys=daemon level=info msg=" --prometheus-serve-addr=':9962'" subsys=daemon level=info msg=" --proxy-connect-timeout='2'" subsys=daemon level=info msg=" --proxy-gid='1337'" subsys=daemon level=info msg=" --proxy-idle-timeout-seconds='60'" subsys=daemon level=info msg=" --proxy-max-connection-duration-seconds='0'" subsys=daemon level=info msg=" --proxy-max-requests-per-connection='0'" subsys=daemon level=info msg=" --proxy-prometheus-port='9964'" subsys=daemon level=info msg=" --read-cni-conf=''" subsys=daemon level=info msg=" --remove-cilium-node-taints='true'" subsys=daemon level=info msg=" --restore='true'" subsys=daemon level=info msg=" --route-metric='0'" subsys=daemon level=info msg=" --routing-mode='tunnel'" subsys=daemon level=info msg=" --set-cilium-is-up-condition='true'" subsys=daemon level=info msg=" --set-cilium-node-taints='true'" subsys=daemon level=info msg=" --sidecar-istio-proxy-image='cilium/istio_proxy'" subsys=daemon level=info msg=" --single-cluster-route='false'" subsys=daemon level=info msg=" --skip-cnp-status-startup-clean='false'" subsys=daemon level=info msg=" --socket-path='/var/run/cilium/cilium.sock'" subsys=daemon level=info msg=" --srv6-encap-mode='reduced'" subsys=daemon level=info msg=" --state-dir='/var/run/cilium'" subsys=daemon level=info msg=" --synchronize-k8s-nodes='true'" subsys=daemon level=info msg=" --tofqdns-dns-reject-response-code='refused'" subsys=daemon level=info msg=" --tofqdns-enable-dns-compression='true'" subsys=daemon level=info msg=" --tofqdns-endpoint-max-ip-per-hostname='50'" subsys=daemon level=info msg=" --tofqdns-idle-connection-grace-period='0s'" subsys=daemon level=info msg=" --tofqdns-max-deferred-connection-deletes='10000'" subsys=daemon level=info msg=" --tofqdns-min-ttl='0'" subsys=daemon level=info msg=" --tofqdns-pre-cache=''" subsys=daemon level=info msg=" --tofqdns-proxy-port='0'" subsys=daemon level=info msg=" --tofqdns-proxy-response-max-delay='100ms'" subsys=daemon level=info msg=" --trace-payloadlen='128'" subsys=daemon level=info msg=" --trace-sock='true'" subsys=daemon level=info msg=" --tunnel=''" subsys=daemon level=info msg=" --tunnel-port='6082'" subsys=daemon level=info msg=" --tunnel-protocol='geneve'" subsys=daemon level=info msg=" --unmanaged-pod-watcher-interval='15'" subsys=daemon level=info msg=" --use-cilium-internal-ip-for-ipsec='false'" subsys=daemon level=info msg=" --version='false'" subsys=daemon level=info msg=" --vlan-bpf-bypass=''" subsys=daemon level=info msg=" --vtep-cidr=''" subsys=daemon level=info msg=" --vtep-endpoint=''" subsys=daemon level=info msg=" --vtep-mac=''" subsys=daemon level=info msg=" --vtep-mask=''" subsys=daemon level=info msg=" --wireguard-encapsulate='false'" subsys=daemon level=info msg=" --write-cni-conf-when-ready='/host/etc/cni/net.d/05-cilium.conflist'" subsys=daemon level=info msg=" _ _ _" subsys=daemon level=info msg=" ___|_| |_|_ _ _____" subsys=daemon level=info msg="| _| | | | | | |" subsys=daemon level=info msg="|___|_|_|_|___|_|_|_|" subsys=daemon level=info msg="Cilium 1.14.8 cf6e022e 2024-03-13T12:23:35-04:00 go version go1.21.8 linux/amd64" subsys=daemon level=info msg="clang (10.0.0) and kernel (5.15.0) versions: OK!" subsys=linux-datapath level=info msg="linking environment: OK!" subsys=linux-datapath level=info msg="Kernel config file not found: if the agent fails to start, check the system requirements at https://docs.cilium.io/en/stable/operations/system_requirements" subsys=probes level=info msg="Detected mounted BPF filesystem at /sys/fs/bpf" subsys=bpf level=info msg="Mounted cgroupv2 filesystem at /run/cilium/cgroupv2" subsys=cgroups level=info msg="Parsing base label prefixes from default label list" subsys=labels-filter level=info msg="Parsing additional label prefixes from user inputs: []" subsys=labels-filter level=info msg="Final label prefixes to be used for identity evaluation:" subsys=labels-filter level=info msg=" - reserved:.*" subsys=labels-filter level=info msg=" - :io\\.kubernetes\\.pod\\.namespace" subsys=labels-filter level=info msg=" - :io\\.cilium\\.k8s\\.namespace\\.labels" subsys=labels-filter level=info msg=" - :app\\.kubernetes\\.io" subsys=labels-filter level=info msg=" - !:io\\.kubernetes" subsys=labels-filter level=info msg=" - !:kubernetes\\.io" subsys=labels-filter level=info msg=" - !:.*beta\\.kubernetes\\.io" subsys=labels-filter level=info msg=" - !:k8s\\.io" subsys=labels-filter level=info msg=" - !:pod-template-generation" subsys=labels-filter level=info msg=" - !:pod-template-hash" subsys=labels-filter level=info msg=" - !:controller-revision-hash" subsys=labels-filter level=info msg=" - !:annotation.*" subsys=labels-filter level=info msg=" - !:etcd_node" subsys=labels-filter level=info msg=Invoked duration=1.050019ms function="pprof.glob..func1 (cell.go:50)" subsys=hive level=info msg=Invoked duration="58.512µs" function="gops.registerGopsHooks (cell.go:38)" subsys=hive level=info msg=Invoked duration=1.127902ms function="metrics.NewRegistry (registry.go:65)" subsys=hive level=info msg=Invoked duration="7.17µs" function="metrics.glob..func1 (cell.go:12)" subsys=hive level=info msg="Spire Delegate API Client is disabled as no socket path is configured" subsys=spire-delegate level=info msg="Mutual authentication handler is disabled as no port is configured" subsys=auth level=info msg=Invoked duration=97.860335ms function="cmd.glob..func4 (daemon_main.go:1607)" subsys=hive level=info msg=Invoked duration="10.391µs" function="gc.registerSignalHandler (cell.go:47)" subsys=hive level=info msg=Invoked duration="13.56µs" function="utime.initUtimeSync (cell.go:29)" subsys=hive level=info msg=Invoked duration="53.601µs" function="agentliveness.newAgentLivenessUpdater (agent_liveness.go:43)" subsys=hive level=info msg=Invoked duration="56.132µs" function="l2responder.NewL2ResponderReconciler (l2responder.go:63)" subsys=hive level=info msg=Invoked duration="61.392µs" function="garp.newGARPProcessor (processor.go:27)" subsys=hive level=info msg=Starting subsys=hive level=info msg="Started gops server" address="127.0.0.1:9890" subsys=gops level=info msg="Start hook executed" duration="444.452µs" function="gops.registerGopsHooks.func1 (cell.go:43)" subsys=hive level=info msg="Start hook executed" duration="1.47µs" function="metrics.NewRegistry.func1 (registry.go:86)" subsys=hive level=info msg="Establishing connection to apiserver" host="https://10.96.0.1:443" subsys=k8s-client level=info msg="Serving prometheus metrics on :9962" subsys=metrics level=info msg="Connected to apiserver" subsys=k8s-client level=info msg="Start hook executed" duration=9.575838ms function="client.(*compositeClientset).onStart" subsys=hive level=info msg="Start hook executed" duration=9.220959ms function="authmap.newAuthMap.func1 (cell.go:27)" subsys=hive level=info msg="Start hook executed" duration="34.171µs" function="configmap.newMap.func1 (cell.go:23)" subsys=hive level=info msg="Start hook executed" duration="166.284µs" function="signalmap.newMap.func1 (cell.go:44)" subsys=hive level=info msg="Start hook executed" duration="597.026µs" function="nodemap.newNodeMap.func1 (cell.go:23)" subsys=hive level=info msg="Start hook executed" duration="112.673µs" function="eventsmap.newEventsMap.func1 (cell.go:35)" subsys=hive level=info msg="Start hook executed" duration="59.322µs" function="*cni.cniConfigManager.Start" subsys=hive level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Wrote CNI configuration file to /host/etc/cni/net.d/05-cilium.conflist" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Start hook executed" duration=41.257764ms function="datapath.newDatapath.func1 (cells.go:113)" subsys=hive level=info msg="Restored 0 node IDs from the BPF map" subsys=linux-datapath level=info msg="Start hook executed" duration="84.482µs" function="datapath.newDatapath.func2 (cells.go:126)" subsys=hive level=info msg="Start hook executed" duration="8.62µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Node].Start" subsys=hive level=info msg="Start hook executed" duration="2.26µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumNode].Start" subsys=hive level=info msg="Using autogenerated IPv4 allocation range" subsys=node v4Prefix=10.238.0.0/16 level=info msg="no local ciliumnode found, will not restore cilium internal ips from k8s" subsys=daemon level=info msg="Start hook executed" duration=106.949609ms function="node.NewLocalNodeStore.func1 (local_node_store.go:76)" subsys=hive level=info msg="Start hook executed" duration="11.011µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Start" subsys=hive level=info msg="Start hook executed" duration=200.461993ms function="*manager.diffStore[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Start" subsys=hive level=info msg="Start hook executed" duration="3.7µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s.Endpoints].Start" subsys=hive level=info msg="Using discoveryv1.EndpointSlice" subsys=k8s level=info msg="Start hook executed" duration=201.056769ms function="*manager.diffStore[*github.com/cilium/cilium/pkg/k8s.Endpoints].Start" subsys=hive level=info msg="Start hook executed" duration="12.301µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Pod].Start" subsys=hive level=info msg="Start hook executed" duration="2.22µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Namespace].Start" subsys=hive level=info msg="Start hook executed" duration="11.36µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumNetworkPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="143.494µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumClusterwideNetworkPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="2.93µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumCIDRGroup].Start" subsys=hive level=info msg="Start hook executed" duration="148.874µs" function="endpointmanager.newDefaultEndpointManager.func1 (cell.go:203)" subsys=hive level=info msg="Start hook executed" duration="73.432µs" function="cmd.newPolicyTrifecta.func1 (policy.go:135)" subsys=hive level=info msg="Start hook executed" duration="77.442µs" function="*manager.manager.Start" subsys=hive level=info msg="Serving cilium node monitor v1.2 API at unix:///var/run/cilium/monitor1_2.sock" subsys=monitor-agent level=info msg="Start hook executed" duration="260.118µs" function="agent.newMonitorAgent.func1 (cell.go:61)" subsys=hive level=info msg="Start hook executed" duration="2.41µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumL2AnnouncementPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="8.04µs" function="*job.group.Start" subsys=hive level=info msg="Start hook executed" duration="171.245µs" function="proxy.newProxy.func1 (cell.go:55)" subsys=hive level=info msg="Envoy: Starting xDS gRPC server listening on /var/run/cilium/envoy/sockets/xds.sock" subsys=envoy-manager level=info msg="Start hook executed" duration="695.719µs" function="signal.provideSignalManager.func1 (cell.go:25)" subsys=hive level=info msg="Datapath signal listener running" subsys=signal level=info msg="Start hook executed" duration="882.735µs" function="auth.registerAuthManager.func1 (cell.go:109)" subsys=hive level=info msg="Start hook executed" duration="2.86µs" function="auth.registerGCJobs.func1 (cell.go:158)" subsys=hive level=info msg="Start hook executed" duration="16.811µs" function="*job.group.Start" subsys=hive level=warning msg="Deprecated value for --kube-proxy-replacement: disabled (use either \"true\", or \"false\")" subsys=daemon level=info msg="Auto-disabling \"enable-node-port\", \"enable-external-ips\", \"bpf-lb-sock\", \"enable-host-port\" features and falling back to \"enable-host-legacy-routing\"" subsys=daemon level=info msg="Inheriting MTU from external network interface" device=ens3 ipAddr=199.204.45.238 mtu=1500 subsys=mtu level=info msg="Removed map pin at /sys/fs/bpf/tc/globals/cilium_ipcache, recreating and re-pinning map cilium_ipcache" file-path=/sys/fs/bpf/tc/globals/cilium_ipcache name=cilium_ipcache subsys=bpf level=info msg="Removed map pin at /sys/fs/bpf/tc/globals/cilium_tunnel_map, recreating and re-pinning map cilium_tunnel_map" file-path=/sys/fs/bpf/tc/globals/cilium_tunnel_map name=cilium_tunnel_map subsys=bpf level=info msg="Restored services from maps" failedServices=0 restoredServices=0 subsys=service level=info msg="Restored backends from maps" failedBackends=0 restoredBackends=0 skippedBackends=0 subsys=service level=info msg="Reading old endpoints..." subsys=daemon level=info msg="No old endpoints found." subsys=daemon level=info msg="Waiting until all Cilium CRDs are available" subsys=k8s level=info msg="All Cilium CRDs have been found and are available" subsys=k8s level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=warning msg="Unable to get node resource" error="ciliumnodes.cilium.io \"instance\" not found" subsys=nodediscovery level=warning msg="Unable to get node resource" error="ciliumnodes.cilium.io \"instance\" not found" subsys=nodediscovery level=info msg="Successfully created CiliumNode resource" subsys=nodediscovery level=warning msg="Unable to create CiliumNode resource, will retry" error="ciliumnodes.cilium.io \"instance\" already exists" subsys=nodediscovery level=info msg="Retrieved node information from cilium node" nodeName=instance subsys=k8s level=info msg="Received own node information from API server" ipAddr.ipv4=199.204.45.238 ipAddr.ipv6="" k8sNodeIP=199.204.45.238 labels="map[beta.kubernetes.io/arch:amd64 beta.kubernetes.io/os:linux kubernetes.io/arch:amd64 kubernetes.io/hostname:instance kubernetes.io/os:linux node-role.kubernetes.io/control-plane: node.kubernetes.io/exclude-from-external-load-balancers:]" nodeName=instance subsys=k8s v4Prefix=10.0.0.0/24 v6Prefix="" level=info msg="k8s mode: Allowing localhost to reach local endpoints" subsys=daemon level=info msg="Detected devices" devices="[]" subsys=linux-datapath level=info msg="Enabling k8s event listener" subsys=k8s-watcher level=info msg="Removing stale endpoint interfaces" subsys=daemon level=info msg="Waiting until local node addressing before starting watchers depending on it" subsys=k8s-watcher level=info msg="Skipping kvstore configuration" subsys=daemon level=info msg="Initializing node addressing" subsys=daemon level=info msg="Initializing cluster-pool IPAM" subsys=ipam v4Prefix=10.0.0.0/24 v6Prefix="" level=info msg="Restoring endpoints..." subsys=daemon level=info msg="Endpoints restored" failed=0 restored=0 subsys=daemon level=info msg="Addressing information:" subsys=daemon level=info msg=" Cluster-Name: default" subsys=daemon level=info msg=" Cluster-ID: 0" subsys=daemon level=info msg=" Local node-name: instance" subsys=daemon level=info msg=" Node-IPv6: " subsys=daemon level=info msg=" External-Node IPv4: 199.204.45.238" subsys=daemon level=info msg=" Internal-Node IPv4: 10.0.0.207" subsys=daemon level=info msg=" IPv4 allocation prefix: 10.0.0.0/24" subsys=daemon level=info msg=" Loopback IPv4: 169.254.42.1" subsys=daemon level=info msg=" Local IPv4 addresses:" subsys=daemon level=info msg=" - 199.204.45.238" subsys=daemon level=info msg=" - 172.17.0.100" subsys=daemon level=info msg=" - 10.96.240.200" subsys=daemon level=info msg="Node updated" clusterName=default nodeName=instance subsys=nodemanager level=info msg="Adding local node to cluster" node="{instance default [{InternalIP 199.204.45.238} {CiliumInternalIP 10.0.0.207}] 10.0.0.0/24 [] [] 10.0.0.32 0 local 0 map[beta.kubernetes.io/arch:amd64 beta.kubernetes.io/os:linux kubernetes.io/arch:amd64 kubernetes.io/hostname:instance kubernetes.io/os:linux node-role.kubernetes.io/control-plane: node.kubernetes.io/exclude-from-external-load-balancers:] map[] 1 }" subsys=nodediscovery level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Waiting until all pre-existing resources have been received" subsys=k8s-watcher level=info msg="Initializing identity allocator" subsys=identity-cache level=info msg="Allocating identities between range" cluster-id=0 max=65535 min=256 subsys=identity-cache level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.forwarding sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.accept_local sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.send_redirects sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.forwarding sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.accept_local sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.send_redirects sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.core.bpf_jit_enable sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.all.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.fib_multipath_use_neigh sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=kernel.unprivileged_bpf_disabled sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=kernel.timer_migration sysParamValue=0 level=info msg="Setting up BPF datapath" bpfClockSource=ktime bpfInsnSet="" subsys=datapath-loader level=info msg="Iptables rules installed" subsys=iptables level=info msg="Adding new proxy port rules for cilium-dns-egress:39633" id=cilium-dns-egress subsys=proxy level=info msg="Iptables proxy rules installed" subsys=iptables level=info msg="Start hook executed" duration=2.640408675s function="cmd.newDaemonPromise.func1 (daemon_main.go:1663)" subsys=hive level=info msg="Start hook executed" duration="19.571µs" function="utime.initUtimeSync.func1 (cell.go:33)" subsys=hive level=info msg="Initializing daemon" subsys=daemon level=info msg="Validating configured node address ranges" subsys=daemon level=info msg="Starting IP identity watcher" subsys=ipcache level=info msg="Start hook executed" duration="27.261µs" function="*job.group.Start" subsys=hive level=info msg="Starting connection tracking garbage collector" subsys=daemon level=info msg="Start hook executed" duration="38.971µs" function="l2respondermap.newMap.func1 (l2_responder_map4.go:44)" subsys=hive level=info msg="Start hook executed" duration="10.671µs" function="*job.group.Start" subsys=hive level=info msg="Initial scan of connection tracking completed" subsys=ct-gc level=info msg="Regenerating restored endpoints" numRestored=0 subsys=daemon level=info msg="Creating host endpoint" subsys=daemon level=info msg="Finished regenerating restored endpoints" regenerated=0 subsys=daemon total=0 level=info msg="Deleted orphan backends" orphanBackends=0 subsys=service level=info msg="New endpoint" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1398 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1398 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Identity of endpoint changed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1398 identity=1 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,reserved:host" ipv4= ipv6= k8sPodName=/ oldIdentity="no identity" subsys=endpoint level=info msg="Launching Cilium health daemon" subsys=daemon level=info msg="Launching Cilium health endpoint" subsys=daemon level=info msg="Started healthz status API server" address="127.0.0.1:9879" subsys=daemon level=info msg="Processing queued endpoint deletion requests from /var/run/cilium/deleteQueue" subsys=daemon level=info msg="processing 0 queued deletion requests" subsys=daemon level=info msg="Initializing Cilium API" subsys=daemon level=info msg="Daemon initialization completed" bootstrapTime=3.789523102s subsys=daemon level=info msg="Hubble server is disabled" subsys=hubble level=info msg="Serving cilium API at unix:///var/run/cilium/cilium.sock" subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.227 b8c3cec4-0d1a-414d-b789-8711cb059736 default }" containerID=297deb65b407c974a85acb0e35801a78d3c41fcf4b4ad6bf43ed3279aea8660d datapathConfiguration="&{false false false false false }" interface=lxc5fa90ce34685 k8sPodName=kube-system/coredns-7c96b6546b-cllkw labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=297deb65b4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=475 ipv4=10.0.0.227 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-cllkw subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=297deb65b4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=475 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.227 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-cllkw subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:kube-system]" subsys=crd-allocator level=info msg="Compiled new BPF template" BPFCompilationTime=350.996309ms file-path=/var/run/cilium/state/templates/b8e877b3a99cc93677e96346540c4ff21130b6eb02f89958379c7f47f69ab821/bpf_host.o subsys=datapath-loader level=info msg="Allocated new global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=coredns;k8s:io.kubernetes.pod.namespace=kube-system;k8s:k8s-app=kube-dns;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=297deb65b4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=475 identity=3539 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.227 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-cllkw oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=297deb65b4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=475 identity=3539 ipv4=10.0.0.227 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-cllkw subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.105 df61fdb5-adbc-4976-b29b-ccdf1824aaf1 default }" containerID=f0d994d8615297d80508293680c3162f48b9030ffdddd7c6b7df3e745499d78b datapathConfiguration="&{false false false false false }" interface=lxc9794861e97bc k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-fjc7h labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f0d994d861 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1822 ipv4=10.0.0.105 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-fjc7h subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f0d994d861 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1822 identityLabels="k8s:app=certgen,k8s:batch.kubernetes.io/controller-uid=0803cd25-5013-408f-9ebc-266a6f095dc7,k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen,k8s:controller-uid=0803cd25-5013-408f-9ebc-266a6f095dc7,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen,k8s:io.kubernetes.pod.namespace=envoy-gateway-system,k8s:job-name=envoy-gateway-gateway-helm-certgen" ipv4=10.0.0.105 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-fjc7h subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name:envoy-gateway-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=certgen;k8s:batch.kubernetes.io/controller-uid=0803cd25-5013-408f-9ebc-266a6f095dc7;k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen;k8s:controller-uid=0803cd25-5013-408f-9ebc-266a6f095dc7;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system;k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen;k8s:io.kubernetes.pod.namespace=envoy-gateway-system;k8s:job-name=envoy-gateway-gateway-helm-certgen;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f0d994d861 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1822 identity=20196 identityLabels="k8s:app=certgen,k8s:batch.kubernetes.io/controller-uid=0803cd25-5013-408f-9ebc-266a6f095dc7,k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen,k8s:controller-uid=0803cd25-5013-408f-9ebc-266a6f095dc7,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen,k8s:io.kubernetes.pod.namespace=envoy-gateway-system,k8s:job-name=envoy-gateway-gateway-helm-certgen" ipv4=10.0.0.105 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-fjc7h oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f0d994d861 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1822 identity=20196 ipv4=10.0.0.105 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-fjc7h subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1398 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="New endpoint" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=934 ipv4=10.0.0.32 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=934 identityLabels="reserved:health" ipv4=10.0.0.32 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Identity of endpoint changed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=934 identity=4 identityLabels="reserved:health" ipv4=10.0.0.32 ipv6= k8sPodName=/ oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Compiled new BPF template" BPFCompilationTime=1.081022833s file-path=/var/run/cilium/state/templates/4846add52ef2aec6e5d0bb38e18a5389fbdc35c9a72f9f8fb389f3f006f07774/bpf_lxc.o subsys=datapath-loader level=info msg="Rewrote endpoint BPF program" containerID=f0d994d861 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1822 identity=20196 ipv4=10.0.0.105 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-fjc7h subsys=endpoint level=info msg="Successful endpoint creation" containerID=f0d994d861 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1822 identity=20196 ipv4=10.0.0.105 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-fjc7h subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=934 identity=4 ipv4=10.0.0.32 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=297deb65b4 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=475 identity=3539 ipv4=10.0.0.227 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-cllkw subsys=endpoint level=info msg="Successful endpoint creation" containerID=297deb65b4 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=475 identity=3539 ipv4=10.0.0.227 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-cllkw subsys=daemon level=info msg="Serving cilium health API at unix:///var/run/cilium/health.sock" subsys=health-server level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=f0d994d861 endpointID=1822 k8sNamespace=envoy-gateway-system k8sPodName=envoy-gateway-gateway-helm-certgen-fjc7h subsys=daemon level=info msg="Releasing key" key="[k8s:app=certgen k8s:batch.kubernetes.io/controller-uid=0803cd25-5013-408f-9ebc-266a6f095dc7 k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen k8s:controller-uid=0803cd25-5013-408f-9ebc-266a6f095dc7 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen k8s:io.kubernetes.pod.namespace=envoy-gateway-system k8s:job-name=envoy-gateway-gateway-helm-certgen]" subsys=allocator level=info msg="Removed endpoint" containerID=f0d994d861 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1822 identity=20196 ipv4=10.0.0.105 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-fjc7h subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.47 cdc0474c-7c85-4179-8042-97695eb369df default }" containerID=7b5e444675d7853d6870d6355a584f6f8909730d0ad21d7f16e19a3c6787a6b3 datapathConfiguration="&{false false false false false }" interface=lxc485f4ed9b33d k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-8m9l5 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7b5e444675 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1411 ipv4=10.0.0.47 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-8m9l5 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7b5e444675 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1411 identityLabels="k8s:app.kubernetes.io/instance=envoy-gateway,k8s:app.kubernetes.io/name=gateway-helm,k8s:control-plane=envoy-gateway,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway,k8s:io.kubernetes.pod.namespace=envoy-gateway-system" ipv4=10.0.0.47 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-8m9l5 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name:envoy-gateway-system]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=7b5e444675 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1411 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.47 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-8m9l5 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=envoy-gateway;k8s:app.kubernetes.io/name=gateway-helm;k8s:control-plane=envoy-gateway;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system;k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway;k8s:io.kubernetes.pod.namespace=envoy-gateway-system;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7b5e444675 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1411 identity=36749 identityLabels="k8s:app.kubernetes.io/instance=envoy-gateway,k8s:app.kubernetes.io/name=gateway-helm,k8s:control-plane=envoy-gateway,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway,k8s:io.kubernetes.pod.namespace=envoy-gateway-system" ipv4=10.0.0.47 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-8m9l5 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7b5e444675 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1411 identity=36749 ipv4=10.0.0.47 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-8m9l5 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=7b5e444675 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1411 identity=36749 ipv4=10.0.0.47 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-8m9l5 subsys=endpoint level=info msg="Successful endpoint creation" containerID=7b5e444675 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1411 identity=36749 ipv4=10.0.0.47 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-8m9l5 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1398 identity=1 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,k8s:openstack-compute-node=enabled,k8s:openstack-control-plane=enabled,k8s:openvswitch=enabled,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_hostns_01398 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_hostns_01398 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_hostns_01398 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_hostns_01398:pending" subsys=bpf level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_netdev_00005 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_netdev_00005 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005:pending" subsys=bpf level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1398 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.8 88d5caab-6881-4712-9ced-9740281fe8f0 default }" containerID=bb644497620488f4cc7288e2e198ae20e99811dd7d26e292e1750319e77da3ef datapathConfiguration="&{false false false false false }" interface=lxc5b217eff8097 k8sPodName=kube-system/coredns-67659f764b-488np labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=bb64449762 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2576 ipv4=10.0.0.8 ipv6= k8sPodName=kube-system/coredns-67659f764b-488np subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=bb64449762 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2576 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.8 ipv6= k8sPodName=kube-system/coredns-67659f764b-488np subsys=endpoint level=info msg="Identity of endpoint changed" containerID=bb64449762 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2576 identity=3539 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.8 ipv6= k8sPodName=kube-system/coredns-67659f764b-488np oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=bb64449762 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2576 identity=3539 ipv4=10.0.0.8 ipv6= k8sPodName=kube-system/coredns-67659f764b-488np subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.224 b03d8b0e-a1c7-4419-8606-bdbd36c73c48 default }" containerID=8f0a12709c4f0666d34600c237cd33f84c4e8b67e4ca747af129f8294c9d8fef datapathConfiguration="&{false false false false false }" interface=lxc9dd68efb5e17 k8sPodName=kube-system/coredns-67659f764b-bjkgq labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8f0a12709c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2335 ipv4=10.0.0.224 ipv6= k8sPodName=kube-system/coredns-67659f764b-bjkgq subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8f0a12709c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2335 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.224 ipv6= k8sPodName=kube-system/coredns-67659f764b-bjkgq subsys=endpoint level=info msg="Identity of endpoint changed" containerID=8f0a12709c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2335 identity=3539 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.224 ipv6= k8sPodName=kube-system/coredns-67659f764b-bjkgq oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8f0a12709c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2335 identity=3539 ipv4=10.0.0.224 ipv6= k8sPodName=kube-system/coredns-67659f764b-bjkgq subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=bb64449762 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2576 identity=3539 ipv4=10.0.0.8 ipv6= k8sPodName=kube-system/coredns-67659f764b-488np subsys=endpoint level=info msg="Successful endpoint creation" containerID=bb64449762 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2576 identity=3539 ipv4=10.0.0.8 ipv6= k8sPodName=kube-system/coredns-67659f764b-488np subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=8f0a12709c datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2335 identity=3539 ipv4=10.0.0.224 ipv6= k8sPodName=kube-system/coredns-67659f764b-bjkgq subsys=endpoint level=info msg="Successful endpoint creation" containerID=8f0a12709c datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2335 identity=3539 ipv4=10.0.0.224 ipv6= k8sPodName=kube-system/coredns-67659f764b-bjkgq subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.101 78db2678-81c8-4dad-82a8-579104557bfb default }" containerID=e4beae50623e9000624ad9969eb4f40a15eab3bfb0813b4701944e3c25b8b41f datapathConfiguration="&{false false false false false }" interface=lxc49bde9dd1b35 k8sPodName=local-path-storage/local-path-provisioner-679c578f5-7tggp labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e4beae5062 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1045 ipv4=10.0.0.101 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-7tggp subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e4beae5062 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1045 identityLabels="k8s:app.kubernetes.io/instance=local-path-provisioner,k8s:app.kubernetes.io/name=local-path-provisioner,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.101 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-7tggp subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:local-path-storage k8s:io.cilium.k8s.namespace.labels.name:local-path-storage]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=local-path-provisioner;k8s:app.kubernetes.io/name=local-path-provisioner;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=e4beae5062 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1045 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.101 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-7tggp line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=e4beae5062 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1045 identity=32939 identityLabels="k8s:app.kubernetes.io/instance=local-path-provisioner,k8s:app.kubernetes.io/name=local-path-provisioner,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.101 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-7tggp oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e4beae5062 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1045 identity=32939 ipv4=10.0.0.101 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-7tggp subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e4beae5062 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1045 identity=32939 ipv4=10.0.0.101 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-7tggp subsys=endpoint level=info msg="Successful endpoint creation" containerID=e4beae5062 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1045 identity=32939 ipv4=10.0.0.101 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-7tggp subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=297deb65b4 endpointID=475 k8sNamespace=kube-system k8sPodName=coredns-7c96b6546b-cllkw subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=coredns k8s:io.kubernetes.pod.namespace=kube-system k8s:k8s-app=kube-dns]" subsys=allocator level=info msg="Removed endpoint" containerID=297deb65b4 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=475 identity=3539 ipv4=10.0.0.227 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-cllkw subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.3 c0f5779d-235d-45d8-a269-0b57ba3d749a default }" containerID=c49db9700d6dfcd4f830adf87afe16c6b7469270c53d8d339c50952823437f6d datapathConfiguration="&{false false false false false }" interface=lxce4918be9c83b k8sPodName=cert-manager/cert-manager-75c4c745bc-xf5ht labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c49db9700d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2095 ipv4=10.0.0.3 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-xf5ht subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c49db9700d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2095 identityLabels="k8s:app.kubernetes.io/component=controller,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cert-manager,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cert-manager,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.3 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-xf5ht subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=c49db9700d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2095 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.3 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-xf5ht line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=cert-manager;k8s:app.kubernetes.io/component=controller;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=cert-manager;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c49db9700d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2095 identity=50935 identityLabels="k8s:app.kubernetes.io/component=controller,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cert-manager,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cert-manager,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.3 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-xf5ht oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c49db9700d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2095 identity=50935 ipv4=10.0.0.3 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-xf5ht subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c49db9700d datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2095 identity=50935 ipv4=10.0.0.3 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-xf5ht subsys=endpoint level=info msg="Successful endpoint creation" containerID=c49db9700d datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2095 identity=50935 ipv4=10.0.0.3 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-xf5ht subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.164 9a362631-2256-496e-9784-8495c2f40c76 default }" containerID=39be632ed694e1c7f9e623b781cb8640a8ec4f17e2170715ba3ffc48077bc246 datapathConfiguration="&{false false false false false }" interface=lxc4659c87210a5 k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-cb5kg labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=39be632ed6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=270 ipv4=10.0.0.164 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-cb5kg subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=39be632ed6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=270 identityLabels="k8s:app.kubernetes.io/component=cainjector,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cainjector,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cainjector,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.164 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-cb5kg subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Create endpoint request" addressing="&{10.0.0.150 47aa3292-04bf-47df-b86c-7b722474232b default }" containerID=abf7c7233683ac81ea5968075f6b805abadd92f0e7750298e22a0b5b1aef8610 datapathConfiguration="&{false false false false false }" interface=lxce567d2b98060 k8sPodName=cert-manager/cert-manager-webhook-548949fc64-4jbf7 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=abf7c72336 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2424 ipv4=10.0.0.150 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-4jbf7 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=abf7c72336 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2424 identityLabels="k8s:app.kubernetes.io/component=webhook,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=webhook,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=webhook,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.150 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-4jbf7 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=cainjector;k8s:app.kubernetes.io/component=cainjector;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=cainjector;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=39be632ed6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=270 identity=52415 identityLabels="k8s:app.kubernetes.io/component=cainjector,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cainjector,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cainjector,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.164 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-cb5kg oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=39be632ed6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=270 identity=52415 ipv4=10.0.0.164 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-cb5kg subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=webhook;k8s:app.kubernetes.io/component=webhook;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=webhook;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=abf7c72336 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2424 identity=3271 identityLabels="k8s:app.kubernetes.io/component=webhook,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=webhook,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=webhook,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.150 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-4jbf7 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=abf7c72336 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2424 identity=3271 ipv4=10.0.0.150 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-4jbf7 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=39be632ed6 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=270 identity=52415 ipv4=10.0.0.164 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-cb5kg subsys=endpoint level=info msg="Successful endpoint creation" containerID=39be632ed6 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=270 identity=52415 ipv4=10.0.0.164 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-cb5kg subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=abf7c72336 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2424 identity=3271 ipv4=10.0.0.150 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-4jbf7 subsys=endpoint level=info msg="Successful endpoint creation" containerID=abf7c72336 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2424 identity=3271 ipv4=10.0.0.150 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-4jbf7 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.236 b0be705b-ae45-4286-a9b3-b834c3aed9d2 default }" containerID=f56f0a725ac04e547f847a77565033e61e63fb68a9ea7e0a51cac1bda4b082d1 datapathConfiguration="&{false false false false false }" interface=lxcc240caa5c966 k8sPodName=cert-manager/cert-manager-startupapicheck-xl6gq labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f56f0a725a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=61 ipv4=10.0.0.236 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-xl6gq subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f56f0a725a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=61 identityLabels="k8s:app.kubernetes.io/component=startupapicheck,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=startupapicheck,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=startupapicheck,k8s:batch.kubernetes.io/controller-uid=a3e222cf-faf9-40cb-bdcc-ec59a02b2b99,k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck,k8s:controller-uid=a3e222cf-faf9-40cb-bdcc-ec59a02b2b99,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck,k8s:io.kubernetes.pod.namespace=cert-manager,k8s:job-name=cert-manager-startupapicheck" ipv4=10.0.0.236 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-xl6gq subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=startupapicheck;k8s:app.kubernetes.io/component=startupapicheck;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=startupapicheck;k8s:app.kubernetes.io/version=v1.11.5;k8s:batch.kubernetes.io/controller-uid=a3e222cf-faf9-40cb-bdcc-ec59a02b2b99;k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck;k8s:controller-uid=a3e222cf-faf9-40cb-bdcc-ec59a02b2b99;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck;k8s:io.kubernetes.pod.namespace=cert-manager;k8s:job-name=cert-manager-startupapicheck;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f56f0a725a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=61 identity=3923 identityLabels="k8s:app.kubernetes.io/component=startupapicheck,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=startupapicheck,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=startupapicheck,k8s:batch.kubernetes.io/controller-uid=a3e222cf-faf9-40cb-bdcc-ec59a02b2b99,k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck,k8s:controller-uid=a3e222cf-faf9-40cb-bdcc-ec59a02b2b99,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck,k8s:io.kubernetes.pod.namespace=cert-manager,k8s:job-name=cert-manager-startupapicheck" ipv4=10.0.0.236 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-xl6gq oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f56f0a725a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=61 identity=3923 ipv4=10.0.0.236 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-xl6gq subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f56f0a725a datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=61 identity=3923 ipv4=10.0.0.236 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-xl6gq subsys=endpoint level=info msg="Successful endpoint creation" containerID=f56f0a725a datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=61 identity=3923 ipv4=10.0.0.236 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-xl6gq subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=f56f0a725a endpointID=61 k8sNamespace=cert-manager k8sPodName=cert-manager-startupapicheck-xl6gq subsys=daemon level=info msg="Releasing key" key="[k8s:app=startupapicheck k8s:app.kubernetes.io/component=startupapicheck k8s:app.kubernetes.io/instance=cert-manager k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=startupapicheck k8s:app.kubernetes.io/version=v1.11.5 k8s:batch.kubernetes.io/controller-uid=a3e222cf-faf9-40cb-bdcc-ec59a02b2b99 k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck k8s:controller-uid=a3e222cf-faf9-40cb-bdcc-ec59a02b2b99 k8s:helm.sh/chart=cert-manager-v1.11.5 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager k8s:io.cilium.k8s.namespace.labels.name=cert-manager k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck k8s:io.kubernetes.pod.namespace=cert-manager k8s:job-name=cert-manager-startupapicheck]" subsys=allocator level=info msg="Removed endpoint" containerID=f56f0a725a datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=61 identity=3923 ipv4=10.0.0.236 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-xl6gq subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.78 f9f14ea2-766d-46c9-8326-351be67ebbdb default }" containerID=5870550c5da4fa35af123924897dd21d99acad961baa2e61faa0db884bc7062c datapathConfiguration="&{false false false false false }" interface=lxc3d83a3a13f38 k8sPodName=ingress-nginx/ingress-nginx-admission-create-zqzr9 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5870550c5d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1080 ipv4=10.0.0.78 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-zqzr9 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5870550c5d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1080 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=c301101a-02ee-48b2-836e-96d111eeea40,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create,k8s:controller-uid=c301101a-02ee-48b2-836e-96d111eeea40,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-create" ipv4=10.0.0.78 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-zqzr9 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=5870550c5d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1080 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.78 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-zqzr9 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=admission-webhook;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:batch.kubernetes.io/controller-uid=c301101a-02ee-48b2-836e-96d111eeea40;k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create;k8s:controller-uid=c301101a-02ee-48b2-836e-96d111eeea40;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission;k8s:io.kubernetes.pod.namespace=ingress-nginx;k8s:job-name=ingress-nginx-admission-create;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5870550c5d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1080 identity=3418 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=c301101a-02ee-48b2-836e-96d111eeea40,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create,k8s:controller-uid=c301101a-02ee-48b2-836e-96d111eeea40,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-create" ipv4=10.0.0.78 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-zqzr9 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5870550c5d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1080 identity=3418 ipv4=10.0.0.78 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-zqzr9 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=5870550c5d datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1080 identity=3418 ipv4=10.0.0.78 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-zqzr9 subsys=endpoint level=info msg="Successful endpoint creation" containerID=5870550c5d datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1080 identity=3418 ipv4=10.0.0.78 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-zqzr9 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=5870550c5d endpointID=1080 k8sNamespace=ingress-nginx k8sPodName=ingress-nginx-admission-create-zqzr9 subsys=daemon level=info msg="Releasing key" key="[k8s:app.kubernetes.io/component=admission-webhook k8s:app.kubernetes.io/instance=ingress-nginx k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=ingress-nginx k8s:app.kubernetes.io/part-of=ingress-nginx k8s:app.kubernetes.io/version=1.12.1 k8s:batch.kubernetes.io/controller-uid=c301101a-02ee-48b2-836e-96d111eeea40 k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create k8s:controller-uid=c301101a-02ee-48b2-836e-96d111eeea40 k8s:helm.sh/chart=ingress-nginx-4.12.1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission k8s:io.kubernetes.pod.namespace=ingress-nginx k8s:job-name=ingress-nginx-admission-create]" subsys=allocator level=info msg="Removed endpoint" containerID=5870550c5d datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1080 identity=3418 ipv4=10.0.0.78 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-zqzr9 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.123 be607875-4da6-45aa-b158-73adb7df69e5 default }" containerID=28e26aef731190b6a3142826dac0ace288d677efd267870786f9c2bc92afc43d datapathConfiguration="&{false false false false false }" interface=lxc5354743934c0 k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-nhndn labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=28e26aef73 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=404 ipv4=10.0.0.123 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-nhndn subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=28e26aef73 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=404 identityLabels="k8s:app.kubernetes.io/component=default-backend,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend,k8s:io.kubernetes.pod.namespace=ingress-nginx" ipv4=10.0.0.123 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-nhndn subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=default-backend;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend;k8s:io.kubernetes.pod.namespace=ingress-nginx;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=28e26aef73 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=404 identity=43800 identityLabels="k8s:app.kubernetes.io/component=default-backend,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend,k8s:io.kubernetes.pod.namespace=ingress-nginx" ipv4=10.0.0.123 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-nhndn oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=28e26aef73 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=404 identity=43800 ipv4=10.0.0.123 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-nhndn subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=28e26aef73 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=404 identity=43800 ipv4=10.0.0.123 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-nhndn subsys=endpoint level=info msg="Successful endpoint creation" containerID=28e26aef73 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=404 identity=43800 ipv4=10.0.0.123 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-nhndn subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.244 02f98759-c95c-4f41-9efd-34ad81311fab default }" containerID=3350f97510aba220167009d33cb20f48691baf98c28625416899df9025f40440 datapathConfiguration="&{false false false false false }" interface=lxc3949ab94ddbb k8sPodName=ingress-nginx/ingress-nginx-admission-patch-499nw labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3350f97510 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=967 ipv4=10.0.0.244 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-499nw subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3350f97510 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=967 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=6387bde4-9fc2-4863-a1d9-c2bf95be0bd5,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch,k8s:controller-uid=6387bde4-9fc2-4863-a1d9-c2bf95be0bd5,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-patch" ipv4=10.0.0.244 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-499nw subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=admission-webhook;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:batch.kubernetes.io/controller-uid=6387bde4-9fc2-4863-a1d9-c2bf95be0bd5;k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch;k8s:controller-uid=6387bde4-9fc2-4863-a1d9-c2bf95be0bd5;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission;k8s:io.kubernetes.pod.namespace=ingress-nginx;k8s:job-name=ingress-nginx-admission-patch;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3350f97510 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=967 identity=3061 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=6387bde4-9fc2-4863-a1d9-c2bf95be0bd5,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch,k8s:controller-uid=6387bde4-9fc2-4863-a1d9-c2bf95be0bd5,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-patch" ipv4=10.0.0.244 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-499nw oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3350f97510 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=967 identity=3061 ipv4=10.0.0.244 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-499nw subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=3350f97510 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=967 identity=3061 ipv4=10.0.0.244 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-499nw subsys=endpoint level=info msg="Successful endpoint creation" containerID=3350f97510 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=967 identity=3061 ipv4=10.0.0.244 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-499nw subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=3350f97510 endpointID=967 k8sNamespace=ingress-nginx k8sPodName=ingress-nginx-admission-patch-499nw subsys=daemon level=info msg="Releasing key" key="[k8s:app.kubernetes.io/component=admission-webhook k8s:app.kubernetes.io/instance=ingress-nginx k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=ingress-nginx k8s:app.kubernetes.io/part-of=ingress-nginx k8s:app.kubernetes.io/version=1.12.1 k8s:batch.kubernetes.io/controller-uid=6387bde4-9fc2-4863-a1d9-c2bf95be0bd5 k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch k8s:controller-uid=6387bde4-9fc2-4863-a1d9-c2bf95be0bd5 k8s:helm.sh/chart=ingress-nginx-4.12.1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission k8s:io.kubernetes.pod.namespace=ingress-nginx k8s:job-name=ingress-nginx-admission-patch]" subsys=allocator level=info msg="Removed endpoint" containerID=3350f97510 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=967 identity=3061 ipv4=10.0.0.244 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-499nw subsys=endpoint level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"rabbitmq-operator\",\"k8s:app.kubernetes.io/instance\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/name\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/part-of\":\"rabbitmq\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=rabbitmq-cluster-operator k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=5f18b1ac-d530-4502-a4f2-69ca6081fccd] Description:}]" policyAddRequest=fe6b99e6-3dc1-49d8-86ca-2b9bf0acf488 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=rabbitmq-cluster-operator subsys=k8s-watcher level=info msg="Policy imported via API, recalculating..." policyAddRequest=fe6b99e6-3dc1-49d8-86ca-2b9bf0acf488 policyRevision=2 subsys=daemon level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"messaging-topology-operator\",\"k8s:app.kubernetes.io/instance\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/name\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/part-of\":\"rabbitmq\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:9443 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=rabbitmq-messaging-topology-operator k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=995b5187-c10c-4c79-9eca-aba272fbe021] Description:}]" policyAddRequest=0ced374f-01a1-4d2d-90ca-16596bb6cbfa subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=0ced374f-01a1-4d2d-90ca-16596bb6cbfa policyRevision=3 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=rabbitmq-messaging-topology-operator subsys=k8s-watcher level=info msg="Create endpoint request" addressing="&{10.0.0.28 d1f7d96d-ae0d-46e0-bd9c-7722c0c43b32 default }" containerID=ede8ac36418b6ea12b22627b6e0ea1db7c1453232f9b147c27677bb0488d8159 datapathConfiguration="&{false false false false false }" interface=lxcab01c3bb12dd k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-qjqzj labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ede8ac3641 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1472 ipv4=10.0.0.28 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-qjqzj subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ede8ac3641 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1472 identityLabels="k8s:app.kubernetes.io/component=rabbitmq-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=2.16.1,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.28 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-qjqzj subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq-operator;k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=rabbitmq-cluster-operator;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:app.kubernetes.io/version=2.16.1;k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ede8ac3641 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1472 identity=34021 identityLabels="k8s:app.kubernetes.io/component=rabbitmq-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=2.16.1,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.28 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-qjqzj oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ede8ac3641 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1472 identity=34021 ipv4=10.0.0.28 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-qjqzj subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=ede8ac3641 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=1472 identity=34021 ipv4=10.0.0.28 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-qjqzj subsys=endpoint level=info msg="Successful endpoint creation" containerID=ede8ac3641 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=1472 identity=34021 ipv4=10.0.0.28 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-qjqzj subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.163 67f981a0-8a2d-4bf8-a0a9-8f445a2442a9 default }" containerID=977420e0d22805217a95884e778d0abbac09a7df4baed47522b84b53fea68d34 datapathConfiguration="&{false false false false false }" interface=lxc8bf1af7d4728 k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-llhw5 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=977420e0d2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1069 ipv4=10.0.0.163 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-llhw5 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=977420e0d2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1069 identityLabels="k8s:app.kubernetes.io/component=messaging-topology-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=1.17.4,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.163 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-llhw5 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=messaging-topology-operator;k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=rabbitmq-cluster-operator;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:app.kubernetes.io/version=1.17.4;k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=977420e0d2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1069 identity=13836 identityLabels="k8s:app.kubernetes.io/component=messaging-topology-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=1.17.4,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.163 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-llhw5 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=977420e0d2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1069 identity=13836 ipv4=10.0.0.163 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-llhw5 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=977420e0d2 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=1069 identity=13836 ipv4=10.0.0.163 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-llhw5 subsys=endpoint level=info msg="Successful endpoint creation" containerID=977420e0d2 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=1069 identity=13836 ipv4=10.0.0.163 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-llhw5 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.73 33638cfe-d0e9-4145-9c78-c9f69556ea62 default }" containerID=20498d3a94aa30cf87b08ba5ad5878f51656c671a4437cc86bc706bcdebc39cf datapathConfiguration="&{false false false false false }" interface=lxc31574c20c32e k8sPodName=openstack/pxc-operator-69cb5bbdb9-9pgkl labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=20498d3a94 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=738 ipv4=10.0.0.73 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-9pgkl subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=20498d3a94 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=738 identityLabels="k8s:app.kubernetes.io/component=operator,k8s:app.kubernetes.io/instance=pxc-operator,k8s:app.kubernetes.io/name=pxc-operator,k8s:app.kubernetes.io/part-of=pxc-operator,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.73 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-9pgkl subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=operator;k8s:app.kubernetes.io/instance=pxc-operator;k8s:app.kubernetes.io/name=pxc-operator;k8s:app.kubernetes.io/part-of=pxc-operator;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=20498d3a94 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=738 identity=25193 identityLabels="k8s:app.kubernetes.io/component=operator,k8s:app.kubernetes.io/instance=pxc-operator,k8s:app.kubernetes.io/name=pxc-operator,k8s:app.kubernetes.io/part-of=pxc-operator,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.73 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-9pgkl oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=20498d3a94 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=738 identity=25193 ipv4=10.0.0.73 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-9pgkl subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=20498d3a94 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=738 identity=25193 ipv4=10.0.0.73 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-9pgkl subsys=endpoint level=info msg="Successful endpoint creation" containerID=20498d3a94 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=738 identity=25193 ipv4=10.0.0.73 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-9pgkl subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.247 b80fa7ff-5e76-4a86-bab9-08ea50fc09d1 default }" containerID=966227316b19cf9facbfc2035e720237f91ad9c844b4f76aab50c5fc74b43fd8 datapathConfiguration="&{false false false false false }" interface=lxc892c3c4fd84e k8sPodName=local-path-storage/helper-pod-create-pvc-963b68f0-ad82-47ac-acaa-b7253dddea80 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=966227316b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=642 ipv4=10.0.0.247 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-963b68f0-ad82-47ac-acaa-b7253dddea80 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=966227316b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=642 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.247 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-963b68f0-ad82-47ac-acaa-b7253dddea80 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:local-path-storage k8s:io.cilium.k8s.namespace.labels.name:local-path-storage]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=966227316b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=642 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.247 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-963b68f0-ad82-47ac-acaa-b7253dddea80 line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=966227316b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=642 identity=16974 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.247 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-963b68f0-ad82-47ac-acaa-b7253dddea80 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=966227316b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=642 identity=16974 ipv4=10.0.0.247 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-963b68f0-ad82-47ac-acaa-b7253dddea80 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=966227316b datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=642 identity=16974 ipv4=10.0.0.247 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-963b68f0-ad82-47ac-acaa-b7253dddea80 subsys=endpoint level=info msg="Successful endpoint creation" containerID=966227316b datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=642 identity=16974 ipv4=10.0.0.247 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-963b68f0-ad82-47ac-acaa-b7253dddea80 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.189 86f2e58b-a3d7-4e48-8295-73f8394c6fe9 default }" containerID=705a86be3dbf5004b07262e73fcbcc22cb8a70f0c2b9a559bbb9afb027eafd99 datapathConfiguration="&{false false false false false }" interface=lxc4872fdfa9f5b k8sPodName=openstack/percona-xtradb-haproxy-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=705a86be3d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1684 ipv4=10.0.0.189 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=705a86be3d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1684 identityLabels="k8s:app.kubernetes.io/component=haproxy,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0" ipv4=10.0.0.189 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=haproxy;k8s:app.kubernetes.io/instance=percona-xtradb;k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator;k8s:app.kubernetes.io/name=percona-xtradb-cluster;k8s:app.kubernetes.io/part-of=percona-xtradb-cluster;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=705a86be3d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1684 identity=10380 identityLabels="k8s:app.kubernetes.io/component=haproxy,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0" ipv4=10.0.0.189 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=705a86be3d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1684 identity=10380 ipv4=10.0.0.189 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=705a86be3d datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=1684 identity=10380 ipv4=10.0.0.189 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=705a86be3d datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=1684 identity=10380 ipv4=10.0.0.189 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=966227316b endpointID=642 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-963b68f0-ad82-47ac-acaa-b7253dddea80 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=966227316b datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=642 identity=16974 ipv4=10.0.0.247 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-963b68f0-ad82-47ac-acaa-b7253dddea80 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.159 ddac8581-c8ae-48fc-8247-27dbb4b62a42 default }" containerID=13ab3b1ab2ea195af18cfbf8adddff2371201404219e8ce44a05cdde1c52c7a5 datapathConfiguration="&{false false false false false }" interface=lxc2510e81b0f49 k8sPodName=openstack/percona-xtradb-pxc-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=13ab3b1ab2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=441 ipv4=10.0.0.159 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=13ab3b1ab2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=441 identityLabels="k8s:app.kubernetes.io/component=pxc,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0" ipv4=10.0.0.159 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=pxc;k8s:app.kubernetes.io/instance=percona-xtradb;k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator;k8s:app.kubernetes.io/name=percona-xtradb-cluster;k8s:app.kubernetes.io/part-of=percona-xtradb-cluster;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=13ab3b1ab2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=441 identity=21712 identityLabels="k8s:app.kubernetes.io/component=pxc,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0" ipv4=10.0.0.159 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=13ab3b1ab2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=441 identity=21712 ipv4=10.0.0.159 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=13ab3b1ab2 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=441 identity=21712 ipv4=10.0.0.159 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=13ab3b1ab2 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=441 identity=21712 ipv4=10.0.0.159 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/instance\":\"valkey\",\"k8s:app.kubernetes.io/name\":\"valkey\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:6379 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:} {Ports:[{Port:26379 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:} {IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:9121 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=valkey k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=495ef983-fed8-4815-a846-b0252bafd975] Description:}]" policyAddRequest=92e4b102-9e3b-4c57-be63-bbbf224b0549 subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=92e4b102-9e3b-4c57-be63-bbbf224b0549 policyRevision=4 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=valkey subsys=k8s-watcher level=info msg="Create endpoint request" addressing="&{10.0.0.120 a62e2f19-405d-4b59-b7a9-a786ae8569fe default }" containerID=3f103db05c7325da3e54249452f5a90c5b064122ed0c4277ecff42b5d08d08e0 datapathConfiguration="&{false false false false false }" interface=lxcc5b5b8ea3e80 k8sPodName=local-path-storage/helper-pod-create-pvc-884f210b-91bd-4135-80bd-7e3e43ed5b3c labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3f103db05c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3488 ipv4=10.0.0.120 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-884f210b-91bd-4135-80bd-7e3e43ed5b3c subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3f103db05c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3488 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.120 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-884f210b-91bd-4135-80bd-7e3e43ed5b3c subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3f103db05c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3488 identity=16974 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.120 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-884f210b-91bd-4135-80bd-7e3e43ed5b3c oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3f103db05c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3488 identity=16974 ipv4=10.0.0.120 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-884f210b-91bd-4135-80bd-7e3e43ed5b3c subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=3f103db05c datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=3488 identity=16974 ipv4=10.0.0.120 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-884f210b-91bd-4135-80bd-7e3e43ed5b3c subsys=endpoint level=info msg="Successful endpoint creation" containerID=3f103db05c datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3488 identity=16974 ipv4=10.0.0.120 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-884f210b-91bd-4135-80bd-7e3e43ed5b3c subsys=daemon level=info msg="Delete endpoint request" containerID=3f103db05c endpointID=3488 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-884f210b-91bd-4135-80bd-7e3e43ed5b3c subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=3f103db05c datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3488 identity=16974 ipv4=10.0.0.120 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-884f210b-91bd-4135-80bd-7e3e43ed5b3c subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.95 9bd4a22a-065f-4732-903f-13565d5cc7ac default }" containerID=b5417572aab7aa442329d66639e97b2d38c7e6ef0d79cf8f3110c935828bfb1d datapathConfiguration="&{false false false false false }" interface=lxc412b3d059b96 k8sPodName=openstack/valkey-node-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b5417572aa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2617 ipv4=10.0.0.95 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b5417572aa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2617 identityLabels="k8s:app.kubernetes.io/component=node,k8s:app.kubernetes.io/instance=valkey,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=valkey,k8s:app.kubernetes.io/version=8.0.2,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=valkey-2.4.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=valkey,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=valkey-node-0" ipv4=10.0.0.95 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=b5417572aa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2617 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.95 ipv6= k8sPodName=openstack/valkey-node-0 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=node;k8s:app.kubernetes.io/instance=valkey;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=valkey;k8s:app.kubernetes.io/version=8.0.2;k8s:apps.kubernetes.io/pod-index=0;k8s:helm.sh/chart=valkey-2.4.6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=valkey;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=valkey-node-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b5417572aa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2617 identity=10906 identityLabels="k8s:app.kubernetes.io/component=node,k8s:app.kubernetes.io/instance=valkey,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=valkey,k8s:app.kubernetes.io/version=8.0.2,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=valkey-2.4.