level=info msg="Memory available for map entries (0.003% of 67421638656B): 168554096B" subsys=config level=info msg="option bpf-ct-global-tcp-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-ct-global-any-max set by dynamic sizing to 295708" subsys=config level=info msg="option bpf-nat-global-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-neigh-global-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-sock-rev-map-max set by dynamic sizing to 295708" subsys=config level=info msg=" --agent-health-port='9879'" subsys=daemon level=info msg=" --agent-labels=''" subsys=daemon level=info msg=" --agent-liveness-update-interval='1s'" subsys=daemon level=info msg=" --agent-not-ready-taint-key='node.cilium.io/agent-not-ready'" subsys=daemon level=info msg=" --allocator-list-timeout='3m0s'" subsys=daemon level=info msg=" --allow-icmp-frag-needed='true'" subsys=daemon level=info msg=" --allow-localhost='auto'" subsys=daemon level=info msg=" --annotate-k8s-node='false'" subsys=daemon level=info msg=" --api-rate-limit=''" subsys=daemon level=info msg=" --arping-refresh-period='30s'" subsys=daemon level=info msg=" --auto-create-cilium-node-resource='true'" subsys=daemon level=info msg=" --auto-direct-node-routes='false'" subsys=daemon level=info msg=" --bgp-announce-lb-ip='false'" subsys=daemon level=info msg=" --bgp-announce-pod-cidr='false'" subsys=daemon level=info msg=" --bgp-config-path='/var/lib/cilium/bgp/config.yaml'" subsys=daemon level=info msg=" --bpf-auth-map-max='524288'" subsys=daemon level=info msg=" --bpf-ct-global-any-max='262144'" subsys=daemon level=info msg=" --bpf-ct-global-tcp-max='524288'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-any='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp='6h0m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp-fin='10s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp-syn='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-any='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-tcp='6h0m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-tcp-grace='1m0s'" subsys=daemon level=info msg=" --bpf-filter-priority='1'" subsys=daemon level=info msg=" --bpf-fragments-map-max='8192'" subsys=daemon level=info msg=" --bpf-lb-acceleration='disabled'" subsys=daemon level=info msg=" --bpf-lb-affinity-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-algorithm='random'" subsys=daemon level=info msg=" --bpf-lb-dev-ip-addr-inherit=''" subsys=daemon level=info msg=" --bpf-lb-dsr-dispatch='opt'" subsys=daemon level=info msg=" --bpf-lb-dsr-l4-xlate='frontend'" subsys=daemon level=info msg=" --bpf-lb-external-clusterip='false'" subsys=daemon level=info msg=" --bpf-lb-maglev-hash-seed='JLfvgnHc2kaSUFaI'" subsys=daemon level=info msg=" --bpf-lb-maglev-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-maglev-table-size='16381'" subsys=daemon level=info msg=" --bpf-lb-map-max='65536'" subsys=daemon level=info msg=" --bpf-lb-mode='snat'" subsys=daemon level=info msg=" --bpf-lb-rev-nat-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-rss-ipv4-src-cidr=''" subsys=daemon level=info msg=" --bpf-lb-rss-ipv6-src-cidr=''" subsys=daemon level=info msg=" --bpf-lb-service-backend-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-service-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-sock='false'" subsys=daemon level=info msg=" --bpf-lb-sock-hostns-only='false'" subsys=daemon level=info msg=" --bpf-lb-source-range-map-max='0'" subsys=daemon level=info msg=" --bpf-map-dynamic-size-ratio='0.0025'" subsys=daemon level=info msg=" --bpf-map-event-buffers=''" subsys=daemon level=info msg=" --bpf-nat-global-max='524288'" subsys=daemon level=info msg=" --bpf-neigh-global-max='524288'" subsys=daemon level=info msg=" --bpf-policy-map-full-reconciliation-interval='15m0s'" subsys=daemon level=info msg=" --bpf-policy-map-max='16384'" subsys=daemon level=info msg=" --bpf-root='/sys/fs/bpf'" subsys=daemon level=info msg=" --bpf-sock-rev-map-max='262144'" subsys=daemon level=info msg=" --bypass-ip-availability-upon-restore='false'" subsys=daemon level=info msg=" --certificates-directory='/var/run/cilium/certs'" subsys=daemon level=info msg=" --cflags=''" subsys=daemon level=info msg=" --cgroup-root='/run/cilium/cgroupv2'" subsys=daemon level=info msg=" --cilium-endpoint-gc-interval='5m0s'" subsys=daemon level=info msg=" --cluster-health-port='4240'" subsys=daemon level=info msg=" --cluster-id='0'" subsys=daemon level=info msg=" --cluster-name='default'" subsys=daemon level=info msg=" --cluster-pool-ipv4-cidr='10.0.0.0/8'" subsys=daemon level=info msg=" --cluster-pool-ipv4-mask-size='24'" subsys=daemon level=info msg=" --clustermesh-config='/var/lib/cilium/clustermesh/'" subsys=daemon level=info msg=" --clustermesh-ip-identities-sync-timeout='1m0s'" subsys=daemon level=info msg=" --cmdref=''" subsys=daemon level=info msg=" --cni-chaining-mode='none'" subsys=daemon level=info msg=" --cni-chaining-target=''" subsys=daemon level=info msg=" --cni-exclusive='true'" subsys=daemon level=info msg=" --cni-external-routing='false'" subsys=daemon level=info msg=" --cni-log-file='/var/run/cilium/cilium-cni.log'" subsys=daemon level=info msg=" --cnp-node-status-gc-interval='0s'" subsys=daemon level=info msg=" --config=''" subsys=daemon level=info msg=" --config-dir='/tmp/cilium/config-map'" subsys=daemon level=info msg=" --config-sources='config-map:kube-system/cilium-config'" subsys=daemon level=info msg=" --conntrack-gc-interval='0s'" subsys=daemon level=info msg=" --conntrack-gc-max-interval='0s'" subsys=daemon level=info msg=" --crd-wait-timeout='5m0s'" subsys=daemon level=info msg=" --custom-cni-conf='false'" subsys=daemon level=info msg=" --datapath-mode='veth'" subsys=daemon level=info msg=" --debug='false'" subsys=daemon level=info msg=" --debug-verbose=''" subsys=daemon level=info msg=" --derive-masquerade-ip-addr-from-device=''" subsys=daemon level=info msg=" --devices=''" subsys=daemon level=info msg=" --direct-routing-device=''" subsys=daemon level=info msg=" --disable-cnp-status-updates='true'" subsys=daemon level=info msg=" --disable-endpoint-crd='false'" subsys=daemon level=info msg=" --disable-envoy-version-check='false'" subsys=daemon level=info msg=" --disable-iptables-feeder-rules=''" subsys=daemon level=info msg=" --dns-max-ips-per-restored-rule='1000'" subsys=daemon level=info msg=" --dns-policy-unload-on-shutdown='false'" subsys=daemon level=info msg=" --dnsproxy-concurrency-limit='0'" subsys=daemon level=info msg=" --dnsproxy-concurrency-processing-grace-period='0s'" subsys=daemon level=info msg=" --dnsproxy-enable-transparent-mode='true'" subsys=daemon level=info msg=" --dnsproxy-lock-count='128'" subsys=daemon level=info msg=" --dnsproxy-lock-timeout='500ms'" subsys=daemon level=info msg=" --egress-gateway-policy-map-max='16384'" subsys=daemon level=info msg=" --egress-gateway-reconciliation-trigger-interval='1s'" subsys=daemon level=info msg=" --egress-masquerade-interfaces=''" subsys=daemon level=info msg=" --egress-multi-home-ip-rule-compat='false'" subsys=daemon level=info msg=" --enable-auto-protect-node-port-range='true'" subsys=daemon level=info msg=" --enable-bandwidth-manager='false'" subsys=daemon level=info msg=" --enable-bbr='false'" subsys=daemon level=info msg=" --enable-bgp-control-plane='false'" subsys=daemon level=info msg=" --enable-bpf-clock-probe='false'" subsys=daemon level=info msg=" --enable-bpf-masquerade='false'" subsys=daemon level=info msg=" --enable-bpf-tproxy='false'" subsys=daemon level=info msg=" --enable-cilium-api-server-access='*'" subsys=daemon level=info msg=" --enable-cilium-endpoint-slice='false'" subsys=daemon level=info msg=" --enable-cilium-health-api-server-access='*'" subsys=daemon level=info msg=" --enable-custom-calls='false'" subsys=daemon level=info msg=" --enable-endpoint-health-checking='true'" subsys=daemon level=info msg=" --enable-endpoint-routes='false'" subsys=daemon level=info msg=" --enable-envoy-config='false'" subsys=daemon level=info msg=" --enable-external-ips='false'" subsys=daemon level=info msg=" --enable-health-check-nodeport='true'" subsys=daemon level=info msg=" --enable-health-checking='true'" subsys=daemon level=info msg=" --enable-high-scale-ipcache='false'" subsys=daemon level=info msg=" --enable-host-firewall='false'" subsys=daemon level=info msg=" --enable-host-legacy-routing='false'" subsys=daemon level=info msg=" --enable-host-port='false'" subsys=daemon level=info msg=" --enable-hubble='false'" subsys=daemon level=info msg=" --enable-hubble-recorder-api='true'" subsys=daemon level=info msg=" --enable-icmp-rules='true'" subsys=daemon level=info msg=" --enable-identity-mark='true'" subsys=daemon level=info msg=" --enable-ip-masq-agent='false'" subsys=daemon level=info msg=" --enable-ipsec='false'" subsys=daemon level=info msg=" --enable-ipsec-key-watcher='true'" subsys=daemon level=info msg=" --enable-ipv4='true'" subsys=daemon level=info msg=" --enable-ipv4-big-tcp='false'" subsys=daemon level=info msg=" --enable-ipv4-egress-gateway='false'" subsys=daemon level=info msg=" --enable-ipv4-fragment-tracking='true'" subsys=daemon level=info msg=" --enable-ipv4-masquerade='true'" subsys=daemon level=info msg=" --enable-ipv6='false'" subsys=daemon level=info msg=" --enable-ipv6-big-tcp='false'" subsys=daemon level=info msg=" --enable-ipv6-masquerade='true'" subsys=daemon level=info msg=" --enable-ipv6-ndp='false'" subsys=daemon level=info msg=" --enable-k8s='true'" subsys=daemon level=info msg=" --enable-k8s-api-discovery='false'" subsys=daemon level=info msg=" --enable-k8s-endpoint-slice='true'" subsys=daemon level=info msg=" --enable-k8s-event-handover='false'" subsys=daemon level=info msg=" --enable-k8s-networkpolicy='true'" subsys=daemon level=info msg=" --enable-k8s-terminating-endpoint='true'" subsys=daemon level=info msg=" --enable-l2-announcements='false'" subsys=daemon level=info msg=" --enable-l2-neigh-discovery='true'" subsys=daemon level=info msg=" --enable-l2-pod-announcements='false'" subsys=daemon level=info msg=" --enable-l7-proxy='true'" subsys=daemon level=info msg=" --enable-local-node-route='true'" subsys=daemon level=info msg=" --enable-local-redirect-policy='false'" subsys=daemon level=info msg=" --enable-mke='false'" subsys=daemon level=info msg=" --enable-monitor='true'" subsys=daemon level=info msg=" --enable-nat46x64-gateway='false'" subsys=daemon level=info msg=" --enable-node-port='false'" subsys=daemon level=info msg=" --enable-pmtu-discovery='false'" subsys=daemon level=info msg=" --enable-policy='default'" subsys=daemon level=info msg=" --enable-recorder='false'" subsys=daemon level=info msg=" --enable-remote-node-identity='true'" subsys=daemon level=info msg=" --enable-runtime-device-detection='false'" subsys=daemon level=info msg=" --enable-sctp='false'" subsys=daemon level=info msg=" --enable-service-topology='false'" subsys=daemon level=info msg=" --enable-session-affinity='false'" subsys=daemon level=info msg=" --enable-srv6='false'" subsys=daemon level=info msg=" --enable-stale-cilium-endpoint-cleanup='true'" subsys=daemon level=info msg=" --enable-svc-source-range-check='true'" subsys=daemon level=info msg=" --enable-tracing='false'" subsys=daemon level=info msg=" --enable-unreachable-routes='false'" subsys=daemon level=info msg=" --enable-vtep='false'" subsys=daemon level=info msg=" --enable-well-known-identities='false'" subsys=daemon level=info msg=" --enable-wireguard='false'" subsys=daemon level=info msg=" --enable-wireguard-userspace-fallback='false'" subsys=daemon level=info msg=" --enable-xdp-prefilter='false'" subsys=daemon level=info msg=" --enable-xt-socket-fallback='true'" subsys=daemon level=info msg=" --encrypt-interface=''" subsys=daemon level=info msg=" --encrypt-node='false'" subsys=daemon level=info msg=" --endpoint-gc-interval='5m0s'" subsys=daemon level=info msg=" --endpoint-queue-size='25'" subsys=daemon level=info msg=" --endpoint-status=''" subsys=daemon level=info msg=" --envoy-config-timeout='2m0s'" subsys=daemon level=info msg=" --envoy-log=''" subsys=daemon level=info msg=" --exclude-local-address=''" subsys=daemon level=info msg=" --external-envoy-proxy='false'" subsys=daemon level=info msg=" --fixed-identity-mapping=''" subsys=daemon level=info msg=" --fqdn-regex-compile-lru-size='1024'" subsys=daemon level=info msg=" --gops-port='9890'" subsys=daemon level=info msg=" --http-403-msg=''" subsys=daemon level=info msg=" --http-idle-timeout='0'" subsys=daemon level=info msg=" --http-max-grpc-timeout='0'" subsys=daemon level=info msg=" --http-normalize-path='true'" subsys=daemon level=info msg=" --http-request-timeout='3600'" subsys=daemon level=info msg=" --http-retry-count='3'" subsys=daemon level=info msg=" --http-retry-timeout='0'" subsys=daemon level=info msg=" --hubble-disable-tls='false'" subsys=daemon level=info msg=" --hubble-event-buffer-capacity='4095'" subsys=daemon level=info msg=" --hubble-event-queue-size='0'" subsys=daemon level=info msg=" --hubble-export-file-compress='false'" subsys=daemon level=info msg=" --hubble-export-file-max-backups='5'" subsys=daemon level=info msg=" --hubble-export-file-max-size-mb='10'" subsys=daemon level=info msg=" --hubble-export-file-path=''" subsys=daemon level=info msg=" --hubble-listen-address=''" subsys=daemon level=info msg=" --hubble-metrics=''" subsys=daemon level=info msg=" --hubble-metrics-server=''" subsys=daemon level=info msg=" --hubble-monitor-events=''" subsys=daemon level=info msg=" --hubble-prefer-ipv6='false'" subsys=daemon level=info msg=" --hubble-recorder-sink-queue-size='1024'" subsys=daemon level=info msg=" --hubble-recorder-storage-path='/var/run/cilium/pcaps'" subsys=daemon level=info msg=" --hubble-skip-unknown-cgroup-ids='true'" subsys=daemon level=info msg=" --hubble-socket-path='/var/run/cilium/hubble.sock'" subsys=daemon level=info msg=" --hubble-tls-cert-file=''" subsys=daemon level=info msg=" --hubble-tls-client-ca-files=''" subsys=daemon level=info msg=" --hubble-tls-key-file=''" subsys=daemon level=info msg=" --identity-allocation-mode='crd'" subsys=daemon level=info msg=" --identity-change-grace-period='5s'" subsys=daemon level=info msg=" --identity-gc-interval='15m0s'" subsys=daemon level=info msg=" --identity-heartbeat-timeout='30m0s'" subsys=daemon level=info msg=" --identity-restore-grace-period='10m0s'" subsys=daemon level=info msg=" --install-egress-gateway-routes='false'" subsys=daemon level=info msg=" --install-iptables-rules='true'" subsys=daemon level=info msg=" --install-no-conntrack-iptables-rules='false'" subsys=daemon level=info msg=" --ip-allocation-timeout='2m0s'" subsys=daemon level=info msg=" --ip-masq-agent-config-path='/etc/config/ip-masq-agent'" subsys=daemon level=info msg=" --ipam='cluster-pool'" subsys=daemon level=info msg=" --ipam-cilium-node-update-rate='15s'" subsys=daemon level=info msg=" --ipam-multi-pool-pre-allocation='default=8'" subsys=daemon level=info msg=" --ipsec-key-file=''" subsys=daemon level=info msg=" --ipsec-key-rotation-duration='5m0s'" subsys=daemon level=info msg=" --iptables-lock-timeout='5s'" subsys=daemon level=info msg=" --iptables-random-fully='false'" subsys=daemon level=info msg=" --ipv4-native-routing-cidr=''" subsys=daemon level=info msg=" --ipv4-node='auto'" subsys=daemon level=info msg=" --ipv4-pod-subnets=''" subsys=daemon level=info msg=" --ipv4-range='auto'" subsys=daemon level=info msg=" --ipv4-service-loopback-address='169.254.42.1'" subsys=daemon level=info msg=" --ipv4-service-range='auto'" subsys=daemon level=info msg=" --ipv6-cluster-alloc-cidr='f00d::/64'" subsys=daemon level=info msg=" --ipv6-mcast-device=''" subsys=daemon level=info msg=" --ipv6-native-routing-cidr=''" subsys=daemon level=info msg=" --ipv6-node='auto'" subsys=daemon level=info msg=" --ipv6-pod-subnets=''" subsys=daemon level=info msg=" --ipv6-range='auto'" subsys=daemon level=info msg=" --ipv6-service-range='auto'" subsys=daemon level=info msg=" --join-cluster='false'" subsys=daemon level=info msg=" --k8s-api-server=''" subsys=daemon level=info msg=" --k8s-client-burst='10'" subsys=daemon level=info msg=" --k8s-client-qps='5'" subsys=daemon level=info msg=" --k8s-heartbeat-timeout='30s'" subsys=daemon level=info msg=" --k8s-kubeconfig-path=''" subsys=daemon level=info msg=" --k8s-namespace='kube-system'" subsys=daemon level=info msg=" --k8s-require-ipv4-pod-cidr='false'" subsys=daemon level=info msg=" --k8s-require-ipv6-pod-cidr='false'" subsys=daemon level=info msg=" --k8s-service-cache-size='128'" subsys=daemon level=info msg=" --k8s-service-proxy-name=''" subsys=daemon level=info msg=" --k8s-sync-timeout='3m0s'" subsys=daemon level=info msg=" --k8s-watcher-endpoint-selector='metadata.name!=kube-scheduler,metadata.name!=kube-controller-manager,metadata.name!=etcd-operator,metadata.name!=gcp-controller-manager'" subsys=daemon level=info msg=" --keep-config='false'" subsys=daemon level=info msg=" --kube-proxy-replacement='disabled'" subsys=daemon level=info msg=" --kube-proxy-replacement-healthz-bind-address=''" subsys=daemon level=info msg=" --kvstore=''" subsys=daemon level=info msg=" --kvstore-connectivity-timeout='2m0s'" subsys=daemon level=info msg=" --kvstore-lease-ttl='15m0s'" subsys=daemon level=info msg=" --kvstore-max-consecutive-quorum-errors='2'" subsys=daemon level=info msg=" --kvstore-opt=''" subsys=daemon level=info msg=" --kvstore-periodic-sync='5m0s'" subsys=daemon level=info msg=" --l2-announcements-lease-duration='15s'" subsys=daemon level=info msg=" --l2-announcements-renew-deadline='5s'" subsys=daemon level=info msg=" --l2-announcements-retry-period='2s'" subsys=daemon level=info msg=" --l2-pod-announcements-interface=''" subsys=daemon level=info msg=" --label-prefix-file=''" subsys=daemon level=info msg=" --labels=''" subsys=daemon level=info msg=" --lib-dir='/var/lib/cilium'" subsys=daemon level=info msg=" --local-max-addr-scope='252'" subsys=daemon level=info msg=" --local-router-ipv4=''" subsys=daemon level=info msg=" --local-router-ipv6=''" subsys=daemon level=info msg=" --log-driver=''" subsys=daemon level=info msg=" --log-opt=''" subsys=daemon level=info msg=" --log-system-load='false'" subsys=daemon level=info msg=" --max-controller-interval='0'" subsys=daemon level=info msg=" --mesh-auth-enabled='true'" subsys=daemon level=info msg=" --mesh-auth-gc-interval='5m0s'" subsys=daemon level=info msg=" --mesh-auth-mutual-listener-port='0'" subsys=daemon level=info msg=" --mesh-auth-queue-size='1024'" subsys=daemon level=info msg=" --mesh-auth-rotated-identities-queue-size='1024'" subsys=daemon level=info msg=" --mesh-auth-signal-backoff-duration='1s'" subsys=daemon level=info msg=" --mesh-auth-spiffe-trust-domain='spiffe.cilium'" subsys=daemon level=info msg=" --mesh-auth-spire-admin-socket=''" subsys=daemon level=info msg=" --metrics=''" subsys=daemon level=info msg=" --mke-cgroup-mount=''" subsys=daemon level=info msg=" --monitor-aggregation='medium'" subsys=daemon level=info msg=" --monitor-aggregation-flags='all'" subsys=daemon level=info msg=" --monitor-aggregation-interval='5s'" subsys=daemon level=info msg=" --monitor-queue-size='0'" subsys=daemon level=info msg=" --mtu='0'" subsys=daemon level=info msg=" --node-encryption-opt-out-labels='node-role.kubernetes.io/control-plane'" subsys=daemon level=info msg=" --node-port-acceleration='disabled'" subsys=daemon level=info msg=" --node-port-algorithm='random'" subsys=daemon level=info msg=" --node-port-bind-protection='true'" subsys=daemon level=info msg=" --node-port-mode='snat'" subsys=daemon level=info msg=" --node-port-range='30000,32767'" subsys=daemon level=info msg=" --nodes-gc-interval='5m0s'" subsys=daemon level=info msg=" --operator-api-serve-addr='127.0.0.1:9234'" subsys=daemon level=info msg=" --policy-audit-mode='false'" subsys=daemon level=info msg=" --policy-queue-size='100'" subsys=daemon level=info msg=" --policy-trigger-interval='1s'" subsys=daemon level=info msg=" --pprof='false'" subsys=daemon level=info msg=" --pprof-address='localhost'" subsys=daemon level=info msg=" --pprof-port='6060'" subsys=daemon level=info msg=" --preallocate-bpf-maps='false'" subsys=daemon level=info msg=" --prepend-iptables-chains='true'" subsys=daemon level=info msg=" --procfs='/host/proc'" subsys=daemon level=info msg=" --prometheus-serve-addr=':9962'" subsys=daemon level=info msg=" --proxy-connect-timeout='2'" subsys=daemon level=info msg=" --proxy-gid='1337'" subsys=daemon level=info msg=" --proxy-idle-timeout-seconds='60'" subsys=daemon level=info msg=" --proxy-max-connection-duration-seconds='0'" subsys=daemon level=info msg=" --proxy-max-requests-per-connection='0'" subsys=daemon level=info msg=" --proxy-prometheus-port='9964'" subsys=daemon level=info msg=" --read-cni-conf=''" subsys=daemon level=info msg=" --remove-cilium-node-taints='true'" subsys=daemon level=info msg=" --restore='true'" subsys=daemon level=info msg=" --route-metric='0'" subsys=daemon level=info msg=" --routing-mode='tunnel'" subsys=daemon level=info msg=" --set-cilium-is-up-condition='true'" subsys=daemon level=info msg=" --set-cilium-node-taints='true'" subsys=daemon level=info msg=" --sidecar-istio-proxy-image='cilium/istio_proxy'" subsys=daemon level=info msg=" --single-cluster-route='false'" subsys=daemon level=info msg=" --skip-cnp-status-startup-clean='false'" subsys=daemon level=info msg=" --socket-path='/var/run/cilium/cilium.sock'" subsys=daemon level=info msg=" --srv6-encap-mode='reduced'" subsys=daemon level=info msg=" --state-dir='/var/run/cilium'" subsys=daemon level=info msg=" --synchronize-k8s-nodes='true'" subsys=daemon level=info msg=" --tofqdns-dns-reject-response-code='refused'" subsys=daemon level=info msg=" --tofqdns-enable-dns-compression='true'" subsys=daemon level=info msg=" --tofqdns-endpoint-max-ip-per-hostname='50'" subsys=daemon level=info msg=" --tofqdns-idle-connection-grace-period='0s'" subsys=daemon level=info msg=" --tofqdns-max-deferred-connection-deletes='10000'" subsys=daemon level=info msg=" --tofqdns-min-ttl='0'" subsys=daemon level=info msg=" --tofqdns-pre-cache=''" subsys=daemon level=info msg=" --tofqdns-proxy-port='0'" subsys=daemon level=info msg=" --tofqdns-proxy-response-max-delay='100ms'" subsys=daemon level=info msg=" --trace-payloadlen='128'" subsys=daemon level=info msg=" --trace-sock='true'" subsys=daemon level=info msg=" --tunnel=''" subsys=daemon level=info msg=" --tunnel-port='6082'" subsys=daemon level=info msg=" --tunnel-protocol='geneve'" subsys=daemon level=info msg=" --unmanaged-pod-watcher-interval='15'" subsys=daemon level=info msg=" --use-cilium-internal-ip-for-ipsec='false'" subsys=daemon level=info msg=" --version='false'" subsys=daemon level=info msg=" --vlan-bpf-bypass=''" subsys=daemon level=info msg=" --vtep-cidr=''" subsys=daemon level=info msg=" --vtep-endpoint=''" subsys=daemon level=info msg=" --vtep-mac=''" subsys=daemon level=info msg=" --vtep-mask=''" subsys=daemon level=info msg=" --wireguard-encapsulate='false'" subsys=daemon level=info msg=" --write-cni-conf-when-ready='/host/etc/cni/net.d/05-cilium.conflist'" subsys=daemon level=info msg=" _ _ _" subsys=daemon level=info msg=" ___|_| |_|_ _ _____" subsys=daemon level=info msg="| _| | | | | | |" subsys=daemon level=info msg="|___|_|_|_|___|_|_|_|" subsys=daemon level=info msg="Cilium 1.14.8 cf6e022e 2024-03-13T12:23:35-04:00 go version go1.21.8 linux/amd64" subsys=daemon level=info msg="clang (10.0.0) and kernel (5.15.0) versions: OK!" subsys=linux-datapath level=info msg="linking environment: OK!" subsys=linux-datapath level=info msg="Kernel config file not found: if the agent fails to start, check the system requirements at https://docs.cilium.io/en/stable/operations/system_requirements" subsys=probes level=info msg="Detected mounted BPF filesystem at /sys/fs/bpf" subsys=bpf level=info msg="Mounted cgroupv2 filesystem at /run/cilium/cgroupv2" subsys=cgroups level=info msg="Parsing base label prefixes from default label list" subsys=labels-filter level=info msg="Parsing additional label prefixes from user inputs: []" subsys=labels-filter level=info msg="Final label prefixes to be used for identity evaluation:" subsys=labels-filter level=info msg=" - reserved:.