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=valkey,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=valkey-node-0" ipv4=10.0.0.95 ipv6= k8sPodName=openstack/valkey-node-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b5417572aa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2617 identity=10906 ipv4=10.0.0.95 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b5417572aa datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2617 identity=10906 ipv4=10.0.0.95 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=b5417572aa datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2617 identity=10906 ipv4=10.0.0.95 ipv6= k8sPodName=openstack/valkey-node-0 subsys=daemon level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"keycloak\",\"k8s:app.kubernetes.io/instance\":\"keycloak\",\"k8s:app.kubernetes.io/name\":\"keycloak\",\"k8s:io.kubernetes.pod.namespace\":\"auth-system\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:7800 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:} {Ports:[{Port:8080 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=keycloak k8s:io.cilium.k8s.policy.namespace=auth-system k8s:io.cilium.k8s.policy.uid=e503a04a-6c85-4e7c-9fe6-3339a7f7b3cb] Description:}]" policyAddRequest=ce7076a6-40a4-42ff-8416-66fef5ce99a7 subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=ce7076a6-40a4-42ff-8416-66fef5ce99a7 policyRevision=5 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=keycloak subsys=k8s-watcher level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.185 f90d1f82-1dd3-438f-a2b3-cb1cb8e25be9 default }" containerID=f2bb3e499e8b03937512714526cb2bb33ef09fc0073de03e446896e4d8c5c92f datapathConfiguration="&{false false false false false }" interface=lxcfca308bbddd0 k8sPodName=auth-system/keycloak-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f2bb3e499e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=177 ipv4=10.0.0.185 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f2bb3e499e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=177 identityLabels="k8s:app.kubernetes.io/component=keycloak,k8s:app.kubernetes.io/instance=keycloak,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=keycloak,k8s:app.kubernetes.io/version=24.0.5,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=keycloak-21.4.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system,k8s:io.cilium.k8s.namespace.labels.name=auth-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keycloak,k8s:io.kubernetes.pod.namespace=auth-system,k8s:statefulset.kubernetes.io/pod-name=keycloak-0" ipv4=10.0.0.185 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:auth-system k8s:io.cilium.k8s.namespace.labels.name:auth-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=keycloak;k8s:app.kubernetes.io/instance=keycloak;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=keycloak;k8s:app.kubernetes.io/version=24.0.5;k8s:apps.kubernetes.io/pod-index=0;k8s:helm.sh/chart=keycloak-21.4.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system;k8s:io.cilium.k8s.namespace.labels.name=auth-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keycloak;k8s:io.kubernetes.pod.namespace=auth-system;k8s:statefulset.kubernetes.io/pod-name=keycloak-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f2bb3e499e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=177 identity=20654 identityLabels="k8s:app.kubernetes.io/component=keycloak,k8s:app.kubernetes.io/instance=keycloak,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=keycloak,k8s:app.kubernetes.io/version=24.0.5,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=keycloak-21.4.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system,k8s:io.cilium.k8s.namespace.labels.name=auth-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keycloak,k8s:io.kubernetes.pod.namespace=auth-system,k8s:statefulset.kubernetes.io/pod-name=keycloak-0" ipv4=10.0.0.185 ipv6= k8sPodName=auth-system/keycloak-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f2bb3e499e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=177 identity=20654 ipv4=10.0.0.185 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f2bb3e499e datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=177 identity=20654 ipv4=10.0.0.185 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=f2bb3e499e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=177 identity=20654 ipv4=10.0.0.185 ipv6= k8sPodName=auth-system/keycloak-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Conntrack garbage collector interval recalculated" deleteRatio=0.009330150012850515 newInterval=7m30s subsys=map-ct level=info msg="Create endpoint request" addressing="&{10.0.0.65 bfd0e640-c644-46f2-b706-ace42783d064 default }" containerID=1af09e0af8deb07d5ad90c085de7db40fc5adf92c52e3af756780c7114a6d8cf datapathConfiguration="&{false false false false false }" interface=lxca3185e6a80b8 k8sPodName=monitoring/node-feature-discovery-worker-twgnr labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1af09e0af8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2996 ipv4=10.0.0.65 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-twgnr subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1af09e0af8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2996 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=worker" ipv4=10.0.0.65 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-twgnr subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=worker;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=1af09e0af8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2996 identity=17257 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=worker" ipv4=10.0.0.65 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-twgnr oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1af09e0af8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2996 identity=17257 ipv4=10.0.0.65 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-twgnr subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.72 556a35bf-8376-4336-a7c6-c4ad1b339def default }" containerID=958c9a11a3d1a410b1a105ecedbd37b892f4676423f0b3971fca4b450dfc4358 datapathConfiguration="&{false false false false false }" interface=lxcf4c177978546 k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-ztjhr labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=958c9a11a3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1041 ipv4=10.0.0.72 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-ztjhr subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=958c9a11a3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1041 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=gc" ipv4=10.0.0.72 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-ztjhr subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=gc;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=958c9a11a3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1041 identity=33187 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=gc" ipv4=10.0.0.72 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-ztjhr oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=958c9a11a3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1041 identity=33187 ipv4=10.0.0.72 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-ztjhr subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=1af09e0af8 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2996 identity=17257 ipv4=10.0.0.65 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-twgnr subsys=endpoint level=info msg="Successful endpoint creation" containerID=1af09e0af8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2996 identity=17257 ipv4=10.0.0.65 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-twgnr subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=958c9a11a3 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1041 identity=33187 ipv4=10.0.0.72 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-ztjhr subsys=endpoint level=info msg="Successful endpoint creation" containerID=958c9a11a3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1041 identity=33187 ipv4=10.0.0.72 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-ztjhr subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.31 e748825f-a8ee-4c30-b19c-a6c4cc55c422 default }" containerID=d5d3b203192699a42f49d42b03381c53f760f75a564e6060e9b364634a58f182 datapathConfiguration="&{false false false false false }" interface=lxc93ee9ef8bac6 k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-ht6t9 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d5d3b20319 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=359 ipv4=10.0.0.31 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-ht6t9 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d5d3b20319 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=359 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=master" ipv4=10.0.0.31 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-ht6t9 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=master;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d5d3b20319 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=359 identity=25808 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=master" ipv4=10.0.0.31 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-ht6t9 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d5d3b20319 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=359 identity=25808 ipv4=10.0.0.31 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-ht6t9 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d5d3b20319 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=359 identity=25808 ipv4=10.0.0.31 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-ht6t9 subsys=endpoint level=info msg="Successful endpoint creation" containerID=d5d3b20319 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=359 identity=25808 ipv4=10.0.0.31 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-ht6t9 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.250 0aecab0a-570b-4fbc-bfe4-6e148726d5d6 default }" containerID=84abad36f45b6ff197167e75875990930a51a7bdfea3ae13b2a60caef57d32cd datapathConfiguration="&{false false false false false }" interface=lxcc155bad2c635 k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-lg49g labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=84abad36f4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3959 ipv4=10.0.0.250 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-lg49g subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=84abad36f4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3959 identityLabels="k8s:app=secretgen-controller,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa,k8s:io.kubernetes.pod.namespace=secretgen-controller" ipv4=10.0.0.250 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-lg49g subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:secretgen-controller]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=secretgen-controller;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa;k8s:io.kubernetes.pod.namespace=secretgen-controller;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=84abad36f4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3959 identity=23688 identityLabels="k8s:app=secretgen-controller,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa,k8s:io.kubernetes.pod.namespace=secretgen-controller" ipv4=10.0.0.250 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-lg49g oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=84abad36f4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3959 identity=23688 ipv4=10.0.0.250 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-lg49g subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=84abad36f4 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3959 identity=23688 ipv4=10.0.0.250 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-lg49g subsys=endpoint level=info msg="Successful endpoint creation" containerID=84abad36f4 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3959 identity=23688 ipv4=10.0.0.250 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-lg49g subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1398 identity=1 identityLabels="k8s:feature.node.kubernetes.io/cpu-cpuid.ADX=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AESNI=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AVX2=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AVX=true,k8s:feature.node.kubernetes.io/cpu-cpuid.CLZERO=true,k8s:feature.node.kubernetes.io/cpu-cpuid.CMPXCHG8=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FMA3=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FXSR=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FXSROPT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.HYPERVISOR=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IA32_ARCH_CAP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IBPB=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IBRS=true,k8s:feature.node.kubernetes.io/cpu-cpuid.LAHF=true,k8s:feature.node.kubernetes.io/cpu-cpuid.MOVBE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.NRIPS=true,k8s:feature.node.kubernetes.io/cpu-cpuid.OSXSAVE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SHA=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SPEC_CTRL_SSBD=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SSE4A=true,k8s:feature.node.kubernetes.io/cpu-cpuid.STIBP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SVM=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SVMNP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SYSCALL=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SYSEE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.TOPEXT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.WBNOINVD=true,k8s:feature.node.kubernetes.io/cpu-cpuid.X87=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XGETBV1=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVEC=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVEOPT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVES=true,k8s:feature.node.kubernetes.io/cpu-hardware_multithreading=false,k8s:feature.node.kubernetes.io/cpu-model.family=23,k8s:feature.node.kubernetes.io/cpu-model.id=49,k8s:feature.node.kubernetes.io/cpu-model.vendor_id=AMD,k8s:feature.node.kubernetes.io/kernel-config.NO_HZ=true,k8s:feature.node.kubernetes.io/kernel-config.NO_HZ_IDLE=true,k8s:feature.node.kubernetes.io/kernel-version.full=5.15.0-176-generic,k8s:feature.node.kubernetes.io/kernel-version.major=5,k8s:feature.node.kubernetes.io/kernel-version.minor=15,k8s:feature.node.kubernetes.io/kernel-version.revision=0,k8s:feature.node.kubernetes.io/pci-0300_1af4.present=true,k8s:feature.node.kubernetes.io/system-os_release.ID=ubuntu,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID.major=22,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID.minor=04,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID=22.04,k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,k8s:openstack-compute-node=enabled,k8s:openstack-control-plane=enabled,k8s:openvswitch=enabled,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_hostns_01398 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_hostns_01398 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_hostns_01398 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_hostns_01398:pending" subsys=bpf level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_netdev_00005 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_netdev_00005 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005:pending" subsys=bpf level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1398 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.24 33411eaa-0fb3-4d69-9b54-982cc66dc162 default }" containerID=70d10784a1a3c55713f7f01f4195f1e711333d02c486c1241158e5b270d434db datapathConfiguration="&{false false false false false }" interface=lxca3a92605535e k8sPodName=monitoring/kube-prometheus-stack-admission-create-q6mf4 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=70d10784a1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1314 ipv4=10.0.0.24 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-q6mf4 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=70d10784a1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1314 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-create,k8s:batch.kubernetes.io/controller-uid=2d7843cf-d744-4d9e-885d-5782a6c32520,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=2d7843cf-d744-4d9e-885d-5782a6c32520,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-create,k8s:release=kube-prometheus-stack" ipv4=10.0.0.24 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-q6mf4 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-admission-create;k8s:app.kubernetes.io/component=prometheus-operator-webhook;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:batch.kubernetes.io/controller-uid=2d7843cf-d744-4d9e-885d-5782a6c32520;k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create;k8s:chart=kube-prometheus-stack-60.2.0;k8s:controller-uid=2d7843cf-d744-4d9e-885d-5782a6c32520;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission;k8s:io.kubernetes.pod.namespace=monitoring;k8s:job-name=kube-prometheus-stack-admission-create;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=70d10784a1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1314 identity=15397 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-create,k8s:batch.kubernetes.io/controller-uid=2d7843cf-d744-4d9e-885d-5782a6c32520,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=2d7843cf-d744-4d9e-885d-5782a6c32520,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-create,k8s:release=kube-prometheus-stack" ipv4=10.0.0.24 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-q6mf4 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=70d10784a1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1314 identity=15397 ipv4=10.0.0.24 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-q6mf4 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=70d10784a1 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1314 identity=15397 ipv4=10.0.0.24 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-q6mf4 subsys=endpoint level=info msg="Successful endpoint creation" containerID=70d10784a1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1314 identity=15397 ipv4=10.0.0.24 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-q6mf4 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=70d10784a1 endpointID=1314 k8sNamespace=monitoring k8sPodName=kube-prometheus-stack-admission-create-q6mf4 subsys=daemon level=info msg="Releasing key" key="[k8s:app=kube-prometheus-stack-admission-create k8s:app.kubernetes.io/component=prometheus-operator-webhook k8s:app.kubernetes.io/instance=kube-prometheus-stack k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator k8s:app.kubernetes.io/part-of=kube-prometheus-stack k8s:app.kubernetes.io/version=60.2.0 k8s:batch.kubernetes.io/controller-uid=2d7843cf-d744-4d9e-885d-5782a6c32520 k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create k8s:chart=kube-prometheus-stack-60.2.0 k8s:controller-uid=2d7843cf-d744-4d9e-885d-5782a6c32520 k8s:heritage=Helm k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring k8s:io.cilium.k8s.namespace.labels.name=monitoring k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission k8s:io.kubernetes.pod.namespace=monitoring k8s:job-name=kube-prometheus-stack-admission-create k8s:release=kube-prometheus-stack]" subsys=allocator level=info msg="Removed endpoint" containerID=70d10784a1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1314 identity=15397 ipv4=10.0.0.24 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-q6mf4 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.6 c679471f-5939-45bb-b2ac-057d35bbffc3 default }" containerID=bf9a3ec1244195a3f768963431428709f890c185774e82ac4271987dfaaa4f72 datapathConfiguration="&{false false false false false }" interface=lxc595f138b9919 k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-5dhjt labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=bf9a3ec124 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3678 ipv4=10.0.0.6 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-5dhjt subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=bf9a3ec124 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3678 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-operator,k8s:chart=kube-prometheus-stack-60.2.0,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.6 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-5dhjt subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Create endpoint request" addressing="&{10.0.0.239 d02a10cd-a998-4603-8bf2-553e83cfe5aa default }" containerID=063355dca84580015044985bac22f85e6a6e57603259e011e3fc083176078f63 datapathConfiguration="&{false false false false false }" interface=lxcc7ea4edd5832 k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-gvpm2 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=063355dca8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1115 ipv4=10.0.0.239 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-gvpm2 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=063355dca8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1115 identityLabels="k8s:app.kubernetes.io/component=metrics,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-state-metrics,k8s:app.kubernetes.io/part-of=kube-state-metrics,k8s:app.kubernetes.io/version=2.12.0,k8s:helm.sh/chart=kube-state-metrics-5.20.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.239 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-gvpm2 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=063355dca8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1115 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.239 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-gvpm2 line=611 subsys=endpoint level=info msg="Invalid state transition skipped" containerID=bf9a3ec124 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3678 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.6 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-5dhjt line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-operator;k8s:app.kubernetes.io/component=prometheus-operator;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:chart=kube-prometheus-stack-60.2.0;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator;k8s:io.kubernetes.pod.namespace=monitoring;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=bf9a3ec124 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3678 identity=22726 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-operator,k8s:chart=kube-prometheus-stack-60.2.0,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.6 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-5dhjt oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=bf9a3ec124 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3678 identity=22726 ipv4=10.0.0.6 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-5dhjt subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=metrics;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-state-metrics;k8s:app.kubernetes.io/part-of=kube-state-metrics;k8s:app.kubernetes.io/version=2.12.0;k8s:helm.sh/chart=kube-state-metrics-5.20.0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics;k8s:io.kubernetes.pod.namespace=monitoring;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=063355dca8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1115 identity=31927 identityLabels="k8s:app.kubernetes.io/component=metrics,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-state-metrics,k8s:app.kubernetes.io/part-of=kube-state-metrics,k8s:app.kubernetes.io/version=2.12.0,k8s:helm.sh/chart=kube-state-metrics-5.20.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.239 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-gvpm2 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=063355dca8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1115 identity=31927 ipv4=10.0.0.239 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-gvpm2 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.116 45138664-4759-46b3-bd97-87e9b0ff5e2b default }" containerID=04e3e5e69d604b901e0aa54a53a67cac000af2972949c3880eb5eb1bacce901a datapathConfiguration="&{false false false false false }" interface=lxcca841aab2dce k8sPodName=monitoring/kube-prometheus-stack-grafana-5755f7cb74-7xrdf labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=04e3e5e69d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1856 ipv4=10.0.0.116 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-5755f7cb74-7xrdf subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=04e3e5e69d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1856 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/name=grafana,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.116 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-5755f7cb74-7xrdf subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/name=grafana;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=04e3e5e69d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1856 identity=21563 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/name=grafana,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.116 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-5755f7cb74-7xrdf oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=04e3e5e69d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1856 identity=21563 ipv4=10.0.0.116 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-5755f7cb74-7xrdf subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=063355dca8 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1115 identity=31927 ipv4=10.0.0.239 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-gvpm2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=063355dca8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1115 identity=31927 ipv4=10.0.0.239 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-gvpm2 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=bf9a3ec124 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3678 identity=22726 ipv4=10.0.0.6 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-5dhjt subsys=endpoint level=info msg="Successful endpoint creation" containerID=bf9a3ec124 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3678 identity=22726 ipv4=10.0.0.6 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-5dhjt subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=04e3e5e69d datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1856 identity=21563 ipv4=10.0.0.116 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-5755f7cb74-7xrdf subsys=endpoint level=info msg="Successful endpoint creation" containerID=04e3e5e69d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1856 identity=21563 ipv4=10.0.0.116 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-5755f7cb74-7xrdf subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.108 059154f6-47ea-4fd2-bf62-ce38402a1ba5 default }" containerID=1d84896a9a8abd182af604f341d86de32ceb8d13fbadbc1520d789aaaeb7b27e datapathConfiguration="&{false false false false false }" interface=lxc9ac0ca0015a8 k8sPodName=monitoring/kube-prometheus-stack-admission-patch-zkbtv labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1d84896a9a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1822 ipv4=10.0.0.108 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-zkbtv subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1d84896a9a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1822 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-patch,k8s:batch.kubernetes.io/controller-uid=7386edc9-0d89-4922-ad33-d56518bed65b,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=7386edc9-0d89-4922-ad33-d56518bed65b,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-patch,k8s:release=kube-prometheus-stack" ipv4=10.0.0.108 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-zkbtv subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-admission-patch;k8s:app.kubernetes.io/component=prometheus-operator-webhook;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:batch.kubernetes.io/controller-uid=7386edc9-0d89-4922-ad33-d56518bed65b;k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch;k8s:chart=kube-prometheus-stack-60.2.0;k8s:controller-uid=7386edc9-0d89-4922-ad33-d56518bed65b;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission;k8s:io.kubernetes.pod.namespace=monitoring;k8s:job-name=kube-prometheus-stack-admission-patch;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1d84896a9a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1822 identity=10854 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-patch,k8s:batch.kubernetes.io/controller-uid=7386edc9-0d89-4922-ad33-d56518bed65b,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=7386edc9-0d89-4922-ad33-d56518bed65b,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-patch,k8s:release=kube-prometheus-stack" ipv4=10.0.0.108 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-zkbtv oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1d84896a9a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1822 identity=10854 ipv4=10.0.0.108 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-zkbtv subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=1d84896a9a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1822 identity=10854 ipv4=10.0.0.108 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-zkbtv subsys=endpoint level=info msg="Successful endpoint creation" containerID=1d84896a9a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1822 identity=10854 ipv4=10.0.0.108 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-zkbtv subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=1d84896a9a endpointID=1822 k8sNamespace=monitoring k8sPodName=kube-prometheus-stack-admission-patch-zkbtv subsys=daemon level=info msg="Releasing key" key="[k8s:app=kube-prometheus-stack-admission-patch k8s:app.kubernetes.io/component=prometheus-operator-webhook k8s:app.kubernetes.io/instance=kube-prometheus-stack k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator k8s:app.kubernetes.io/part-of=kube-prometheus-stack k8s:app.kubernetes.io/version=60.2.0 k8s:batch.kubernetes.io/controller-uid=7386edc9-0d89-4922-ad33-d56518bed65b k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch k8s:chart=kube-prometheus-stack-60.2.0 k8s:controller-uid=7386edc9-0d89-4922-ad33-d56518bed65b k8s:heritage=Helm k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring k8s:io.cilium.k8s.namespace.labels.name=monitoring k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission k8s:io.kubernetes.pod.namespace=monitoring k8s:job-name=kube-prometheus-stack-admission-patch k8s:release=kube-prometheus-stack]" subsys=allocator level=info msg="Removed endpoint" containerID=1d84896a9a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1822 identity=10854 ipv4=10.0.0.108 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-zkbtv subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.182 693929d1-22c1-4ae7-a824-db77f14be9fb default }" containerID=10c560328fa2bd293df82beeb7eb13f0cd98443d027b51dc71316fe92886b812 datapathConfiguration="&{false false false false false }" interface=lxc59999e17ac96 k8sPodName=local-path-storage/helper-pod-create-pvc-6a4eeb49-67a9-496e-a971-6404e3cf9512 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=10c560328f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=224 ipv4=10.0.0.182 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-6a4eeb49-67a9-496e-a971-6404e3cf9512 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=10c560328f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=224 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.182 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-6a4eeb49-67a9-496e-a971-6404e3cf9512 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=10c560328f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=224 identity=16974 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.182 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-6a4eeb49-67a9-496e-a971-6404e3cf9512 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=10c560328f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=224 identity=16974 ipv4=10.0.0.182 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-6a4eeb49-67a9-496e-a971-6404e3cf9512 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=10c560328f datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=224 identity=16974 ipv4=10.0.0.182 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-6a4eeb49-67a9-496e-a971-6404e3cf9512 subsys=endpoint level=info msg="Successful endpoint creation" containerID=10c560328f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=224 identity=16974 ipv4=10.0.0.182 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-6a4eeb49-67a9-496e-a971-6404e3cf9512 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.84 b88c9a13-6f8c-4432-9182-1c00c51e3d9c default }" containerID=b8de595a6101e8054db59e360b80f3e53d3949064c411b66ba79ee02b023ef5b datapathConfiguration="&{false false false false false }" interface=lxc3a3a4c774250 k8sPodName=local-path-storage/helper-pod-create-pvc-bd5e54a2-108c-4f92-990b-61a1efef77b2 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b8de595a61 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3145 ipv4=10.0.0.84 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-bd5e54a2-108c-4f92-990b-61a1efef77b2 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b8de595a61 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3145 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.84 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-bd5e54a2-108c-4f92-990b-61a1efef77b2 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=b8de595a61 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3145 identity=16974 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.84 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-bd5e54a2-108c-4f92-990b-61a1efef77b2 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b8de595a61 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3145 identity=16974 ipv4=10.0.0.84 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-bd5e54a2-108c-4f92-990b-61a1efef77b2 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b8de595a61 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3145 identity=16974 ipv4=10.0.0.84 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-bd5e54a2-108c-4f92-990b-61a1efef77b2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=b8de595a61 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3145 identity=16974 ipv4=10.0.0.84 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-bd5e54a2-108c-4f92-990b-61a1efef77b2 subsys=daemon level=info msg="Delete endpoint request" containerID=10c560328f endpointID=224 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-6a4eeb49-67a9-496e-a971-6404e3cf9512 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Delete endpoint request" containerID=b8de595a61 endpointID=3145 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-bd5e54a2-108c-4f92-990b-61a1efef77b2 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=10c560328f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=224 identity=16974 ipv4=10.0.0.182 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-6a4eeb49-67a9-496e-a971-6404e3cf9512 subsys=endpoint level=info msg="Removed endpoint" containerID=b8de595a61 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3145 identity=16974 ipv4=10.0.0.84 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-bd5e54a2-108c-4f92-990b-61a1efef77b2 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.102 dbb2f776-e6d3-468b-8382-3b4e39bc4cc2 default }" containerID=6753b5c7db8080f4c16c9ff91211dfd89b0e652ec51d87bd6d2817517e29cbae datapathConfiguration="&{false false false false false }" interface=lxc153cb35cbf35 k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6753b5c7db datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2843 ipv4=10.0.0.102 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6753b5c7db datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2843 identityLabels="k8s:alertmanager=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=alertmanager,k8s:app.kubernetes.io/version=0.27.0,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0" ipv4=10.0.0.102 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:alertmanager=kube-prometheus-stack-alertmanager;k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager;k8s:app.kubernetes.io/managed-by=prometheus-operator;k8s:app.kubernetes.io/name=alertmanager;k8s:app.kubernetes.io/version=0.27.0;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager;k8s:io.kubernetes.pod.namespace=monitoring;k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6753b5c7db datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2843 identity=48535 identityLabels="k8s:alertmanager=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=alertmanager,k8s:app.kubernetes.io/version=0.27.0,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0" ipv4=10.0.0.102 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6753b5c7db datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2843 identity=48535 ipv4=10.0.0.102 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=6753b5c7db datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2843 identity=48535 ipv4=10.0.0.102 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=6753b5c7db datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2843 identity=48535 ipv4=10.0.0.102 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.165 92ca2d18-095f-4c6f-a1a6-f93ec9eeed36 default }" containerID=2af211e6ba7c5048a44dd4c1fda4382687a6409172027d220abcc5146d661bf3 datapathConfiguration="&{false false false false false }" interface=lxc113a3894e055 k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2af211e6ba datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=285 ipv4=10.0.0.165 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2af211e6ba datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=285 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=prometheus,k8s:app.kubernetes.io/version=2.51.2,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus,k8s:io.kubernetes.pod.namespace=monitoring,k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus,k8s:operator.prometheus.io/shard=0,k8s:prometheus=kube-prometheus-stack-prometheus,k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0" ipv4=10.0.0.165 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus;k8s:app.kubernetes.io/managed-by=prometheus-operator;k8s:app.kubernetes.io/name=prometheus;k8s:app.kubernetes.io/version=2.51.2;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus;k8s:io.kubernetes.pod.namespace=monitoring;k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus;k8s:operator.prometheus.io/shard=0;k8s:prometheus=kube-prometheus-stack-prometheus;k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2af211e6ba datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=285 identity=29773 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=prometheus,k8s:app.kubernetes.io/version=2.51.2,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus,k8s:io.kubernetes.pod.namespace=monitoring,k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus,k8s:operator.prometheus.io/shard=0,k8s:prometheus=kube-prometheus-stack-prometheus,k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0" ipv4=10.0.0.165 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2af211e6ba datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=285 identity=29773 ipv4=10.0.0.165 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=2af211e6ba datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=285 identity=29773 ipv4=10.0.0.165 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=2af211e6ba datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=285 identity=29773 ipv4=10.0.0.165 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.222 ed3ac021-174e-4b67-a4c2-3b77bb5ba298 default }" containerID=ffa20f0d1f691a896aa50e48d6b38045ac84f6518f9f53b99186c26e5512d732 datapathConfiguration="&{false false false false false }" interface=lxc85f0a6db8997 k8sPodName=monitoring/loki-gateway-cf54cb88c-rgzrz labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ffa20f0d1f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2763 ipv4=10.0.0.222 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-rgzrz subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ffa20f0d1f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2763 identityLabels="k8s:app.kubernetes.io/component=gateway,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.222 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-rgzrz subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=gateway;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ffa20f0d1f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2763 identity=40107 identityLabels="k8s:app.kubernetes.io/component=gateway,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.222 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-rgzrz oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ffa20f0d1f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2763 identity=40107 ipv4=10.0.0.222 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-rgzrz subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.18 36993e3b-6f7e-494c-89f0-48057c2c9643 default }" containerID=2dba6cf8d562a743ed855c56ed8a9cda3779418005f27508a4628030c9af6140 datapathConfiguration="&{false false false false false }" interface=lxcdfa6838c6af1 k8sPodName=monitoring/loki-chunks-cache-0 labels="[]" subsys=daemon sync-build=true level=info msg="Create endpoint request" addressing="&{10.0.0.127 6b96e745-af5d-4bd3-b7b8-31a24dcf3c62 default }" containerID=29d3d058a3c1408ea71c9519bf3ead34bdc36eae3efe0990fae80f871fe1327a datapathConfiguration="&{false false false false false }" interface=lxc1739744381d6 k8sPodName=monitoring/loki-results-cache-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2dba6cf8d5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1085 ipv4=10.0.0.18 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="New endpoint" containerID=29d3d058a3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2279 ipv4=10.0.0.127 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2dba6cf8d5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1085 identityLabels="k8s:app.kubernetes.io/component=memcached-chunks-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-chunks-cache,k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0" ipv4=10.0.0.18 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Resolving identity labels (blocking)" containerID=29d3d058a3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2279 identityLabels="k8s:app.kubernetes.io/component=memcached-results-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-results-cache,k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0" ipv4=10.0.0.127 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=memcached-chunks-cache;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:name=memcached-chunks-cache;k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2dba6cf8d5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1085 identity=13200 identityLabels="k8s:app.kubernetes.io/component=memcached-chunks-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-chunks-cache,k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0" ipv4=10.0.0.18 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 oldIdentity="no identity" subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Waiting for endpoint to be generated" containerID=2dba6cf8d5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1085 identity=13200 ipv4=10.0.0.18 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=memcached-results-cache;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:name=memcached-results-cache;k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=29d3d058a3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2279 identity=22201 identityLabels="k8s:app.kubernetes.io/component=memcached-results-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-results-cache,k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0" ipv4=10.0.0.127 ipv6= k8sPodName=monitoring/loki-results-cache-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=29d3d058a3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2279 identity=22201 ipv4=10.0.0.127 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ffa20f0d1f datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2763 identity=40107 ipv4=10.0.0.222 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-rgzrz subsys=endpoint level=info msg="Successful endpoint creation" containerID=ffa20f0d1f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2763 identity=40107 ipv4=10.0.0.222 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-rgzrz subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=2dba6cf8d5 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1085 identity=13200 ipv4=10.0.0.18 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=2dba6cf8d5 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1085 identity=13200 ipv4=10.0.0.18 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=29d3d058a3 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2279 identity=22201 ipv4=10.0.0.127 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=29d3d058a3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2279 identity=22201 ipv4=10.0.0.127 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.107 ec118e79-9993-4b9d-b603-94b28418088f default }" containerID=390b1716c71e479f95744c0b994c509762d98fb223e25318e60b4d40d430f361 datapathConfiguration="&{false false false false false }" interface=lxc3a3b77278006 k8sPodName=local-path-storage/helper-pod-create-pvc-570dd8ee-5fe4-4e31-b959-981a7b9d7856 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=390b1716c7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2921 ipv4=10.0.0.107 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-570dd8ee-5fe4-4e31-b959-981a7b9d7856 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=390b1716c7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2921 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.107 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-570dd8ee-5fe4-4e31-b959-981a7b9d7856 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=390b1716c7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2921 identity=16974 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.107 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-570dd8ee-5fe4-4e31-b959-981a7b9d7856 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=390b1716c7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2921 identity=16974 ipv4=10.0.0.107 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-570dd8ee-5fe4-4e31-b959-981a7b9d7856 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=390b1716c7 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2921 identity=16974 ipv4=10.0.0.107 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-570dd8ee-5fe4-4e31-b959-981a7b9d7856 subsys=endpoint level=info msg="Successful endpoint creation" containerID=390b1716c7 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2921 identity=16974 ipv4=10.0.0.107 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-570dd8ee-5fe4-4e31-b959-981a7b9d7856 subsys=daemon level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.204 e27d80f6-cae3-42c4-8a82-037728e99344 default }" containerID=9c6467122977862cce7b1671a154877f2e222a123cc4e30fed35c2fed358dde5 datapathConfiguration="&{false false false false false }" interface=lxc6c13e9ac259b k8sPodName=monitoring/vector-sm4v4 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9c64671229 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2736 ipv4=10.0.0.204 ipv6= k8sPodName=monitoring/vector-sm4v4 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9c64671229 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2736 identityLabels="k8s:app.kubernetes.io/component=Agent,k8s:app.kubernetes.io/instance=vector,k8s:app.kubernetes.io/name=vector,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=vector,k8s:io.kubernetes.pod.namespace=monitoring,k8s:vector.dev/exclude=true" ipv4=10.0.0.204 ipv6= k8sPodName=monitoring/vector-sm4v4 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=Agent;k8s:app.kubernetes.io/instance=vector;k8s:app.kubernetes.io/name=vector;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=vector;k8s:io.kubernetes.pod.namespace=monitoring;k8s:vector.dev/exclude=true;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9c64671229 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2736 identity=40876 identityLabels="k8s:app.kubernetes.io/component=Agent,k8s:app.kubernetes.io/instance=vector,k8s:app.kubernetes.io/name=vector,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=vector,k8s:io.kubernetes.pod.namespace=monitoring,k8s:vector.dev/exclude=true" ipv4=10.0.0.204 ipv6= k8sPodName=monitoring/vector-sm4v4 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9c64671229 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2736 identity=40876 ipv4=10.0.0.204 ipv6= k8sPodName=monitoring/vector-sm4v4 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=9c64671229 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2736 identity=40876 ipv4=10.0.0.204 ipv6= k8sPodName=monitoring/vector-sm4v4 subsys=endpoint level=info msg="Successful endpoint creation" containerID=9c64671229 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2736 identity=40876 ipv4=10.0.0.204 ipv6= k8sPodName=monitoring/vector-sm4v4 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=390b1716c7 endpointID=2921 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-570dd8ee-5fe4-4e31-b959-981a7b9d7856 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=390b1716c7 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2921 identity=16974 ipv4=10.0.0.107 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-570dd8ee-5fe4-4e31-b959-981a7b9d7856 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.129 9ac4cad6-874f-4fc7-95b6-ec2283fce7c9 default }" containerID=279c045011d0cd4cf292ff3f711af8fe1e42d4de49d6863d0be52c2ce8f4e9ed datapathConfiguration="&{false false false false false }" interface=lxc0edcdcee7f94 k8sPodName=monitoring/loki-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=279c045011 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=417 ipv4=10.0.0.129 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=279c045011 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=417 identityLabels="k8s:app.kubernetes.io/component=single-binary,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:app.kubernetes.io/part-of=memberlist,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=loki-0" ipv4=10.0.0.129 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=single-binary;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:app.kubernetes.io/part-of=memberlist;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:statefulset.kubernetes.io/pod-name=loki-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=279c045011 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=417 identity=30821 identityLabels="k8s:app.kubernetes.io/component=single-binary,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:app.kubernetes.io/part-of=memberlist,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=loki-0" ipv4=10.0.0.129 ipv6= k8sPodName=monitoring/loki-0 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=279c045011 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=417 identity=30821 ipv4=10.0.0.129 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=279c045011 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=417 identity=30821 ipv4=10.0.0.129 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=279c045011 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=417 identity=30821 ipv4=10.0.0.129 ipv6= k8sPodName=monitoring/loki-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.16 df9819a7-0f00-4939-83dd-0a1af9a73957 default }" containerID=0ea71b0d4646b541177b381956402cde4fdc4914ad17046ac18fbe6a5d28d177 datapathConfiguration="&{false false false false false }" interface=lxc3d6125e7f5b5 k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-nfj7m labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0ea71b0d46 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1378 ipv4=10.0.0.16 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-nfj7m subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0ea71b0d46 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1378 identityLabels="k8s:app.kubernetes.io/instance=prometheus-pushgateway,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=prometheus-pushgateway,k8s:app.kubernetes.io/version=v1.8.0,k8s:helm.sh/chart=prometheus-pushgateway-2.13.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.16 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-nfj7m subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=prometheus-pushgateway;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=prometheus-pushgateway;k8s:app.kubernetes.io/version=v1.8.0;k8s:helm.sh/chart=prometheus-pushgateway-2.13.0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0ea71b0d46 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1378 identity=29074 identityLabels="k8s:app.kubernetes.io/instance=prometheus-pushgateway,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=prometheus-pushgateway,k8s:app.kubernetes.io/version=v1.8.0,k8s:helm.sh/chart=prometheus-pushgateway-2.13.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.16 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-nfj7m oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0ea71b0d46 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1378 identity=29074 ipv4=10.0.0.16 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-nfj7m subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=0ea71b0d46 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1378 identity=29074 ipv4=10.0.0.16 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-nfj7m subsys=endpoint level=info msg="Successful endpoint creation" containerID=0ea71b0d46 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1378 identity=29074 ipv4=10.0.0.16 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-nfj7m subsys=daemon level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.74 a7430a8c-a6f6-4acb-bac7-f5c862a26242 default }" containerID=8fc8329a65da3cf7ed185aab4041ef036c30517f97514a84f8f3a0d81cd4e3d3 datapathConfiguration="&{false false false false false }" interface=lxc511607d0620b k8sPodName=openstack/memcached-memcached-6479589586-2hqkx labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8fc8329a65 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4060 ipv4=10.0.0.74 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-2hqkx subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8fc8329a65 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4060 identityLabels="k8s:application=memcached,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=memcached" ipv4=10.0.0.74 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-2hqkx subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=memcached;k8s:component=server;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=memcached;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8fc8329a65 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4060 identity=24140 identityLabels="k8s:application=memcached,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=memcached" ipv4=10.0.0.74 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-2hqkx oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8fc8329a65 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4060 identity=24140 ipv4=10.0.0.74 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-2hqkx subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=8fc8329a65 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=4060 identity=24140 ipv4=10.0.0.74 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-2hqkx subsys=endpoint level=info msg="Successful endpoint creation" containerID=8fc8329a65 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=4060 identity=24140 ipv4=10.0.0.74 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-2hqkx subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.154 593f615a-dbb2-46cb-b92c-8a5de17231b8 default }" containerID=db1c7760790ad975a3f1199132a91523323ba0ec2119a4787d56fd1e7bb93d5e datapathConfiguration="&{false false false false false }" interface=lxcd42496639397 k8sPodName=local-path-storage/helper-pod-create-pvc-f7a70a69-2845-4763-b5ce-bca6ee58dc18 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=db1c776079 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=677 ipv4=10.0.0.154 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f7a70a69-2845-4763-b5ce-bca6ee58dc18 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=db1c776079 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=677 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.154 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f7a70a69-2845-4763-b5ce-bca6ee58dc18 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=db1c776079 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=677 identity=16974 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.154 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f7a70a69-2845-4763-b5ce-bca6ee58dc18 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=db1c776079 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=677 identity=16974 ipv4=10.0.0.154 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f7a70a69-2845-4763-b5ce-bca6ee58dc18 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=db1c776079 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=677 identity=16974 ipv4=10.0.0.154 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f7a70a69-2845-4763-b5ce-bca6ee58dc18 subsys=endpoint level=info msg="Successful endpoint creation" containerID=db1c776079 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=677 identity=16974 ipv4=10.0.0.154 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f7a70a69-2845-4763-b5ce-bca6ee58dc18 subsys=daemon level=info msg="Delete endpoint request" containerID=db1c776079 endpointID=677 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-f7a70a69-2845-4763-b5ce-bca6ee58dc18 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=db1c776079 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=677 identity=16974 ipv4=10.0.0.154 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f7a70a69-2845-4763-b5ce-bca6ee58dc18 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.60 06557a55-15cb-419a-965b-242cd8b52a4b default }" containerID=94d38dd099b789198609aa23ce236628f508330dc2765094ef18416c5947174e datapathConfiguration="&{false false false false false }" interface=lxc8ed3a4989622 k8sPodName=openstack/rabbitmq-keystone-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=94d38dd099 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=468 ipv4=10.0.0.60 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=94d38dd099 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=468 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-keystone,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0" ipv4=10.0.0.60 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=94d38dd099 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=468 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.60 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-keystone;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=94d38dd099 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=468 identity=19682 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-keystone,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0" ipv4=10.0.0.60 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=94d38dd099 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=468 identity=19682 ipv4=10.0.0.60 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=94d38dd099 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=468 identity=19682 ipv4=10.0.0.60 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=94d38dd099 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=468 identity=19682 ipv4=10.0.0.60 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.42 27343646-229e-4a7b-ac55-1472a195d7af default }" containerID=6196142c2487cb6bcf18466e1c1f9867d386faea499ecc23825338c63bc5a5e5 datapathConfiguration="&{false false false false false }" interface=lxc024396091f36 k8sPodName=openstack/keystone-api-6f84b97cf8-kjzlw labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6196142c24 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=512 ipv4=10.0.0.42 ipv6= k8sPodName=openstack/keystone-api-6f84b97cf8-kjzlw subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6196142c24 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=512 identityLabels="k8s:application=keystone,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=keystone" ipv4=10.0.0.42 ipv6= k8sPodName=openstack/keystone-api-6f84b97cf8-kjzlw subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=keystone;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=6196142c24 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=512 identity=2348 identityLabels="k8s:application=keystone,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=keystone" ipv4=10.0.0.42 ipv6= k8sPodName=openstack/keystone-api-6f84b97cf8-kjzlw oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6196142c24 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=512 identity=2348 ipv4=10.0.0.42 ipv6= k8sPodName=openstack/keystone-api-6f84b97cf8-kjzlw subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.84 6bd8b56a-57e4-4ccd-8622-dd85f83721f9 default }" containerID=f1999aab195943b8b5b6705ef3b203c8eaa13dcbacc6c06367f694159df59ed8 datapathConfiguration="&{false false false false false }" interface=lxcb412156ed4a2 k8sPodName=openstack/keystone-credential-setup-lg4k7 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f1999aab19 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2950 ipv4=10.0.0.84 ipv6= k8sPodName=openstack/keystone-credential-setup-lg4k7 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f1999aab19 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2950 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=bdcf376e-2ff2-4aa4-8509-6435d7999718,k8s:batch.kubernetes.io/job-name=keystone-credential-setup,k8s:component=credential-setup,k8s:controller-uid=bdcf376e-2ff2-4aa4-8509-6435d7999718,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-credential-setup,k8s:release_group=keystone" ipv4=10.0.0.84 ipv6= k8sPodName=openstack/keystone-credential-setup-lg4k7 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=bdcf376e-2ff2-4aa4-8509-6435d7999718;k8s:batch.kubernetes.io/job-name=keystone-credential-setup;k8s:component=credential-setup;k8s:controller-uid=bdcf376e-2ff2-4aa4-8509-6435d7999718;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-credential-setup;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f1999aab19 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2950 identity=5684 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=bdcf376e-2ff2-4aa4-8509-6435d7999718,k8s:batch.kubernetes.io/job-name=keystone-credential-setup,k8s:component=credential-setup,k8s:controller-uid=bdcf376e-2ff2-4aa4-8509-6435d7999718,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-credential-setup,k8s:release_group=keystone" ipv4=10.0.0.84 ipv6= k8sPodName=openstack/keystone-credential-setup-lg4k7 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f1999aab19 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2950 identity=5684 ipv4=10.0.0.84 ipv6= k8sPodName=openstack/keystone-credential-setup-lg4k7 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=6196142c24 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=512 identity=2348 ipv4=10.0.0.42 ipv6= k8sPodName=openstack/keystone-api-6f84b97cf8-kjzlw subsys=endpoint level=info msg="Successful endpoint creation" containerID=6196142c24 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=512 identity=2348 ipv4=10.0.0.42 ipv6= k8sPodName=openstack/keystone-api-6f84b97cf8-kjzlw subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=f1999aab19 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2950 identity=5684 ipv4=10.0.0.84 ipv6= k8sPodName=openstack/keystone-credential-setup-lg4k7 subsys=endpoint level=info msg="Successful endpoint creation" containerID=f1999aab19 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2950 identity=5684 ipv4=10.0.0.84 ipv6= k8sPodName=openstack/keystone-credential-setup-lg4k7 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=f1999aab19 endpointID=2950 k8sNamespace=openstack k8sPodName=keystone-credential-setup-lg4k7 subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=bdcf376e-2ff2-4aa4-8509-6435d7999718 k8s:batch.kubernetes.io/job-name=keystone-credential-setup k8s:component=credential-setup k8s:controller-uid=bdcf376e-2ff2-4aa4-8509-6435d7999718 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-credential-setup k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=f1999aab19 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2950 identity=5684 ipv4=10.0.0.84 ipv6= k8sPodName=openstack/keystone-credential-setup-lg4k7 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.198 00e59ed4-beca-48d4-aee9-d2b509705703 default }" containerID=cba35ee22cbb0d4e5312ee66327e77b6c84eb24ec7923924a85e30f9bf475595 datapathConfiguration="&{false false false false false }" interface=lxcc6d157d501c4 k8sPodName=openstack/keystone-db-init-xmkcn labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=cba35ee22c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1461 ipv4=10.0.0.198 ipv6= k8sPodName=openstack/keystone-db-init-xmkcn subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=cba35ee22c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1461 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=960d50bd-7cb8-49be-9054-d99155791d08,k8s:batch.kubernetes.io/job-name=keystone-db-init,k8s:component=db-init,k8s:controller-uid=960d50bd-7cb8-49be-9054-d99155791d08,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-init,k8s:release_group=keystone" ipv4=10.0.0.198 ipv6= k8sPodName=openstack/keystone-db-init-xmkcn subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=960d50bd-7cb8-49be-9054-d99155791d08;k8s:batch.kubernetes.io/job-name=keystone-db-init;k8s:component=db-init;k8s:controller-uid=960d50bd-7cb8-49be-9054-d99155791d08;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-db-init;k8s:release_group=keystone;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=cba35ee22c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1461 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.198 ipv6= k8sPodName=openstack/keystone-db-init-xmkcn line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=cba35ee22c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1461 identity=20197 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=960d50bd-7cb8-49be-9054-d99155791d08,k8s:batch.kubernetes.io/job-name=keystone-db-init,k8s:component=db-init,k8s:controller-uid=960d50bd-7cb8-49be-9054-d99155791d08,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-init,k8s:release_group=keystone" ipv4=10.0.0.198 ipv6= k8sPodName=openstack/keystone-db-init-xmkcn oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=cba35ee22c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1461 identity=20197 ipv4=10.0.0.198 ipv6= k8sPodName=openstack/keystone-db-init-xmkcn subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=cba35ee22c datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1461 identity=20197 ipv4=10.0.0.198 ipv6= k8sPodName=openstack/keystone-db-init-xmkcn subsys=endpoint level=info msg="Successful endpoint creation" containerID=cba35ee22c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1461 identity=20197 ipv4=10.0.0.198 ipv6= k8sPodName=openstack/keystone-db-init-xmkcn subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=cba35ee22c endpointID=1461 k8sNamespace=openstack k8sPodName=keystone-db-init-xmkcn subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=960d50bd-7cb8-49be-9054-d99155791d08 k8s:batch.kubernetes.io/job-name=keystone-db-init k8s:component=db-init k8s:controller-uid=960d50bd-7cb8-49be-9054-d99155791d08 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-db-init k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=cba35ee22c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1461 identity=20197 ipv4=10.0.0.198 ipv6= k8sPodName=openstack/keystone-db-init-xmkcn subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.1 3200754f-ea97-4d31-a048-23ae010fb0a6 default }" containerID=6469bc39a819797de9d7ddedda0970b2135cb1a06ba3f95528286ef2d5a57e3a datapathConfiguration="&{false false false false false }" interface=lxcd47126d93f04 k8sPodName=openstack/keystone-fernet-setup-n5v2d labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6469bc39a8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1451 ipv4=10.0.0.1 ipv6= k8sPodName=openstack/keystone-fernet-setup-n5v2d subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6469bc39a8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1451 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=5ed83f19-5d86-42bd-ae85-a03fb64f1942,k8s:batch.kubernetes.io/job-name=keystone-fernet-setup,k8s:component=fernet-setup,k8s:controller-uid=5ed83f19-5d86-42bd-ae85-a03fb64f1942,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-setup,k8s:release_group=keystone" ipv4=10.0.0.1 ipv6= k8sPodName=openstack/keystone-fernet-setup-n5v2d subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=6469bc39a8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1451 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.1 ipv6= k8sPodName=openstack/keystone-fernet-setup-n5v2d line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=5ed83f19-5d86-42bd-ae85-a03fb64f1942;k8s:batch.kubernetes.io/job-name=keystone-fernet-setup;k8s:component=fernet-setup;k8s:controller-uid=5ed83f19-5d86-42bd-ae85-a03fb64f1942;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-fernet-setup;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6469bc39a8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1451 identity=6747 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=5ed83f19-5d86-42bd-ae85-a03fb64f1942,k8s:batch.kubernetes.io/job-name=keystone-fernet-setup,k8s:component=fernet-setup,k8s:controller-uid=5ed83f19-5d86-42bd-ae85-a03fb64f1942,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-setup,k8s:release_group=keystone" ipv4=10.0.0.1 ipv6= k8sPodName=openstack/keystone-fernet-setup-n5v2d oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6469bc39a8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1451 identity=6747 ipv4=10.0.0.1 ipv6= k8sPodName=openstack/keystone-fernet-setup-n5v2d subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=6469bc39a8 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1451 identity=6747 ipv4=10.0.0.1 ipv6= k8sPodName=openstack/keystone-fernet-setup-n5v2d subsys=endpoint level=info msg="Successful endpoint creation" containerID=6469bc39a8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1451 identity=6747 ipv4=10.0.0.1 ipv6= k8sPodName=openstack/keystone-fernet-setup-n5v2d subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=6469bc39a8 endpointID=1451 k8sNamespace=openstack k8sPodName=keystone-fernet-setup-n5v2d subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=5ed83f19-5d86-42bd-ae85-a03fb64f1942 k8s:batch.kubernetes.io/job-name=keystone-fernet-setup k8s:component=fernet-setup k8s:controller-uid=5ed83f19-5d86-42bd-ae85-a03fb64f1942 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-fernet-setup k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=6469bc39a8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1451 identity=6747 ipv4=10.0.0.1 ipv6= k8sPodName=openstack/keystone-fernet-setup-n5v2d subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.114 85811521-9180-4f39-9574-9aba1f9952a3 default }" containerID=a8c4af97f7417266b1fd58435b477b2e9cfa6e28336e0010254dd858229044a1 datapathConfiguration="&{false false false false false }" interface=lxc6afd790264a3 k8sPodName=openstack/keystone-db-sync-hn9w6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a8c4af97f7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3131 ipv4=10.0.0.114 ipv6= k8sPodName=openstack/keystone-db-sync-hn9w6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a8c4af97f7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3131 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=8e1f7b22-a9fc-483e-ade4-ef14f66c92f8,k8s:batch.kubernetes.io/job-name=keystone-db-sync,k8s:component=db-sync,k8s:controller-uid=8e1f7b22-a9fc-483e-ade4-ef14f66c92f8,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-sync,k8s:release_group=keystone" ipv4=10.0.0.114 ipv6= k8sPodName=openstack/keystone-db-sync-hn9w6 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=8e1f7b22-a9fc-483e-ade4-ef14f66c92f8;k8s:batch.kubernetes.io/job-name=keystone-db-sync;k8s:component=db-sync;k8s:controller-uid=8e1f7b22-a9fc-483e-ade4-ef14f66c92f8;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-db-sync;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a8c4af97f7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3131 identity=9523 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=8e1f7b22-a9fc-483e-ade4-ef14f66c92f8,k8s:batch.kubernetes.io/job-name=keystone-db-sync,k8s:component=db-sync,k8s:controller-uid=8e1f7b22-a9fc-483e-ade4-ef14f66c92f8,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-sync,k8s:release_group=keystone" ipv4=10.0.0.114 ipv6= k8sPodName=openstack/keystone-db-sync-hn9w6 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=a8c4af97f7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3131 identity=9523 ipv4=10.0.0.114 ipv6= k8sPodName=openstack/keystone-db-sync-hn9w6 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a8c4af97f7 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3131 identity=9523 ipv4=10.0.0.114 ipv6= k8sPodName=openstack/keystone-db-sync-hn9w6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=a8c4af97f7 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3131 identity=9523 ipv4=10.0.0.114 ipv6= k8sPodName=openstack/keystone-db-sync-hn9w6 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=a8c4af97f7 endpointID=3131 k8sNamespace=openstack k8sPodName=keystone-db-sync-hn9w6 subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=8e1f7b22-a9fc-483e-ade4-ef14f66c92f8 k8s:batch.kubernetes.io/job-name=keystone-db-sync k8s:component=db-sync k8s:controller-uid=8e1f7b22-a9fc-483e-ade4-ef14f66c92f8 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-db-sync k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=a8c4af97f7 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3131 identity=9523 ipv4=10.0.0.114 ipv6= k8sPodName=openstack/keystone-db-sync-hn9w6 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.118 6758c62d-ccfc-4c3a-b363-79c499472715 default }" containerID=39670953787adad822f6b72bbe4dea28b2488c3a903d5a42654281c2305947ad datapathConfiguration="&{false false false false false }" interface=lxcd6e8e2659bab k8sPodName=openstack/keystone-rabbit-init-fl9kp labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3967095378 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=180 ipv4=10.0.0.118 ipv6= k8sPodName=openstack/keystone-rabbit-init-fl9kp subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3967095378 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=180 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=5579c3da-063b-4d5c-b523-ce6d0aae9681,k8s:batch.kubernetes.io/job-name=keystone-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=5579c3da-063b-4d5c-b523-ce6d0aae9681,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-rabbit-init,k8s:release_group=keystone" ipv4=10.0.0.118 ipv6= k8sPodName=openstack/keystone-rabbit-init-fl9kp subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=3967095378 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=180 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.118 ipv6= k8sPodName=openstack/keystone-rabbit-init-fl9kp line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=5579c3da-063b-4d5c-b523-ce6d0aae9681;k8s:batch.kubernetes.io/job-name=keystone-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=5579c3da-063b-4d5c-b523-ce6d0aae9681;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-rabbit-init;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3967095378 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=180 identity=31948 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=5579c3da-063b-4d5c-b523-ce6d0aae9681,k8s:batch.kubernetes.io/job-name=keystone-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=5579c3da-063b-4d5c-b523-ce6d0aae9681,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-rabbit-init,k8s:release_group=keystone" ipv4=10.0.0.118 