*" subsys=labels-filter level=info msg=" - :io\\.kubernetes\\.pod\\.namespace" subsys=labels-filter level=info msg=" - :io\\.cilium\\.k8s\\.namespace\\.labels" subsys=labels-filter level=info msg=" - :app\\.kubernetes\\.io" subsys=labels-filter level=info msg=" - !:io\\.kubernetes" subsys=labels-filter level=info msg=" - !:kubernetes\\.io" subsys=labels-filter level=info msg=" - !:.*beta\\.kubernetes\\.io" subsys=labels-filter level=info msg=" - !:k8s\\.io" subsys=labels-filter level=info msg=" - !:pod-template-generation" subsys=labels-filter level=info msg=" - !:pod-template-hash" subsys=labels-filter level=info msg=" - !:controller-revision-hash" subsys=labels-filter level=info msg=" - !:annotation.*" subsys=labels-filter level=info msg=" - !:etcd_node" subsys=labels-filter level=info msg=Invoked duration="733.048µs" function="pprof.glob..func1 (cell.go:50)" subsys=hive level=info msg=Invoked duration="39.271µs" function="gops.registerGopsHooks (cell.go:38)" subsys=hive level=info msg=Invoked duration="777.338µs" function="metrics.NewRegistry (registry.go:65)" subsys=hive level=info msg=Invoked duration="5.39µs" function="metrics.glob..func1 (cell.go:12)" subsys=hive level=info msg="Spire Delegate API Client is disabled as no socket path is configured" subsys=spire-delegate level=info msg="Mutual authentication handler is disabled as no port is configured" subsys=auth level=info msg=Invoked duration=91.839495ms function="cmd.glob..func4 (daemon_main.go:1607)" subsys=hive level=info msg=Invoked duration="11.95µs" function="gc.registerSignalHandler (cell.go:47)" subsys=hive level=info msg=Invoked duration="15.76µs" function="utime.initUtimeSync (cell.go:29)" subsys=hive level=info msg=Invoked duration="92.592µs" function="agentliveness.newAgentLivenessUpdater (agent_liveness.go:43)" subsys=hive level=info msg=Invoked duration="113.642µs" function="l2responder.NewL2ResponderReconciler (l2responder.go:63)" subsys=hive level=info msg=Invoked duration="103.282µs" function="garp.newGARPProcessor (processor.go:27)" subsys=hive level=info msg=Starting subsys=hive level=info msg="Started gops server" address="127.0.0.1:9890" subsys=gops level=info msg="Start hook executed" duration="408.86µs" function="gops.registerGopsHooks.func1 (cell.go:43)" subsys=hive level=info msg="Start hook executed" duration="1.65µs" function="metrics.NewRegistry.func1 (registry.go:86)" subsys=hive level=info msg="Establishing connection to apiserver" host="https://10.96.0.1:443" subsys=k8s-client level=info msg="Serving prometheus metrics on :9962" subsys=metrics level=info msg="Connected to apiserver" subsys=k8s-client level=info msg="Start hook executed" duration=11.125754ms function="client.(*compositeClientset).onStart" subsys=hive level=info msg="Start hook executed" duration=5.961152ms function="authmap.newAuthMap.func1 (cell.go:27)" subsys=hive level=info msg="Start hook executed" duration="28.02µs" function="configmap.newMap.func1 (cell.go:23)" subsys=hive level=info msg="Start hook executed" duration="35.481µs" function="signalmap.newMap.func1 (cell.go:44)" subsys=hive level=info msg="Start hook executed" duration="210.445µs" function="nodemap.newNodeMap.func1 (cell.go:23)" subsys=hive level=info msg="Start hook executed" duration="75.492µs" function="eventsmap.newEventsMap.func1 (cell.go:35)" subsys=hive level=info msg="Start hook executed" duration="52.981µs" function="*cni.cniConfigManager.Start" subsys=hive level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Wrote CNI configuration file to /host/etc/cni/net.d/05-cilium.conflist" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Start hook executed" duration=44.444927ms function="datapath.newDatapath.func1 (cells.go:113)" subsys=hive level=info msg="Restored 0 node IDs from the BPF map" subsys=linux-datapath level=info msg="Start hook executed" duration="82.892µs" function="datapath.newDatapath.func2 (cells.go:126)" subsys=hive level=info msg="Start hook executed" duration="11.58µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Node].Start" subsys=hive level=info msg="Start hook executed" duration="3.5µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumNode].Start" subsys=hive level=info msg="Using autogenerated IPv4 allocation range" subsys=node v4Prefix=10.44.0.0/16 level=info msg="no local ciliumnode found, will not restore cilium internal ips from k8s" subsys=daemon level=info msg="Start hook executed" duration=103.646616ms function="node.NewLocalNodeStore.func1 (local_node_store.go:76)" subsys=hive level=info msg="Start hook executed" duration="16.301µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Start" subsys=hive level=info msg="Start hook executed" duration=100.45323ms function="*manager.diffStore[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Start" subsys=hive level=info msg="Start hook executed" duration="3.01µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s.Endpoints].Start" subsys=hive level=info msg="Using discoveryv1.EndpointSlice" subsys=k8s level=info msg="Start hook executed" duration=100.356207ms function="*manager.diffStore[*github.com/cilium/cilium/pkg/k8s.Endpoints].Start" subsys=hive level=info msg="Start hook executed" duration="2.17µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Pod].Start" subsys=hive level=info msg="Start hook executed" duration="2.111µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Namespace].Start" subsys=hive level=info msg="Start hook executed" duration="1.39µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumNetworkPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="1.42µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumClusterwideNetworkPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="2.88µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumCIDRGroup].Start" subsys=hive level=info msg="Start hook executed" duration="21.94µs" function="endpointmanager.newDefaultEndpointManager.func1 (cell.go:203)" subsys=hive level=info msg="Start hook executed" duration="12.15µs" function="cmd.newPolicyTrifecta.func1 (policy.go:135)" subsys=hive level=info msg="Start hook executed" duration="41.791µs" function="*manager.manager.Start" subsys=hive level=info msg="Serving cilium node monitor v1.2 API at unix:///var/run/cilium/monitor1_2.sock" subsys=monitor-agent level=info msg="Start hook executed" duration="384.149µs" function="agent.newMonitorAgent.func1 (cell.go:61)" subsys=hive level=info msg="Start hook executed" duration="4.261µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumL2AnnouncementPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="9.651µs" function="*job.group.Start" subsys=hive level=info msg="Start hook executed" duration="277.287µs" function="proxy.newProxy.func1 (cell.go:55)" subsys=hive level=info msg="Envoy: Starting xDS gRPC server listening on /var/run/cilium/envoy/sockets/xds.sock" subsys=envoy-manager level=info msg="Start hook executed" duration="800.369µs" function="signal.provideSignalManager.func1 (cell.go:25)" subsys=hive level=info msg="Datapath signal listener running" subsys=signal level=info msg="Start hook executed" duration=1.472214ms function="auth.registerAuthManager.func1 (cell.go:109)" subsys=hive level=info msg="Start hook executed" duration="5.521µs" function="auth.registerGCJobs.func1 (cell.go:158)" subsys=hive level=info msg="Start hook executed" duration="21.65µs" function="*job.group.Start" subsys=hive level=warning msg="Deprecated value for --kube-proxy-replacement: disabled (use either \"true\", or \"false\")" subsys=daemon level=info msg="Auto-disabling \"enable-node-port\", \"enable-external-ips\", \"bpf-lb-sock\", \"enable-host-port\" features and falling back to \"enable-host-legacy-routing\"" subsys=daemon level=info msg="Inheriting MTU from external network interface" device=ens3 ipAddr=199.204.45.44 mtu=1500 subsys=mtu level=info msg="Removed map pin at /sys/fs/bpf/tc/globals/cilium_ipcache, recreating and re-pinning map cilium_ipcache" file-path=/sys/fs/bpf/tc/globals/cilium_ipcache name=cilium_ipcache subsys=bpf level=info msg="Removed map pin at /sys/fs/bpf/tc/globals/cilium_tunnel_map, recreating and re-pinning map cilium_tunnel_map" file-path=/sys/fs/bpf/tc/globals/cilium_tunnel_map name=cilium_tunnel_map subsys=bpf level=info msg="Restored services from maps" failedServices=0 restoredServices=0 subsys=service level=info msg="Restored backends from maps" failedBackends=0 restoredBackends=0 skippedBackends=0 subsys=service level=info msg="Reading old endpoints..." subsys=daemon level=info msg="No old endpoints found." subsys=daemon level=info msg="Waiting until all Cilium CRDs are available" subsys=k8s level=info msg="All Cilium CRDs have been found and are available" subsys=k8s level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=warning msg="Unable to get node resource" error="ciliumnodes.cilium.io \"instance\" not found" subsys=nodediscovery level=warning msg="Unable to get node resource" error="ciliumnodes.cilium.io \"instance\" not found" subsys=nodediscovery level=info msg="Successfully created CiliumNode resource" subsys=nodediscovery level=warning msg="Unable to create CiliumNode resource, will retry" error="ciliumnodes.cilium.io \"instance\" already exists" subsys=nodediscovery level=info msg="Retrieved node information from cilium node" nodeName=instance subsys=k8s level=warning msg="Waiting for k8s node information" error="required IPv4 PodCIDR not available" subsys=k8s level=info msg="Retrieved node information from cilium node" nodeName=instance subsys=k8s level=info msg="Received own node information from API server" ipAddr.ipv4=199.204.45.44 ipAddr.ipv6="" k8sNodeIP=199.204.45.44 labels="map[beta.kubernetes.io/arch:amd64 beta.kubernetes.io/os:linux kubernetes.io/arch:amd64 kubernetes.io/hostname:instance kubernetes.io/os:linux node-role.kubernetes.io/control-plane: node.kubernetes.io/exclude-from-external-load-balancers:]" nodeName=instance subsys=k8s v4Prefix=10.0.0.0/24 v6Prefix="" level=info msg="k8s mode: Allowing localhost to reach local endpoints" subsys=daemon level=info msg="Detected devices" devices="[]" subsys=linux-datapath level=info msg="Enabling k8s event listener" subsys=k8s-watcher level=info msg="Removing stale endpoint interfaces" subsys=daemon level=info msg="Skipping kvstore configuration" subsys=daemon level=info msg="Waiting until local node addressing before starting watchers depending on it" subsys=k8s-watcher level=info msg="Initializing node addressing" subsys=daemon level=info msg="Initializing cluster-pool IPAM" subsys=ipam v4Prefix=10.0.0.0/24 v6Prefix="" level=info msg="Restoring endpoints..." subsys=daemon level=info msg="Endpoints restored" failed=0 restored=0 subsys=daemon level=info msg="Addressing information:" subsys=daemon level=info msg=" Cluster-Name: default" subsys=daemon level=info msg=" Cluster-ID: 0" subsys=daemon level=info msg=" Local node-name: instance" subsys=daemon level=info msg=" Node-IPv6: " subsys=daemon level=info msg=" External-Node IPv4: 199.204.45.44" subsys=daemon level=info msg=" Internal-Node IPv4: 10.0.0.18" subsys=daemon level=info msg=" IPv4 allocation prefix: 10.0.0.0/24" subsys=daemon level=info msg=" Loopback IPv4: 169.254.42.1" subsys=daemon level=info msg=" Local IPv4 addresses:" subsys=daemon level=info msg=" - 199.204.45.44" subsys=daemon level=info msg=" - 172.17.0.100" subsys=daemon level=info msg=" - 10.96.240.200" subsys=daemon level=info msg="Node updated" clusterName=default nodeName=instance subsys=nodemanager level=info msg="Adding local node to cluster" node="{instance default [{InternalIP 199.204.45.44} {CiliumInternalIP 10.0.0.18}] 10.0.0.0/24 [] [] 10.0.0.79 0 local 0 map[beta.kubernetes.io/arch:amd64 beta.kubernetes.io/os:linux kubernetes.io/arch:amd64 kubernetes.io/hostname:instance kubernetes.io/os:linux node-role.kubernetes.io/control-plane: node.kubernetes.io/exclude-from-external-load-balancers:] map[] 1 }" subsys=nodediscovery level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Waiting until all pre-existing resources have been received" subsys=k8s-watcher level=info msg="Initializing identity allocator" subsys=identity-cache level=info msg="Allocating identities between range" cluster-id=0 max=65535 min=256 subsys=identity-cache level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.forwarding sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.accept_local sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.send_redirects sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.forwarding sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.accept_local sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.send_redirects sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.core.bpf_jit_enable sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.all.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.fib_multipath_use_neigh sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=kernel.unprivileged_bpf_disabled sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=kernel.timer_migration sysParamValue=0 level=info msg="Setting up BPF datapath" bpfClockSource=ktime bpfInsnSet="" subsys=datapath-loader level=info msg="Iptables rules installed" subsys=iptables level=info msg="Adding new proxy port rules for cilium-dns-egress:42551" id=cilium-dns-egress subsys=proxy level=info msg="Iptables proxy rules installed" subsys=iptables level=info msg="Start hook executed" duration=2.408397089s function="cmd.newDaemonPromise.func1 (daemon_main.go:1663)" subsys=hive level=info msg="Starting IP identity watcher" subsys=ipcache level=info msg="Start hook executed" duration="11.83µs" function="utime.initUtimeSync.func1 (cell.go:33)" subsys=hive level=info msg="Start hook executed" duration="6.37µs" function="*job.group.Start" subsys=hive level=info msg="Initializing daemon" subsys=daemon level=info msg="Start hook executed" duration="30.941µs" function="l2respondermap.newMap.func1 (l2_responder_map4.go:44)" subsys=hive level=info msg="Validating configured node address ranges" subsys=daemon level=info msg="Starting connection tracking garbage collector" subsys=daemon level=info msg="Start hook executed" duration="2.14µs" function="*job.group.Start" subsys=hive level=info msg="Initial scan of connection tracking completed" subsys=ct-gc level=info msg="Regenerating restored endpoints" numRestored=0 subsys=daemon level=info msg="Creating host endpoint" subsys=daemon level=info msg="Finished regenerating restored endpoints" regenerated=0 subsys=daemon total=0 level=info msg="Deleted orphan backends" orphanBackends=0 subsys=service level=info msg="New endpoint" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1866 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1866 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Identity of endpoint changed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1866 identity=1 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,reserved:host" ipv4= ipv6= k8sPodName=/ oldIdentity="no identity" subsys=endpoint level=info msg="Launching Cilium health daemon" subsys=daemon level=info msg="Launching Cilium health endpoint" subsys=daemon level=info msg="Started healthz status API server" address="127.0.0.1:9879" subsys=daemon level=info msg="Processing queued endpoint deletion requests from /var/run/cilium/deleteQueue" subsys=daemon level=info msg="processing 0 queued deletion requests" subsys=daemon level=info msg="Initializing Cilium API" subsys=daemon level=info msg="Daemon initialization completed" bootstrapTime=3.308182516s subsys=daemon level=info msg="Hubble server is disabled" subsys=hubble level=info msg="Serving cilium API at unix:///var/run/cilium/cilium.sock" subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.152 d9c1ea8b-2f69-48a6-8dd7-8b039e1bda33 default }" containerID=e800c474ea133d1f9cd74c8d8f914c0c7606d32b230522864090e09b9f6ffd57 datapathConfiguration="&{false false false false false }" interface=lxcd64bb92eb0a4 k8sPodName=kube-system/coredns-7c96b6546b-xs6ql labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e800c474ea datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3189 ipv4=10.0.0.152 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-xs6ql subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.28 66461049-903e-45de-8e74-0dd8246dc6ed default }" containerID=6650ed822ae69e4c0eff517fb9bf51a5ff995fdb0aa8811e1ab6fd9e108275d3 datapathConfiguration="&{false false false false false }" interface=lxc3ceb1e674641 k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-4tpfq labels="[]" subsys=daemon sync-build=true level=info msg="Resolving identity labels (blocking)" containerID=e800c474ea datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3189 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.152 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-xs6ql subsys=endpoint level=info msg="New endpoint" containerID=6650ed822a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2402 ipv4=10.0.0.28 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-4tpfq subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:kube-system]" subsys=crd-allocator level=info msg="Resolving identity labels (blocking)" containerID=6650ed822a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2402 identityLabels="k8s:app=certgen,k8s:batch.kubernetes.io/controller-uid=350c244d-d58f-4625-bad7-a7cd342dfcd5,k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen,k8s:controller-uid=350c244d-d58f-4625-bad7-a7cd342dfcd5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen,k8s:io.kubernetes.pod.namespace=envoy-gateway-system,k8s:job-name=envoy-gateway-gateway-helm-certgen" ipv4=10.0.0.28 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-4tpfq subsys=endpoint level=info msg="Compiled new BPF template" BPFCompilationTime=288.665727ms file-path=/var/run/cilium/state/templates/acfe3eaec170ccb2653ce1d7d8631f0e88b89131cc9c0b7526991e457aaff1aa/bpf_host.o subsys=datapath-loader level=info msg="Allocated new global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=coredns;k8s:io.kubernetes.pod.namespace=kube-system;k8s:k8s-app=kube-dns;" subsys=allocator level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name:envoy-gateway-system]" subsys=crd-allocator level=info msg="Identity of endpoint changed" containerID=e800c474ea datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3189 identity=40019 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.152 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-xs6ql oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e800c474ea datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3189 identity=40019 ipv4=10.0.0.152 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-xs6ql subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=6650ed822a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2402 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.28 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-4tpfq line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=certgen;k8s:batch.kubernetes.io/controller-uid=350c244d-d58f-4625-bad7-a7cd342dfcd5;k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen;k8s:controller-uid=350c244d-d58f-4625-bad7-a7cd342dfcd5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system;k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen;k8s:io.kubernetes.pod.namespace=envoy-gateway-system;k8s:job-name=envoy-gateway-gateway-helm-certgen;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6650ed822a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2402 identity=4339 identityLabels="k8s:app=certgen,k8s:batch.kubernetes.io/controller-uid=350c244d-d58f-4625-bad7-a7cd342dfcd5,k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen,k8s:controller-uid=350c244d-d58f-4625-bad7-a7cd342dfcd5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen,k8s:io.kubernetes.pod.namespace=envoy-gateway-system,k8s:job-name=envoy-gateway-gateway-helm-certgen" ipv4=10.0.0.28 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-4tpfq oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6650ed822a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2402 identity=4339 ipv4=10.0.0.28 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-4tpfq subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1866 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="New endpoint" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=34 ipv4=10.0.0.79 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=34 identityLabels="reserved:health" ipv4=10.0.0.79 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Identity of endpoint changed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=34 identity=4 identityLabels="reserved:health" ipv4=10.0.0.79 ipv6= k8sPodName=/ oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Compiled new BPF template" BPFCompilationTime=1.084747928s file-path=/var/run/cilium/state/templates/9a9db95d96b685a5905cb4c227e5da74ca41b38eebb1fb36779bcf62d99af868/bpf_lxc.o subsys=datapath-loader level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=34 identity=4 ipv4=10.0.0.79 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e800c474ea datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3189 identity=40019 ipv4=10.0.0.152 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-xs6ql subsys=endpoint level=info msg="Successful endpoint creation" containerID=e800c474ea datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3189 identity=40019 ipv4=10.0.0.152 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-xs6ql subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=6650ed822a datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2402 identity=4339 ipv4=10.0.0.28 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-4tpfq subsys=endpoint level=info msg="Successful endpoint creation" containerID=6650ed822a datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2402 identity=4339 ipv4=10.0.0.28 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-4tpfq subsys=daemon level=info msg="Serving cilium health API at unix:///var/run/cilium/health.sock" subsys=health-server level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=6650ed822a endpointID=2402 k8sNamespace=envoy-gateway-system k8sPodName=envoy-gateway-gateway-helm-certgen-4tpfq subsys=daemon level=info msg="Releasing key" key="[k8s:app=certgen k8s:batch.kubernetes.io/controller-uid=350c244d-d58f-4625-bad7-a7cd342dfcd5 k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen k8s:controller-uid=350c244d-d58f-4625-bad7-a7cd342dfcd5 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen k8s:io.kubernetes.pod.namespace=envoy-gateway-system k8s:job-name=envoy-gateway-gateway-helm-certgen]" subsys=allocator level=info msg="Removed endpoint" containerID=6650ed822a datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2402 identity=4339 ipv4=10.0.0.28 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-4tpfq subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.75 8be94dc2-891a-4fc7-b993-68126a4d6d30 default }" containerID=64d8ad27deb40d37a814019e439d395a3c8f55922c3953d0037f78270c6747a3 datapathConfiguration="&{false false false false false }" interface=lxc72c37a70e840 k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-q6fww labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=64d8ad27de datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2049 ipv4=10.0.0.75 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-q6fww subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=64d8ad27de datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2049 identityLabels="k8s:app.kubernetes.io/instance=envoy-gateway,k8s:app.kubernetes.io/name=gateway-helm,k8s:control-plane=envoy-gateway,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway,k8s:io.kubernetes.pod.namespace=envoy-gateway-system" ipv4=10.0.0.75 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-q6fww subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name:envoy-gateway-system]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=64d8ad27de datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2049 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.75 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-q6fww line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=envoy-gateway;k8s:app.kubernetes.io/name=gateway-helm;k8s:control-plane=envoy-gateway;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system;k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway;k8s:io.kubernetes.pod.namespace=envoy-gateway-system;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=64d8ad27de datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2049 identity=27842 identityLabels="k8s:app.kubernetes.io/instance=envoy-gateway,k8s:app.kubernetes.io/name=gateway-helm,k8s:control-plane=envoy-gateway,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway,k8s:io.kubernetes.pod.namespace=envoy-gateway-system" ipv4=10.0.0.75 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-q6fww oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=64d8ad27de datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2049 identity=27842 ipv4=10.0.0.75 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-q6fww subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=64d8ad27de datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2049 identity=27842 ipv4=10.0.0.75 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-q6fww subsys=endpoint level=info msg="Successful endpoint creation" containerID=64d8ad27de datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2049 identity=27842 ipv4=10.0.0.75 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-q6fww subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1866 identity=1 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,k8s:openstack-compute-node=enabled,k8s:openstack-control-plane=enabled,k8s:openvswitch=enabled,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_hostns_01866 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_hostns_01866 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_hostns_01866 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_hostns_01866:pending" subsys=bpf level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_netdev_00005 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_netdev_00005 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005:pending" subsys=bpf level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1866 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.106 ebf0bdf1-29ab-4c21-8152-1b0f7c6baf9a default }" containerID=f24aac37b752313823fb02aa255255a68941e0e2ead1faae2f6653ad55832685 datapathConfiguration="&{false false false false false }" interface=lxca938e2ec9fee k8sPodName=kube-system/coredns-67659f764b-9fw27 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f24aac37b7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=456 ipv4=10.0.0.106 ipv6= k8sPodName=kube-system/coredns-67659f764b-9fw27 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.204 e75cc2dc-1c59-4703-8a92-f5ac89c97d1e default }" containerID=e802e5bd2d5b45c0bf1c8f8ceb05dcb523c9410b3112d717cd3b384c2b8b9110 datapathConfiguration="&{false false false false false }" interface=lxcb8ff9d0abe2a k8sPodName=kube-system/coredns-67659f764b-5pqnf labels="[]" subsys=daemon sync-build=true level=info msg="Resolving identity labels (blocking)" containerID=f24aac37b7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=456 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.106 ipv6= k8sPodName=kube-system/coredns-67659f764b-9fw27 subsys=endpoint level=info msg="New endpoint" containerID=e802e5bd2d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3361 ipv4=10.0.0.204 ipv6= k8sPodName=kube-system/coredns-67659f764b-5pqnf subsys=endpoint level=info msg="Identity of endpoint changed" containerID=f24aac37b7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=456 identity=40019 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.106 ipv6= k8sPodName=kube-system/coredns-67659f764b-9fw27 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f24aac37b7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=456 identity=40019 ipv4=10.0.0.106 ipv6= k8sPodName=kube-system/coredns-67659f764b-9fw27 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e802e5bd2d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3361 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.204 ipv6= k8sPodName=kube-system/coredns-67659f764b-5pqnf subsys=endpoint level=info msg="Identity of endpoint changed" containerID=e802e5bd2d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3361 identity=40019 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.204 ipv6= k8sPodName=kube-system/coredns-67659f764b-5pqnf oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e802e5bd2d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3361 identity=40019 ipv4=10.0.0.204 ipv6= k8sPodName=kube-system/coredns-67659f764b-5pqnf subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e802e5bd2d datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3361 identity=40019 ipv4=10.0.0.204 ipv6= k8sPodName=kube-system/coredns-67659f764b-5pqnf subsys=endpoint level=info msg="Successful endpoint creation" containerID=e802e5bd2d datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3361 identity=40019 ipv4=10.0.0.204 ipv6= k8sPodName=kube-system/coredns-67659f764b-5pqnf subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=f24aac37b7 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=456 identity=40019 ipv4=10.0.0.106 ipv6= k8sPodName=kube-system/coredns-67659f764b-9fw27 subsys=endpoint level=info msg="Successful endpoint creation" containerID=f24aac37b7 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=456 identity=40019 ipv4=10.0.0.106 ipv6= k8sPodName=kube-system/coredns-67659f764b-9fw27 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.158 a751499a-69fd-4a90-a8de-2a9af52f84a6 default }" containerID=8d79fe075706f7ba30f419a339c022b346d3af6dd6f3edaea5254f7fff2790f6 datapathConfiguration="&{false false false false false }" interface=lxc4083395f3d34 k8sPodName=local-path-storage/local-path-provisioner-679c578f5-7xlc4 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8d79fe0757 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3341 ipv4=10.0.0.158 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-7xlc4 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8d79fe0757 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3341 identityLabels="k8s:app.kubernetes.io/instance=local-path-provisioner,k8s:app.kubernetes.io/name=local-path-provisioner,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.158 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-7xlc4 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:local-path-storage k8s:io.cilium.k8s.namespace.labels.name:local-path-storage]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=8d79fe0757 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3341 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.158 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-7xlc4 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=local-path-provisioner;k8s:app.kubernetes.io/name=local-path-provisioner;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8d79fe0757 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3341 identity=10848 identityLabels="k8s:app.kubernetes.io/instance=local-path-provisioner,k8s:app.kubernetes.io/name=local-path-provisioner,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.158 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-7xlc4 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8d79fe0757 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3341 identity=10848 ipv4=10.0.0.158 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-7xlc4 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=8d79fe0757 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3341 identity=10848 ipv4=10.0.0.158 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-7xlc4 subsys=endpoint level=info msg="Successful endpoint creation" containerID=8d79fe0757 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3341 identity=10848 ipv4=10.0.0.158 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-7xlc4 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=e800c474ea endpointID=3189 k8sNamespace=kube-system k8sPodName=coredns-7c96b6546b-xs6ql subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=coredns k8s:io.kubernetes.pod.namespace=kube-system k8s:k8s-app=kube-dns]" subsys=allocator level=info msg="Removed endpoint" containerID=e800c474ea datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3189 identity=40019 ipv4=10.0.0.152 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-xs6ql subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.227 c015a9eb-464d-48cb-bed4-05dea610f8d8 default }" containerID=331af53645364e67d2974546f7c31e25c2ffdc04adffcab0dfac31fb4ab54114 datapathConfiguration="&{false false false false false }" interface=lxcbe6fc5514d5a k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-jx4f2 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=331af53645 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3941 ipv4=10.0.0.227 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-jx4f2 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=331af53645 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3941 identityLabels="k8s:app.kubernetes.io/component=cainjector,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cainjector,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cainjector,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.227 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-jx4f2 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=cainjector;k8s:app.kubernetes.io/component=cainjector;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=cainjector;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=331af53645 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3941 identity=13917 identityLabels="k8s:app.kubernetes.io/component=cainjector,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cainjector,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cainjector,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.227 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-jx4f2 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=331af53645 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3941 identity=13917 ipv4=10.0.0.227 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-jx4f2 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.141 84edaa49-835a-49c3-94a7-be8366e4f645 default }" containerID=d929a40ba63b7fcfdcccf1d5a4a00244f7c5cb68534e28aaaa5538af9f67e4a2 datapathConfiguration="&{false false false false false }" interface=lxcde1953189027 k8sPodName=cert-manager/cert-manager-75c4c745bc-xj66j labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d929a40ba6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1882 ipv4=10.0.0.141 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-xj66j subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d929a40ba6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1882 identityLabels="k8s:app.kubernetes.io/component=controller,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cert-manager,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cert-manager,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.141 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-xj66j subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Create endpoint request" addressing="&{10.0.0.203 4c746144-3dcf-482d-a569-d38f5616c784 default }" containerID=d12cbd6b5404c1a0f08eec2904aff83bbed64964c44b0ac7215bf8c4171b502a datapathConfiguration="&{false false false false false }" interface=lxceb6d72c0b388 k8sPodName=cert-manager/cert-manager-webhook-548949fc64-fq65n labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d12cbd6b54 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3985 ipv4=10.0.0.203 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-fq65n subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d12cbd6b54 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3985 identityLabels="k8s:app.kubernetes.io/component=webhook,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=webhook,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=webhook,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.203 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-fq65n subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=cert-manager;k8s:app.kubernetes.io/component=controller;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=cert-manager;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Identity of endpoint changed" containerID=d929a40ba6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1882 identity=48118 identityLabels="k8s:app.kubernetes.io/component=controller,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cert-manager,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cert-manager,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.141 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-xj66j oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d929a40ba6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1882 identity=48118 ipv4=10.0.0.141 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-xj66j subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=webhook;k8s:app.kubernetes.io/component=webhook;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=webhook;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d12cbd6b54 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3985 identity=3785 identityLabels="k8s:app.kubernetes.io/component=webhook,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=webhook,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=webhook,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.203 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-fq65n oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d12cbd6b54 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3985 identity=3785 ipv4=10.0.0.203 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-fq65n subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=331af53645 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3941 identity=13917 ipv4=10.0.0.227 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-jx4f2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=331af53645 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3941 identity=13917 ipv4=10.0.0.227 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-jx4f2 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=d12cbd6b54 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3985 identity=3785 ipv4=10.0.0.203 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-fq65n subsys=endpoint level=info msg="Successful endpoint creation" containerID=d12cbd6b54 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3985 identity=3785 ipv4=10.0.0.203 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-fq65n subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=d929a40ba6 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1882 identity=48118 ipv4=10.0.0.141 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-xj66j subsys=endpoint level=info msg="Successful endpoint creation" containerID=d929a40ba6 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1882 identity=48118 ipv4=10.0.0.141 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-xj66j subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.135 27cd2b1c-4140-48b2-aead-c7a925fdbca5 default }" containerID=45d2d51f7844a1643f02def531172daac89ad1502b871b758a91a8f58b5c1cc6 datapathConfiguration="&{false false false false false }" interface=lxce9d88345fca5 k8sPodName=cert-manager/cert-manager-startupapicheck-cr9q6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=45d2d51f78 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=715 ipv4=10.0.0.135 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-cr9q6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=45d2d51f78 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=715 identityLabels="k8s:app.kubernetes.io/component=startupapicheck,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=startupapicheck,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=startupapicheck,k8s:batch.kubernetes.io/controller-uid=93163304-b56e-41b0-8b48-b25b2bd8e086,k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck,k8s:controller-uid=93163304-b56e-41b0-8b48-b25b2bd8e086,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck,k8s:io.kubernetes.pod.namespace=cert-manager,k8s:job-name=cert-manager-startupapicheck" ipv4=10.0.0.135 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-cr9q6 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=startupapicheck;k8s:app.kubernetes.io/component=startupapicheck;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=startupapicheck;k8s:app.kubernetes.io/version=v1.11.5;k8s:batch.kubernetes.io/controller-uid=93163304-b56e-41b0-8b48-b25b2bd8e086;k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck;k8s:controller-uid=93163304-b56e-41b0-8b48-b25b2bd8e086;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck;k8s:io.kubernetes.pod.namespace=cert-manager;k8s:job-name=cert-manager-startupapicheck;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=45d2d51f78 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=715 identity=61399 identityLabels="k8s:app.kubernetes.io/component=startupapicheck,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=startupapicheck,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=startupapicheck,k8s:batch.kubernetes.io/controller-uid=93163304-b56e-41b0-8b48-b25b2bd8e086,k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck,k8s:controller-uid=93163304-b56e-41b0-8b48-b25b2bd8e086,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck,k8s:io.kubernetes.pod.namespace=cert-manager,k8s:job-name=cert-manager-startupapicheck" ipv4=10.0.0.135 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-cr9q6 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=45d2d51f78 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=715 identity=61399 ipv4=10.0.0.135 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-cr9q6 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=45d2d51f78 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=715 identity=61399 ipv4=10.0.0.135 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-cr9q6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=45d2d51f78 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=715 identity=61399 ipv4=10.0.0.135 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-cr9q6 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=45d2d51f78 endpointID=715 k8sNamespace=cert-manager k8sPodName=cert-manager-startupapicheck-cr9q6 subsys=daemon level=info msg="Releasing key" key="[k8s:app=startupapicheck k8s:app.kubernetes.io/component=startupapicheck k8s:app.kubernetes.io/instance=cert-manager k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=startupapicheck k8s:app.kubernetes.io/version=v1.11.5 k8s:batch.kubernetes.io/controller-uid=93163304-b56e-41b0-8b48-b25b2bd8e086 k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck k8s:controller-uid=93163304-b56e-41b0-8b48-b25b2bd8e086 k8s:helm.sh/chart=cert-manager-v1.11.5 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager k8s:io.cilium.k8s.namespace.labels.name=cert-manager k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck k8s:io.kubernetes.pod.namespace=cert-manager k8s:job-name=cert-manager-startupapicheck]" subsys=allocator level=info msg="Removed endpoint" containerID=45d2d51f78 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=715 identity=61399 ipv4=10.0.0.135 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-cr9q6 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.166 4737497a-2d38-4c40-a07a-3edcd028b315 default }" containerID=71e1779760ae373150e10b53e3a4124cbe75d52c1a63c3fd7f1fa6663a680db3 datapathConfiguration="&{false false false false false }" interface=lxc8ac6f09094e7 k8sPodName=ingress-nginx/ingress-nginx-admission-create-4hsm5 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=71e1779760 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2804 ipv4=10.0.0.166 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-4hsm5 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=71e1779760 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2804 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=edcc2a07-3424-4fe1-aba0-716e66564cea,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create,k8s:controller-uid=edcc2a07-3424-4fe1-aba0-716e66564cea,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-create" ipv4=10.0.0.166 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-4hsm5 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=admission-webhook;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:batch.kubernetes.io/controller-uid=edcc2a07-3424-4fe1-aba0-716e66564cea;k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create;k8s:controller-uid=edcc2a07-3424-4fe1-aba0-716e66564cea;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission;k8s:io.kubernetes.pod.namespace=ingress-nginx;k8s:job-name=ingress-nginx-admission-create;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=71e1779760 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2804 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.166 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-4hsm5 line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=71e1779760 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2804 identity=2130 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=edcc2a07-3424-4fe1-aba0-716e66564cea,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create,k8s:controller-uid=edcc2a07-3424-4fe1-aba0-716e66564cea,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-create" ipv4=10.0.0.166 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-4hsm5 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=71e1779760 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2804 identity=2130 ipv4=10.0.0.166 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-4hsm5 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=71e1779760 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2804 identity=2130 ipv4=10.0.0.166 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-4hsm5 subsys=endpoint level=info msg="Successful endpoint creation" containerID=71e1779760 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2804 identity=2130 ipv4=10.0.0.166 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-4hsm5 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=71e1779760 endpointID=2804 k8sNamespace=ingress-nginx k8sPodName=ingress-nginx-admission-create-4hsm5 subsys=daemon level=info msg="Releasing key" key="[k8s:app.kubernetes.io/component=admission-webhook k8s:app.kubernetes.io/instance=ingress-nginx k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=ingress-nginx k8s:app.kubernetes.io/part-of=ingress-nginx k8s:app.kubernetes.io/version=1.12.1 k8s:batch.kubernetes.io/controller-uid=edcc2a07-3424-4fe1-aba0-716e66564cea k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create k8s:controller-uid=edcc2a07-3424-4fe1-aba0-716e66564cea k8s:helm.sh/chart=ingress-nginx-4.12.1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission k8s:io.kubernetes.pod.namespace=ingress-nginx k8s:job-name=ingress-nginx-admission-create]" subsys=allocator level=info msg="Removed endpoint" containerID=71e1779760 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2804 identity=2130 ipv4=10.0.0.166 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-4hsm5 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.185 9a9e5a17-8adc-4900-a908-137486da6cd0 default }" containerID=39a9d8593ee7f9cb7a8b5b704af6c697a7b01914ac436ed52446971bd8f7adde datapathConfiguration="&{false false false false false }" interface=lxcd425c6e58300 k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-6l5wb labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=39a9d8593e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=821 ipv4=10.0.0.185 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-6l5wb subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=39a9d8593e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=821 identityLabels="k8s:app.kubernetes.io/component=default-backend,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend,k8s:io.kubernetes.pod.namespace=ingress-nginx" ipv4=10.0.0.185 