ipv6= k8sPodName=openstack/keystone-rabbit-init-fl9kp oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3967095378 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=180 identity=31948 ipv4=10.0.0.118 ipv6= k8sPodName=openstack/keystone-rabbit-init-fl9kp subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=3967095378 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=180 identity=31948 ipv4=10.0.0.118 ipv6= k8sPodName=openstack/keystone-rabbit-init-fl9kp subsys=endpoint level=info msg="Successful endpoint creation" containerID=3967095378 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=180 identity=31948 ipv4=10.0.0.118 ipv6= k8sPodName=openstack/keystone-rabbit-init-fl9kp subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=3967095378 endpointID=180 k8sNamespace=openstack k8sPodName=keystone-rabbit-init-fl9kp subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=5579c3da-063b-4d5c-b523-ce6d0aae9681 k8s:batch.kubernetes.io/job-name=keystone-rabbit-init k8s:component=rabbit-init k8s:controller-uid=5579c3da-063b-4d5c-b523-ce6d0aae9681 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-rabbit-init k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=3967095378 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=180 identity=31948 ipv4=10.0.0.118 ipv6= k8sPodName=openstack/keystone-rabbit-init-fl9kp subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.19 49064ff7-b7c9-4b67-9d4e-be163bc82a49 default }" containerID=5eeaffb6700fa2181d203e3bfb380fe8a2976bb1f9cc617d3cc190b195b9c349 datapathConfiguration="&{false false false false false }" interface=lxc1f47549eb64e k8sPodName=openstack/keystone-domain-manage-bstjx labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5eeaffb670 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=456 ipv4=10.0.0.19 ipv6= k8sPodName=openstack/keystone-domain-manage-bstjx subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5eeaffb670 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=456 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=45465264-0a4f-4fcb-8bd7-74b74ee47b67,k8s:batch.kubernetes.io/job-name=keystone-domain-manage,k8s:component=domain-manage,k8s:controller-uid=45465264-0a4f-4fcb-8bd7-74b74ee47b67,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-domain-manage,k8s:release_group=keystone" ipv4=10.0.0.19 ipv6= k8sPodName=openstack/keystone-domain-manage-bstjx subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=5eeaffb670 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=456 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.19 ipv6= k8sPodName=openstack/keystone-domain-manage-bstjx line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=45465264-0a4f-4fcb-8bd7-74b74ee47b67;k8s:batch.kubernetes.io/job-name=keystone-domain-manage;k8s:component=domain-manage;k8s:controller-uid=45465264-0a4f-4fcb-8bd7-74b74ee47b67;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-domain-manage;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5eeaffb670 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=456 identity=48006 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=45465264-0a4f-4fcb-8bd7-74b74ee47b67,k8s:batch.kubernetes.io/job-name=keystone-domain-manage,k8s:component=domain-manage,k8s:controller-uid=45465264-0a4f-4fcb-8bd7-74b74ee47b67,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-domain-manage,k8s:release_group=keystone" ipv4=10.0.0.19 ipv6= k8sPodName=openstack/keystone-domain-manage-bstjx oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5eeaffb670 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=456 identity=48006 ipv4=10.0.0.19 ipv6= k8sPodName=openstack/keystone-domain-manage-bstjx subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=5eeaffb670 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=456 identity=48006 ipv4=10.0.0.19 ipv6= k8sPodName=openstack/keystone-domain-manage-bstjx subsys=endpoint level=info msg="Successful endpoint creation" containerID=5eeaffb670 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=456 identity=48006 ipv4=10.0.0.19 ipv6= k8sPodName=openstack/keystone-domain-manage-bstjx subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=5eeaffb670 endpointID=456 k8sNamespace=openstack k8sPodName=keystone-domain-manage-bstjx subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=45465264-0a4f-4fcb-8bd7-74b74ee47b67 k8s:batch.kubernetes.io/job-name=keystone-domain-manage k8s:component=domain-manage k8s:controller-uid=45465264-0a4f-4fcb-8bd7-74b74ee47b67 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-domain-manage k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=5eeaffb670 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=456 identity=48006 ipv4=10.0.0.19 ipv6= k8sPodName=openstack/keystone-domain-manage-bstjx subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.144 ea9eac41-7762-400a-b3da-93201781c073 default }" containerID=6031ef713e8a9654a7e75f6dfde9475c5cccdb6dd9fd6a7f2757b527c3482491 datapathConfiguration="&{false false false false false }" interface=lxc8cf7f1a74ca9 k8sPodName=openstack/keystone-bootstrap-pvcwg labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6031ef713e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1671 ipv4=10.0.0.144 ipv6= k8sPodName=openstack/keystone-bootstrap-pvcwg subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6031ef713e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1671 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=7db58129-5306-4de6-9235-24571ffb5da4,k8s:batch.kubernetes.io/job-name=keystone-bootstrap,k8s:component=bootstrap,k8s:controller-uid=7db58129-5306-4de6-9235-24571ffb5da4,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-bootstrap,k8s:release_group=keystone" ipv4=10.0.0.144 ipv6= k8sPodName=openstack/keystone-bootstrap-pvcwg subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=6031ef713e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1671 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.144 ipv6= k8sPodName=openstack/keystone-bootstrap-pvcwg line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=7db58129-5306-4de6-9235-24571ffb5da4;k8s:batch.kubernetes.io/job-name=keystone-bootstrap;k8s:component=bootstrap;k8s:controller-uid=7db58129-5306-4de6-9235-24571ffb5da4;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-bootstrap;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6031ef713e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1671 identity=51076 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=7db58129-5306-4de6-9235-24571ffb5da4,k8s:batch.kubernetes.io/job-name=keystone-bootstrap,k8s:component=bootstrap,k8s:controller-uid=7db58129-5306-4de6-9235-24571ffb5da4,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-bootstrap,k8s:release_group=keystone" ipv4=10.0.0.144 ipv6= k8sPodName=openstack/keystone-bootstrap-pvcwg oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6031ef713e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1671 identity=51076 ipv4=10.0.0.144 ipv6= k8sPodName=openstack/keystone-bootstrap-pvcwg subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=6031ef713e datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1671 identity=51076 ipv4=10.0.0.144 ipv6= k8sPodName=openstack/keystone-bootstrap-pvcwg subsys=endpoint level=info msg="Successful endpoint creation" containerID=6031ef713e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1671 identity=51076 ipv4=10.0.0.144 ipv6= k8sPodName=openstack/keystone-bootstrap-pvcwg subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=6031ef713e endpointID=1671 k8sNamespace=openstack k8sPodName=keystone-bootstrap-pvcwg subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=7db58129-5306-4de6-9235-24571ffb5da4 k8s:batch.kubernetes.io/job-name=keystone-bootstrap k8s:component=bootstrap k8s:controller-uid=7db58129-5306-4de6-9235-24571ffb5da4 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-bootstrap k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=6031ef713e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1671 identity=51076 ipv4=10.0.0.144 ipv6= k8sPodName=openstack/keystone-bootstrap-pvcwg subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.168 9a279954-96db-49d2-89f3-d53dc25cfff2 default }" containerID=b28208bd63c5d536f6d4c26931b145abdc03ccbf3f9b33ecd72f0f75fa4fba09 datapathConfiguration="&{false false false false false }" interface=lxc940f7b2502d3 k8sPodName=local-path-storage/helper-pod-create-pvc-77242b82-5548-492f-a209-dcddf47c04f8 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b28208bd63 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=65 ipv4=10.0.0.168 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-77242b82-5548-492f-a209-dcddf47c04f8 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b28208bd63 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=65 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.168 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-77242b82-5548-492f-a209-dcddf47c04f8 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b28208bd63 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=65 identity=16974 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.168 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-77242b82-5548-492f-a209-dcddf47c04f8 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b28208bd63 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=65 identity=16974 ipv4=10.0.0.168 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-77242b82-5548-492f-a209-dcddf47c04f8 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b28208bd63 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=65 identity=16974 ipv4=10.0.0.168 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-77242b82-5548-492f-a209-dcddf47c04f8 subsys=endpoint level=info msg="Successful endpoint creation" containerID=b28208bd63 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=65 identity=16974 ipv4=10.0.0.168 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-77242b82-5548-492f-a209-dcddf47c04f8 subsys=daemon level=info msg="Delete endpoint request" containerID=b28208bd63 endpointID=65 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-77242b82-5548-492f-a209-dcddf47c04f8 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=b28208bd63 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=65 identity=16974 ipv4=10.0.0.168 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-77242b82-5548-492f-a209-dcddf47c04f8 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.88 0ec94e06-e13c-4698-9204-3383de1a5407 default }" containerID=23f12cdfd275e79eb01b59621c2422988759f302d00afeb510188000f28b40f5 datapathConfiguration="&{false false false false false }" interface=lxcb31644800171 k8sPodName=openstack/rabbitmq-barbican-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=23f12cdfd2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=216 ipv4=10.0.0.88 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=23f12cdfd2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=216 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-barbican,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0" ipv4=10.0.0.88 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=23f12cdfd2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=216 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.88 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-barbican;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=23f12cdfd2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=216 identity=6518 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-barbican,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0" ipv4=10.0.0.88 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=23f12cdfd2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=216 identity=6518 ipv4=10.0.0.88 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=23f12cdfd2 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=216 identity=6518 ipv4=10.0.0.88 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=23f12cdfd2 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=216 identity=6518 ipv4=10.0.0.88 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.25 f87a7496-94df-401a-ab61-983eedbc8b33 default }" containerID=4dccaf4ec5fdfc675eac3b514f831a73b45580e22e683120a113391e8d6d15d1 datapathConfiguration="&{false false false false false }" interface=lxc4038e6895719 k8sPodName=openstack/barbican-api-66784687c4-jk27j labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4dccaf4ec5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=254 ipv4=10.0.0.25 ipv6= k8sPodName=openstack/barbican-api-66784687c4-jk27j subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4dccaf4ec5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=254 identityLabels="k8s:application=barbican,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=barbican" ipv4=10.0.0.25 ipv6= k8sPodName=openstack/barbican-api-66784687c4-jk27j subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4dccaf4ec5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=254 identity=40088 identityLabels="k8s:application=barbican,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=barbican" ipv4=10.0.0.25 ipv6= k8sPodName=openstack/barbican-api-66784687c4-jk27j oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4dccaf4ec5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=254 identity=40088 ipv4=10.0.0.25 ipv6= k8sPodName=openstack/barbican-api-66784687c4-jk27j subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.44 11030508-97d8-4c99-aa2e-1b641ee5ef22 default }" containerID=32e9517a3f8165394c74fe3b5e970565e23fc0b0656f4f8ecb65c7cb4aeb3ba1 datapathConfiguration="&{false false false false false }" interface=lxc653a6c018542 k8sPodName=openstack/barbican-db-init-wsdwf labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=32e9517a3f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=331 ipv4=10.0.0.44 ipv6= k8sPodName=openstack/barbican-db-init-wsdwf subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=32e9517a3f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=331 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=16ad0d5f-5341-4779-8e13-79e70cc71519,k8s:batch.kubernetes.io/job-name=barbican-db-init,k8s:component=db-init,k8s:controller-uid=16ad0d5f-5341-4779-8e13-79e70cc71519,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-init,k8s:release_group=barbican" ipv4=10.0.0.44 ipv6= k8sPodName=openstack/barbican-db-init-wsdwf subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=16ad0d5f-5341-4779-8e13-79e70cc71519;k8s:batch.kubernetes.io/job-name=barbican-db-init;k8s:component=db-init;k8s:controller-uid=16ad0d5f-5341-4779-8e13-79e70cc71519;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-db-init;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=32e9517a3f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=331 identity=64861 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=16ad0d5f-5341-4779-8e13-79e70cc71519,k8s:batch.kubernetes.io/job-name=barbican-db-init,k8s:component=db-init,k8s:controller-uid=16ad0d5f-5341-4779-8e13-79e70cc71519,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-init,k8s:release_group=barbican" ipv4=10.0.0.44 ipv6= k8sPodName=openstack/barbican-db-init-wsdwf oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=32e9517a3f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=331 identity=64861 ipv4=10.0.0.44 ipv6= k8sPodName=openstack/barbican-db-init-wsdwf subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=4dccaf4ec5 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=254 identity=40088 ipv4=10.0.0.25 ipv6= k8sPodName=openstack/barbican-api-66784687c4-jk27j subsys=endpoint level=info msg="Successful endpoint creation" containerID=4dccaf4ec5 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=254 identity=40088 ipv4=10.0.0.25 ipv6= k8sPodName=openstack/barbican-api-66784687c4-jk27j subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=32e9517a3f datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=331 identity=64861 ipv4=10.0.0.44 ipv6= k8sPodName=openstack/barbican-db-init-wsdwf subsys=endpoint level=info msg="Successful endpoint creation" containerID=32e9517a3f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=331 identity=64861 ipv4=10.0.0.44 ipv6= k8sPodName=openstack/barbican-db-init-wsdwf subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=32e9517a3f endpointID=331 k8sNamespace=openstack k8sPodName=barbican-db-init-wsdwf subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=16ad0d5f-5341-4779-8e13-79e70cc71519 k8s:batch.kubernetes.io/job-name=barbican-db-init k8s:component=db-init k8s:controller-uid=16ad0d5f-5341-4779-8e13-79e70cc71519 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-db-init k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=32e9517a3f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=331 identity=64861 ipv4=10.0.0.44 ipv6= k8sPodName=openstack/barbican-db-init-wsdwf subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.96 1272aebd-7ded-4cc7-8ab8-ae8b6afe19ea default }" containerID=ef72b66235fc5f55fe06b943130452174fbd596607ab0af471f4546675368544 datapathConfiguration="&{false false false false false }" interface=lxcd387f380a1a4 k8sPodName=openstack/barbican-db-sync-th2jg labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ef72b66235 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=676 ipv4=10.0.0.96 ipv6= k8sPodName=openstack/barbican-db-sync-th2jg subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ef72b66235 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=676 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=12d3f75d-7055-46ed-a7c6-111724198c61,k8s:batch.kubernetes.io/job-name=barbican-db-sync,k8s:component=db-sync,k8s:controller-uid=12d3f75d-7055-46ed-a7c6-111724198c61,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-sync,k8s:release_group=barbican" ipv4=10.0.0.96 ipv6= k8sPodName=openstack/barbican-db-sync-th2jg subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=12d3f75d-7055-46ed-a7c6-111724198c61;k8s:batch.kubernetes.io/job-name=barbican-db-sync;k8s:component=db-sync;k8s:controller-uid=12d3f75d-7055-46ed-a7c6-111724198c61;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-db-sync;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ef72b66235 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=676 identity=56264 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=12d3f75d-7055-46ed-a7c6-111724198c61,k8s:batch.kubernetes.io/job-name=barbican-db-sync,k8s:component=db-sync,k8s:controller-uid=12d3f75d-7055-46ed-a7c6-111724198c61,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-sync,k8s:release_group=barbican" ipv4=10.0.0.96 ipv6= k8sPodName=openstack/barbican-db-sync-th2jg oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ef72b66235 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=676 identity=56264 ipv4=10.0.0.96 ipv6= k8sPodName=openstack/barbican-db-sync-th2jg subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=ef72b66235 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=676 identity=56264 ipv4=10.0.0.96 ipv6= k8sPodName=openstack/barbican-db-sync-th2jg subsys=endpoint level=info msg="Successful endpoint creation" containerID=ef72b66235 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=676 identity=56264 ipv4=10.0.0.96 ipv6= k8sPodName=openstack/barbican-db-sync-th2jg subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Conntrack garbage collector interval recalculated" deleteRatio=0.03640077373625333 newInterval=11m15s subsys=map-ct level=info msg="Delete endpoint request" containerID=ef72b66235 endpointID=676 k8sNamespace=openstack k8sPodName=barbican-db-sync-th2jg subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=12d3f75d-7055-46ed-a7c6-111724198c61 k8s:batch.kubernetes.io/job-name=barbican-db-sync k8s:component=db-sync k8s:controller-uid=12d3f75d-7055-46ed-a7c6-111724198c61 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-db-sync k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=ef72b66235 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=676 identity=56264 ipv4=10.0.0.96 ipv6= k8sPodName=openstack/barbican-db-sync-th2jg subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.98 dd672cc1-0bca-4b09-8278-4ce24f21fb1b default }" containerID=e9f93db708584163ffd5e643d2dbcbb2c4f6d9b7f01626b0bc0da887d032b778 datapathConfiguration="&{false false false false false }" interface=lxc1034415b2a9e k8sPodName=openstack/barbican-rabbit-init-gl7hd labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e9f93db708 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1632 ipv4=10.0.0.98 ipv6= k8sPodName=openstack/barbican-rabbit-init-gl7hd subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e9f93db708 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1632 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=254759eb-a4d1-4803-a3ff-35d9aeeeb44c,k8s:batch.kubernetes.io/job-name=barbican-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=254759eb-a4d1-4803-a3ff-35d9aeeeb44c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-rabbit-init,k8s:release_group=barbican" ipv4=10.0.0.98 ipv6= k8sPodName=openstack/barbican-rabbit-init-gl7hd subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=254759eb-a4d1-4803-a3ff-35d9aeeeb44c;k8s:batch.kubernetes.io/job-name=barbican-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=254759eb-a4d1-4803-a3ff-35d9aeeeb44c;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-rabbit-init;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e9f93db708 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1632 identity=42366 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=254759eb-a4d1-4803-a3ff-35d9aeeeb44c,k8s:batch.kubernetes.io/job-name=barbican-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=254759eb-a4d1-4803-a3ff-35d9aeeeb44c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-rabbit-init,k8s:release_group=barbican" ipv4=10.0.0.98 ipv6= k8sPodName=openstack/barbican-rabbit-init-gl7hd oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=e9f93db708 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1632 identity=42366 ipv4=10.0.0.98 ipv6= k8sPodName=openstack/barbican-rabbit-init-gl7hd subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e9f93db708 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1632 identity=42366 ipv4=10.0.0.98 ipv6= k8sPodName=openstack/barbican-rabbit-init-gl7hd subsys=endpoint level=info msg="Successful endpoint creation" containerID=e9f93db708 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1632 identity=42366 ipv4=10.0.0.98 ipv6= k8sPodName=openstack/barbican-rabbit-init-gl7hd subsys=daemon level=info msg="Delete endpoint request" containerID=e9f93db708 endpointID=1632 k8sNamespace=openstack k8sPodName=barbican-rabbit-init-gl7hd subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=254759eb-a4d1-4803-a3ff-35d9aeeeb44c k8s:batch.kubernetes.io/job-name=barbican-rabbit-init k8s:component=rabbit-init k8s:controller-uid=254759eb-a4d1-4803-a3ff-35d9aeeeb44c k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-rabbit-init k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=e9f93db708 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1632 identity=42366 ipv4=10.0.0.98 ipv6= k8sPodName=openstack/barbican-rabbit-init-gl7hd subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.104 9a45258b-69a9-4b61-be80-172c96e86306 default }" containerID=80e9dc04eab936d69e680d311f16300f06478f6a7a70b982f82c9aee1b72c289 datapathConfiguration="&{false false false false false }" interface=lxcde7d70d3fc62 k8sPodName=openstack/barbican-ks-service-xlzcc labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=80e9dc04ea datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=267 ipv4=10.0.0.104 ipv6= k8sPodName=openstack/barbican-ks-service-xlzcc subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=80e9dc04ea datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=267 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=dd51ecf7-f017-4210-881d-e3515bf90c2d,k8s:batch.kubernetes.io/job-name=barbican-ks-service,k8s:component=ks-service,k8s:controller-uid=dd51ecf7-f017-4210-881d-e3515bf90c2d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-service,k8s:release_group=barbican" ipv4=10.0.0.104 ipv6= k8sPodName=openstack/barbican-ks-service-xlzcc subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=80e9dc04ea datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=267 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.104 ipv6= k8sPodName=openstack/barbican-ks-service-xlzcc line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=dd51ecf7-f017-4210-881d-e3515bf90c2d;k8s:batch.kubernetes.io/job-name=barbican-ks-service;k8s:component=ks-service;k8s:controller-uid=dd51ecf7-f017-4210-881d-e3515bf90c2d;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-service;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=80e9dc04ea datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=267 identity=11782 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=dd51ecf7-f017-4210-881d-e3515bf90c2d,k8s:batch.kubernetes.io/job-name=barbican-ks-service,k8s:component=ks-service,k8s:controller-uid=dd51ecf7-f017-4210-881d-e3515bf90c2d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-service,k8s:release_group=barbican" ipv4=10.0.0.104 ipv6= k8sPodName=openstack/barbican-ks-service-xlzcc oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=80e9dc04ea datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=267 identity=11782 ipv4=10.0.0.104 ipv6= k8sPodName=openstack/barbican-ks-service-xlzcc subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=80e9dc04ea datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=267 identity=11782 ipv4=10.0.0.104 ipv6= k8sPodName=openstack/barbican-ks-service-xlzcc subsys=endpoint level=info msg="Successful endpoint creation" containerID=80e9dc04ea datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=267 identity=11782 ipv4=10.0.0.104 ipv6= k8sPodName=openstack/barbican-ks-service-xlzcc subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=80e9dc04ea endpointID=267 k8sNamespace=openstack k8sPodName=barbican-ks-service-xlzcc subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=dd51ecf7-f017-4210-881d-e3515bf90c2d k8s:batch.kubernetes.io/job-name=barbican-ks-service k8s:component=ks-service k8s:controller-uid=dd51ecf7-f017-4210-881d-e3515bf90c2d k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-service k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=80e9dc04ea datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=267 identity=11782 ipv4=10.0.0.104 ipv6= k8sPodName=openstack/barbican-ks-service-xlzcc subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.236 e29dc6fe-2d07-46b4-915a-8610bd236e2a default }" containerID=3685cbbc89d21837ab3c4ecdd03db0d91bc75d514c8f56208f58987cb0f69bbd datapathConfiguration="&{false false false false false }" interface=lxc00b0bf80f8b9 k8sPodName=openstack/barbican-ks-endpoints-bt7hr labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3685cbbc89 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1710 ipv4=10.0.0.236 ipv6= k8sPodName=openstack/barbican-ks-endpoints-bt7hr subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3685cbbc89 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1710 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=c42f2eaa-3c2c-4a55-9ffc-b23cd91493f4,k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=c42f2eaa-3c2c-4a55-9ffc-b23cd91493f4,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-endpoints,k8s:release_group=barbican" ipv4=10.0.0.236 ipv6= k8sPodName=openstack/barbican-ks-endpoints-bt7hr subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=c42f2eaa-3c2c-4a55-9ffc-b23cd91493f4;k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=c42f2eaa-3c2c-4a55-9ffc-b23cd91493f4;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-endpoints;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3685cbbc89 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1710 identity=38458 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=c42f2eaa-3c2c-4a55-9ffc-b23cd91493f4,k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=c42f2eaa-3c2c-4a55-9ffc-b23cd91493f4,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-endpoints,k8s:release_group=barbican" ipv4=10.0.0.236 ipv6= k8sPodName=openstack/barbican-ks-endpoints-bt7hr oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3685cbbc89 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1710 identity=38458 ipv4=10.0.0.236 ipv6= k8sPodName=openstack/barbican-ks-endpoints-bt7hr subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=3685cbbc89 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1710 identity=38458 ipv4=10.0.0.236 ipv6= k8sPodName=openstack/barbican-ks-endpoints-bt7hr subsys=endpoint level=info msg="Successful endpoint creation" containerID=3685cbbc89 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1710 identity=38458 ipv4=10.0.0.236 ipv6= k8sPodName=openstack/barbican-ks-endpoints-bt7hr subsys=daemon level=info msg="Delete endpoint request" containerID=3685cbbc89 endpointID=1710 k8sNamespace=openstack k8sPodName=barbican-ks-endpoints-bt7hr subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=c42f2eaa-3c2c-4a55-9ffc-b23cd91493f4 k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=c42f2eaa-3c2c-4a55-9ffc-b23cd91493f4 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-endpoints k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=3685cbbc89 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1710 identity=38458 ipv4=10.0.0.236 ipv6= k8sPodName=openstack/barbican-ks-endpoints-bt7hr subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.205 426e3ab2-07b4-4091-87fa-bad8f721bc13 default }" containerID=4c26a41e8ecfee943d42f85ff3fe81cb0ccd6e14030a6d832b55e86b7d14d7b2 datapathConfiguration="&{false false false false false }" interface=lxcf731ed1cd3a8 k8sPodName=openstack/barbican-ks-user-fb2xf labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4c26a41e8e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=866 ipv4=10.0.0.205 ipv6= k8sPodName=openstack/barbican-ks-user-fb2xf subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4c26a41e8e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=866 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=22f17c61-ccc6-4f55-9f3a-f8c8a0f70916,k8s:batch.kubernetes.io/job-name=barbican-ks-user,k8s:component=ks-user,k8s:controller-uid=22f17c61-ccc6-4f55-9f3a-f8c8a0f70916,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-user,k8s:release_group=barbican" ipv4=10.0.0.205 ipv6= k8sPodName=openstack/barbican-ks-user-fb2xf subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=22f17c61-ccc6-4f55-9f3a-f8c8a0f70916;k8s:batch.kubernetes.io/job-name=barbican-ks-user;k8s:component=ks-user;k8s:controller-uid=22f17c61-ccc6-4f55-9f3a-f8c8a0f70916;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-user;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4c26a41e8e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=866 identity=45205 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=22f17c61-ccc6-4f55-9f3a-f8c8a0f70916,k8s:batch.kubernetes.io/job-name=barbican-ks-user,k8s:component=ks-user,k8s:controller-uid=22f17c61-ccc6-4f55-9f3a-f8c8a0f70916,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-user,k8s:release_group=barbican" ipv4=10.0.0.205 ipv6= k8sPodName=openstack/barbican-ks-user-fb2xf oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4c26a41e8e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=866 identity=45205 ipv4=10.0.0.205 ipv6= k8sPodName=openstack/barbican-ks-user-fb2xf subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=4c26a41e8e datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=866 identity=45205 ipv4=10.0.0.205 ipv6= k8sPodName=openstack/barbican-ks-user-fb2xf subsys=endpoint level=info msg="Successful endpoint creation" containerID=4c26a41e8e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=866 identity=45205 ipv4=10.0.0.205 ipv6= k8sPodName=openstack/barbican-ks-user-fb2xf subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=4c26a41e8e endpointID=866 k8sNamespace=openstack k8sPodName=barbican-ks-user-fb2xf subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=22f17c61-ccc6-4f55-9f3a-f8c8a0f70916 k8s:batch.kubernetes.io/job-name=barbican-ks-user k8s:component=ks-user k8s:controller-uid=22f17c61-ccc6-4f55-9f3a-f8c8a0f70916 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-user k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=4c26a41e8e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=866 identity=45205 ipv4=10.0.0.205 ipv6= k8sPodName=openstack/barbican-ks-user-fb2xf subsys=endpoint level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Create endpoint request" addressing="&{10.0.0.90 7ccf71b7-49ea-4533-a2d2-e2d756cb76b7 default }" containerID=5fbcc2a6e3aab4da5bed9258e4d3037c2e176a7e40b3eccc0d46eb5534cf7405 datapathConfiguration="&{false false false false false }" interface=lxce6880ea9045d k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-6mpzf labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5fbcc2a6e3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3578 ipv4=10.0.0.90 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-6mpzf subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5fbcc2a6e3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3578 identityLabels="k8s:app=rook-ceph-operator,k8s:helm.sh/chart=rook-ceph-v1.15.9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph,k8s:io.cilium.k8s.namespace.labels.name=rook-ceph,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system,k8s:io.kubernetes.pod.namespace=rook-ceph" ipv4=10.0.0.90 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-6mpzf subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:rook-ceph k8s:io.cilium.k8s.namespace.labels.name:rook-ceph]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-operator;k8s:helm.sh/chart=rook-ceph-v1.15.9;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph;k8s:io.cilium.k8s.namespace.labels.name=rook-ceph;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system;k8s:io.kubernetes.pod.namespace=rook-ceph;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5fbcc2a6e3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3578 identity=5537 identityLabels="k8s:app=rook-ceph-operator,k8s:helm.sh/chart=rook-ceph-v1.15.9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph,k8s:io.cilium.k8s.namespace.labels.name=rook-ceph,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system,k8s:io.kubernetes.pod.namespace=rook-ceph" ipv4=10.0.0.90 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-6mpzf oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5fbcc2a6e3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3578 identity=5537 ipv4=10.0.0.90 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-6mpzf subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=5fbcc2a6e3 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3578 identity=5537 ipv4=10.0.0.90 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-6mpzf subsys=endpoint level=info msg="Successful endpoint creation" containerID=5fbcc2a6e3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3578 identity=5537 ipv4=10.0.0.90 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-6mpzf subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.198 458a32de-900f-4269-a432-4b95e93d2da2 default }" containerID=9146514c3075d17a185b57078fc22c096e46c2336f971c2b0751b8a51493de7b datapathConfiguration="&{false false false false false }" interface=lxccb7755ec245e k8sPodName=openstack/rook-ceph-detect-version-qvlnn labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9146514c30 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2801 ipv4=10.0.0.198 ipv6= k8sPodName=openstack/rook-ceph-detect-version-qvlnn subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9146514c30 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2801 identityLabels="k8s:app=rook-ceph-detect-version,k8s:batch.kubernetes.io/controller-uid=8b118dd2-89d9-4ba1-b277-452c77378bd6,k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version,k8s:controller-uid=8b118dd2-89d9-4ba1-b277-452c77378bd6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=rook-ceph-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.198 ipv6= k8sPodName=openstack/rook-ceph-detect-version-qvlnn subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-detect-version;k8s:batch.kubernetes.io/controller-uid=8b118dd2-89d9-4ba1-b277-452c77378bd6;k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version;k8s:controller-uid=8b118dd2-89d9-4ba1-b277-452c77378bd6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=rook-ceph-detect-version;k8s:rook-version=v1.15.9;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9146514c30 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2801 identity=28082 identityLabels="k8s:app=rook-ceph-detect-version,k8s:batch.kubernetes.io/controller-uid=8b118dd2-89d9-4ba1-b277-452c77378bd6,k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version,k8s:controller-uid=8b118dd2-89d9-4ba1-b277-452c77378bd6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=rook-ceph-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.198 ipv6= k8sPodName=openstack/rook-ceph-detect-version-qvlnn oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=9146514c30 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2801 identity=28082 ipv4=10.0.0.198 ipv6= k8sPodName=openstack/rook-ceph-detect-version-qvlnn subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=9146514c30 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2801 identity=28082 ipv4=10.0.0.198 ipv6= k8sPodName=openstack/rook-ceph-detect-version-qvlnn subsys=endpoint level=info msg="Successful endpoint creation" containerID=9146514c30 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2801 identity=28082 ipv4=10.0.0.198 ipv6= k8sPodName=openstack/rook-ceph-detect-version-qvlnn subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=9146514c30 endpointID=2801 k8sNamespace=openstack k8sPodName=rook-ceph-detect-version-qvlnn subsys=daemon level=info msg="Releasing key" key="[k8s:app=rook-ceph-detect-version