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-6l5wb subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=default-backend;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend;k8s:io.kubernetes.pod.namespace=ingress-nginx;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=39a9d8593e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=821 identity=63558 identityLabels="k8s:app.kubernetes.io/component=default-backend,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend,k8s:io.kubernetes.pod.namespace=ingress-nginx" ipv4=10.0.0.185 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-6l5wb oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=39a9d8593e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=821 identity=63558 ipv4=10.0.0.185 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-6l5wb subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=39a9d8593e datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=821 identity=63558 ipv4=10.0.0.185 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-6l5wb subsys=endpoint level=info msg="Successful endpoint creation" containerID=39a9d8593e datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=821 identity=63558 ipv4=10.0.0.185 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-6l5wb subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.53 7be1e808-dd67-4eb5-8d1b-7eb636f2ffaa default }" containerID=9e8fa27edf5531341bda39f8873535594dfd8de8f146b0e0f4a0cfbd2443704b datapathConfiguration="&{false false false false false }" interface=lxc1496c2a8ecaa k8sPodName=ingress-nginx/ingress-nginx-admission-patch-87cxf labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9e8fa27edf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=537 ipv4=10.0.0.53 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-87cxf subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9e8fa27edf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=537 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=948c855c-1875-419a-a7c8-cb1b04aa78e8,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch,k8s:controller-uid=948c855c-1875-419a-a7c8-cb1b04aa78e8,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-patch" ipv4=10.0.0.53 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-87cxf subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=admission-webhook;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:batch.kubernetes.io/controller-uid=948c855c-1875-419a-a7c8-cb1b04aa78e8;k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch;k8s:controller-uid=948c855c-1875-419a-a7c8-cb1b04aa78e8;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission;k8s:io.kubernetes.pod.namespace=ingress-nginx;k8s:job-name=ingress-nginx-admission-patch;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9e8fa27edf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=537 identity=5488 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=948c855c-1875-419a-a7c8-cb1b04aa78e8,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch,k8s:controller-uid=948c855c-1875-419a-a7c8-cb1b04aa78e8,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-patch" ipv4=10.0.0.53 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-87cxf oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9e8fa27edf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=537 identity=5488 ipv4=10.0.0.53 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-87cxf subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=9e8fa27edf datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=537 identity=5488 ipv4=10.0.0.53 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-87cxf subsys=endpoint level=info msg="Successful endpoint creation" containerID=9e8fa27edf datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=537 identity=5488 ipv4=10.0.0.53 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-87cxf subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=9e8fa27edf endpointID=537 k8sNamespace=ingress-nginx k8sPodName=ingress-nginx-admission-patch-87cxf subsys=daemon level=info msg="Releasing key" key="[k8s:app.kubernetes.io/component=admission-webhook k8s:app.kubernetes.io/instance=ingress-nginx k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=ingress-nginx k8s:app.kubernetes.io/part-of=ingress-nginx k8s:app.kubernetes.io/version=1.12.1 k8s:batch.kubernetes.io/controller-uid=948c855c-1875-419a-a7c8-cb1b04aa78e8 k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch k8s:controller-uid=948c855c-1875-419a-a7c8-cb1b04aa78e8 k8s:helm.sh/chart=ingress-nginx-4.12.1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission k8s:io.kubernetes.pod.namespace=ingress-nginx k8s:job-name=ingress-nginx-admission-patch]" subsys=allocator level=info msg="Removed endpoint" containerID=9e8fa27edf datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=537 identity=5488 ipv4=10.0.0.53 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-87cxf subsys=endpoint level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"rabbitmq-operator\",\"k8s:app.kubernetes.io/instance\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/name\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/part-of\":\"rabbitmq\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=rabbitmq-cluster-operator k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=11d6aaa5-0e35-4227-8754-1a65f47ad8f5] Description:}]" policyAddRequest=47a05744-bc88-46cc-90fa-caaa4b99983b subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=47a05744-bc88-46cc-90fa-caaa4b99983b policyRevision=2 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=rabbitmq-cluster-operator subsys=k8s-watcher level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"messaging-topology-operator\",\"k8s:app.kubernetes.io/instance\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/name\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/part-of\":\"rabbitmq\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:9443 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=rabbitmq-messaging-topology-operator k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=a534604c-f029-4fc8-b77f-b5c8e638ae4b] Description:}]" policyAddRequest=add0111d-43b0-47b9-96e3-cad4afafd239 subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=add0111d-43b0-47b9-96e3-cad4afafd239 policyRevision=3 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=rabbitmq-messaging-topology-operator subsys=k8s-watcher level=info msg="Create endpoint request" addressing="&{10.0.0.143 2aefed98-98bd-4f1b-b716-7f70ab1c684f default }" containerID=1fbeba139f81d43ee2e84b03bcbbaf39bbdbc283626a9d604c8fcbc1733fe017 datapathConfiguration="&{false false false false false }" interface=lxc223ad412a4b5 k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-bzp85 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1fbeba139f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=87 ipv4=10.0.0.143 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-bzp85 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1fbeba139f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=87 identityLabels="k8s:app.kubernetes.io/component=rabbitmq-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=2.16.1,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.143 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-bzp85 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=1fbeba139f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=87 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.143 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-bzp85 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq-operator;k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=rabbitmq-cluster-operator;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:app.kubernetes.io/version=2.16.1;k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1fbeba139f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=87 identity=1170 identityLabels="k8s:app.kubernetes.io/component=rabbitmq-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=2.16.1,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.143 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-bzp85 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1fbeba139f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=87 identity=1170 ipv4=10.0.0.143 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-bzp85 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=1fbeba139f datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=87 identity=1170 ipv4=10.0.0.143 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-bzp85 subsys=endpoint level=info msg="Successful endpoint creation" containerID=1fbeba139f datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=87 identity=1170 ipv4=10.0.0.143 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-bzp85 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.44 c43ee44e-4af0-45b8-9374-814051713241 default }" containerID=abf403df24f08865c33e37a7e5c61c1d1787d3a2c115c330dd99c0bd4d2f42cf datapathConfiguration="&{false false false false false }" interface=lxc5f05c2207653 k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-8kt29 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=abf403df24 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3217 ipv4=10.0.0.44 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-8kt29 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=abf403df24 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3217 identityLabels="k8s:app.kubernetes.io/component=messaging-topology-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=1.17.4,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.44 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-8kt29 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=messaging-topology-operator;k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=rabbitmq-cluster-operator;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:app.kubernetes.io/version=1.17.4;k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=abf403df24 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3217 identity=5034 identityLabels="k8s:app.kubernetes.io/component=messaging-topology-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=1.17.4,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.44 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-8kt29 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=abf403df24 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3217 identity=5034 ipv4=10.0.0.44 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-8kt29 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=abf403df24 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=3217 identity=5034 ipv4=10.0.0.44 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-8kt29 subsys=endpoint level=info msg="Successful endpoint creation" containerID=abf403df24 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=3217 identity=5034 ipv4=10.0.0.44 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-8kt29 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.1 538f0c2a-4597-48f0-8417-e1e5cd937644 default }" containerID=bca2b9e697d5c6f8f64e4e5febf4afde8a986637ab29fa0a3ffbe09528d87b1a datapathConfiguration="&{false false false false false }" interface=lxcb3a4f853015e k8sPodName=openstack/pxc-operator-69cb5bbdb9-sgr9b labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=bca2b9e697 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2377 ipv4=10.0.0.1 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-sgr9b subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=bca2b9e697 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2377 identityLabels="k8s:app.kubernetes.io/component=operator,k8s:app.kubernetes.io/instance=pxc-operator,k8s:app.kubernetes.io/name=pxc-operator,k8s:app.kubernetes.io/part-of=pxc-operator,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.1 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-sgr9b subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=bca2b9e697 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2377 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.1 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-sgr9b line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=operator;k8s:app.kubernetes.io/instance=pxc-operator;k8s:app.kubernetes.io/name=pxc-operator;k8s:app.kubernetes.io/part-of=pxc-operator;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=bca2b9e697 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2377 identity=9668 identityLabels="k8s:app.kubernetes.io/component=operator,k8s:app.kubernetes.io/instance=pxc-operator,k8s:app.kubernetes.io/name=pxc-operator,k8s:app.kubernetes.io/part-of=pxc-operator,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.1 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-sgr9b oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=bca2b9e697 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2377 identity=9668 ipv4=10.0.0.1 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-sgr9b subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=bca2b9e697 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=2377 identity=9668 ipv4=10.0.0.1 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-sgr9b subsys=endpoint level=info msg="Successful endpoint creation" containerID=bca2b9e697 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=2377 identity=9668 ipv4=10.0.0.1 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-sgr9b subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.84 876bd0dd-276f-49bf-b34d-d74d4a9ade30 default }" containerID=a1647b8350c86c6183c4ced4042afefd3a5725cc54143fa8f6774cf25ffb05b2 datapathConfiguration="&{false false false false false }" interface=lxc2cf79ba61afc k8sPodName=openstack/percona-xtradb-haproxy-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a1647b8350 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1009 ipv4=10.0.0.84 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a1647b8350 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1009 identityLabels="k8s:app.kubernetes.io/component=haproxy,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0" ipv4=10.0.0.84 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=a1647b8350 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1009 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.84 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=haproxy;k8s:app.kubernetes.io/instance=percona-xtradb;k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator;k8s:app.kubernetes.io/name=percona-xtradb-cluster;k8s:app.kubernetes.io/part-of=percona-xtradb-cluster;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a1647b8350 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1009 identity=21539 identityLabels="k8s:app.kubernetes.io/component=haproxy,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0" ipv4=10.0.0.84 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a1647b8350 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1009 identity=21539 ipv4=10.0.0.84 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a1647b8350 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=1009 identity=21539 ipv4=10.0.0.84 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=a1647b8350 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=1009 identity=21539 ipv4=10.0.0.84 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.219 2f31ce11-3fd3-4272-bdc7-74ef6eac6fe0 default }" containerID=db026f8d86d7835fdcb422e293b64c7df340a743306f89daf6cd224fa63fce07 datapathConfiguration="&{false false false false false }" interface=lxc3816f45fb62a k8sPodName=local-path-storage/helper-pod-create-pvc-30b2f824-bd56-4085-81f0-0c12fc7990b5 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=db026f8d86 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=375 ipv4=10.0.0.219 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-30b2f824-bd56-4085-81f0-0c12fc7990b5 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=db026f8d86 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=375 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.219 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-30b2f824-bd56-4085-81f0-0c12fc7990b5 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:local-path-storage k8s:io.cilium.k8s.namespace.labels.name:local-path-storage]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=db026f8d86 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=375 identity=6594 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.219 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-30b2f824-bd56-4085-81f0-0c12fc7990b5 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=db026f8d86 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=375 identity=6594 ipv4=10.0.0.219 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-30b2f824-bd56-4085-81f0-0c12fc7990b5 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=db026f8d86 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=375 identity=6594 ipv4=10.0.0.219 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-30b2f824-bd56-4085-81f0-0c12fc7990b5 subsys=endpoint level=info msg="Successful endpoint creation" containerID=db026f8d86 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=375 identity=6594 ipv4=10.0.0.219 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-30b2f824-bd56-4085-81f0-0c12fc7990b5 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=db026f8d86 endpointID=375 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-30b2f824-bd56-4085-81f0-0c12fc7990b5 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=db026f8d86 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=375 identity=6594 ipv4=10.0.0.219 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-30b2f824-bd56-4085-81f0-0c12fc7990b5 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.103 b34e84b7-e4af-4c2c-bd49-3e0d48b89b4c default }" containerID=bf2d4e4e2838435120e12e2ca6cb334f4ee9efd62cb053eeda4cb33918325a04 datapathConfiguration="&{false false false false false }" interface=lxc9117ad12db27 k8sPodName=openstack/percona-xtradb-pxc-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=bf2d4e4e28 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=559 ipv4=10.0.0.103 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=bf2d4e4e28 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=559 identityLabels="k8s:app.kubernetes.io/component=pxc,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0" ipv4=10.0.0.103 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=pxc;k8s:app.kubernetes.io/instance=percona-xtradb;k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator;k8s:app.kubernetes.io/name=percona-xtradb-cluster;k8s:app.kubernetes.io/part-of=percona-xtradb-cluster;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=bf2d4e4e28 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=559 identity=65262 identityLabels="k8s:app.kubernetes.io/component=pxc,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0" ipv4=10.0.0.103 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=bf2d4e4e28 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=559 identity=65262 ipv4=10.0.0.103 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=bf2d4e4e28 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=559 identity=65262 ipv4=10.0.0.103 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=bf2d4e4e28 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=559 identity=65262 ipv4=10.0.0.103 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/instance\":\"valkey\",\"k8s:app.kubernetes.io/name\":\"valkey\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:6379 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:} {Ports:[{Port:26379 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:} {IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:9121 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=valkey k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=0f2f9a68-ec94-4620-bc01-f350987cf0a5] Description:}]" policyAddRequest=0944b869-30a7-4e07-b2f4-6c6dbb1a56f3 subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=0944b869-30a7-4e07-b2f4-6c6dbb1a56f3 policyRevision=4 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=valkey subsys=k8s-watcher level=info msg="Create endpoint request" addressing="&{10.0.0.218 f3dab7a7-76e3-41fd-bee0-e14aa9345360 default }" containerID=e143fd94afe25bb9dc4fdd9a4e74e50dd425391e43bc8cc8e76bf161f66cfb2e datapathConfiguration="&{false false false false false }" interface=lxce4b820de70cc k8sPodName=local-path-storage/helper-pod-create-pvc-3473264c-9d9f-47ac-a340-182234b145c5 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e143fd94af datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=745 ipv4=10.0.0.218 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-3473264c-9d9f-47ac-a340-182234b145c5 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e143fd94af datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=745 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.218 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-3473264c-9d9f-47ac-a340-182234b145c5 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e143fd94af datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=745 identity=6594 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.218 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-3473264c-9d9f-47ac-a340-182234b145c5 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e143fd94af datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=745 identity=6594 ipv4=10.0.0.218 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-3473264c-9d9f-47ac-a340-182234b145c5 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e143fd94af datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=745 identity=6594 ipv4=10.0.0.218 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-3473264c-9d9f-47ac-a340-182234b145c5 subsys=endpoint level=info msg="Successful endpoint creation" containerID=e143fd94af datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=745 identity=6594 ipv4=10.0.0.218 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-3473264c-9d9f-47ac-a340-182234b145c5 subsys=daemon level=info msg="Delete endpoint request" containerID=e143fd94af endpointID=745 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-3473264c-9d9f-47ac-a340-182234b145c5 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=e143fd94af datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=745 identity=6594 ipv4=10.0.0.218 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-3473264c-9d9f-47ac-a340-182234b145c5 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.152 358c70ab-1c56-4985-869d-0f60bdb59b8c default }" containerID=2b42935df50fb9b01474c806aac8dbc615cc10e7cf3605455fbe1c011ca77c92 datapathConfiguration="&{false false false false false }" interface=lxccad38eddb12f k8sPodName=openstack/valkey-node-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2b42935df5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=389 ipv4=10.0.0.152 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2b42935df5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=389 identityLabels="k8s:app.kubernetes.io/component=node,k8s:app.kubernetes.io/instance=valkey,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=valkey,k8s:app.kubernetes.io/version=8.0.2,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=valkey-2.4.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=valkey,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=valkey-node-0" ipv4=10.0.0.152 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=node;k8s:app.kubernetes.io/instance=valkey;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=valkey;k8s:app.kubernetes.io/version=8.0.2;k8s:apps.kubernetes.io/pod-index=0;k8s:helm.sh/chart=valkey-2.4.6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=valkey;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=valkey-node-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2b42935df5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=389 identity=1606 identityLabels="k8s:app.kubernetes.io/component=node,k8s:app.kubernetes.io/instance=valkey,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=valkey,k8s:app.kubernetes.io/version=8.0.2,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=valkey-2.4.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=valkey,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=valkey-node-0" ipv4=10.0.0.152 ipv6= k8sPodName=openstack/valkey-node-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2b42935df5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=389 identity=1606 ipv4=10.0.0.152 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=2b42935df5 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=389 identity=1606 ipv4=10.0.0.152 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=2b42935df5 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=389 identity=1606 ipv4=10.0.0.152 ipv6= k8sPodName=openstack/valkey-node-0 subsys=daemon level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"keycloak\",\"k8s:app.kubernetes.io/instance\":\"keycloak\",\"k8s:app.kubernetes.io/name\":\"keycloak\",\"k8s:io.kubernetes.pod.namespace\":\"auth-system\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:7800 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:} {Ports:[{Port:8080 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=keycloak k8s:io.cilium.k8s.policy.namespace=auth-system k8s:io.cilium.k8s.policy.uid=0f7f3234-f364-44bf-8213-da1a648c2131] Description:}]" policyAddRequest=a975ae9c-4ca1-44b9-b16b-30c55e9234f1 subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=a975ae9c-4ca1-44b9-b16b-30c55e9234f1 policyRevision=5 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=keycloak subsys=k8s-watcher level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.254 948ad039-fdd3-4291-8b9b-019ff883b5c8 default }" containerID=8914a7434976ee4e739572bd447410e156700ea1cd17ab5795ccb1db501ea1bb datapathConfiguration="&{false false false false false }" interface=lxc4db8a8c2a74f k8sPodName=auth-system/keycloak-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8914a74349 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1990 ipv4=10.0.0.254 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8914a74349 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1990 identityLabels="k8s:app.kubernetes.io/component=keycloak,k8s:app.kubernetes.io/instance=keycloak,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=keycloak,k8s:app.kubernetes.io/version=24.0.5,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=keycloak-21.4.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system,k8s:io.cilium.k8s.namespace.labels.name=auth-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keycloak,k8s:io.kubernetes.pod.namespace=auth-system,k8s:statefulset.kubernetes.io/pod-name=keycloak-0" ipv4=10.0.0.254 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:auth-system k8s:io.cilium.k8s.namespace.labels.name:auth-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=keycloak;k8s:app.kubernetes.io/instance=keycloak;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=keycloak;k8s:app.kubernetes.io/version=24.0.5;k8s:apps.kubernetes.io/pod-index=0;k8s:helm.sh/chart=keycloak-21.4.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system;k8s:io.cilium.k8s.namespace.labels.name=auth-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keycloak;k8s:io.kubernetes.pod.namespace=auth-system;k8s:statefulset.kubernetes.io/pod-name=keycloak-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8914a74349 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1990 identity=62057 identityLabels="k8s:app.kubernetes.io/component=keycloak,k8s:app.kubernetes.io/instance=keycloak,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=keycloak,k8s:app.kubernetes.io/version=24.0.5,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=keycloak-21.4.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system,k8s:io.cilium.k8s.namespace.labels.name=auth-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keycloak,k8s:io.kubernetes.pod.namespace=auth-system,k8s:statefulset.kubernetes.io/pod-name=keycloak-0" ipv4=10.0.0.254 ipv6= k8sPodName=auth-system/keycloak-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8914a74349 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1990 identity=62057 ipv4=10.0.0.254 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=8914a74349 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1990 identity=62057 ipv4=10.0.0.254 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=8914a74349 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1990 identity=62057 ipv4=10.0.0.254 ipv6= k8sPodName=auth-system/keycloak-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Conntrack garbage collector interval recalculated" deleteRatio=0.010760615201482544 newInterval=7m30s subsys=map-ct level=info msg="Create endpoint request" addressing="&{10.0.0.249 a9ddff10-4832-4e08-9903-26dc5a90d07b default }" containerID=bd666fbd7a562b066798a37aeea2520c7a358813ad6f04606fe3a8cf437f4f73 datapathConfiguration="&{false false false false false }" interface=lxc96b4b10ab06a k8sPodName=monitoring/node-feature-discovery-worker-qhsr9 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=bd666fbd7a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2408 ipv4=10.0.0.249 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-qhsr9 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=bd666fbd7a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2408 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=worker" ipv4=10.0.0.249 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-qhsr9 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=worker;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=bd666fbd7a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2408 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.249 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-qhsr9 line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=bd666fbd7a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2408 identity=1951 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=worker" ipv4=10.0.0.249 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-qhsr9 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=bd666fbd7a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2408 identity=1951 ipv4=10.0.0.249 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-qhsr9 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.63 f5cae948-7e9f-410f-bdc8-dc30387edb6b default }" containerID=5acca7cd1ed2067ddfcbb9c86e88fef57453dee43a762b6189fd15354a345d9f datapathConfiguration="&{false false false false false }" interface=lxc7478dc59748c k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-tf6wx labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5acca7cd1e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2471 ipv4=10.0.0.63 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-tf6wx subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5acca7cd1e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2471 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=master" ipv4=10.0.0.63 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-tf6wx subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Create endpoint request" addressing="&{10.0.0.4 65146c90-8432-4ed9-b0b9-7bbddf6b99c1 default }" containerID=e40582c3dc37bf2d2b9a12e5c75718bdfb188a886e44ec665152b90089802885 datapathConfiguration="&{false false false false false }" interface=lxc070f30099ec1 k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-c2z28 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e40582c3dc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1013 ipv4=10.0.0.4 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-c2z28 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e40582c3dc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1013 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=gc" ipv4=10.0.0.4 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-c2z28 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=master;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5acca7cd1e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2471 identity=62390 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=master" ipv4=10.0.0.63 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-tf6wx oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5acca7cd1e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2471 identity=62390 ipv4=10.0.0.63 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-tf6wx subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=gc;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e40582c3dc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1013 identity=23641 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=gc" ipv4=10.0.0.4 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-c2z28 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e40582c3dc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1013 identity=23641 ipv4=10.0.0.4 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-c2z28 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=bd666fbd7a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2408 identity=1951 ipv4=10.0.0.249 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-qhsr9 subsys=endpoint level=info msg="Successful endpoint creation" containerID=bd666fbd7a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2408 identity=1951 ipv4=10.0.0.249 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-qhsr9 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=5acca7cd1e datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2471 identity=62390 ipv4=10.0.0.63 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-tf6wx subsys=endpoint level=info msg="Successful endpoint creation" containerID=5acca7cd1e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2471 identity=62390 ipv4=10.0.0.63 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-tf6wx subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=e40582c3dc datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1013 identity=23641 ipv4=10.0.0.4 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-c2z28 subsys=endpoint level=info msg="Successful endpoint creation" containerID=e40582c3dc datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1013 identity=23641 ipv4=10.0.0.4 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-c2z28 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.96 c9ac40dc-7884-4839-814b-89c9646ed719 default }" containerID=0a401b9830753fa7f8eff5f4d92944d9f01cb46fdee4571e473be38fb0af9694 datapathConfiguration="&{false false false false false }" interface=lxc5d0ee361a384 k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-6g7wm labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0a401b9830 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1055 ipv4=10.0.0.96 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-6g7wm subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0a401b9830 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1055 identityLabels="k8s:app=secretgen-controller,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa,k8s:io.kubernetes.pod.namespace=secretgen-controller" ipv4=10.0.0.96 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-6g7wm subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:secretgen-controller]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=secretgen-controller;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa;k8s:io.kubernetes.pod.namespace=secretgen-controller;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0a401b9830 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1055 identity=25347 identityLabels="k8s:app=secretgen-controller,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa,k8s:io.kubernetes.pod.namespace=secretgen-controller" ipv4=10.0.0.96 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-6g7wm oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0a401b9830 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1055 identity=25347 ipv4=10.0.0.96 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-6g7wm subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=0a401b9830 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1055 identity=25347 ipv4=10.0.0.96 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-6g7wm subsys=endpoint level=info msg="Successful endpoint creation" containerID=0a401b9830 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1055 identity=25347 ipv4=10.0.0.96 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-6g7wm subsys=daemon level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1866 identity=1 identityLabels="k8s:feature.node.kubernetes.io/cpu-cpuid.ADX=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AESNI=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AVX2=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AVX=true,k8s:feature.node.kubernetes.io/cpu-cpuid.CLZERO=true,k8s:feature.node.kubernetes.io/cpu-cpuid.CMPXCHG8=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FMA3=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FXSR=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FXSROPT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.HYPERVISOR=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IA32_ARCH_CAP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IBPB=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IBRS=true,k8s:feature.node.kubernetes.io/cpu-cpuid.LAHF=true,k8s:feature.node.kubernetes.io/cpu-cpuid.MOVBE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.NRIPS=true,k8s:feature.node.kubernetes.io/cpu-cpuid.OSXSAVE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SHA=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SPEC_CTRL_SSBD=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SSE4A=true,k8s:feature.node.kubernetes.io/cpu-cpuid.STIBP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SVM=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SVMNP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SYSCALL=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SYSEE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.TOPEXT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.WBNOINVD=true,k8s:feature.node.kubernetes.io/cpu-cpuid.X87=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XGETBV1=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVEC=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVEOPT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVES=true,k8s:feature.node.kubernetes.io/cpu-hardware_multithreading=false,k8s:feature.node.kubernetes.io/cpu-model.family=23,k8s:feature.node.kubernetes.io/cpu-model.id=49,k8s:feature.node.kubernetes.io/cpu-model.vendor_id=AMD,k8s:feature.node.kubernetes.io/kernel-config.NO_HZ=true,k8s:feature.node.kubernetes.io/kernel-config.NO_HZ_IDLE=true,k8s:feature.node.kubernetes.io/kernel-version.full=5.15.0-176-generic,k8s:feature.node.kubernetes.io/kernel-version.major=5,k8s:feature.node.kubernetes.io/kernel-version.minor=15,k8s:feature.node.kubernetes.io/kernel-version.revision=0,k8s:feature.node.kubernetes.io/pci-0300_1af4.present=true,k8s:feature.node.kubernetes.io/system-os_release.ID=ubuntu,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID.major=22,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID.minor=04,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID=22.04,k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,k8s:openstack-compute-node=enabled,k8s:openstack-control-plane=enabled,k8s:openvswitch=enabled,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_hostns_01866 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_hostns_01866 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_hostns_01866 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_hostns_01866:pending" subsys=bpf level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_netdev_00005 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_netdev_00005 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005:pending" subsys=bpf level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1866 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.128 870f4340-a64a-4635-863c-132474ba811c default }" containerID=3c214c4ce90d5c04896a9e724bbd68da758085ed26d3ca6edbde3a447b6b3166 datapathConfiguration="&{false false false false false }" interface=lxcea16063163bd k8sPodName=monitoring/kube-prometheus-stack-admission-create-wqv5f labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3c214c4ce9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=774 ipv4=10.0.0.128 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-wqv5f subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3c214c4ce9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=774 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-create,k8s:batch.kubernetes.io/controller-uid=d15af57f-556e-4c72-b967-cf3e766a51fc,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=d15af57f-556e-4c72-b967-cf3e766a51fc,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-create,k8s:release=kube-prometheus-stack" ipv4=10.0.0.128 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-wqv5f subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-admission-create;k8s:app.kubernetes.io/component=prometheus-operator-webhook;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:batch.kubernetes.io/controller-uid=d15af57f-556e-4c72-b967-cf3e766a51fc;k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create;k8s:chart=kube-prometheus-stack-60.2.0;k8s:controller-uid=d15af57f-556e-4c72-b967-cf3e766a51fc;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission;k8s:io.kubernetes.pod.namespace=monitoring;k8s:job-name=kube-prometheus-stack-admission-create;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3c214c4ce9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=774 identity=63944 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-create,k8s:batch.kubernetes.io/controller-uid=d15af57f-556e-4c72-b967-cf3e766a51fc,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=d15af57f-556e-4c72-b967-cf3e766a51fc,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-create,k8s:release=kube-prometheus-stack" ipv4=10.0.0.128 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-wqv5f oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=3c214c4ce9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=774 identity=63944 ipv4=10.0.0.128 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-wqv5f subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=3c214c4ce9 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=774 identity=63944 ipv4=10.0.0.128 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-wqv5f subsys=endpoint level=info msg="Successful endpoint creation" containerID=3c214c4ce9 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=774 identity=63944 ipv4=10.0.0.128 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-wqv5f subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=3c214c4ce9 endpointID=774 k8sNamespace=monitoring k8sPodName=kube-prometheus-stack-admission-create-wqv5f subsys=daemon level=info msg="Releasing key" key="[k8s:app=kube-prometheus-stack-admission-create k8s:app.kubernetes.io/component=prometheus-operator-webhook k8s:app.kubernetes.io/instance=kube-prometheus-stack k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator k8s:app.kubernetes.io/part-of=kube-prometheus-stack k8s:app.kubernetes.io/version=60.2.0 k8s:batch.kubernetes.io/controller-uid=d15af57f-556e-4c72-b967-cf3e766a51fc k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create k8s:chart=kube-prometheus-stack-60.2.0 k8s:controller-uid=d15af57f-556e-4c72-b967-cf3e766a51fc k8s:heritage=Helm k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring k8s:io.cilium.k8s.namespace.labels.name=monitoring k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission k8s:io.kubernetes.pod.namespace=monitoring k8s:job-name=kube-prometheus-stack-admission-create k8s:release=kube-prometheus-stack]" subsys=allocator level=info msg="Removed endpoint" containerID=3c214c4ce9 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=774 identity=63944 ipv4=10.0.0.128 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-wqv5f subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.76 2b33d10b-31dc-4ab3-ad53-aa6329c1ef4e default }" containerID=cb61b1d35a8d7e04aefcba9450762aed57cd269616bb558065a27efd0386b328 datapathConfiguration="&{false false false false false }" interface=lxc74a08e9c1c6c k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-xld2f labels="[]" subsys=daemon sync-build=true level=info msg="Create endpoint request" addressing="&{10.0.0.153 204ee87d-f32e-4840-9cf0-9ab0f04a9510 default }" containerID=3c7ac41a54cc45a8b25fb9ad95412788c2e595c8008f708dfc1df22915cd13b0 datapathConfiguration="&{false false false false false }" interface=lxca0aa0fc53e57 k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-svhzm labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=cb61b1d35a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3383 ipv4=10.0.0.76 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-xld2f subsys=endpoint level=info msg="New endpoint" containerID=3c7ac41a54 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=962 ipv4=10.0.0.153 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-svhzm subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3c7ac41a54 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=962 identityLabels="k8s:app.kubernetes.io/component=metrics,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-state-metrics,k8s:app.kubernetes.io/part-of=kube-state-metrics,k8s:app.kubernetes.io/version=2.12.0,k8s:helm.sh/chart=kube-state-metrics-5.20.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.153 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-svhzm subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Resolving identity labels (blocking)" containerID=cb61b1d35a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3383 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-operator,k8s:chart=kube-prometheus-stack-60.2.0,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.76 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-xld2f subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=3c7ac41a54 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=962 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.153 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-svhzm line=611 subsys=endpoint level=info msg="Invalid state transition skipped" containerID=cb61b1d35a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3383 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.76 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-xld2f line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=metrics;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-state-metrics;k8s:app.kubernetes.io/part-of=kube-state-metrics;k8s:app.kubernetes.io/version=2.12.0;k8s:helm.sh/chart=kube-state-metrics-5.20.0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics;k8s:io.kubernetes.pod.namespace=monitoring;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3c7ac41a54 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=962 identity=47132 identityLabels="k8s:app.kubernetes.io/component=metrics,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-state-metrics,k8s:app.kubernetes.io/part-of=kube-state-metrics,k8s:app.kubernetes.io/version=2.12.0,k8s:helm.sh/chart=kube-state-metrics-5.20.