k8s:batch.kubernetes.io/controller-uid=8b118dd2-89d9-4ba1-b277-452c77378bd6 k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version k8s:controller-uid=8b118dd2-89d9-4ba1-b277-452c77378bd6 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=rook-ceph-detect-version k8s:rook-version=v1.15.9]" subsys=allocator level=info msg="Removed endpoint" containerID=9146514c30 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2801 identity=28082 ipv4=10.0.0.198 ipv6= k8sPodName=openstack/rook-ceph-detect-version-qvlnn subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.4 d6f22b30-828c-4b16-821c-ccdd7b4d5869 default }" containerID=ec832c931546e540a24419697a640be61c0eac95cb0b50306135d6b513e9b925 datapathConfiguration="&{false false false false false }" interface=lxc8d3866a1ea4a k8sPodName=openstack/ceph-object-controller-detect-version-xcr55 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ec832c9315 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1070 ipv4=10.0.0.4 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-xcr55 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ec832c9315 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1070 identityLabels="k8s:app=ceph-object-controller-detect-version,k8s:batch.kubernetes.io/controller-uid=00e0c7b5-4113-43f0-8076-8cdbd9bf4bca,k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version,k8s:controller-uid=00e0c7b5-4113-43f0-8076-8cdbd9bf4bca,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=ceph-object-controller-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.4 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-xcr55 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=ec832c9315 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1070 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.4 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-xcr55 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=ceph-object-controller-detect-version;k8s:batch.kubernetes.io/controller-uid=00e0c7b5-4113-43f0-8076-8cdbd9bf4bca;k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version;k8s:controller-uid=00e0c7b5-4113-43f0-8076-8cdbd9bf4bca;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=ceph-object-controller-detect-version;k8s:rook-version=v1.15.9;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ec832c9315 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1070 identity=500 identityLabels="k8s:app=ceph-object-controller-detect-version,k8s:batch.kubernetes.io/controller-uid=00e0c7b5-4113-43f0-8076-8cdbd9bf4bca,k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version,k8s:controller-uid=00e0c7b5-4113-43f0-8076-8cdbd9bf4bca,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=ceph-object-controller-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.4 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-xcr55 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ec832c9315 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1070 identity=500 ipv4=10.0.0.4 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-xcr55 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ec832c9315 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1070 identity=500 ipv4=10.0.0.4 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-xcr55 subsys=endpoint level=info msg="Successful endpoint creation" containerID=ec832c9315 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1070 identity=500 ipv4=10.0.0.4 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-xcr55 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=ec832c9315 endpointID=1070 k8sNamespace=openstack k8sPodName=ceph-object-controller-detect-version-xcr55 subsys=daemon level=info msg="Releasing key" key="[k8s:app=ceph-object-controller-detect-version k8s:batch.kubernetes.io/controller-uid=00e0c7b5-4113-43f0-8076-8cdbd9bf4bca k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version k8s:controller-uid=00e0c7b5-4113-43f0-8076-8cdbd9bf4bca k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=ceph-object-controller-detect-version k8s:rook-version=v1.15.9]" subsys=allocator level=info msg="Removed endpoint" containerID=ec832c9315 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1070 identity=500 ipv4=10.0.0.4 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-xcr55 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.216 22787f64-6707-48fa-bc23-1a69f3a396ec default }" containerID=b0a90e5ee3b39f9f51b7f3dfb3de9f27b0f010bf8f07bbb96fdd6ba2bda0635e datapathConfiguration="&{false false false false false }" interface=lxca6f5969817a0 k8sPodName=local-path-storage/helper-pod-create-pvc-7379fea1-7d24-4484-861b-88afb26790af labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b0a90e5ee3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1481 ipv4=10.0.0.216 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-7379fea1-7d24-4484-861b-88afb26790af subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b0a90e5ee3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1481 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.216 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-7379fea1-7d24-4484-861b-88afb26790af subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b0a90e5ee3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1481 identity=16974 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.216 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-7379fea1-7d24-4484-861b-88afb26790af oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b0a90e5ee3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1481 identity=16974 ipv4=10.0.0.216 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-7379fea1-7d24-4484-861b-88afb26790af subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b0a90e5ee3 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1481 identity=16974 ipv4=10.0.0.216 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-7379fea1-7d24-4484-861b-88afb26790af subsys=endpoint level=info msg="Successful endpoint creation" containerID=b0a90e5ee3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1481 identity=16974 ipv4=10.0.0.216 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-7379fea1-7d24-4484-861b-88afb26790af subsys=daemon level=info msg="Delete endpoint request" containerID=b0a90e5ee3 endpointID=1481 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-7379fea1-7d24-4484-861b-88afb26790af subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=b0a90e5ee3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1481 identity=16974 ipv4=10.0.0.216 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-7379fea1-7d24-4484-861b-88afb26790af subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.109 fff1dd38-987c-4691-9e20-fb58431c8fe6 default }" containerID=2da1484847168e8a1391e62606b44a54c5024e33ecde52d59ae25b7f29d393a9 datapathConfiguration="&{false false false false false }" interface=lxc410dbe7f291d k8sPodName=openstack/rabbitmq-glance-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2da1484847 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2142 ipv4=10.0.0.109 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2da1484847 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2142 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-glance,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0" ipv4=10.0.0.109 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-glance;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=2da1484847 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2142 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.109 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=2da1484847 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2142 identity=27440 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-glance,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0" ipv4=10.0.0.109 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2da1484847 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2142 identity=27440 ipv4=10.0.0.109 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=2da1484847 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2142 identity=27440 ipv4=10.0.0.109 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=2da1484847 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2142 identity=27440 ipv4=10.0.0.109 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.216 f88f2145-6c7b-426d-a0ab-d40bb1ed45f4 default }" containerID=58ac1d4fc0650dc65507a9b4f5105b917e741ce697803997d3078992dce2c936 datapathConfiguration="&{false false false false false }" interface=lxceef6a36ad520 k8sPodName=openstack/glance-db-init-9tsjf labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=58ac1d4fc0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2324 ipv4=10.0.0.216 ipv6= k8sPodName=openstack/glance-db-init-9tsjf subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=58ac1d4fc0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2324 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=c07f7898-066e-43fc-b7c4-5e452d985684,k8s:batch.kubernetes.io/job-name=glance-db-init,k8s:component=db-init,k8s:controller-uid=c07f7898-066e-43fc-b7c4-5e452d985684,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-init,k8s:release_group=glance" ipv4=10.0.0.216 ipv6= k8sPodName=openstack/glance-db-init-9tsjf subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=c07f7898-066e-43fc-b7c4-5e452d985684;k8s:batch.kubernetes.io/job-name=glance-db-init;k8s:component=db-init;k8s:controller-uid=c07f7898-066e-43fc-b7c4-5e452d985684;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-db-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=58ac1d4fc0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2324 identity=24834 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=c07f7898-066e-43fc-b7c4-5e452d985684,k8s:batch.kubernetes.io/job-name=glance-db-init,k8s:component=db-init,k8s:controller-uid=c07f7898-066e-43fc-b7c4-5e452d985684,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-init,k8s:release_group=glance" ipv4=10.0.0.216 ipv6= k8sPodName=openstack/glance-db-init-9tsjf oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=58ac1d4fc0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2324 identity=24834 ipv4=10.0.0.216 ipv6= k8sPodName=openstack/glance-db-init-9tsjf subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=58ac1d4fc0 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2324 identity=24834 ipv4=10.0.0.216 ipv6= k8sPodName=openstack/glance-db-init-9tsjf subsys=endpoint level=info msg="Successful endpoint creation" containerID=58ac1d4fc0 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2324 identity=24834 ipv4=10.0.0.216 ipv6= k8sPodName=openstack/glance-db-init-9tsjf subsys=daemon level=info msg="Delete endpoint request" containerID=58ac1d4fc0 endpointID=2324 k8sNamespace=openstack k8sPodName=glance-db-init-9tsjf subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=c07f7898-066e-43fc-b7c4-5e452d985684 k8s:batch.kubernetes.io/job-name=glance-db-init k8s:component=db-init k8s:controller-uid=c07f7898-066e-43fc-b7c4-5e452d985684 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-db-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=58ac1d4fc0 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2324 identity=24834 ipv4=10.0.0.216 ipv6= k8sPodName=openstack/glance-db-init-9tsjf subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.57 a4a7a90d-beda-4659-8499-e38053077fcc default }" containerID=1207baddde07c5755838bd85f93fe22a4d2ee7b366d7b7bb02a39c41ee9c1d98 datapathConfiguration="&{false false false false false }" interface=lxcfc1d92a43c1a k8sPodName=openstack/glance-db-sync-4dqww labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1207baddde datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=296 ipv4=10.0.0.57 ipv6= k8sPodName=openstack/glance-db-sync-4dqww subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1207baddde datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=296 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=4fedb610-b57b-4ddb-a32a-008c1ddf950b,k8s:batch.kubernetes.io/job-name=glance-db-sync,k8s:component=db-sync,k8s:controller-uid=4fedb610-b57b-4ddb-a32a-008c1ddf950b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-sync,k8s:release_group=glance" ipv4=10.0.0.57 ipv6= k8sPodName=openstack/glance-db-sync-4dqww subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=4fedb610-b57b-4ddb-a32a-008c1ddf950b;k8s:batch.kubernetes.io/job-name=glance-db-sync;k8s:component=db-sync;k8s:controller-uid=4fedb610-b57b-4ddb-a32a-008c1ddf950b;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-db-sync;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1207baddde datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=296 identity=39102 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=4fedb610-b57b-4ddb-a32a-008c1ddf950b,k8s:batch.kubernetes.io/job-name=glance-db-sync,k8s:component=db-sync,k8s:controller-uid=4fedb610-b57b-4ddb-a32a-008c1ddf950b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-sync,k8s:release_group=glance" ipv4=10.0.0.57 ipv6= k8sPodName=openstack/glance-db-sync-4dqww oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=1207baddde datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=296 identity=39102 ipv4=10.0.0.57 ipv6= k8sPodName=openstack/glance-db-sync-4dqww subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=1207baddde datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=296 identity=39102 ipv4=10.0.0.57 ipv6= k8sPodName=openstack/glance-db-sync-4dqww subsys=endpoint level=info msg="Successful endpoint creation" containerID=1207baddde datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=296 identity=39102 ipv4=10.0.0.57 ipv6= k8sPodName=openstack/glance-db-sync-4dqww subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.251 db33b0e0-2710-4456-8fdf-7ee2a5e2ddb3 default }" containerID=da8609de9e5484c16dc7e8cc4e8c7255630483d9692697d586503c93e3eee62b datapathConfiguration="&{false false false false false }" interface=lxcc962fb957350 k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-8mr7c labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=da8609de9e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1703 ipv4=10.0.0.251 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-8mr7c subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=da8609de9e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1703 identityLabels="k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io,k8s:app.kubernetes.io/created-by=rook-ceph-operator,k8s:app.kubernetes.io/instance=ceph,k8s:app.kubernetes.io/managed-by=rook-ceph-operator,k8s:app.kubernetes.io/name=ceph-rgw,k8s:app.kubernetes.io/part-of=ceph,k8s:app=rook-ceph-rgw,k8s:ceph_daemon_id=ceph,k8s:ceph_daemon_type=rgw,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw,k8s:io.kubernetes.pod.namespace=openstack,k8s:rgw=ceph,k8s:rook.io/operator-namespace=rook-ceph,k8s:rook_cluster=openstack,k8s:rook_object_store=ceph" ipv4=10.0.0.251 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-8mr7c subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-rgw;k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io;k8s:app.kubernetes.io/created-by=rook-ceph-operator;k8s:app.kubernetes.io/instance=ceph;k8s:app.kubernetes.io/managed-by=rook-ceph-operator;k8s:app.kubernetes.io/name=ceph-rgw;k8s:app.kubernetes.io/part-of=ceph;k8s:ceph_daemon_id=ceph;k8s:ceph_daemon_type=rgw;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw;k8s:io.kubernetes.pod.namespace=openstack;k8s:rgw=ceph;k8s:rook.io/operator-namespace=rook-ceph;k8s:rook_cluster=openstack;k8s:rook_object_store=ceph;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=da8609de9e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1703 identity=31701 identityLabels="k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io,k8s:app.kubernetes.io/created-by=rook-ceph-operator,k8s:app.kubernetes.io/instance=ceph,k8s:app.kubernetes.io/managed-by=rook-ceph-operator,k8s:app.kubernetes.io/name=ceph-rgw,k8s:app.kubernetes.io/part-of=ceph,k8s:app=rook-ceph-rgw,k8s:ceph_daemon_id=ceph,k8s:ceph_daemon_type=rgw,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw,k8s:io.kubernetes.pod.namespace=openstack,k8s:rgw=ceph,k8s:rook.io/operator-namespace=rook-ceph,k8s:rook_cluster=openstack,k8s:rook_object_store=ceph" ipv4=10.0.0.251 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-8mr7c oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=da8609de9e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1703 identity=31701 ipv4=10.0.0.251 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-8mr7c subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.26 09a089e0-4e2d-4d63-a214-0639a85683d8 default }" containerID=20d420497a8808372149f5e372f0c377c351f6b26eabf3f732390281ffb828f8 datapathConfiguration="&{false false false false false }" interface=lxc4aa6342e57b5 k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-rs4wd labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=20d420497a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1746 ipv4=10.0.0.26 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-rs4wd subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=20d420497a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1746 identityLabels="k8s:app=rook-ceph-crashcollector,k8s:ceph-version=18.2.7-0,k8s:ceph_daemon_id=crash,k8s:crashcollector=crash,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default,k8s:io.kubernetes.pod.namespace=openstack,k8s:node_name=instance,k8s:rook_cluster=openstack" ipv4=10.0.0.26 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-rs4wd subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-crashcollector;k8s:ceph-version=18.2.7-0;k8s:ceph_daemon_id=crash;k8s:crashcollector=crash;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default;k8s:io.kubernetes.pod.namespace=openstack;k8s:node_name=instance;k8s:rook_cluster=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=20d420497a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1746 identity=9428 identityLabels="k8s:app=rook-ceph-crashcollector,k8s:ceph-version=18.2.7-0,k8s:ceph_daemon_id=crash,k8s:crashcollector=crash,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default,k8s:io.kubernetes.pod.namespace=openstack,k8s:node_name=instance,k8s:rook_cluster=openstack" ipv4=10.0.0.26 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-rs4wd oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=20d420497a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1746 identity=9428 ipv4=10.0.0.26 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-rs4wd subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=da8609de9e datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1703 identity=31701 ipv4=10.0.0.251 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-8mr7c subsys=endpoint level=info msg="Successful endpoint creation" containerID=da8609de9e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1703 identity=31701 ipv4=10.0.0.251 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-8mr7c subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=20d420497a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1746 identity=9428 ipv4=10.0.0.26 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-rs4wd subsys=endpoint level=info msg="Successful endpoint creation" containerID=20d420497a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1746 identity=9428 ipv4=10.0.0.26 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-rs4wd subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=1207baddde endpointID=296 k8sNamespace=openstack k8sPodName=glance-db-sync-4dqww subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=4fedb610-b57b-4ddb-a32a-008c1ddf950b k8s:batch.kubernetes.io/job-name=glance-db-sync k8s:component=db-sync k8s:controller-uid=4fedb610-b57b-4ddb-a32a-008c1ddf950b k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-db-sync k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=1207baddde datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=296 identity=39102 ipv4=10.0.0.57 ipv6= k8sPodName=openstack/glance-db-sync-4dqww subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.104 256fd2e8-d663-44d7-a5bd-2b6307e86ea7 default }" containerID=68dab92eb21d56932e883a647d3a499aff58606551ebf6d9da16be74ec6d232c datapathConfiguration="&{false false false false false }" interface=lxc97a27b74b6d8 k8sPodName=openstack/glance-rabbit-init-8hk2z labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=68dab92eb2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4029 ipv4=10.0.0.104 ipv6= k8sPodName=openstack/glance-rabbit-init-8hk2z subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=68dab92eb2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4029 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=b9e5d22b-f212-4e41-b6d7-94484f0350ef,k8s:batch.kubernetes.io/job-name=glance-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=b9e5d22b-f212-4e41-b6d7-94484f0350ef,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-rabbit-init,k8s:release_group=glance" ipv4=10.0.0.104 ipv6= k8sPodName=openstack/glance-rabbit-init-8hk2z subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=b9e5d22b-f212-4e41-b6d7-94484f0350ef;k8s:batch.kubernetes.io/job-name=glance-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=b9e5d22b-f212-4e41-b6d7-94484f0350ef;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-rabbit-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=68dab92eb2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4029 identity=11992 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=b9e5d22b-f212-4e41-b6d7-94484f0350ef,k8s:batch.kubernetes.io/job-name=glance-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=b9e5d22b-f212-4e41-b6d7-94484f0350ef,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-rabbit-init,k8s:release_group=glance" ipv4=10.0.0.104 ipv6= k8sPodName=openstack/glance-rabbit-init-8hk2z oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=68dab92eb2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4029 identity=11992 ipv4=10.0.0.104 ipv6= k8sPodName=openstack/glance-rabbit-init-8hk2z subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=68dab92eb2 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=4029 identity=11992 ipv4=10.0.0.104 ipv6= k8sPodName=openstack/glance-rabbit-init-8hk2z subsys=endpoint level=info msg="Successful endpoint creation" containerID=68dab92eb2 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=4029 identity=11992 ipv4=10.0.0.104 ipv6= k8sPodName=openstack/glance-rabbit-init-8hk2z subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=68dab92eb2 endpointID=4029 k8sNamespace=openstack k8sPodName=glance-rabbit-init-8hk2z subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=b9e5d22b-f212-4e41-b6d7-94484f0350ef k8s:batch.kubernetes.io/job-name=glance-rabbit-init k8s:component=rabbit-init k8s:controller-uid=b9e5d22b-f212-4e41-b6d7-94484f0350ef k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-rabbit-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=68dab92eb2 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=4029 identity=11992 ipv4=10.0.0.104 ipv6= k8sPodName=openstack/glance-rabbit-init-8hk2z subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.10 056be518-ba51-4be0-b281-2b58daa1f5d9 default }" containerID=d4e96c9a9a2f07362db456fae5d1004217177480d77f22a31ca7dd93cfab5c36 datapathConfiguration="&{false false false false false }" interface=lxc2dccf3bbd9cf k8sPodName=openstack/glance-ks-service-5b9xt labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d4e96c9a9a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2714 ipv4=10.0.0.10 ipv6= k8sPodName=openstack/glance-ks-service-5b9xt subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d4e96c9a9a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2714 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=4e1c1ff9-07bd-4300-8c99-57436fc09787,k8s:batch.kubernetes.io/job-name=glance-ks-service,k8s:component=ks-service,k8s:controller-uid=4e1c1ff9-07bd-4300-8c99-57436fc09787,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-service,k8s:release_group=glance" ipv4=10.0.0.10 ipv6= k8sPodName=openstack/glance-ks-service-5b9xt subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=d4e96c9a9a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2714 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.10 ipv6= k8sPodName=openstack/glance-ks-service-5b9xt line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=4e1c1ff9-07bd-4300-8c99-57436fc09787;k8s:batch.kubernetes.io/job-name=glance-ks-service;k8s:component=ks-service;k8s:controller-uid=4e1c1ff9-07bd-4300-8c99-57436fc09787;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-service;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d4e96c9a9a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2714 identity=11646 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=4e1c1ff9-07bd-4300-8c99-57436fc09787,k8s:batch.kubernetes.io/job-name=glance-ks-service,k8s:component=ks-service,k8s:controller-uid=4e1c1ff9-07bd-4300-8c99-57436fc09787,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-service,k8s:release_group=glance" ipv4=10.0.0.10 ipv6= k8sPodName=openstack/glance-ks-service-5b9xt oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d4e96c9a9a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2714 identity=11646 ipv4=10.0.0.10 ipv6= k8sPodName=openstack/glance-ks-service-5b9xt subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d4e96c9a9a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2714 identity=11646 ipv4=10.0.0.10 ipv6= k8sPodName=openstack/glance-ks-service-5b9xt subsys=endpoint level=info msg="Successful endpoint creation" containerID=d4e96c9a9a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2714 identity=11646 ipv4=10.0.0.10 ipv6= k8sPodName=openstack/glance-ks-service-5b9xt subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=d4e96c9a9a endpointID=2714 k8sNamespace=openstack k8sPodName=glance-ks-service-5b9xt subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=4e1c1ff9-07bd-4300-8c99-57436fc09787 k8s:batch.kubernetes.io/job-name=glance-ks-service k8s:component=ks-service k8s:controller-uid=4e1c1ff9-07bd-4300-8c99-57436fc09787 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-service k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=d4e96c9a9a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2714 identity=11646 ipv4=10.0.0.10 ipv6= k8sPodName=openstack/glance-ks-service-5b9xt subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.202 35d1a2a7-6864-4b48-853d-dd19904232ef default }" containerID=45901a00ad5d22e0c74d90bbd853edf4445221705d98f863c81b5dd69094154f datapathConfiguration="&{false false false false false }" interface=lxc2a62656f9aa2 k8sPodName=openstack/glance-ks-endpoints-cl2j6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=45901a00ad datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2483 ipv4=10.0.0.202 ipv6= k8sPodName=openstack/glance-ks-endpoints-cl2j6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=45901a00ad datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2483 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=2da48f82-928d-4334-ae93-f0d3707f59aa,k8s:batch.kubernetes.io/job-name=glance-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=2da48f82-928d-4334-ae93-f0d3707f59aa,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-endpoints,k8s:release_group=glance" ipv4=10.0.0.202 ipv6= k8sPodName=openstack/glance-ks-endpoints-cl2j6 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=2da48f82-928d-4334-ae93-f0d3707f59aa;k8s:batch.kubernetes.io/job-name=glance-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=2da48f82-928d-4334-ae93-f0d3707f59aa;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-endpoints;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=45901a00ad datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2483 identity=10716 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=2da48f82-928d-4334-ae93-f0d3707f59aa,k8s:batch.kubernetes.io/job-name=glance-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=2da48f82-928d-4334-ae93-f0d3707f59aa,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-endpoints,k8s:release_group=glance" ipv4=10.0.0.202 ipv6= k8sPodName=openstack/glance-ks-endpoints-cl2j6 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=45901a00ad datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2483 identity=10716 ipv4=10.0.0.202 ipv6= k8sPodName=openstack/glance-ks-endpoints-cl2j6 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=45901a00ad datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2483 identity=10716 ipv4=10.0.0.202 ipv6= k8sPodName=openstack/glance-ks-endpoints-cl2j6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=45901a00ad datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2483 identity=10716 ipv4=10.0.0.202 ipv6= k8sPodName=openstack/glance-ks-endpoints-cl2j6 subsys=daemon level=info msg="Delete endpoint request" containerID=45901a00ad endpointID=2483 k8sNamespace=openstack k8sPodName=glance-ks-endpoints-cl2j6 subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=2da48f82-928d-4334-ae93-f0d3707f59aa k8s:batch.kubernetes.io/job-name=glance-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=2da48f82-928d-4334-ae93-f0d3707f59aa k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-endpoints k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=45901a00ad datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2483 identity=10716 ipv4=10.0.0.202 ipv6= k8sPodName=openstack/glance-ks-endpoints-cl2j6 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.233 b97a38ea-9de7-4f73-b435-99dc5c977ee4 default }" containerID=46a6cc28c454bc144c87db4af29cddb9b5c349daab47b6ca388a5b530c39971d datapathConfiguration="&{false false false false false }" interface=lxcc181ff14e169 k8sPodName=openstack/glance-ks-user-4kz2h labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=46a6cc28c4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3625 ipv4=10.0.0.233 ipv6= k8sPodName=openstack/glance-ks-user-4kz2h subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=46a6cc28c4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3625 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=3341dbd4-e9d2-4223-bf04-4b677f7c5ab2,k8s:batch.kubernetes.io/job-name=glance-ks-user,k8s:component=ks-user,k8s:controller-uid=3341dbd4-e9d2-4223-bf04-4b677f7c5ab2,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-user,k8s:release_group=glance" ipv4=10.0.0.233 ipv6= k8sPodName=openstack/glance-ks-user-4kz2h subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=46a6cc28c4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3625 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.233 ipv6= k8sPodName=openstack/glance-ks-user-4kz2h line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=3341dbd4-e9d2-4223-bf04-4b677f7c5ab2;k8s:batch.kubernetes.io/job-name=glance-ks-user;k8s:component=ks-user;k8s:controller-uid=3341dbd4-e9d2-4223-bf04-4b677f7c5ab2;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-user;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=46a6cc28c4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3625 identity=13609 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=3341dbd4-e9d2-4223-bf04-4b677f7c5ab2,k8s:batch.kubernetes.io/job-name=glance-ks-user,k8s:component=ks-user,k8s:controller-uid=3341dbd4-e9d2-4223-bf04-4b677f7c5ab2,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-user,k8s:release_group=glance" ipv4=10.0.0.233 ipv6= k8sPodName=openstack/glance-ks-user-4kz2h oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=46a6cc28c4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3625 identity=13609 ipv4=10.0.0.233 ipv6= k8sPodName=openstack/glance-ks-user-4kz2h subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=46a6cc28c4 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3625 identity=13609 ipv4=10.0.0.233 ipv6= k8sPodName=openstack/glance-ks-user-4kz2h subsys=endpoint level=info msg="Successful endpoint creation" containerID=46a6cc28c4 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3625 identity=13609 ipv4=10.0.0.233 ipv6= k8sPodName=openstack/glance-ks-user-4kz2h subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=46a6cc28c4 endpointID=3625 k8sNamespace=openstack k8sPodName=glance-ks-user-4kz2h subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=3341dbd4-e9d2-4223-bf04-4b677f7c5ab2 k8s:batch.kubernetes.io/job-name=glance-ks-user k8s:component=ks-user k8s:controller-uid=3341dbd4-e9d2-4223-bf04-4b677f7c5ab2 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-user k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=46a6cc28c4 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3625 identity=13609 ipv4=10.0.0.233 ipv6= k8sPodName=openstack/glance-ks-user-4kz2h subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.66 293fffb9-7e4a-4e10-919d-a656bb8ba935 default }" containerID=3ea9091ca9957450660e1057b6fb6d9af12a4365462b528389e3b918b8fb9f40 datapathConfiguration="&{false false false false false }" interface=lxc473444de380d k8sPodName=openstack/glance-metadefs-load-fdq6t labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3ea9091ca9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1159 ipv4=10.0.0.66 ipv6= k8sPodName=openstack/glance-metadefs-load-fdq6t subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3ea9091ca9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1159 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=edd520c0-650b-44f4-8487-8c64ed13fe29,k8s:batch.kubernetes.io/job-name=glance-metadefs-load,k8s:component=metadefs_load,k8s:controller-uid=edd520c0-650b-44f4-8487-8c64ed13fe29,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-metadefs-load,k8s:release_group=glance" ipv4=10.0.0.66 ipv6= k8sPodName=openstack/glance-metadefs-load-fdq6t subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=3ea9091ca9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1159 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.66 ipv6= k8sPodName=openstack/glance-metadefs-load-fdq6t line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=edd520c0-650b-44f4-8487-8c64ed13fe29;k8s:batch.kubernetes.io/job-name=glance-metadefs-load;k8s:component=metadefs_load;k8s:controller-uid=edd520c0-650b-44f4-8487-8c64ed13fe29;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-metadefs-load;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3ea9091ca9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1159 identity=8006 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=edd520c0-650b-44f4-8487-8c64ed13fe29,k8s:batch.kubernetes.io/job-name=glance-metadefs-load,k8s:component=metadefs_load,k8s:controller-uid=edd520c0-650b-44f4-8487-8c64ed13fe29,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-metadefs-load,k8s:release_group=glance" ipv4=10.0.0.66 ipv6= k8sPodName=openstack/glance-metadefs-load-fdq6t oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3ea9091ca9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1159 identity=8006 ipv4=10.0.0.66 ipv6= k8sPodName=openstack/glance-metadefs-load-fdq6t subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=3ea9091ca9 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1159 identity=8006 ipv4=10.0.0.66 ipv6= k8sPodName=openstack/glance-metadefs-load-fdq6t subsys=endpoint level=info msg="Successful endpoint creation" containerID=3ea9091ca9 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1159 identity=8006 ipv4=10.0.0.66 ipv6= k8sPodName=openstack/glance-metadefs-load-fdq6t subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=3ea9091ca9 endpointID=1159 k8sNamespace=openstack k8sPodName=glance-metadefs-load-fdq6t subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=edd520c0-650b-44f4-8487-8c64ed13fe29 k8s:batch.kubernetes.io/job-name=glance-metadefs-load k8s:component=metadefs_load k8s:controller-uid=edd520c0-650b-44f4-8487-8c64ed13fe29 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-metadefs-load k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=3ea9091ca9 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1159 identity=8006 ipv4=10.0.0.66 ipv6= k8sPodName=openstack/glance-metadefs-load-fdq6t subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.61 0963ce18-be88-49bc-862d-fd69097f790e default }" containerID=3bf8f6e323bf69a6c7b72c48f072ba4683d52d12ef37fae0931a9d965d59d486 datapathConfiguration="&{false false false false false }" interface=lxc4772116f90f0 k8sPodName=openstack/glance-storage-init-7cpmq labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3bf8f6e323 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1920 ipv4=10.0.0.61 ipv6= k8sPodName=openstack/glance-storage-init-7cpmq subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3bf8f6e323 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1920 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=9f57595c-488e-4333-8af1-5f5edd4923e8,k8s:batch.kubernetes.io/job-name=glance-storage-init,k8s:component=storage-init,k8s:controller-uid=9f57595c-488e-4333-8af1-5f5edd4923e8,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-storage-init,k8s:release_group=glance" ipv4=10.0.0.61 ipv6= k8sPodName=openstack/glance-storage-init-7cpmq subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=9f57595c-488e-4333-8af1-5f5edd4923e8;k8s:batch.kubernetes.io/job-name=glance-storage-init;k8s:component=storage-init;k8s:controller-uid=9f57595c-488e-4333-8af1-5f5edd4923e8;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-storage-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3bf8f6e323 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1920 identity=45209 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=9f57595c-488e-4333-8af1-5f5edd4923e8,k8s:batch.kubernetes.io/job-name=glance-storage-init,k8s:component=storage-init,k8s:controller-uid=9f57595c-488e-4333-8af1-5f5edd4923e8,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-storage-init,k8s:release_group=glance" ipv4=10.0.0.61 ipv6= k8sPodName=openstack/glance-storage-init-7cpmq oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3bf8f6e323 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1920 identity=45209 ipv4=10.0.0.61 ipv6= k8sPodName=openstack/glance-storage-init-7cpmq subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=3bf8f6e323 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1920 identity=45209 ipv4=10.0.0.61 