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.153 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-svhzm oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3c7ac41a54 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=962 identity=47132 ipv4=10.0.0.153 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-svhzm subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-operator;k8s:app.kubernetes.io/component=prometheus-operator;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:chart=kube-prometheus-stack-60.2.0;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator;k8s:io.kubernetes.pod.namespace=monitoring;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=cb61b1d35a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3383 identity=2935 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-operator,k8s:chart=kube-prometheus-stack-60.2.0,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.76 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-xld2f oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=cb61b1d35a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3383 identity=2935 ipv4=10.0.0.76 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-xld2f subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=3c7ac41a54 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=962 identity=47132 ipv4=10.0.0.153 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-svhzm subsys=endpoint level=info msg="Successful endpoint creation" containerID=3c7ac41a54 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=962 identity=47132 ipv4=10.0.0.153 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-svhzm subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=cb61b1d35a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3383 identity=2935 ipv4=10.0.0.76 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-xld2f subsys=endpoint level=info msg="Successful endpoint creation" containerID=cb61b1d35a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3383 identity=2935 ipv4=10.0.0.76 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-xld2f subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.238 b1ebbdd9-245c-435c-8839-6f9a2f0eccb9 default }" containerID=2accb43f15d3e31eaee7a736a1955a39f9818085389accf5be00ae9310c55891 datapathConfiguration="&{false false false false false }" interface=lxcd0792725e826 k8sPodName=monitoring/kube-prometheus-stack-admission-patch-r7cns labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2accb43f15 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1834 ipv4=10.0.0.238 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-r7cns subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2accb43f15 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1834 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-patch,k8s:batch.kubernetes.io/controller-uid=059c552d-3e83-4388-b81e-5bf9c45f655c,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=059c552d-3e83-4388-b81e-5bf9c45f655c,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-patch,k8s:release=kube-prometheus-stack" ipv4=10.0.0.238 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-r7cns subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-admission-patch;k8s:app.kubernetes.io/component=prometheus-operator-webhook;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:batch.kubernetes.io/controller-uid=059c552d-3e83-4388-b81e-5bf9c45f655c;k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch;k8s:chart=kube-prometheus-stack-60.2.0;k8s:controller-uid=059c552d-3e83-4388-b81e-5bf9c45f655c;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission;k8s:io.kubernetes.pod.namespace=monitoring;k8s:job-name=kube-prometheus-stack-admission-patch;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2accb43f15 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1834 identity=56763 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-patch,k8s:batch.kubernetes.io/controller-uid=059c552d-3e83-4388-b81e-5bf9c45f655c,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=059c552d-3e83-4388-b81e-5bf9c45f655c,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-patch,k8s:release=kube-prometheus-stack" ipv4=10.0.0.238 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-r7cns oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2accb43f15 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1834 identity=56763 ipv4=10.0.0.238 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-r7cns subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=2accb43f15 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1834 identity=56763 ipv4=10.0.0.238 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-r7cns subsys=endpoint level=info msg="Successful endpoint creation" containerID=2accb43f15 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1834 identity=56763 ipv4=10.0.0.238 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-r7cns subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.27 f4f2010a-d9a2-487a-a701-1b88f42d5c83 default }" containerID=eade038cd0f63d7cc3e112fc246ee01a2710b2cd3d4dca5b46c7eb5744fd5d58 datapathConfiguration="&{false false false false false }" interface=lxc4a615bdc940d k8sPodName=monitoring/kube-prometheus-stack-grafana-844758fb74-6ndlg labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=eade038cd0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=782 ipv4=10.0.0.27 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-844758fb74-6ndlg subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=eade038cd0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=782 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/name=grafana,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.27 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-844758fb74-6ndlg subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/name=grafana;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=eade038cd0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=782 identity=6905 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/name=grafana,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.27 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-844758fb74-6ndlg oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=eade038cd0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=782 identity=6905 ipv4=10.0.0.27 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-844758fb74-6ndlg subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=eade038cd0 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=782 identity=6905 ipv4=10.0.0.27 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-844758fb74-6ndlg subsys=endpoint level=info msg="Successful endpoint creation" containerID=eade038cd0 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=782 identity=6905 ipv4=10.0.0.27 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-844758fb74-6ndlg subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=2accb43f15 endpointID=1834 k8sNamespace=monitoring k8sPodName=kube-prometheus-stack-admission-patch-r7cns subsys=daemon level=info msg="Releasing key" key="[k8s:app=kube-prometheus-stack-admission-patch k8s:app.kubernetes.io/component=prometheus-operator-webhook k8s:app.kubernetes.io/instance=kube-prometheus-stack k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator k8s:app.kubernetes.io/part-of=kube-prometheus-stack k8s:app.kubernetes.io/version=60.2.0 k8s:batch.kubernetes.io/controller-uid=059c552d-3e83-4388-b81e-5bf9c45f655c k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch k8s:chart=kube-prometheus-stack-60.2.0 k8s:controller-uid=059c552d-3e83-4388-b81e-5bf9c45f655c k8s:heritage=Helm k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring k8s:io.cilium.k8s.namespace.labels.name=monitoring k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission k8s:io.kubernetes.pod.namespace=monitoring k8s:job-name=kube-prometheus-stack-admission-patch k8s:release=kube-prometheus-stack]" subsys=allocator level=info msg="Removed endpoint" containerID=2accb43f15 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1834 identity=56763 ipv4=10.0.0.238 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-r7cns subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.55 4089dfd4-6ad9-4eb4-ae17-d9b078c04646 default }" containerID=f2b2a0fc93ab14a0e0eec22b880e4fbda32896e6f2d93ebe77826c628765f994 datapathConfiguration="&{false false false false false }" interface=lxc4c87ed52ad33 k8sPodName=local-path-storage/helper-pod-create-pvc-60d05f06-c74f-4437-808f-ec135b12b0c4 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f2b2a0fc93 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2047 ipv4=10.0.0.55 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-60d05f06-c74f-4437-808f-ec135b12b0c4 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f2b2a0fc93 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2047 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.55 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-60d05f06-c74f-4437-808f-ec135b12b0c4 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f2b2a0fc93 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2047 identity=6594 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.55 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-60d05f06-c74f-4437-808f-ec135b12b0c4 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f2b2a0fc93 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2047 identity=6594 ipv4=10.0.0.55 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-60d05f06-c74f-4437-808f-ec135b12b0c4 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f2b2a0fc93 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2047 identity=6594 ipv4=10.0.0.55 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-60d05f06-c74f-4437-808f-ec135b12b0c4 subsys=endpoint level=info msg="Successful endpoint creation" containerID=f2b2a0fc93 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2047 identity=6594 ipv4=10.0.0.55 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-60d05f06-c74f-4437-808f-ec135b12b0c4 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.2 84954b06-8e47-4c31-8e25-e8d48be16431 default }" containerID=849f731628f0dabde4e6b2b70d76b120bf5e54a0c555033013101690b2f8617f datapathConfiguration="&{false false false false false }" interface=lxc9a445356e842 k8sPodName=local-path-storage/helper-pod-create-pvc-8e270cb5-a0ae-4c4c-b5e1-c04503018480 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=849f731628 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1568 ipv4=10.0.0.2 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-8e270cb5-a0ae-4c4c-b5e1-c04503018480 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=849f731628 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1568 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.2 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-8e270cb5-a0ae-4c4c-b5e1-c04503018480 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=849f731628 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1568 identity=6594 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.2 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-8e270cb5-a0ae-4c4c-b5e1-c04503018480 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=849f731628 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1568 identity=6594 ipv4=10.0.0.2 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-8e270cb5-a0ae-4c4c-b5e1-c04503018480 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=849f731628 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1568 identity=6594 ipv4=10.0.0.2 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-8e270cb5-a0ae-4c4c-b5e1-c04503018480 subsys=endpoint level=info msg="Successful endpoint creation" containerID=849f731628 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1568 identity=6594 ipv4=10.0.0.2 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-8e270cb5-a0ae-4c4c-b5e1-c04503018480 subsys=daemon level=info msg="Delete endpoint request" containerID=f2b2a0fc93 endpointID=2047 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-60d05f06-c74f-4437-808f-ec135b12b0c4 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Delete endpoint request" containerID=849f731628 endpointID=1568 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-8e270cb5-a0ae-4c4c-b5e1-c04503018480 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=f2b2a0fc93 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2047 identity=6594 ipv4=10.0.0.55 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-60d05f06-c74f-4437-808f-ec135b12b0c4 subsys=endpoint level=info msg="Removed endpoint" containerID=849f731628 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1568 identity=6594 ipv4=10.0.0.2 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-8e270cb5-a0ae-4c4c-b5e1-c04503018480 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.149 87f9238a-7f4e-4894-b034-f0efd94192af default }" containerID=bc45f69220a8481dd2eb7bda34aaa0e1c23b30547d7492921a2265607a4528c3 datapathConfiguration="&{false false false false false }" interface=lxc0abf437e5240 k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=bc45f69220 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1800 ipv4=10.0.0.149 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=bc45f69220 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1800 identityLabels="k8s:alertmanager=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=alertmanager,k8s:app.kubernetes.io/version=0.27.0,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0" ipv4=10.0.0.149 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:alertmanager=kube-prometheus-stack-alertmanager;k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager;k8s:app.kubernetes.io/managed-by=prometheus-operator;k8s:app.kubernetes.io/name=alertmanager;k8s:app.kubernetes.io/version=0.27.0;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager;k8s:io.kubernetes.pod.namespace=monitoring;k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=bc45f69220 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1800 identity=44289 identityLabels="k8s:alertmanager=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=alertmanager,k8s:app.kubernetes.io/version=0.27.0,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0" ipv4=10.0.0.149 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=bc45f69220 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1800 identity=44289 ipv4=10.0.0.149 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=bc45f69220 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1800 identity=44289 ipv4=10.0.0.149 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=bc45f69220 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1800 identity=44289 ipv4=10.0.0.149 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.7 7bbcde3d-dd05-4ff8-8b90-f10c7b311307 default }" containerID=8de3548f407ad81e63c9d6910729536a9e6b51d60eb4af36206dc1483904138d datapathConfiguration="&{false false false false false }" interface=lxc0faeea56cf11 k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8de3548f40 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1633 ipv4=10.0.0.7 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8de3548f40 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1633 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=prometheus,k8s:app.kubernetes.io/version=2.51.2,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus,k8s:io.kubernetes.pod.namespace=monitoring,k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus,k8s:operator.prometheus.io/shard=0,k8s:prometheus=kube-prometheus-stack-prometheus,k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0" ipv4=10.0.0.7 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus;k8s:app.kubernetes.io/managed-by=prometheus-operator;k8s:app.kubernetes.io/name=prometheus;k8s:app.kubernetes.io/version=2.51.2;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus;k8s:io.kubernetes.pod.namespace=monitoring;k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus;k8s:operator.prometheus.io/shard=0;k8s:prometheus=kube-prometheus-stack-prometheus;k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8de3548f40 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1633 identity=5799 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=prometheus,k8s:app.kubernetes.io/version=2.51.2,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus,k8s:io.kubernetes.pod.namespace=monitoring,k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus,k8s:operator.prometheus.io/shard=0,k8s:prometheus=kube-prometheus-stack-prometheus,k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0" ipv4=10.0.0.7 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8de3548f40 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1633 identity=5799 ipv4=10.0.0.7 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=8de3548f40 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1633 identity=5799 ipv4=10.0.0.7 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=8de3548f40 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1633 identity=5799 ipv4=10.0.0.7 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.85 adeecd5b-b35e-405a-811c-07e7ff406e71 default }" containerID=50e48bdd2ddde417167b223b9135cedfd3e0b5b8197b8ce532f3d17112321cb2 datapathConfiguration="&{false false false false false }" interface=lxcbe6a42321373 k8sPodName=monitoring/loki-gateway-cf54cb88c-pdfnn labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=50e48bdd2d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=307 ipv4=10.0.0.85 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-pdfnn subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=50e48bdd2d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=307 identityLabels="k8s:app.kubernetes.io/component=gateway,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.85 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-pdfnn subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=gateway;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=50e48bdd2d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=307 identity=54663 identityLabels="k8s:app.kubernetes.io/component=gateway,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.85 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-pdfnn oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=50e48bdd2d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=307 identity=54663 ipv4=10.0.0.85 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-pdfnn subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.146 63af5afe-e54c-4395-a519-433f73935b61 default }" containerID=6364a1a38f9ea09cb8335a282334bd995e01f601715c1d469ef5821e52570ed8 datapathConfiguration="&{false false false false false }" interface=lxc8c647c09510f k8sPodName=monitoring/loki-results-cache-0 labels="[]" subsys=daemon sync-build=true level=info msg="Create endpoint request" addressing="&{10.0.0.184 2b187c12-0a10-4ea4-8f8b-3936491c87c6 default }" containerID=1d022f62e95ae96ea7e0787312a0a063579a5c9e510ff72d0bcc47a290706547 datapathConfiguration="&{false false false false false }" interface=lxc15ac8397cba4 k8sPodName=monitoring/loki-chunks-cache-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6364a1a38f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2198 ipv4=10.0.0.146 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="New endpoint" containerID=1d022f62e9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1474 ipv4=10.0.0.184 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1d022f62e9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1474 identityLabels="k8s:app.kubernetes.io/component=memcached-chunks-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-chunks-cache,k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0" ipv4=10.0.0.184 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6364a1a38f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2198 identityLabels="k8s:app.kubernetes.io/component=memcached-results-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-results-cache,k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0" ipv4=10.0.0.146 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=memcached-chunks-cache;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:name=memcached-chunks-cache;k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1d022f62e9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1474 identity=1200 identityLabels="k8s:app.kubernetes.io/component=memcached-chunks-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-chunks-cache,k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0" ipv4=10.0.0.184 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1d022f62e9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1474 identity=1200 ipv4=10.0.0.184 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=memcached-results-cache;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:name=memcached-results-cache;k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6364a1a38f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2198 identity=29811 identityLabels="k8s:app.kubernetes.io/component=memcached-results-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-results-cache,k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0" ipv4=10.0.0.146 ipv6= k8sPodName=monitoring/loki-results-cache-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6364a1a38f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2198 identity=29811 ipv4=10.0.0.146 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=50e48bdd2d datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=307 identity=54663 ipv4=10.0.0.85 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-pdfnn subsys=endpoint level=info msg="Successful endpoint creation" containerID=50e48bdd2d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=307 identity=54663 ipv4=10.0.0.85 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-pdfnn subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=6364a1a38f datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2198 identity=29811 ipv4=10.0.0.146 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=6364a1a38f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2198 identity=29811 ipv4=10.0.0.146 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=1d022f62e9 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1474 identity=1200 ipv4=10.0.0.184 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=1d022f62e9 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1474 identity=1200 ipv4=10.0.0.184 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.248 5bf1f409-14f1-4ac7-92d6-ca7c36b50b31 default }" containerID=de42bd3cb71807ec350f09c8d6dbbb6be58c5242f2d80de4fd15ab6df1129fcc datapathConfiguration="&{false false false false false }" interface=lxc6c86a1b81751 k8sPodName=local-path-storage/helper-pod-create-pvc-4ee06dec-3b4f-4013-9752-c9dafa072b35 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=de42bd3cb7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2685 ipv4=10.0.0.248 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-4ee06dec-3b4f-4013-9752-c9dafa072b35 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=de42bd3cb7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2685 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.248 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-4ee06dec-3b4f-4013-9752-c9dafa072b35 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=de42bd3cb7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2685 identity=6594 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.248 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-4ee06dec-3b4f-4013-9752-c9dafa072b35 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=de42bd3cb7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2685 identity=6594 ipv4=10.0.0.248 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-4ee06dec-3b4f-4013-9752-c9dafa072b35 subsys=endpoint level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=de42bd3cb7 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2685 identity=6594 ipv4=10.0.0.248 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-4ee06dec-3b4f-4013-9752-c9dafa072b35 subsys=endpoint level=info msg="Successful endpoint creation" containerID=de42bd3cb7 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2685 identity=6594 ipv4=10.0.0.248 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-4ee06dec-3b4f-4013-9752-c9dafa072b35 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.222 0624beb0-af33-4d2f-ac19-0edb2e94b357 default }" containerID=e4e75111915a1021b6119e88ef902e1691d96d73ce5f922e1ef8b1bfa5ba231b datapathConfiguration="&{false false false false false }" interface=lxcb5f3627b1e72 k8sPodName=monitoring/vector-spmnh labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e4e7511191 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3657 ipv4=10.0.0.222 ipv6= k8sPodName=monitoring/vector-spmnh subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e4e7511191 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3657 identityLabels="k8s:app.kubernetes.io/component=Agent,k8s:app.kubernetes.io/instance=vector,k8s:app.kubernetes.io/name=vector,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=vector,k8s:io.kubernetes.pod.namespace=monitoring,k8s:vector.dev/exclude=true" ipv4=10.0.0.222 ipv6= k8sPodName=monitoring/vector-spmnh subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=Agent;k8s:app.kubernetes.io/instance=vector;k8s:app.kubernetes.io/name=vector;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=vector;k8s:io.kubernetes.pod.namespace=monitoring;k8s:vector.dev/exclude=true;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e4e7511191 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3657 identity=33825 identityLabels="k8s:app.kubernetes.io/component=Agent,k8s:app.kubernetes.io/instance=vector,k8s:app.kubernetes.io/name=vector,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=vector,k8s:io.kubernetes.pod.namespace=monitoring,k8s:vector.dev/exclude=true" ipv4=10.0.0.222 ipv6= k8sPodName=monitoring/vector-spmnh oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e4e7511191 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3657 identity=33825 ipv4=10.0.0.222 ipv6= k8sPodName=monitoring/vector-spmnh subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=e4e7511191 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3657 identity=33825 ipv4=10.0.0.222 ipv6= k8sPodName=monitoring/vector-spmnh subsys=endpoint level=info msg="Successful endpoint creation" containerID=e4e7511191 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3657 identity=33825 ipv4=10.0.0.222 ipv6= k8sPodName=monitoring/vector-spmnh subsys=daemon level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=de42bd3cb7 endpointID=2685 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-4ee06dec-3b4f-4013-9752-c9dafa072b35 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=de42bd3cb7 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2685 identity=6594 ipv4=10.0.0.248 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-4ee06dec-3b4f-4013-9752-c9dafa072b35 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.168 289320f6-100c-49cd-b852-ccdb418f9101 default }" containerID=1c0556201ef5501b1364a6486623e0f654062bc90080631d7c78318c1bbb88fb datapathConfiguration="&{false false false false false }" interface=lxcf5fa8fe19805 k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-rpbpd labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1c0556201e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=967 ipv4=10.0.0.168 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-rpbpd subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1c0556201e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=967 identityLabels="k8s:app.kubernetes.io/instance=prometheus-pushgateway,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=prometheus-pushgateway,k8s:app.kubernetes.io/version=v1.8.0,k8s:helm.sh/chart=prometheus-pushgateway-2.13.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.168 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-rpbpd subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=1c0556201e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=967 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.168 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-rpbpd line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=prometheus-pushgateway;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=prometheus-pushgateway;k8s:app.kubernetes.io/version=v1.8.0;k8s:helm.sh/chart=prometheus-pushgateway-2.13.0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1c0556201e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=967 identity=58389 identityLabels="k8s:app.kubernetes.io/instance=prometheus-pushgateway,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=prometheus-pushgateway,k8s:app.kubernetes.io/version=v1.8.0,k8s:helm.sh/chart=prometheus-pushgateway-2.13.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.168 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-rpbpd oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1c0556201e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=967 identity=58389 ipv4=10.0.0.168 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-rpbpd subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=1c0556201e datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=967 identity=58389 ipv4=10.0.0.168 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-rpbpd subsys=endpoint level=info msg="Successful endpoint creation" containerID=1c0556201e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=967 identity=58389 ipv4=10.0.0.168 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-rpbpd subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.233 f1ad1e23-2da2-4570-989f-c42b634d71f7 default }" containerID=00b1e0839f57e31a929d51d1ea68ea37f21a8ab1baeca5b039f607227b2aae81 datapathConfiguration="&{false false false false false }" interface=lxc731b555a71d7 k8sPodName=monitoring/loki-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=00b1e0839f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1678 ipv4=10.0.0.233 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=00b1e0839f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1678 identityLabels="k8s:app.kubernetes.io/component=single-binary,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:app.kubernetes.io/part-of=memberlist,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=loki-0" ipv4=10.0.0.233 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=single-binary;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:app.kubernetes.io/part-of=memberlist;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:statefulset.kubernetes.io/pod-name=loki-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=00b1e0839f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1678 identity=16248 identityLabels="k8s:app.kubernetes.io/component=single-binary,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:app.kubernetes.io/part-of=memberlist,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=loki-0" ipv4=10.0.0.233 ipv6= k8sPodName=monitoring/loki-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=00b1e0839f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1678 identity=16248 ipv4=10.0.0.233 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=00b1e0839f datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1678 identity=16248 ipv4=10.0.0.233 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=00b1e0839f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1678 identity=16248 ipv4=10.0.0.233 ipv6= k8sPodName=monitoring/loki-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.66 9a560242-fe9e-4599-97b1-c287c26e16e5 default }" containerID=f0b19f4aa81cd3ce2bb6e95e8f9bc0fed4836490a4697760e25d438ef2a7b4e6 datapathConfiguration="&{false false false false false }" interface=lxcdab2e282a6fc k8sPodName=openstack/memcached-memcached-cf56b6468-b8sdq labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f0b19f4aa8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1094 ipv4=10.0.0.66 ipv6= k8sPodName=openstack/memcached-memcached-cf56b6468-b8sdq subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f0b19f4aa8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1094 identityLabels="k8s:application=memcached,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=memcached" ipv4=10.0.0.66 ipv6= k8sPodName=openstack/memcached-memcached-cf56b6468-b8sdq subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=memcached;k8s:component=server;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=memcached;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f0b19f4aa8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1094 identity=11019 identityLabels="k8s:application=memcached,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=memcached" ipv4=10.0.0.66 ipv6= k8sPodName=openstack/memcached-memcached-cf56b6468-b8sdq oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f0b19f4aa8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1094 identity=11019 ipv4=10.0.0.66 ipv6= k8sPodName=openstack/memcached-memcached-cf56b6468-b8sdq subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f0b19f4aa8 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1094 identity=11019 ipv4=10.0.0.66 ipv6= k8sPodName=openstack/memcached-memcached-cf56b6468-b8sdq subsys=endpoint level=info msg="Successful endpoint creation" containerID=f0b19f4aa8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1094 identity=11019 ipv4=10.0.0.66 ipv6= k8sPodName=openstack/memcached-memcached-cf56b6468-b8sdq subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.48 07e0bc76-7f36-4193-af8b-4b41e65000f6 default }" containerID=ed94a4ebbaec6038b0d8895351f55ccbaa8e0f5c5aff5198451d4073d8985682 datapathConfiguration="&{false false false false false }" interface=lxce503424ea999 k8sPodName=local-path-storage/helper-pod-create-pvc-09317c7b-3d6b-4123-8bab-b856ee3a9394 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ed94a4ebba datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2072 ipv4=10.0.0.48 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-09317c7b-3d6b-4123-8bab-b856ee3a9394 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ed94a4ebba datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2072 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.48 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-09317c7b-3d6b-4123-8bab-b856ee3a9394 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ed94a4ebba datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2072 identity=6594 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.48 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-09317c7b-3d6b-4123-8bab-b856ee3a9394 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ed94a4ebba datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2072 identity=6594 ipv4=10.0.0.48 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-09317c7b-3d6b-4123-8bab-b856ee3a9394 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ed94a4ebba datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2072 identity=6594 ipv4=10.0.0.48 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-09317c7b-3d6b-4123-8bab-b856ee3a9394 subsys=endpoint level=info msg="Successful endpoint creation" containerID=ed94a4ebba datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2072 identity=6594 ipv4=10.0.0.48 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-09317c7b-3d6b-4123-8bab-b856ee3a9394 subsys=daemon level=info msg="Delete endpoint request" containerID=ed94a4ebba endpointID=2072 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-09317c7b-3d6b-4123-8bab-b856ee3a9394 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=ed94a4ebba datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2072 identity=6594 ipv4=10.0.0.48 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-09317c7b-3d6b-4123-8bab-b856ee3a9394 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.61 5f7da36a-912a-4e55-9e2a-1110d34e04c2 default }" containerID=d0097480e69021710d18e7390ca1755a17a4cd60298d22a68c90086c42cf9a5b datapathConfiguration="&{false false false false false }" interface=lxccaabedcefe78 k8sPodName=openstack/rabbitmq-keystone-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d0097480e6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1861 ipv4=10.0.0.61 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d0097480e6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1861 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-keystone,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0" ipv4=10.0.0.61 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-keystone;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d0097480e6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1861 identity=547 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-keystone,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0" ipv4=10.0.0.61 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d0097480e6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1861 identity=547 ipv4=10.0.0.61 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=d0097480e6 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1861 identity=547 ipv4=10.0.0.61 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=d0097480e6 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1861 identity=547 ipv4=10.0.0.61 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.135 83c8d522-f2b6-4684-8323-f6cf9fe625d4 default }" containerID=1dcf51ce09f27cdf1c48407cdd939f405273af4b42e79d6a9efa37bea0c33e79 datapathConfiguration="&{false false false false false }" interface=lxc81de05c1574b k8sPodName=openstack/keystone-api-5957955c65-hn6md labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1dcf51ce09 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1482 ipv4=10.0.0.135 ipv6= k8sPodName=openstack/keystone-api-5957955c65-hn6md subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1dcf51ce09 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1482 identityLabels="k8s:application=keystone,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=keystone" ipv4=10.0.0.135 ipv6= k8sPodName=openstack/keystone-api-5957955c65-hn6md subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=keystone;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=1dcf51ce09 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1482 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.135 ipv6= k8sPodName=openstack/keystone-api-5957955c65-hn6md line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=1dcf51ce09 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1482 identity=44180 identityLabels="k8s:application=keystone,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=keystone" ipv4=10.0.0.135 ipv6= k8sPodName=openstack/keystone-api-5957955c65-hn6md oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1dcf51ce09 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1482 identity=44180 ipv4=10.0.0.135 ipv6= k8sPodName=openstack/keystone-api-5957955c65-hn6md subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=1dcf51ce09 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1482 identity=44180 ipv4=10.0.0.135 ipv6= k8sPodName=openstack/keystone-api-5957955c65-hn6md subsys=endpoint level=info msg="Successful endpoint creation" containerID=1dcf51ce09 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1482 identity=44180 ipv4=10.0.0.135 ipv6= k8sPodName=openstack/keystone-api-5957955c65-hn6md subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.22 e673b8aa-5746-4126-b6df-ffbd4545c5b9 default }" containerID=b3651208e0a87d3fb141b7209110c18530ea7b17445894f5be99fa3ee8ca777e datapathConfiguration="&{false false false false false }" interface=lxca6ae677eb793 k8sPodName=openstack/keystone-credential-setup-kcjhp labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b3651208e0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=192 ipv4=10.0.0.22 ipv6= k8sPodName=openstack/keystone-credential-setup-kcjhp subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b3651208e0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=192 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=547664d0-2137-4bf8-8894-ad8e70c41613,k8s:batch.kubernetes.io/job-name=keystone-credential-setup,k8s:component=credential-setup,k8s:controller-uid=547664d0-2137-4bf8-8894-ad8e70c41613,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-credential-setup,k8s:release_group=keystone" ipv4=10.0.0.22 ipv6= k8sPodName=openstack/keystone-credential-setup-kcjhp subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=547664d0-2137-4bf8-8894-ad8e70c41613;k8s:batch.kubernetes.io/job-name=keystone-credential-setup;k8s:component=credential-setup;k8s:controller-uid=547664d0-2137-4bf8-8894-ad8e70c41613;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-credential-setup;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b3651208e0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=192 identity=50051 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=547664d0-2137-4bf8-8894-ad8e70c41613,k8s:batch.kubernetes.io/job-name=keystone-credential-setup,k8s:component=credential-setup,k8s:controller-uid=547664d0-2137-4bf8-8894-ad8e70c41613,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-credential-setup,k8s:release_group=keystone" ipv4=10.0.0.22 ipv6= k8sPodName=openstack/keystone-credential-setup-kcjhp oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b3651208e0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=192 identity=50051 ipv4=10.0.0.22 ipv6= k8sPodName=openstack/keystone-credential-setup-kcjhp subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b3651208e0 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=192 identity=50051 ipv4=10.0.0.22 ipv6= k8sPodName=openstack/keystone-credential-setup-kcjhp subsys=endpoint level=info msg="Successful endpoint creation" containerID=b3651208e0 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=192 identity=50051 ipv4=10.0.0.22 ipv6= k8sPodName=openstack/keystone-credential-setup-kcjhp subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=b3651208e0 endpointID=192 k8sNamespace=openstack k8sPodName=keystone-credential-setup-kcjhp subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=547664d0-2137-4bf8-8894-ad8e70c41613 k8s:batch.kubernetes.io/job-name=keystone-credential-setup k8s:component=credential-setup k8s:controller-uid=547664d0-2137-4bf8-8894-ad8e70c41613 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-credential-setup k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=b3651208e0 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=192 identity=50051 ipv4=10.0.0.22 ipv6= k8sPodName=openstack/keystone-credential-setup-kcjhp subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.117 37ba6f9f-86ff-443d-b9bb-4cd448857326 default }" containerID=d7fc31eeb904fc2cf98a137b519a897cf30d96ffc01111230a10ee7783550718 datapathConfiguration="&{false false false false false }" interface=lxc71fad3b88b33 k8sPodName=openstack/keystone-db-init-8ffvg labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d7fc31eeb9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1976 ipv4=10.0.0.117 ipv6= k8sPodName=openstack/keystone-db-init-8ffvg subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d7fc31eeb9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1976 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=09caa5c9-3b92-4b86-a4d8-ce941e143247,k8s:batch.kubernetes.io/job-name=keystone-db-init,k8s:component=db-init,k8s:controller-uid=09caa5c9-3b92-4b86-a4d8-ce941e143247,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-init,k8s:release_group=keystone" ipv4=10.0.0.117 ipv6= k8sPodName=openstack/keystone-db-init-8ffvg subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=09caa5c9-3b92-4b86-a4d8-ce941e143247;k8s:batch.kubernetes.io/job-name=keystone-db-init;k8s:component=db-init;k8s:controller-uid=09caa5c9-3b92-4b86-a4d8-ce941e143247;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-db-init;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d7fc31eeb9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1976 identity=15314 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=09caa5c9-3b92-4b86-a4d8-ce941e143247,k8s:batch.kubernetes.io/job-name=keystone-db-init,k8s:component=db-init,k8s:controller-uid=09caa5c9-3b92-4b86-a4d8-ce941e143247,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-init,k8s:release_group=keystone" ipv4=10.0.0.117 ipv6= k8sPodName=openstack/keystone-db-init-8ffvg oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=d7fc31eeb9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1976 identity=15314 ipv4=10.0.0.117 ipv6= k8sPodName=openstack/keystone-db-init-8ffvg subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d7fc31eeb9 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1976 identity=15314 ipv4=10.0.0.117 ipv6= k8sPodName=openstack/keystone-db-init-8ffvg subsys=endpoint level=info msg="Successful endpoint creation" containerID=d7fc31eeb9 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1976 identity=15314 ipv4=10.0.0.117 ipv6= k8sPodName=openstack/keystone-db-init-8ffvg subsys=daemon level=info msg="Delete endpoint request" containerID=d7fc31eeb9 endpointID=1976 k8sNamespace=openstack k8sPodName=keystone-db-init-8ffvg subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=09caa5c9-3b92-4b86-a4d8-ce941e143247 k8s:batch.kubernetes.io/job-name=keystone-db-init k8s:component=db-init k8s:controller-uid=09caa5c9-3b92-4b86-a4d8-ce941e143247 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-db-init k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=d7fc31eeb9 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1976 identity=15314 ipv4=10.0.0.117 ipv6= k8sPodName=openstack/keystone-db-init-8ffvg subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.102 a0e735a8-2d30-4fcd-966c-7a3316e23e13 default }" containerID=9f1584cf33aa0d92e451b36aadfea677ff97c8010dcd0559d29c7b202649ffbf datapathConfiguration="&{false false false false false }" interface=lxcb14673195263 k8sPodName=openstack/keystone-fernet-setup-7npgp labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9f1584cf33 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1989 ipv4=10.0.0.102 ipv6= k8sPodName=openstack/keystone-fernet-setup-7npgp subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9f1584cf33 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1989 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=7edaaa24-321b-4093-a0aa-d1efa6cc421f,k8s:batch.kubernetes.io/job-name=keystone-fernet-setup,k8s:component=fernet-setup,k8s:controller-uid=7edaaa24-321b-4093-a0aa-d1efa6cc421f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-setup,k8s:release_group=keystone" ipv4=10.0.0.102 ipv6= k8sPodName=openstack/keystone-fernet-setup-7npgp subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=9f1584cf33 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1989 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.102 ipv6= k8sPodName=openstack/keystone-fernet-setup-7npgp line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=7edaaa24-321b-4093-a0aa-d1efa6cc421f;k8s:batch.kubernetes.io/job-name=keystone-fernet-setup;k8s:component=fernet-setup;k8s:controller-uid=7edaaa24-321b-4093-a0aa-d1efa6cc421f;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-fernet-setup;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9f1584cf33 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1989 identity=7206 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=7edaaa24-321b-4093-a0aa-d1efa6cc421f,k8s:batch.kubernetes.io/job-name=keystone-fernet-setup,k8s:component=fernet-setup,k8s:controller-uid=7edaaa24-321b-4093-a0aa-d1efa6cc421f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-setup,k8s:release_group=keystone" ipv4=10.0.0.102 ipv6= k8sPodName=openstack/keystone-fernet-setup-7npgp oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9f1584cf33 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1989 identity=7206 ipv4=10.0.0.102 ipv6= k8sPodName=openstack/keystone-fernet-setup-7npgp subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=9f1584cf33 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1989 identity=7206 ipv4=10.0.0.102 ipv6= k8sPodName=openstack/keystone-fernet-setup-7npgp subsys=endpoint level=info msg="Successful endpoint creation" containerID=9f1584cf33 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1989 identity=7206 ipv4=10.0.0.102 ipv6= k8sPodName=openstack/keystone-fernet-setup-7npgp subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=9f1584cf33 endpointID=1989 k8sNamespace=openstack k8sPodName=keystone-fernet-setup-7npgp subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=7edaaa24-321b-4093-a0aa-d1efa6cc421f k8s:batch.kubernetes.io/job-name=keystone-fernet-setup k8s:component=fernet-setup k8s:controller-uid=7edaaa24-321b-4093-a0aa-d1efa6cc421f k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-fernet-setup k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=9f1584cf33 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1989 identity=7206 ipv4=10.0.0.102 ipv6= k8sPodName=openstack/keystone-fernet-setup-7npgp subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.136 f4697b58-4f10-4178-9862-ec83979a88d5 