ipv6= k8sPodName=openstack/glance-storage-init-7cpmq subsys=endpoint level=info msg="Successful endpoint creation" containerID=3bf8f6e323 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1920 identity=45209 ipv4=10.0.0.61 ipv6= k8sPodName=openstack/glance-storage-init-7cpmq subsys=daemon level=info msg="Delete endpoint request" containerID=3bf8f6e323 endpointID=1920 k8sNamespace=openstack k8sPodName=glance-storage-init-7cpmq subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=9f57595c-488e-4333-8af1-5f5edd4923e8 k8s:batch.kubernetes.io/job-name=glance-storage-init k8s:component=storage-init k8s:controller-uid=9f57595c-488e-4333-8af1-5f5edd4923e8 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-storage-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=3bf8f6e323 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1920 identity=45209 ipv4=10.0.0.61 ipv6= k8sPodName=openstack/glance-storage-init-7cpmq subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.33 82733dda-7bc6-4406-ab3b-641c687d910c default }" containerID=29aea9ba574c81787250811b76303ad31b84f2d724965a0451c531e41e9a60b2 datapathConfiguration="&{false false false false false }" interface=lxc28221e498120 k8sPodName=openstack/glance-api-54b7b66865-m9ng6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=29aea9ba57 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3366 ipv4=10.0.0.33 ipv6= k8sPodName=openstack/glance-api-54b7b66865-m9ng6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=29aea9ba57 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3366 identityLabels="k8s:application=glance,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=glance" ipv4=10.0.0.33 ipv6= k8sPodName=openstack/glance-api-54b7b66865-m9ng6 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=glance;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=29aea9ba57 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3366 identity=64833 identityLabels="k8s:application=glance,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=glance" ipv4=10.0.0.33 ipv6= k8sPodName=openstack/glance-api-54b7b66865-m9ng6 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=29aea9ba57 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3366 identity=64833 ipv4=10.0.0.33 ipv6= k8sPodName=openstack/glance-api-54b7b66865-m9ng6 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=29aea9ba57 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3366 identity=64833 ipv4=10.0.0.33 ipv6= k8sPodName=openstack/glance-api-54b7b66865-m9ng6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=29aea9ba57 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3366 identity=64833 ipv4=10.0.0.33 ipv6= k8sPodName=openstack/glance-api-54b7b66865-m9ng6 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.237 5e80516c-bd14-4307-bd8c-3abc629ce121 default }" containerID=3b2f53f428f27b368fd72ed82ad01e662baa0931fe4e60b3081c8b0f297341b3 datapathConfiguration="&{false false false false false }" interface=lxc3c5b5679ee2a k8sPodName=openstack/staffeln-api-684594c84d-lxcjc labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3b2f53f428 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2048 ipv4=10.0.0.237 ipv6= k8sPodName=openstack/staffeln-api-684594c84d-lxcjc subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3b2f53f428 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2048 identityLabels="k8s:application=staffeln,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.237 ipv6= k8sPodName=openstack/staffeln-api-684594c84d-lxcjc subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3b2f53f428 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2048 identity=4058 identityLabels="k8s:application=staffeln,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.237 ipv6= k8sPodName=openstack/staffeln-api-684594c84d-lxcjc oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3b2f53f428 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2048 identity=4058 ipv4=10.0.0.237 ipv6= k8sPodName=openstack/staffeln-api-684594c84d-lxcjc subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.145 c3e10e12-e0ac-451c-bdbc-f3d5ad0e5f74 default }" containerID=6fbbd37d299f7a694fc46fc44b16aa33eba81e4e641784c958a77ac2523d94ef datapathConfiguration="&{false false false false false }" interface=lxc75dd5e77d69b k8sPodName=openstack/staffeln-conductor-6768b4d66c-hgb4l labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6fbbd37d29 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2122 ipv4=10.0.0.145 ipv6= k8sPodName=openstack/staffeln-conductor-6768b4d66c-hgb4l subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6fbbd37d29 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2122 identityLabels="k8s:application=staffeln,k8s:component=conductor,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.145 ipv6= k8sPodName=openstack/staffeln-conductor-6768b4d66c-hgb4l subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:component=conductor;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6fbbd37d29 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2122 identity=15571 identityLabels="k8s:application=staffeln,k8s:component=conductor,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.145 ipv6= k8sPodName=openstack/staffeln-conductor-6768b4d66c-hgb4l oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6fbbd37d29 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2122 identity=15571 ipv4=10.0.0.145 ipv6= k8sPodName=openstack/staffeln-conductor-6768b4d66c-hgb4l subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=3b2f53f428 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2048 identity=4058 ipv4=10.0.0.237 ipv6= k8sPodName=openstack/staffeln-api-684594c84d-lxcjc subsys=endpoint level=info msg="Successful endpoint creation" containerID=3b2f53f428 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2048 identity=4058 ipv4=10.0.0.237 ipv6= k8sPodName=openstack/staffeln-api-684594c84d-lxcjc subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.58 61972439-b6a3-4cda-8c39-2882d757a9b7 default }" containerID=5679aebf4cc5951375c38b49cfb18360ab6ba7f72b634e28e9448264fa5c0a20 datapathConfiguration="&{false false false false false }" interface=lxcef1b89d1bc44 k8sPodName=openstack/staffeln-db-init-g66jv labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5679aebf4c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2636 ipv4=10.0.0.58 ipv6= k8sPodName=openstack/staffeln-db-init-g66jv subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5679aebf4c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2636 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=58e245af-71d5-40bd-8ec0-862007d53341,k8s:batch.kubernetes.io/job-name=staffeln-db-init,k8s:component=db-init,k8s:controller-uid=58e245af-71d5-40bd-8ec0-862007d53341,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-init,k8s:release_group=staffeln" ipv4=10.0.0.58 ipv6= k8sPodName=openstack/staffeln-db-init-g66jv subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:batch.kubernetes.io/controller-uid=58e245af-71d5-40bd-8ec0-862007d53341;k8s:batch.kubernetes.io/job-name=staffeln-db-init;k8s:component=db-init;k8s:controller-uid=58e245af-71d5-40bd-8ec0-862007d53341;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=staffeln-db-init;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5679aebf4c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2636 identity=4125 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=58e245af-71d5-40bd-8ec0-862007d53341,k8s:batch.kubernetes.io/job-name=staffeln-db-init,k8s:component=db-init,k8s:controller-uid=58e245af-71d5-40bd-8ec0-862007d53341,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-init,k8s:release_group=staffeln" ipv4=10.0.0.58 ipv6= k8sPodName=openstack/staffeln-db-init-g66jv oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5679aebf4c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2636 identity=4125 ipv4=10.0.0.58 ipv6= k8sPodName=openstack/staffeln-db-init-g66jv subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=6fbbd37d29 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2122 identity=15571 ipv4=10.0.0.145 ipv6= k8sPodName=openstack/staffeln-conductor-6768b4d66c-hgb4l subsys=endpoint level=info msg="Successful endpoint creation" containerID=6fbbd37d29 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2122 identity=15571 ipv4=10.0.0.145 ipv6= k8sPodName=openstack/staffeln-conductor-6768b4d66c-hgb4l subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=5679aebf4c datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2636 identity=4125 ipv4=10.0.0.58 ipv6= k8sPodName=openstack/staffeln-db-init-g66jv subsys=endpoint level=info msg="Successful endpoint creation" containerID=5679aebf4c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2636 identity=4125 ipv4=10.0.0.58 ipv6= k8sPodName=openstack/staffeln-db-init-g66jv subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=5679aebf4c endpointID=2636 k8sNamespace=openstack k8sPodName=staffeln-db-init-g66jv subsys=daemon level=info msg="Releasing key" key="[k8s:application=staffeln k8s:batch.kubernetes.io/controller-uid=58e245af-71d5-40bd-8ec0-862007d53341 k8s:batch.kubernetes.io/job-name=staffeln-db-init k8s:component=db-init k8s:controller-uid=58e245af-71d5-40bd-8ec0-862007d53341 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=staffeln-db-init k8s:release_group=staffeln]" subsys=allocator level=info msg="Removed endpoint" containerID=5679aebf4c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2636 identity=4125 ipv4=10.0.0.58 ipv6= k8sPodName=openstack/staffeln-db-init-g66jv subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.64 8f77cd9c-cd7d-42c8-9c33-8f3476b60cc9 default }" containerID=42bfee409e4e3e73896a608d730a217e6eb45e005704f32dfeb1fe352164d8c9 datapathConfiguration="&{false false false false false }" interface=lxc5e44a6c2565e k8sPodName=openstack/staffeln-db-sync-zmjqq labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=42bfee409e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2346 ipv4=10.0.0.64 ipv6= k8sPodName=openstack/staffeln-db-sync-zmjqq subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=42bfee409e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2346 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=05cdc89f-4f82-4c28-82c7-f796e4526fae,k8s:batch.kubernetes.io/job-name=staffeln-db-sync,k8s:component=db-sync,k8s:controller-uid=05cdc89f-4f82-4c28-82c7-f796e4526fae,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-sync,k8s:release_group=staffeln" ipv4=10.0.0.64 ipv6= k8sPodName=openstack/staffeln-db-sync-zmjqq subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:batch.kubernetes.io/controller-uid=05cdc89f-4f82-4c28-82c7-f796e4526fae;k8s:batch.kubernetes.io/job-name=staffeln-db-sync;k8s:component=db-sync;k8s:controller-uid=05cdc89f-4f82-4c28-82c7-f796e4526fae;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=staffeln-db-sync;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=42bfee409e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2346 identity=52848 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=05cdc89f-4f82-4c28-82c7-f796e4526fae,k8s:batch.kubernetes.io/job-name=staffeln-db-sync,k8s:component=db-sync,k8s:controller-uid=05cdc89f-4f82-4c28-82c7-f796e4526fae,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-sync,k8s:release_group=staffeln" ipv4=10.0.0.64 ipv6= k8sPodName=openstack/staffeln-db-sync-zmjqq oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=42bfee409e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2346 identity=52848 ipv4=10.0.0.64 ipv6= k8sPodName=openstack/staffeln-db-sync-zmjqq subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=42bfee409e datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2346 identity=52848 ipv4=10.0.0.64 ipv6= k8sPodName=openstack/staffeln-db-sync-zmjqq subsys=endpoint level=info msg="Successful endpoint creation" containerID=42bfee409e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2346 identity=52848 ipv4=10.0.0.64 ipv6= k8sPodName=openstack/staffeln-db-sync-zmjqq subsys=daemon level=info msg="Delete endpoint request" containerID=42bfee409e endpointID=2346 k8sNamespace=openstack k8sPodName=staffeln-db-sync-zmjqq subsys=daemon level=info msg="Releasing key" key="[k8s:application=staffeln k8s:batch.kubernetes.io/controller-uid=05cdc89f-4f82-4c28-82c7-f796e4526fae k8s:batch.kubernetes.io/job-name=staffeln-db-sync k8s:component=db-sync k8s:controller-uid=05cdc89f-4f82-4c28-82c7-f796e4526fae k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=staffeln-db-sync k8s:release_group=staffeln]" subsys=allocator level=info msg="Removed endpoint" containerID=42bfee409e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2346 identity=52848 ipv4=10.0.0.64 ipv6= k8sPodName=openstack/staffeln-db-sync-zmjqq subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.34 fb2e756b-77e2-41ee-a7db-bcca85373f94 default }" containerID=db79ee23c2ca64b17c3464ec39b5270ad9ae0790b177a12f4e93b4112dd5e424 datapathConfiguration="&{false false false false false }" interface=lxc768df766e6af k8sPodName=local-path-storage/helper-pod-create-pvc-a0f318d6-d464-4705-b6ee-b1a6469094f4 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=db79ee23c2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=900 ipv4=10.0.0.34 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a0f318d6-d464-4705-b6ee-b1a6469094f4 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=db79ee23c2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=900 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.34 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a0f318d6-d464-4705-b6ee-b1a6469094f4 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=db79ee23c2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=900 identity=16974 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.34 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a0f318d6-d464-4705-b6ee-b1a6469094f4 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=db79ee23c2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=900 identity=16974 ipv4=10.0.0.34 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a0f318d6-d464-4705-b6ee-b1a6469094f4 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=db79ee23c2 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=900 identity=16974 ipv4=10.0.0.34 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a0f318d6-d464-4705-b6ee-b1a6469094f4 subsys=endpoint level=info msg="Successful endpoint creation" containerID=db79ee23c2 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=900 identity=16974 ipv4=10.0.0.34 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a0f318d6-d464-4705-b6ee-b1a6469094f4 subsys=daemon level=info msg="Delete endpoint request" containerID=db79ee23c2 endpointID=900 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-a0f318d6-d464-4705-b6ee-b1a6469094f4 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=db79ee23c2 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=900 identity=16974 ipv4=10.0.0.34 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a0f318d6-d464-4705-b6ee-b1a6469094f4 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.138 5bfb8fbb-2188-4fed-9707-b804ac69d4ad default }" containerID=37231468e08afa6db59b6d5234ef7d2e9e6e593af6bd6371e272238e8a5b1b9f datapathConfiguration="&{false false false false false }" interface=lxceb01b15a9d5f k8sPodName=openstack/rabbitmq-cinder-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=37231468e0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=633 ipv4=10.0.0.138 ipv6= k8sPodName=openstack/rabbitmq-cinder-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=37231468e0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=633 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-cinder,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cinder-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-cinder-server-0" ipv4=10.0.0.138 ipv6= k8sPodName=openstack/rabbitmq-cinder-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-cinder;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cinder-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-cinder-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=37231468e0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=633 identity=44622 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-cinder,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cinder-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-cinder-server-0" ipv4=10.0.0.138 ipv6= k8sPodName=openstack/rabbitmq-cinder-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=37231468e0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=633 identity=44622 ipv4=10.0.0.138 ipv6= k8sPodName=openstack/rabbitmq-cinder-server-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=37231468e0 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=633 identity=44622 ipv4=10.0.0.138 ipv6= k8sPodName=openstack/rabbitmq-cinder-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=37231468e0 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=633 identity=44622 ipv4=10.0.0.138 ipv6= k8sPodName=openstack/rabbitmq-cinder-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.36 d0f0d5b1-1c5d-42a0-9f19-bad324f85aa3 default }" containerID=0aa42dca9cb742699535cda14c0d96e84ce841e424083af1ce83a9e5602606f8 datapathConfiguration="&{false false false false false }" interface=lxcc07c6efa0e74 k8sPodName=openstack/cinder-scheduler-776d7d5697-vkkfc labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0aa42dca9c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=601 ipv4=10.0.0.36 ipv6= k8sPodName=openstack/cinder-scheduler-776d7d5697-vkkfc subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0aa42dca9c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=601 identityLabels="k8s:application=cinder,k8s:component=scheduler,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-scheduler,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=cinder" ipv4=10.0.0.36 ipv6= k8sPodName=openstack/cinder-scheduler-776d7d5697-vkkfc subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:component=scheduler;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-scheduler;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0aa42dca9c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=601 identity=41504 identityLabels="k8s:application=cinder,k8s:component=scheduler,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-scheduler,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=cinder" ipv4=10.0.0.36 ipv6= k8sPodName=openstack/cinder-scheduler-776d7d5697-vkkfc oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0aa42dca9c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=601 identity=41504 ipv4=10.0.0.36 ipv6= k8sPodName=openstack/cinder-scheduler-776d7d5697-vkkfc subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.62 73b558d8-7913-437a-a3c8-0600a9f4d1a8 default }" containerID=50ab0ad0e206ce8246f958dd48f6bb88ba566146b4ae91bb7914bad5bc59d7f1 datapathConfiguration="&{false false false false false }" interface=lxc4292383dfbde k8sPodName=openstack/cinder-api-56564495ff-jrf75 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=50ab0ad0e2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=389 ipv4=10.0.0.62 ipv6= k8sPodName=openstack/cinder-api-56564495ff-jrf75 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=50ab0ad0e2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=389 identityLabels="k8s:application=cinder,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=cinder" ipv4=10.0.0.62 ipv6= k8sPodName=openstack/cinder-api-56564495ff-jrf75 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=50ab0ad0e2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=389 identity=14011 identityLabels="k8s:application=cinder,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=cinder" ipv4=10.0.0.62 ipv6= k8sPodName=openstack/cinder-api-56564495ff-jrf75 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=50ab0ad0e2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=389 identity=14011 ipv4=10.0.0.62 ipv6= k8sPodName=openstack/cinder-api-56564495ff-jrf75 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=0aa42dca9c datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=601 identity=41504 ipv4=10.0.0.36 ipv6= k8sPodName=openstack/cinder-scheduler-776d7d5697-vkkfc subsys=endpoint level=info msg="Successful endpoint creation" containerID=0aa42dca9c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=601 identity=41504 ipv4=10.0.0.36 ipv6= k8sPodName=openstack/cinder-scheduler-776d7d5697-vkkfc subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.151 8ae98a75-a4be-4985-bdc6-01072efd4000 default }" containerID=e2332768212e822aee31c2d25b78d7591060d802c9bde371cc3e7f30e5ce4379 datapathConfiguration="&{false false false false false }" interface=lxca07e09676b22 k8sPodName=openstack/cinder-db-init-tnx27 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e233276821 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2356 ipv4=10.0.0.151 ipv6= k8sPodName=openstack/cinder-db-init-tnx27 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e233276821 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2356 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=d7cf73fa-c602-491c-875c-ab43ebfa6af6,k8s:batch.kubernetes.io/job-name=cinder-db-init,k8s:component=db-init,k8s:controller-uid=d7cf73fa-c602-491c-875c-ab43ebfa6af6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-db-init,k8s:release_group=cinder" ipv4=10.0.0.151 ipv6= k8sPodName=openstack/cinder-db-init-tnx27 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=d7cf73fa-c602-491c-875c-ab43ebfa6af6;k8s:batch.kubernetes.io/job-name=cinder-db-init;k8s:component=db-init;k8s:controller-uid=d7cf73fa-c602-491c-875c-ab43ebfa6af6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-db-init;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e233276821 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2356 identity=1683 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=d7cf73fa-c602-491c-875c-ab43ebfa6af6,k8s:batch.kubernetes.io/job-name=cinder-db-init,k8s:component=db-init,k8s:controller-uid=d7cf73fa-c602-491c-875c-ab43ebfa6af6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-db-init,k8s:release_group=cinder" ipv4=10.0.0.151 ipv6= k8sPodName=openstack/cinder-db-init-tnx27 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e233276821 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2356 identity=1683 ipv4=10.0.0.151 ipv6= k8sPodName=openstack/cinder-db-init-tnx27 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=50ab0ad0e2 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=389 identity=14011 ipv4=10.0.0.62 ipv6= k8sPodName=openstack/cinder-api-56564495ff-jrf75 subsys=endpoint level=info msg="Successful endpoint creation" containerID=50ab0ad0e2 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=389 identity=14011 ipv4=10.0.0.62 ipv6= k8sPodName=openstack/cinder-api-56564495ff-jrf75 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=e233276821 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2356 identity=1683 ipv4=10.0.0.151 ipv6= k8sPodName=openstack/cinder-db-init-tnx27 subsys=endpoint level=info msg="Successful endpoint creation" containerID=e233276821 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2356 identity=1683 ipv4=10.0.0.151 ipv6= k8sPodName=openstack/cinder-db-init-tnx27 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=e233276821 endpointID=2356 k8sNamespace=openstack k8sPodName=cinder-db-init-tnx27 subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=d7cf73fa-c602-491c-875c-ab43ebfa6af6 k8s:batch.kubernetes.io/job-name=cinder-db-init k8s:component=db-init k8s:controller-uid=d7cf73fa-c602-491c-875c-ab43ebfa6af6 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-db-init k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=e233276821 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2356 identity=1683 ipv4=10.0.0.151 ipv6= k8sPodName=openstack/cinder-db-init-tnx27 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.200 008f4579-88b6-43f6-9410-c2a547006463 default }" containerID=9b38ab48ca866d05ee31540f53f930827fa874290bc1c812e77365a25574ed04 datapathConfiguration="&{false false false false false }" interface=lxcbf01df4cd220 k8sPodName=openstack/cinder-db-sync-2hsxx labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9b38ab48ca datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1917 ipv4=10.0.0.200 ipv6= k8sPodName=openstack/cinder-db-sync-2hsxx subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9b38ab48ca datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1917 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=ad2f589b-a237-4dd9-99ed-f7cac84aad2c,k8s:batch.kubernetes.io/job-name=cinder-db-sync,k8s:component=db-sync,k8s:controller-uid=ad2f589b-a237-4dd9-99ed-f7cac84aad2c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-db-sync,k8s:release_group=cinder" ipv4=10.0.0.200 ipv6= k8sPodName=openstack/cinder-db-sync-2hsxx subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=ad2f589b-a237-4dd9-99ed-f7cac84aad2c;k8s:batch.kubernetes.io/job-name=cinder-db-sync;k8s:component=db-sync;k8s:controller-uid=ad2f589b-a237-4dd9-99ed-f7cac84aad2c;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-db-sync;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9b38ab48ca datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1917 identity=9241 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=ad2f589b-a237-4dd9-99ed-f7cac84aad2c,k8s:batch.kubernetes.io/job-name=cinder-db-sync,k8s:component=db-sync,k8s:controller-uid=ad2f589b-a237-4dd9-99ed-f7cac84aad2c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-db-sync,k8s:release_group=cinder" ipv4=10.0.0.200 ipv6= k8sPodName=openstack/cinder-db-sync-2hsxx oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9b38ab48ca datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1917 identity=9241 ipv4=10.0.0.200 ipv6= k8sPodName=openstack/cinder-db-sync-2hsxx subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=9b38ab48ca datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1917 identity=9241 ipv4=10.0.0.200 ipv6= k8sPodName=openstack/cinder-db-sync-2hsxx subsys=endpoint level=info msg="Successful endpoint creation" containerID=9b38ab48ca datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1917 identity=9241 ipv4=10.0.0.200 ipv6= k8sPodName=openstack/cinder-db-sync-2hsxx subsys=daemon level=info msg="Delete endpoint request" containerID=9b38ab48ca endpointID=1917 k8sNamespace=openstack k8sPodName=cinder-db-sync-2hsxx subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=ad2f589b-a237-4dd9-99ed-f7cac84aad2c k8s:batch.kubernetes.io/job-name=cinder-db-sync k8s:component=db-sync k8s:controller-uid=ad2f589b-a237-4dd9-99ed-f7cac84aad2c k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-db-sync k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=9b38ab48ca datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1917 identity=9241 ipv4=10.0.0.200 ipv6= k8sPodName=openstack/cinder-db-sync-2hsxx subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.225 db96ca08-7651-4ab9-840d-7e90ae8f2325 default }" containerID=4ad2d2ff6585002fa4b6c7178ab9cf199e6f5e599290553b4c16eb4aa8099d32 datapathConfiguration="&{false false false false false }" interface=lxc2d66d30c8def k8sPodName=openstack/cinder-rabbit-init-7z8mx labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4ad2d2ff65 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=596 ipv4=10.0.0.225 ipv6= k8sPodName=openstack/cinder-rabbit-init-7z8mx subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4ad2d2ff65 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=596 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=5e2a4b5b-7e93-4c0d-b13b-a4d2e8fd8e74,k8s:batch.kubernetes.io/job-name=cinder-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=5e2a4b5b-7e93-4c0d-b13b-a4d2e8fd8e74,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-rabbit-init,k8s:release_group=cinder" ipv4=10.0.0.225 ipv6= k8sPodName=openstack/cinder-rabbit-init-7z8mx subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=5e2a4b5b-7e93-4c0d-b13b-a4d2e8fd8e74;k8s:batch.kubernetes.io/job-name=cinder-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=5e2a4b5b-7e93-4c0d-b13b-a4d2e8fd8e74;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-rabbit-init;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4ad2d2ff65 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=596 identity=7676 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=5e2a4b5b-7e93-4c0d-b13b-a4d2e8fd8e74,k8s:batch.kubernetes.io/job-name=cinder-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=5e2a4b5b-7e93-4c0d-b13b-a4d2e8fd8e74,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-rabbit-init,k8s:release_group=cinder" ipv4=10.0.0.225 ipv6= k8sPodName=openstack/cinder-rabbit-init-7z8mx oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=4ad2d2ff65 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=596 identity=7676 ipv4=10.0.0.225 ipv6= k8sPodName=openstack/cinder-rabbit-init-7z8mx subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=4ad2d2ff65 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=596 identity=7676 ipv4=10.0.0.225 ipv6= k8sPodName=openstack/cinder-rabbit-init-7z8mx subsys=endpoint level=info msg="Successful endpoint creation" containerID=4ad2d2ff65 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=596 identity=7676 ipv4=10.0.0.225 ipv6= k8sPodName=openstack/cinder-rabbit-init-7z8mx subsys=daemon level=info msg="Delete endpoint request" containerID=4ad2d2ff65 endpointID=596 k8sNamespace=openstack k8sPodName=cinder-rabbit-init-7z8mx subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=5e2a4b5b-7e93-4c0d-b13b-a4d2e8fd8e74 k8s:batch.kubernetes.io/job-name=cinder-rabbit-init k8s:component=rabbit-init k8s:controller-uid=5e2a4b5b-7e93-4c0d-b13b-a4d2e8fd8e74 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-rabbit-init k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=4ad2d2ff65 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=596 identity=7676 ipv4=10.0.0.225 ipv6= k8sPodName=openstack/cinder-rabbit-init-7z8mx subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.210 7f8814e4-047a-4eae-a222-e62355ae8f66 default }" containerID=8a8c815e5a2351df9c39ae6eef8b7e38437900f2f0e6332d17aeea5cde871e5a datapathConfiguration="&{false false false false false }" interface=lxc6c1024b73c3e k8sPodName=openstack/cinder-ks-service-qrn7z labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8a8c815e5a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3306 ipv4=10.0.0.210 ipv6= k8sPodName=openstack/cinder-ks-service-qrn7z subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8a8c815e5a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3306 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=8b69febf-9412-4fc4-aa1c-774bc2c33483,k8s:batch.kubernetes.io/job-name=cinder-ks-service,k8s:component=ks-service,k8s:controller-uid=8b69febf-9412-4fc4-aa1c-774bc2c33483,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-ks-service,k8s:release_group=cinder" ipv4=10.0.0.210 ipv6= k8sPodName=openstack/cinder-ks-service-qrn7z subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=8b69febf-9412-4fc4-aa1c-774bc2c33483;k8s:batch.kubernetes.io/job-name=cinder-ks-service;k8s:component=ks-service;k8s:controller-uid=8b69febf-9412-4fc4-aa1c-774bc2c33483;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-ks-service;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8a8c815e5a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3306 identity=31854 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=8b69febf-9412-4fc4-aa1c-774bc2c33483,k8s:batch.kubernetes.io/job-name=cinder-ks-service,k8s:component=ks-service,k8s:controller-uid=8b69febf-9412-4fc4-aa1c-774bc2c33483,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-ks-service,k8s:release_group=cinder" ipv4=10.0.0.210 ipv6= k8sPodName=openstack/cinder-ks-service-qrn7z oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8a8c815e5a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3306 identity=31854 ipv4=10.0.0.210 ipv6= k8sPodName=openstack/cinder-ks-service-qrn7z subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=8a8c815e5a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3306 identity=31854 ipv4=10.0.0.210 ipv6= k8sPodName=openstack/cinder-ks-service-qrn7z subsys=endpoint level=info msg="Successful endpoint creation" containerID=8a8c815e5a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3306 identity=31854 ipv4=10.0.0.210 ipv6= k8sPodName=openstack/cinder-ks-service-qrn7z subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=8a8c815e5a endpointID=3306 k8sNamespace=openstack k8sPodName=cinder-ks-service-qrn7z subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=8b69febf-9412-4fc4-aa1c-774bc2c33483 k8s:batch.kubernetes.io/job-name=cinder-ks-service k8s:component=ks-service k8s:controller-uid=8b69febf-9412-4fc4-aa1c-774bc2c33483 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-ks-service k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=8a8c815e5a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3306 identity=31854 ipv4=10.0.0.210 ipv6= k8sPodName=openstack/cinder-ks-service-qrn7z subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.183 b25ea08d-b99f-4b68-8e88-d17e25d93bad default }" containerID=defff112212c0964e2a4e158157791e3433be42065ec0e17703d2e83fd82a0a6 datapathConfiguration="&{false false false false false }" interface=lxca98e61926e7b k8sPodName=openstack/cinder-ks-endpoints-rxdsn labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=defff11221 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2801 ipv4=10.0.0.183 ipv6= k8sPodName=openstack/cinder-ks-endpoints-rxdsn subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=defff11221 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2801 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=c9ea1695-64f7-4101-b1d7-6ff6bd751482,k8s:batch.kubernetes.io/job-name=cinder-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=c9ea1695-64f7-4101-b1d7-6ff6bd751482,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-ks-endpoints,k8s:release_group=cinder" ipv4=10.0.0.183 ipv6= k8sPodName=openstack/cinder-ks-endpoints-rxdsn subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=c9ea1695-64f7-4101-b1d7-6ff6bd751482;k8s:batch.kubernetes.io/job-name=cinder-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=c9ea1695-64f7-4101-b1d7-6ff6bd751482;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-ks-endpoints;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=defff11221 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2801 identity=28309 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=c9ea1695-64f7-4101-b1d7-6ff6bd751482,k8s:batch.kubernetes.io/job-name=cinder-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=c9ea1695-64f7-4101-b1d7-6ff6bd751482,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-ks-endpoints,k8s:release_group=cinder" ipv4=10.0.0.183 ipv6= k8sPodName=openstack/cinder-ks-endpoints-rxdsn oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=defff11221 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2801 identity=28309 ipv4=10.0.0.183 ipv6= k8sPodName=openstack/cinder-ks-endpoints-rxdsn subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=defff11221 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2801 identity=28309 ipv4=10.0.0.183 ipv6= k8sPodName=openstack/cinder-ks-endpoints-rxdsn subsys=endpoint level=info msg="Successful endpoint creation" containerID=defff11221 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2801 identity=28309 ipv4=10.0.0.183 ipv6= k8sPodName=openstack/cinder-ks-endpoints-rxdsn subsys=daemon level=info msg="Delete endpoint request" containerID=defff11221 endpointID=2801 k8sNamespace=openstack k8sPodName=cinder-ks-endpoints-rxdsn subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=c9ea1695-64f7-4101-b1d7-6ff6bd751482 k8s:batch.kubernetes.io/job-name=cinder-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=c9ea1695-64f7-4101-b1d7-6ff6bd751482 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-ks-endpoints k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=defff11221 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2801 identity=28309 ipv4=10.0.0.183 ipv6= k8sPodName=openstack/cinder-ks-endpoints-rxdsn subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.79 32793400-10f6-4441-aaf3-8f76736f804d default }" containerID=f6a68cda36cc8a411cdd017996e17c8f085430dd7ff17dde82dcfb244e748d55 datapathConfiguration="&{false false false false false }" interface=lxc15e2657c63b9 k8sPodName=openstack/cinder-ks-user-q2t7q labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f6a68cda36 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=61 ipv4=10.0.0.79 ipv6= k8sPodName=openstack/cinder-ks-user-q2t7q subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f6a68cda36 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=61 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=ebc2e955-7852-479f-a71c-9fad937a5e9d,k8s:batch.kubernetes.io/job-name=cinder-ks-user,k8s:component=ks-user,k8s:controller-uid=ebc2e955-7852-479f-a71c-9fad937a5e9d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-ks-user,k8s:release_group=cinder" ipv4=10.0.0.79 ipv6= k8sPodName=openstack/cinder-ks-user-q2t7q subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=f6a68cda36 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=61 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.79 ipv6= k8sPodName=openstack/cinder-ks-user-q2t7q line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=ebc2e955-7852-479f-a71c-9fad937a5e9d;k8s:batch.kubernetes.io/job-name=cinder-ks-user;k8s:component=ks-user;k8s:controller-uid=ebc2e955-7852-479f-a71c-9fad937a5e9d;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-ks-user;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f6a68cda36 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=61 identity=42945 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=ebc2e955-7852-479f-a71c-9fad937a5e9d,k8s:batch.kubernetes.io/job-name=cinder-ks-user,k8s:component=ks-user,k8s:controller-uid=ebc2e955-7852-479f-a71c-9fad937a5e9d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-ks-user,k8s:release_group=cinder" ipv4=10.0.0.79 ipv6= k8sPodName=openstack/cinder-ks-user-q2t7q oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f6a68cda36 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=61 identity=42945 ipv4=10.0.0.79 ipv6= k8sPodName=openstack/cinder-ks-user-q2t7q subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f6a68cda36 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=61 identity=42945 ipv4=10.0.0.79 ipv6= k8sPodName=openstack/cinder-ks-user-q2t7q subsys=endpoint level=info msg="Successful endpoint creation" containerID=f6a68cda36 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=61 identity=42945 ipv4=10.0.0.79 ipv6= k8sPodName=openstack/cinder-ks-user-q2t7q subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=f6a68cda36 endpointID=61 k8sNamespace=openstack k8sPodName=cinder-ks-user-q2t7q subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=ebc2e955-7852-479f-a71c-9fad937a5e9d k8s:batch.kubernetes.io/job-name=cinder-ks-user k8s:component=ks-user k8s:controller-uid=ebc2e955-7852-479f-a71c-9fad937a5e9d k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-ks-user k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=f6a68cda36 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=61 identity=42945 ipv4=10.0.0.79 ipv6= k8sPodName=openstack/cinder-ks-user-q2t7q subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.181 ec6e4723-47f8-4735-bd66-ec64bb277922 default }" containerID=5eebd2b200e5fe65b7bddf37f510183fd59c585f0bd10dc509eae6f4e30cf24c datapathConfiguration="&{false false false false false }" interface=lxc4f86ce3a4e03 k8sPodName=openstack/cinder-backup-storage-init-lrq7t labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5eebd2b200 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4013 ipv4=10.0.0.181 ipv6= k8sPodName=openstack/cinder-backup-storage-init-lrq7t subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5eebd2b200 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4013 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=0693d030-7b01-4407-a9f5-5374d613d61f,k8s:batch.kubernetes.io/job-name=cinder-backup-storage-init,k8s:component=storage-init,k8s:controller-uid=0693d030-7b01-4407-a9f5-5374d613d61f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-backup-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-backup-storage-init,k8s:release_group=cinder" ipv4=10.0.0.181 ipv6= k8sPodName=openstack/cinder-backup-storage-init-lrq7t subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=0693d030-7b01-4407-a9f5-5374d613d61f;k8s:batch.kubernetes.io/job-name=cinder-backup-storage-init;k8s:component=storage-init;k8s:controller-uid=0693d030-7b01-4407-a9f5-5374d613d61f;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-backup-storage-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-backup-storage-init;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5eebd2b200 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4013 identity=2731 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=0693d030-7b01-4407-a9f5-5374d613d61f,k8s:batch.kubernetes.io/job-name=cinder-backup-storage-init,k8s:component=storage-init,k8s:controller-uid=0693d030-7b01-4407-a9f5-5374d613d61f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-backup-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-backup-storage-init,k8s:release_group=cinder" ipv4=10.0.0.181 ipv6= k8sPodName=openstack/cinder-backup-storage-init-lrq7t oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=5eebd2b200 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4013 identity=2731 ipv4=10.0.0.181 ipv6= k8sPodName=openstack/cinder-backup-storage-init-lrq7t subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=5eebd2b200 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=4013 identity=2731 ipv4=10.0.0.181 ipv6= k8sPodName=openstack/cinder-backup-storage-init-lrq7t subsys=endpoint level=info msg="Successful endpoint creation" containerID=5eebd2b200 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=4013 identity=2731 ipv4=10.0.0.181 ipv6= k8sPodName=openstack/cinder-backup-storage-init-lrq7t subsys=daemon level=info msg="Delete endpoint request" containerID=5eebd2b200 endpointID=4013 k8sNamespace=openstack k8sPodName=cinder-backup-storage-init-lrq7t subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=0693d030-7b01-4407-a9f5-5374d613d61f k8s:batch.kubernetes.io/job-name=cinder-backup-storage-init k8s:component=storage-init k8s:controller-uid=0693d030-7b01-4407-a9f5-5374d613d61f k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-backup-storage-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-backup-storage-init k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=5eebd2b200 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=4013 identity=2731 ipv4=10.0.0.181 ipv6= k8sPodName=openstack/cinder-backup-storage-init-lrq7t subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.5 f5ee914b-1c21-4f9d-8c5f-aea1c14f0d6f default }" containerID=cf56ec103020d59e8f01bbcd535dc9dec4fcc5cb8c025a70d4e6ac969492f013 datapathConfiguration="&{false false false false false }" interface=lxc0205c090dd9b k8sPodName=openstack/cinder-create-internal-tenant-klc7b labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=cf56ec1030 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2343 ipv4=10.0.0.5 ipv6= k8sPodName=openstack/cinder-create-internal-tenant-klc7b subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=cf56ec1030 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2343 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=eebbb629-9973-47de-b191-507115d39df8,k8s:batch.kubernetes.io/job-name=cinder-create-internal-tenant,k8s:component=create-internal-tenant,k8s:controller-uid=eebbb629-9973-47de-b191-507115d39df8,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-create-internal-tenant,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-create-internal-tenant,k8s:release_group=cinder" ipv4=10.0.0.5 ipv6= k8sPodName=openstack/cinder-create-internal-tenant-klc7b subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=eebbb629-9973-47de-b191-507115d39df8;k8s:batch.kubernetes.io/job-name=cinder-create-internal-tenant;k8s:component=create-internal-tenant;k8s:controller-uid=eebbb629-9973-47de-b191-507115d39df8;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-create-internal-tenant;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-create-internal-tenant;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=cf56ec1030 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2343 identity=3804 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=eebbb629-9973-47de-b191-507115d39df8,k8s:batch.kubernetes.io/job-name=cinder-create-internal-tenant,k8s:component=create-internal-tenant,k8s:controller-uid=eebbb629-9973-47de-b191-507115d39df8,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-create-internal-tenant,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-create-internal-tenant,k8s:release_group=cinder" ipv4=10.0.0.5 ipv6= k8sPodName=openstack/cinder-create-internal-tenant-klc7b oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=cf56ec1030 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2343 identity=3804 ipv4=10.0.0.5 ipv6= k8sPodName=openstack/cinder-create-internal-tenant-klc7b subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=cf56ec1030 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2343 identity=3804 ipv4=10.0.0.5 ipv6= k8sPodName=openstack/cinder-create-internal-tenant-klc7b subsys=endpoint level=info msg="Successful endpoint creation" containerID=cf56ec1030 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2343 identity=3804 ipv4=10.0.0.5 ipv6= k8sPodName=openstack/cinder-create-internal-tenant-klc7b subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=cf56ec1030 endpointID=2343 k8sNamespace=openstack k8sPodName=cinder-create-internal-tenant-klc7b subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=eebbb629-9973-47de-b191-507115d39df8 k8s:batch.kubernetes.io/job-name=cinder-create-internal-tenant k8s:component=create-internal-tenant k8s:controller-uid=eebbb629-9973-47de-b191-507115d39df8 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-create-internal-tenant k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-create-internal-tenant k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=cf56ec1030 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2343 identity=3804 ipv4=10.0.0.5 ipv6= k8sPodName=openstack/cinder-create-internal-tenant-klc7b subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.146 5e93fff3-33ee-410f-9d85-e3312b145d64 default }" containerID=ac1c6b79eb93921340d06396e599c4b378bc0abfe1450f06e004f9a176e0fdf8 datapathConfiguration="&{false false false false false }" interface=lxc806c1dedcacb k8sPodName=openstack/cinder-storage-init-vhk9f labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ac1c6b79eb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1168 ipv4=10.0.0.146 ipv6= k8sPodName=openstack/cinder-storage-init-vhk9f subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ac1c6b79eb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1168 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=890db90b-734d-4ac1-a2cf-6e0f0e24cdb3,k8s:batch.kubernetes.io/job-name=cinder-storage-init,k8s:component=storage-init,k8s:controller-uid=890db90b-734d-4ac1-a2cf-6e0f0e24cdb3,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-storage-init,k8s:release_group=cinder" ipv4=10.0.0.146 ipv6= k8sPodName=openstack/cinder-storage-init-vhk9f subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=890db90b-734d-4ac1-a2cf-6e0f0e24cdb3;k8s:batch.kubernetes.io/job-name=cinder-storage-init;k8s:component=storage-init;k8s:controller-uid=890db90b-734d-4ac1-a2cf-6e0f0e24cdb3;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-storage-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-storage-init;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ac1c6b79eb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1168 identity=9609 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=890db90b-734d-4ac1-a2cf-6e0f0e24cdb3,k8s:batch.kubernetes.io/job-name=cinder-storage-init,k8s:component=storage-init,k8s:controller-uid=890db90b-734d-4ac1-a2cf-6e0f0e24cdb3,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-storage-init,k8s:release_group=cinder" ipv4=10.0.0.146 ipv6= k8sPodName=openstack/cinder-storage-init-vhk9f oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ac1c6b79eb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1168 identity=9609 ipv4=10.0.0.146 ipv6= k8sPodName=openstack/cinder-storage-init-vhk9f subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=ac1c6b79eb datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1168 identity=9609 ipv4=10.0.0.146 ipv6= k8sPodName=openstack/cinder-storage-init-vhk9f subsys=endpoint level=info msg="Successful endpoint creation" containerID=ac1c6b79eb datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1168 identity=9609 ipv4=10.0.0.146 ipv6= k8sPodName=openstack/cinder-storage-init-vhk9f subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=ac1c6b79eb endpointID=1168 k8sNamespace=openstack k8sPodName=cinder-storage-init-vhk9f subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=890db90b-734d-4ac1-a2cf-6e0f0e24cdb3 k8s:batch.kubernetes.io/job-name=cinder-storage-init k8s:component=storage-init k8s:controller-uid=890db90b-734d-4ac1-a2cf-6e0f0e24cdb3 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-storage-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-storage-init k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=ac1c6b79eb datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1168 identity=9609 ipv4=10.0.0.146 ipv6= k8sPodName=openstack/cinder-storage-init-vhk9f subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.50 713a8db6-b019-4d9c-851d-f4105d99ec66 default }" containerID=54d95af2a9fa5f055a2a854845f7d66c560b9cb8c2e4c32a8b061aef89fe42da datapathConfiguration="&{false false false false false }" interface=lxca30cae1ddb49 k8sPodName=openstack/cinder-bootstrap-9x996 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=54d95af2a9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2565 ipv4=10.0.0.50 ipv6= k8sPodName=openstack/cinder-bootstrap-9x996 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=54d95af2a9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2565 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=b204d548-5c75-40b7-acd9-aab4a4af8199,k8s:batch.kubernetes.io/job-name=cinder-bootstrap,k8s:component=bootstrap,k8s:controller-uid=b204d548-5c75-40b7-acd9-aab4a4af8199,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-bootstrap,k8s:release_group=cinder" ipv4=10.0.0.50 ipv6= k8sPodName=openstack/cinder-bootstrap-9x996 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=b204d548-5c75-40b7-acd9-aab4a4af8199;k8s:batch.kubernetes.io/job-name=cinder-bootstrap;k8s:component=bootstrap;k8s:controller-uid=b204d548-5c75-40b7-acd9-aab4a4af8199;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-bootstrap;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-bootstrap;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=54d95af2a9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2565 identity=39331 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=b204d548-5c75-40b7-acd9-aab4a4af8199,k8s:batch.kubernetes.io/job-name=cinder-bootstrap,k8s:component=bootstrap,k8s:controller-uid=b204d548-5c75-40b7-acd9-aab4a4af8199,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-bootstrap,k8s:release_group=cinder" ipv4=10.0.0.50 ipv6= k8sPodName=openstack/cinder-bootstrap-9x996 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=54d95af2a9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2565 identity=39331 ipv4=10.0.0.50 ipv6= k8sPodName=openstack/cinder-bootstrap-9x996 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=54d95af2a9 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2565 identity=39331 ipv4=10.0.0.50 ipv6= k8sPodName=openstack/cinder-bootstrap-9x996 subsys=endpoint level=info msg="Successful endpoint creation" containerID=54d95af2a9 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2565 identity=39331 ipv4=10.0.0.50 ipv6= k8sPodName=openstack/cinder-bootstrap-9x996 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.180 2c08a866-7ce2-487d-9975-e1c6bc47e07c default }" containerID=d6cd461135d57cff4196c88fc08e4545f49417cc04db3aa60513a86031ecb418 datapathConfiguration="&{false false false false false }" interface=lxca2e03555230f k8sPodName=openstack/cinder-volume-56c99d444b-22vtq labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d6cd461135 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=812 ipv4=10.0.0.180 ipv6= k8sPodName=openstack/cinder-volume-56c99d444b-22vtq subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d6cd461135 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=812 identityLabels="k8s:application=cinder,k8s:component=volume,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-volume,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=cinder" ipv4=10.0.0.180 ipv6= k8sPodName=openstack/cinder-volume-56c99d444b-22vtq subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:component=volume;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-volume;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d6cd461135 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=812 identity=13317 identityLabels="k8s:application=cinder,k8s:component=volume,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-volume,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=cinder" ipv4=10.0.0.180 ipv6= k8sPodName=openstack/cinder-volume-56c99d444b-22vtq oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=d6cd461135 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=812 identity=13317 ipv4=10.0.0.180 ipv6= k8sPodName=openstack/cinder-volume-56c99d444b-22vtq subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d6cd461135 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=812 identity=13317 ipv4=10.0.0.180 ipv6= k8sPodName=openstack/cinder-volume-56c99d444b-22vtq subsys=endpoint level=info msg="Successful endpoint creation" containerID=d6cd461135 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=812 identity=13317 ipv4=10.0.0.180 ipv6= k8sPodName=openstack/cinder-volume-56c99d444b-22vtq subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.221 58f48538-2c46-45c7-83a4-ca396b9ce00d default }" containerID=3cd4d3eae71095f4fb3eba32f8f3b2bd411c2469c7ee3e729d3f8d4794a6bbbc datapathConfiguration="&{false false false false false }" interface=lxc869638cb9559 k8sPodName=openstack/cinder-backup-766c4f5c95-kf9sf labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3cd4d3eae7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1799 ipv4=10.0.0.221 ipv6= k8sPodName=openstack/cinder-backup-766c4f5c95-kf9sf subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3cd4d3eae7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1799 identityLabels="k8s:application=cinder,k8s:component=backup,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-backup,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=cinder" ipv4=10.0.0.221 ipv6= k8sPodName=openstack/cinder-backup-766c4f5c95-kf9sf subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:component=backup;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-backup;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3cd4d3eae7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1799 identity=24926 identityLabels="k8s:application=cinder,k8s:component=backup,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-backup,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=cinder" ipv4=10.0.0.221 ipv6= k8sPodName=openstack/cinder-backup-766c4f5c95-kf9sf oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3cd4d3eae7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1799 identity=24926 ipv4=10.0.0.221 ipv6= k8sPodName=openstack/cinder-backup-766c4f5c95-kf9sf subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=3cd4d3eae7 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1799 identity=24926 ipv4=10.0.0.221 ipv6= k8sPodName=openstack/cinder-backup-766c4f5c95-kf9sf subsys=endpoint level=info msg="Successful endpoint creation" containerID=3cd4d3eae7 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1799 identity=24926 ipv4=10.0.0.221 ipv6= k8sPodName=openstack/cinder-backup-766c4f5c95-kf9sf subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=54d95af2a9 endpointID=2565 k8sNamespace=openstack k8sPodName=cinder-bootstrap-9x996 subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=b204d548-5c75-40b7-acd9-aab4a4af8199 k8s:batch.kubernetes.io/job-name=cinder-bootstrap k8s:component=bootstrap k8s:controller-uid=b204d548-5c75-40b7-acd9-aab4a4af8199 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-bootstrap k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-bootstrap k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=54d95af2a9 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2565 identity=39331 ipv4=10.0.0.50 ipv6= k8sPodName=openstack/cinder-bootstrap-9x996 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.205 ce02b4e0-d761-475c-801d-a913732325a6 default }" containerID=8d1825c153836ef7ef87891b68fb607480035cef5d5cadcd18baa04a998d6fb4 datapathConfiguration="&{false false false false false }" interface=lxc868f95dbec33 k8sPodName=openstack/placement-api-7fff8dcc67-scxrx labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8d1825c153 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3275 ipv4=10.0.0.205 ipv6= k8sPodName=openstack/placement-api-7fff8dcc67-scxrx subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8d1825c153 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3275 identityLabels="k8s:application=placement,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=placement" ipv4=10.0.0.205 ipv6= k8sPodName=openstack/placement-api-7fff8dcc67-scxrx subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=8d1825c153 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3275 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.205 ipv6= k8sPodName=openstack/placement-api-7fff8dcc67-scxrx line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=placement;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=placement-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=placement;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8d1825c153 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3275 identity=10159 identityLabels="k8s:application=placement,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=placement" ipv4=10.0.0.205 ipv6= k8sPodName=openstack/placement-api-7fff8dcc67-scxrx oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8d1825c153 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3275 identity=10159 ipv4=10.0.0.205 ipv6= k8sPodName=openstack/placement-api-7fff8dcc67-scxrx subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=8d1825c153 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3275 identity=10159 ipv4=10.0.0.205 ipv6= k8sPodName=openstack/placement-api-7fff8dcc67-scxrx subsys=endpoint level=info msg="Successful endpoint creation" containerID=8d1825c153 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3275 identity=10159 ipv4=10.0.0.205 ipv6= k8sPodName=openstack/placement-api-7fff8dcc67-scxrx subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.98 ed0c8d18-a359-460c-ae82-215d03e6c3e0 default }" containerID=d53f7e2fd49b32b09dab3c85b30efc7ff753289ea7cf320eb45b9a0788d21d7c datapathConfiguration="&{false false false false false }" interface=lxcc70a00587205 k8sPodName=openstack/placement-db-init-pwqpm labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d53f7e2fd4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=449 ipv4=10.0.0.98 ipv6= k8sPodName=openstack/placement-db-init-pwqpm subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d53f7e2fd4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=449 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=3eb94425-e641-4a8b-8a38-5f59647f62e4,k8s:batch.kubernetes.io/job-name=placement-db-init,k8s:component=db-init,k8s:controller-uid=3eb94425-e641-4a8b-8a38-5f59647f62e4,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-db-init,k8s:release_group=placement" ipv4=10.0.0.98 ipv6= k8sPodName=openstack/placement-db-init-pwqpm subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=placement;k8s:batch.kubernetes.io/controller-uid=3eb94425-e641-4a8b-8a38-5f59647f62e4;k8s:batch.kubernetes.io/job-name=placement-db-init;k8s:component=db-init;k8s:controller-uid=3eb94425-e641-4a8b-8a38-5f59647f62e4;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=placement-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=placement-db-init;k8s:release_group=placement;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d53f7e2fd4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=449 identity=34690 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=3eb94425-e641-4a8b-8a38-5f59647f62e4,k8s:batch.kubernetes.io/job-name=placement-db-init,k8s:component=db-init,k8s:controller-uid=3eb94425-e641-4a8b-8a38-5f59647f62e4,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-db-init,k8s:release_group=placement" ipv4=10.0.0.98 ipv6= k8sPodName=openstack/placement-db-init-pwqpm oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d53f7e2fd4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=449 identity=34690 ipv4=10.0.0.98 ipv6= k8sPodName=openstack/placement-db-init-pwqpm subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d53f7e2fd4 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=449 identity=34690 ipv4=10.0.0.98 ipv6= k8sPodName=openstack/placement-db-init-pwqpm subsys=endpoint level=info msg="Successful endpoint creation" containerID=d53f7e2fd4 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=449 identity=34690 ipv4=10.0.0.98 ipv6= k8sPodName=openstack/placement-db-init-pwqpm subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=d53f7e2fd4 endpointID=449 k8sNamespace=openstack k8sPodName=placement-db-init-pwqpm subsys=daemon level=info msg="Releasing key" key="[k8s:application=placement k8s:batch.kubernetes.io/controller-uid=3eb94425-e641-4a8b-8a38-5f59647f62e4 k8s:batch.kubernetes.io/job-name=placement-db-init k8s:component=db-init k8s:controller-uid=3eb94425-e641-4a8b-8a38-5f59647f62e4 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=placement-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=placement-db-init k8s:release_group=placement]" subsys=allocator level=info msg="Removed endpoint" containerID=d53f7e2fd4 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=449 identity=34690 ipv4=10.0.0.98 ipv6= k8sPodName=openstack/placement-db-init-pwqpm subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.49 44cc6086-0b2d-453a-83a4-4b3e893444f4 default }" containerID=f7919576a68e355d612ac4b24befa58c259a5588afd7d3d83bd5f16a69e52f6f datapathConfiguration="&{false false false false false }" interface=lxcefb24999ea27 k8sPodName=openstack/placement-db-sync-hxpsp labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f7919576a6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1759 ipv4=10.0.0.49 ipv6= k8sPodName=openstack/placement-db-sync-hxpsp subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f7919576a6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1759 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=c875f17c-0c6b-4c44-8408-58aa9486d145,k8s:batch.kubernetes.io/job-name=placement-db-sync,k8s:component=db-sync,k8s:controller-uid=c875f17c-0c6b-4c44-8408-58aa9486d145,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-db-sync,k8s:release_group=placement" ipv4=10.0.0.49 ipv6= k8sPodName=openstack/placement-db-sync-hxpsp subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=placement;k8s:batch.kubernetes.io/controller-uid=c875f17c-0c6b-4c44-8408-58aa9486d145;k8s:batch.kubernetes.io/job-name=placement-db-sync;k8s:component=db-sync;k8s:controller-uid=c875f17c-0c6b-4c44-8408-58aa9486d145;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=placement-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=placement-db-sync;k8s:release_group=placement;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=f7919576a6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1759 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.49 ipv6= k8sPodName=openstack/placement-db-sync-hxpsp line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=f7919576a6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1759 identity=1938 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=c875f17c-0c6b-4c44-8408-58aa9486d145,k8s:batch.kubernetes.io/job-name=placement-db-sync,k8s:component=db-sync,k8s:controller-uid=c875f17c-0c6b-4c44-8408-58aa9486d145,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-db-sync,k8s:release_group=placement" ipv4=10.0.0.49 ipv6= k8sPodName=openstack/placement-db-sync-hxpsp oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f7919576a6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1759 identity=1938 ipv4=10.0.0.49 ipv6= k8sPodName=openstack/placement-db-sync-hxpsp subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f7919576a6 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1759 identity=1938 ipv4=10.0.0.49 ipv6= k8sPodName=openstack/placement-db-sync-hxpsp subsys=endpoint level=info msg="Successful endpoint creation" containerID=f7919576a6 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1759 identity=1938 ipv4=10.0.0.49 ipv6= k8sPodName=openstack/placement-db-sync-hxpsp subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=f7919576a6 endpointID=1759 k8sNamespace=openstack k8sPodName=placement-db-sync-hxpsp subsys=daemon level=info msg="Releasing key" key="[k8s:application=placement k8s:batch.kubernetes.io/controller-uid=c875f17c-0c6b-4c44-8408-58aa9486d145 k8s:batch.kubernetes.io/job-name=placement-db-sync k8s:component=db-sync k8s:controller-uid=c875f17c-0c6b-4c44-8408-58aa9486d145 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=placement-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=placement-db-sync k8s:release_group=placement]" subsys=allocator level=info msg="Removed endpoint" containerID=f7919576a6 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1759 identity=1938 ipv4=10.0.0.49 ipv6= k8sPodName=openstack/placement-db-sync-hxpsp subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.252 95a16b84-21e3-4603-bab6-6cb9933ac682 default }" containerID=6bee42a04692749d2deadff4921e71e6ecc19ba7031f71ca6eafaabec825f1d3 datapathConfiguration="&{false false false false false }" interface=lxcdc4ff0f29365 k8sPodName=openstack/placement-ks-service-f4tp9 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6bee42a046 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2044 ipv4=10.0.0.252 ipv6= k8sPodName=openstack/placement-ks-service-f4tp9 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6bee42a046 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2044 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=fc83af1e-9765-4ef7-9b14-ac53d20ef2ec,k8s:batch.kubernetes.io/job-name=placement-ks-service,k8s:component=ks-service,k8s:controller-uid=fc83af1e-9765-4ef7-9b14-ac53d20ef2ec,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-ks-service,k8s:release_group=placement" ipv4=10.0.0.252 ipv6= k8sPodName=openstack/placement-ks-service-f4tp9 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=placement;k8s:batch.kubernetes.io/controller-uid=fc83af1e-9765-4ef7-9b14-ac53d20ef2ec;k8s:batch.kubernetes.io/job-name=placement-ks-service;k8s:component=ks-service;k8s:controller-uid=fc83af1e-9765-4ef7-9b14-ac53d20ef2ec;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=placement-ks-service;k8s:release_group=placement;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6bee42a046 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2044 identity=12347 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=fc83af1e-9765-4ef7-9b14-ac53d20ef2ec,k8s:batch.kubernetes.io/job-name=placement-ks-service,k8s:component=ks-service,k8s:controller-uid=fc83af1e-9765-4ef7-9b14-ac53d20ef2ec,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-ks-service,k8s:release_group=placement" ipv4=10.0.0.252 ipv6= k8sPodName=openstack/placement-ks-service-f4tp9 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=6bee42a046 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2044 identity=12347 ipv4=10.0.0.252 ipv6= k8sPodName=openstack/placement-ks-service-f4tp9 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=6bee42a046 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2044 identity=12347 ipv4=10.0.0.252 ipv6= k8sPodName=openstack/placement-ks-service-f4tp9 subsys=endpoint level=info msg="Successful endpoint creation" containerID=6bee42a046 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2044 identity=12347 ipv4=10.0.0.252 ipv6= k8sPodName=openstack/placement-ks-service-f4tp9 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=6bee42a046 endpointID=2044 k8sNamespace=openstack k8sPodName=placement-ks-service-f4tp9 subsys=daemon level=info msg="Releasing key" key="[k8s:application=placement k8s:batch.kubernetes.io/controller-uid=fc83af1e-9765-4ef7-9b14-ac53d20ef2ec k8s:batch.kubernetes.io/job-name=placement-ks-service k8s:component=ks-service k8s:controller-uid=fc83af1e-9765-4ef7-9b14-ac53d20ef2ec k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=placement-ks-service k8s:release_group=placement]" subsys=allocator level=info msg="Removed endpoint" containerID=6bee42a046 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2044 identity=12347 ipv4=10.0.0.252 ipv6= k8sPodName=openstack/placement-ks-service-f4tp9 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.114 b90e9960-54cd-426f-87e1-ef307fbaa604 default }" containerID=192892e6c28ac8ee7312fdbda9209ea62646f8f6d98a28063648d536b138959f datapathConfiguration="&{false false false false false }" interface=lxc54c7e08d0499 k8sPodName=openstack/placement-ks-user-kgrq5 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=192892e6c2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4090 ipv4=10.0.0.114 ipv6= k8sPodName=openstack/placement-ks-user-kgrq5 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=192892e6c2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4090 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=1c3ccf55-3666-4655-b59f-35180d1a90b9,k8s:batch.kubernetes.io/job-name=placement-ks-user,k8s:component=ks-user,k8s:controller-uid=1c3ccf55-3666-4655-b59f-35180d1a90b9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-ks-user,k8s:release_group=placement" ipv4=10.0.0.114 ipv6= k8sPodName=openstack/placement-ks-user-kgrq5 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=placement;k8s:batch.kubernetes.io/controller-uid=1c3ccf55-3666-4655-b59f-35180d1a90b9;k8s:batch.kubernetes.io/job-name=placement-ks-user;k8s:component=ks-user;k8s:controller-uid=1c3ccf55-3666-4655-b59f-35180d1a90b9;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=placement-ks-user;k8s:release_group=placement;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=192892e6c2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4090 identity=3248 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=1c3ccf55-3666-4655-b59f-35180d1a90b9,k8s:batch.kubernetes.io/job-name=placement-ks-user,k8s:component=ks-user,k8s:controller-uid=1c3ccf55-3666-4655-b59f-35180d1a90b9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-ks-user,k8s:release_group=placement" ipv4=10.0.0.114 ipv6= k8sPodName=openstack/placement-ks-user-kgrq5 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=192892e6c2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4090 identity=3248 ipv4=10.0.0.114 ipv6= k8sPodName=openstack/placement-ks-user-kgrq5 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=192892e6c2 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=4090 identity=3248 ipv4=10.0.0.114 ipv6= k8sPodName=openstack/placement-ks-user-kgrq5 subsys=endpoint level=info msg="Successful endpoint creation" containerID=192892e6c2 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=4090 identity=3248 ipv4=10.0.0.114 ipv6= k8sPodName=openstack/placement-ks-user-kgrq5 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=192892e6c2 endpointID=4090 k8sNamespace=openstack k8sPodName=placement-ks-user-kgrq5 subsys=daemon level=info msg="Releasing key" key="[k8s:application=placement k8s:batch.kubernetes.io/controller-uid=1c3ccf55-3666-4655-b59f-35180d1a90b9 k8s:batch.kubernetes.io/job-name=placement-ks-user k8s:component=ks-user k8s:controller-uid=1c3ccf55-3666-4655-b59f-35180d1a90b9 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=placement-ks-user k8s:release_group=placement]" subsys=allocator level=info msg="Removed endpoint" containerID=192892e6c2 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=4090 identity=3248 ipv4=10.0.0.114 ipv6= k8sPodName=openstack/placement-ks-user-kgrq5 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.184 e2b040e7-e216-4c27-8a2d-286e8cd45a3f default }" containerID=7fea4135b1d341ed13e31241a8327ff93f5fe2923eb0a598d025dfbb28ae43c9 datapathConfiguration="&{false false false false false }" interface=lxcf202f31fabf7 k8sPodName=openstack/placement-ks-endpoints-hqgmf labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7fea4135b1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=955 ipv4=10.0.0.184 ipv6= k8sPodName=openstack/placement-ks-endpoints-hqgmf subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7fea4135b1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=955 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=765f445a-0edb-4563-95a4-2163db31c666,k8s:batch.kubernetes.io/job-name=placement-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=765f445a-0edb-4563-95a4-2163db31c666,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-ks-endpoints,k8s:release_group=placement" ipv4=10.0.0.184 ipv6= k8sPodName=openstack/placement-ks-endpoints-hqgmf subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=7fea4135b1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=955 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.184 ipv6= k8sPodName=openstack/placement-ks-endpoints-hqgmf line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=placement;k8s:batch.kubernetes.io/controller-uid=765f445a-0edb-4563-95a4-2163db31c666;k8s:batch.kubernetes.io/job-name=placement-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=765f445a-0edb-4563-95a4-2163db31c666;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=placement-ks-endpoints;k8s:release_group=placement;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7fea4135b1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=955 identity=9507 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=765f445a-0edb-4563-95a4-2163db31c666,k8s:batch.kubernetes.io/job-name=placement-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=765f445a-0edb-4563-95a4-2163db31c666,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-ks-endpoints,k8s:release_group=placement" ipv4=10.0.0.184 ipv6= k8sPodName=openstack/placement-ks-endpoints-hqgmf oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7fea4135b1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=955 identity=9507 ipv4=10.0.0.184 ipv6= k8sPodName=openstack/placement-ks-endpoints-hqgmf subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=7fea4135b1 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=955 identity=9507 ipv4=10.0.0.184 ipv6= k8sPodName=openstack/placement-ks-endpoints-hqgmf subsys=endpoint level=info msg="Successful endpoint creation" containerID=7fea4135b1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=955 identity=9507 ipv4=10.0.0.184 ipv6= k8sPodName=openstack/placement-ks-endpoints-hqgmf subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=7fea4135b1 endpointID=955 k8sNamespace=openstack k8sPodName=placement-ks-endpoints-hqgmf subsys=daemon level=info msg="Releasing key" key="[k8s:application=placement k8s:batch.kubernetes.io/controller-uid=765f445a-0edb-4563-95a4-2163db31c666 k8s:batch.kubernetes.io/job-name=placement-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=765f445a-0edb-4563-95a4-2163db31c666 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=placement-ks-endpoints k8s:release_group=placement]" subsys=allocator level=info msg="Removed endpoint" containerID=7fea4135b1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=955 identity=9507 ipv4=10.0.0.184 ipv6= k8sPodName=openstack/placement-ks-endpoints-hqgmf subsys=endpoint