default }" containerID=c70e478923493516cfc0d156eea0e461c18e42de4f8221761d8c5ae2eadb8af1 datapathConfiguration="&{false false false false false }" interface=lxc9b996bd45d80 k8sPodName=openstack/keystone-db-sync-zzvgk labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c70e478923 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3448 ipv4=10.0.0.136 ipv6= k8sPodName=openstack/keystone-db-sync-zzvgk subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c70e478923 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3448 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=8ce099af-9050-44f5-bc7b-9badf517a2ff,k8s:batch.kubernetes.io/job-name=keystone-db-sync,k8s:component=db-sync,k8s:controller-uid=8ce099af-9050-44f5-bc7b-9badf517a2ff,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-sync,k8s:release_group=keystone" ipv4=10.0.0.136 ipv6= k8sPodName=openstack/keystone-db-sync-zzvgk subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=8ce099af-9050-44f5-bc7b-9badf517a2ff;k8s:batch.kubernetes.io/job-name=keystone-db-sync;k8s:component=db-sync;k8s:controller-uid=8ce099af-9050-44f5-bc7b-9badf517a2ff;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-db-sync;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c70e478923 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3448 identity=45143 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=8ce099af-9050-44f5-bc7b-9badf517a2ff,k8s:batch.kubernetes.io/job-name=keystone-db-sync,k8s:component=db-sync,k8s:controller-uid=8ce099af-9050-44f5-bc7b-9badf517a2ff,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-sync,k8s:release_group=keystone" ipv4=10.0.0.136 ipv6= k8sPodName=openstack/keystone-db-sync-zzvgk oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=c70e478923 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3448 identity=45143 ipv4=10.0.0.136 ipv6= k8sPodName=openstack/keystone-db-sync-zzvgk subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c70e478923 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3448 identity=45143 ipv4=10.0.0.136 ipv6= k8sPodName=openstack/keystone-db-sync-zzvgk subsys=endpoint level=info msg="Successful endpoint creation" containerID=c70e478923 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3448 identity=45143 ipv4=10.0.0.136 ipv6= k8sPodName=openstack/keystone-db-sync-zzvgk subsys=daemon level=info msg="Delete endpoint request" containerID=c70e478923 endpointID=3448 k8sNamespace=openstack k8sPodName=keystone-db-sync-zzvgk subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=8ce099af-9050-44f5-bc7b-9badf517a2ff k8s:batch.kubernetes.io/job-name=keystone-db-sync k8s:component=db-sync k8s:controller-uid=8ce099af-9050-44f5-bc7b-9badf517a2ff k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-db-sync k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=c70e478923 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3448 identity=45143 ipv4=10.0.0.136 ipv6= k8sPodName=openstack/keystone-db-sync-zzvgk subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.64 21580df3-3f0d-4169-a6b1-a7e8a889feda default }" containerID=33ade9f1a4b0ecfdbdf11d864d54be0791db33132b108f5dab7e340cf5c237cd datapathConfiguration="&{false false false false false }" interface=lxc8eb3c09931a8 k8sPodName=openstack/keystone-rabbit-init-jhwkn labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=33ade9f1a4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=168 ipv4=10.0.0.64 ipv6= k8sPodName=openstack/keystone-rabbit-init-jhwkn subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=33ade9f1a4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=168 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=33e4c122-756f-4ad7-8838-8445516d6054,k8s:batch.kubernetes.io/job-name=keystone-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=33e4c122-756f-4ad7-8838-8445516d6054,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-rabbit-init,k8s:release_group=keystone" ipv4=10.0.0.64 ipv6= k8sPodName=openstack/keystone-rabbit-init-jhwkn subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=33e4c122-756f-4ad7-8838-8445516d6054;k8s:batch.kubernetes.io/job-name=keystone-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=33e4c122-756f-4ad7-8838-8445516d6054;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-rabbit-init;k8s:release_group=keystone;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=33ade9f1a4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=168 identity=28277 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=33e4c122-756f-4ad7-8838-8445516d6054,k8s:batch.kubernetes.io/job-name=keystone-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=33e4c122-756f-4ad7-8838-8445516d6054,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-rabbit-init,k8s:release_group=keystone" ipv4=10.0.0.64 ipv6= k8sPodName=openstack/keystone-rabbit-init-jhwkn oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=33ade9f1a4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=168 identity=28277 ipv4=10.0.0.64 ipv6= k8sPodName=openstack/keystone-rabbit-init-jhwkn subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=33ade9f1a4 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=168 identity=28277 ipv4=10.0.0.64 ipv6= k8sPodName=openstack/keystone-rabbit-init-jhwkn subsys=endpoint level=info msg="Successful endpoint creation" containerID=33ade9f1a4 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=168 identity=28277 ipv4=10.0.0.64 ipv6= k8sPodName=openstack/keystone-rabbit-init-jhwkn subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=33ade9f1a4 endpointID=168 k8sNamespace=openstack k8sPodName=keystone-rabbit-init-jhwkn subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=33e4c122-756f-4ad7-8838-8445516d6054 k8s:batch.kubernetes.io/job-name=keystone-rabbit-init k8s:component=rabbit-init k8s:controller-uid=33e4c122-756f-4ad7-8838-8445516d6054 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-rabbit-init k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=33ade9f1a4 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=168 identity=28277 ipv4=10.0.0.64 ipv6= k8sPodName=openstack/keystone-rabbit-init-jhwkn subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.109 5cacb5d9-c84c-4983-881a-93bee5ccf0ba default }" containerID=8ea1220fd2cc312763c7fbe251bdac5f6d3fc9dbe441a789e9555fdfff6cc7a4 datapathConfiguration="&{false false false false false }" interface=lxcba7b6c3ee76f k8sPodName=openstack/keystone-domain-manage-tlcwt labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8ea1220fd2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=579 ipv4=10.0.0.109 ipv6= k8sPodName=openstack/keystone-domain-manage-tlcwt subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8ea1220fd2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=579 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=a70f8913-a246-4450-98c9-61d7fd173719,k8s:batch.kubernetes.io/job-name=keystone-domain-manage,k8s:component=domain-manage,k8s:controller-uid=a70f8913-a246-4450-98c9-61d7fd173719,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-domain-manage,k8s:release_group=keystone" ipv4=10.0.0.109 ipv6= k8sPodName=openstack/keystone-domain-manage-tlcwt subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=8ea1220fd2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=579 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.109 ipv6= k8sPodName=openstack/keystone-domain-manage-tlcwt line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=a70f8913-a246-4450-98c9-61d7fd173719;k8s:batch.kubernetes.io/job-name=keystone-domain-manage;k8s:component=domain-manage;k8s:controller-uid=a70f8913-a246-4450-98c9-61d7fd173719;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-domain-manage;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8ea1220fd2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=579 identity=12865 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=a70f8913-a246-4450-98c9-61d7fd173719,k8s:batch.kubernetes.io/job-name=keystone-domain-manage,k8s:component=domain-manage,k8s:controller-uid=a70f8913-a246-4450-98c9-61d7fd173719,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-domain-manage,k8s:release_group=keystone" ipv4=10.0.0.109 ipv6= k8sPodName=openstack/keystone-domain-manage-tlcwt oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8ea1220fd2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=579 identity=12865 ipv4=10.0.0.109 ipv6= k8sPodName=openstack/keystone-domain-manage-tlcwt subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=8ea1220fd2 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=579 identity=12865 ipv4=10.0.0.109 ipv6= k8sPodName=openstack/keystone-domain-manage-tlcwt subsys=endpoint level=info msg="Successful endpoint creation" containerID=8ea1220fd2 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=579 identity=12865 ipv4=10.0.0.109 ipv6= k8sPodName=openstack/keystone-domain-manage-tlcwt subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=8ea1220fd2 endpointID=579 k8sNamespace=openstack k8sPodName=keystone-domain-manage-tlcwt subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=a70f8913-a246-4450-98c9-61d7fd173719 k8s:batch.kubernetes.io/job-name=keystone-domain-manage k8s:component=domain-manage k8s:controller-uid=a70f8913-a246-4450-98c9-61d7fd173719 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-domain-manage k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=8ea1220fd2 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=579 identity=12865 ipv4=10.0.0.109 ipv6= k8sPodName=openstack/keystone-domain-manage-tlcwt subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.97 35b0ca0c-a0b1-49fd-949a-bf06bb800d79 default }" containerID=33959ac22a761c439779bd70cfd37766a3b2478173085714144d1d6fd77b7f72 datapathConfiguration="&{false false false false false }" interface=lxc5d38fd1da0d2 k8sPodName=openstack/keystone-bootstrap-qswbf labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=33959ac22a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2323 ipv4=10.0.0.97 ipv6= k8sPodName=openstack/keystone-bootstrap-qswbf subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=33959ac22a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2323 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=83049e72-074c-4b50-807c-624e7238a5c4,k8s:batch.kubernetes.io/job-name=keystone-bootstrap,k8s:component=bootstrap,k8s:controller-uid=83049e72-074c-4b50-807c-624e7238a5c4,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-bootstrap,k8s:release_group=keystone" ipv4=10.0.0.97 ipv6= k8sPodName=openstack/keystone-bootstrap-qswbf subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=83049e72-074c-4b50-807c-624e7238a5c4;k8s:batch.kubernetes.io/job-name=keystone-bootstrap;k8s:component=bootstrap;k8s:controller-uid=83049e72-074c-4b50-807c-624e7238a5c4;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-bootstrap;k8s:release_group=keystone;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=33959ac22a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2323 identity=30041 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=83049e72-074c-4b50-807c-624e7238a5c4,k8s:batch.kubernetes.io/job-name=keystone-bootstrap,k8s:component=bootstrap,k8s:controller-uid=83049e72-074c-4b50-807c-624e7238a5c4,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-bootstrap,k8s:release_group=keystone" ipv4=10.0.0.97 ipv6= k8sPodName=openstack/keystone-bootstrap-qswbf oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=33959ac22a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2323 identity=30041 ipv4=10.0.0.97 ipv6= k8sPodName=openstack/keystone-bootstrap-qswbf subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=33959ac22a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2323 identity=30041 ipv4=10.0.0.97 ipv6= k8sPodName=openstack/keystone-bootstrap-qswbf subsys=endpoint level=info msg="Successful endpoint creation" containerID=33959ac22a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2323 identity=30041 ipv4=10.0.0.97 ipv6= k8sPodName=openstack/keystone-bootstrap-qswbf subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=33959ac22a endpointID=2323 k8sNamespace=openstack k8sPodName=keystone-bootstrap-qswbf subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=83049e72-074c-4b50-807c-624e7238a5c4 k8s:batch.kubernetes.io/job-name=keystone-bootstrap k8s:component=bootstrap k8s:controller-uid=83049e72-074c-4b50-807c-624e7238a5c4 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-bootstrap k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=33959ac22a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2323 identity=30041 ipv4=10.0.0.97 ipv6= k8sPodName=openstack/keystone-bootstrap-qswbf subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.45 04dd9593-0a0e-4cd6-8ca1-ca4c4329fca7 default }" containerID=4b92d7f838e3ce3b3dd37528e2e28b782654c618fe68c490a477c1a405ed6929 datapathConfiguration="&{false false false false false }" interface=lxc9e748586ac87 k8sPodName=local-path-storage/helper-pod-create-pvc-2ebff0f0-2aa5-4555-9b14-3e0be59a0c0e labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4b92d7f838 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2359 ipv4=10.0.0.45 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-2ebff0f0-2aa5-4555-9b14-3e0be59a0c0e subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4b92d7f838 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2359 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.45 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-2ebff0f0-2aa5-4555-9b14-3e0be59a0c0e subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4b92d7f838 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2359 identity=6594 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.45 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-2ebff0f0-2aa5-4555-9b14-3e0be59a0c0e oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4b92d7f838 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2359 identity=6594 ipv4=10.0.0.45 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-2ebff0f0-2aa5-4555-9b14-3e0be59a0c0e subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=4b92d7f838 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2359 identity=6594 ipv4=10.0.0.45 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-2ebff0f0-2aa5-4555-9b14-3e0be59a0c0e subsys=endpoint level=info msg="Successful endpoint creation" containerID=4b92d7f838 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2359 identity=6594 ipv4=10.0.0.45 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-2ebff0f0-2aa5-4555-9b14-3e0be59a0c0e subsys=daemon level=info msg="Delete endpoint request" containerID=4b92d7f838 endpointID=2359 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-2ebff0f0-2aa5-4555-9b14-3e0be59a0c0e subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=4b92d7f838 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2359 identity=6594 ipv4=10.0.0.45 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-2ebff0f0-2aa5-4555-9b14-3e0be59a0c0e subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.179 718407f2-7149-4d3b-a327-7fbd6d12725d default }" containerID=9e9094643274a97eb115e1789606077619281c99eb56fba4a1a2ed19a091e77a datapathConfiguration="&{false false false false false }" interface=lxcc59b44fdec71 k8sPodName=openstack/rabbitmq-barbican-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9e90946432 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=122 ipv4=10.0.0.179 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9e90946432 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=122 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-barbican,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0" ipv4=10.0.0.179 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-barbican;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9e90946432 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=122 identity=41090 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-barbican,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0" ipv4=10.0.0.179 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9e90946432 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=122 identity=41090 ipv4=10.0.0.179 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=9e90946432 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=122 identity=41090 ipv4=10.0.0.179 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=9e90946432 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=122 identity=41090 ipv4=10.0.0.179 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.235 fa8ba836-c537-4f08-a5db-ae4b080d30e2 default }" containerID=028188e177d01d5e5571f3c16947f6df520aa4d719c78535f484221b8f32de0c datapathConfiguration="&{false false false false false }" interface=lxc9c69f8c63fb8 k8sPodName=openstack/barbican-api-dcf74ff7b-z6469 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=028188e177 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2723 ipv4=10.0.0.235 ipv6= k8sPodName=openstack/barbican-api-dcf74ff7b-z6469 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=028188e177 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2723 identityLabels="k8s:application=barbican,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=barbican" ipv4=10.0.0.235 ipv6= k8sPodName=openstack/barbican-api-dcf74ff7b-z6469 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=028188e177 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2723 identity=5391 identityLabels="k8s:application=barbican,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=barbican" ipv4=10.0.0.235 ipv6= k8sPodName=openstack/barbican-api-dcf74ff7b-z6469 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=028188e177 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2723 identity=5391 ipv4=10.0.0.235 ipv6= k8sPodName=openstack/barbican-api-dcf74ff7b-z6469 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.26 0cb1d2d0-a74d-4d30-b0c1-05b6a7623d84 default }" containerID=d2c2778317d1bd5c31dd8f54050a85eb510a4286a0558e23384ef954564cc5f1 datapathConfiguration="&{false false false false false }" interface=lxcabcc90603aea k8sPodName=openstack/barbican-db-init-jlwtg labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d2c2778317 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1183 ipv4=10.0.0.26 ipv6= k8sPodName=openstack/barbican-db-init-jlwtg subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d2c2778317 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1183 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=033fa435-ff7e-409b-96ad-29fc506fefe1,k8s:batch.kubernetes.io/job-name=barbican-db-init,k8s:component=db-init,k8s:controller-uid=033fa435-ff7e-409b-96ad-29fc506fefe1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-init,k8s:release_group=barbican" ipv4=10.0.0.26 ipv6= k8sPodName=openstack/barbican-db-init-jlwtg subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=033fa435-ff7e-409b-96ad-29fc506fefe1;k8s:batch.kubernetes.io/job-name=barbican-db-init;k8s:component=db-init;k8s:controller-uid=033fa435-ff7e-409b-96ad-29fc506fefe1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-db-init;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d2c2778317 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1183 identity=29871 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=033fa435-ff7e-409b-96ad-29fc506fefe1,k8s:batch.kubernetes.io/job-name=barbican-db-init,k8s:component=db-init,k8s:controller-uid=033fa435-ff7e-409b-96ad-29fc506fefe1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-init,k8s:release_group=barbican" ipv4=10.0.0.26 ipv6= k8sPodName=openstack/barbican-db-init-jlwtg oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d2c2778317 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1183 identity=29871 ipv4=10.0.0.26 ipv6= k8sPodName=openstack/barbican-db-init-jlwtg subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=028188e177 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2723 identity=5391 ipv4=10.0.0.235 ipv6= k8sPodName=openstack/barbican-api-dcf74ff7b-z6469 subsys=endpoint level=info msg="Successful endpoint creation" containerID=028188e177 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2723 identity=5391 ipv4=10.0.0.235 ipv6= k8sPodName=openstack/barbican-api-dcf74ff7b-z6469 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=d2c2778317 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1183 identity=29871 ipv4=10.0.0.26 ipv6= k8sPodName=openstack/barbican-db-init-jlwtg subsys=endpoint level=info msg="Successful endpoint creation" containerID=d2c2778317 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1183 identity=29871 ipv4=10.0.0.26 ipv6= k8sPodName=openstack/barbican-db-init-jlwtg subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=d2c2778317 endpointID=1183 k8sNamespace=openstack k8sPodName=barbican-db-init-jlwtg subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=033fa435-ff7e-409b-96ad-29fc506fefe1 k8s:batch.kubernetes.io/job-name=barbican-db-init k8s:component=db-init k8s:controller-uid=033fa435-ff7e-409b-96ad-29fc506fefe1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-db-init k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=d2c2778317 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1183 identity=29871 ipv4=10.0.0.26 ipv6= k8sPodName=openstack/barbican-db-init-jlwtg subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.19 d230261a-8d8e-4985-bf05-9bb6c7ccdf87 default }" containerID=ee2b5385895e051090ec2b2030ab84837db52fc3a9ba604e2c656945e95c804a datapathConfiguration="&{false false false false false }" interface=lxc576da4b63049 k8sPodName=openstack/barbican-db-sync-vzm28 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ee2b538589 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2544 ipv4=10.0.0.19 ipv6= k8sPodName=openstack/barbican-db-sync-vzm28 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ee2b538589 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2544 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=5428ee46-1e43-407a-8d60-950fc7f3168c,k8s:batch.kubernetes.io/job-name=barbican-db-sync,k8s:component=db-sync,k8s:controller-uid=5428ee46-1e43-407a-8d60-950fc7f3168c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-sync,k8s:release_group=barbican" ipv4=10.0.0.19 ipv6= k8sPodName=openstack/barbican-db-sync-vzm28 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=5428ee46-1e43-407a-8d60-950fc7f3168c;k8s:batch.kubernetes.io/job-name=barbican-db-sync;k8s:component=db-sync;k8s:controller-uid=5428ee46-1e43-407a-8d60-950fc7f3168c;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-db-sync;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ee2b538589 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2544 identity=39127 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=5428ee46-1e43-407a-8d60-950fc7f3168c,k8s:batch.kubernetes.io/job-name=barbican-db-sync,k8s:component=db-sync,k8s:controller-uid=5428ee46-1e43-407a-8d60-950fc7f3168c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-sync,k8s:release_group=barbican" ipv4=10.0.0.19 ipv6= k8sPodName=openstack/barbican-db-sync-vzm28 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ee2b538589 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2544 identity=39127 ipv4=10.0.0.19 ipv6= k8sPodName=openstack/barbican-db-sync-vzm28 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=ee2b538589 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2544 identity=39127 ipv4=10.0.0.19 ipv6= k8sPodName=openstack/barbican-db-sync-vzm28 subsys=endpoint level=info msg="Successful endpoint creation" containerID=ee2b538589 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2544 identity=39127 ipv4=10.0.0.19 ipv6= k8sPodName=openstack/barbican-db-sync-vzm28 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=ee2b538589 endpointID=2544 k8sNamespace=openstack k8sPodName=barbican-db-sync-vzm28 subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=5428ee46-1e43-407a-8d60-950fc7f3168c k8s:batch.kubernetes.io/job-name=barbican-db-sync k8s:component=db-sync k8s:controller-uid=5428ee46-1e43-407a-8d60-950fc7f3168c k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-db-sync k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=ee2b538589 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2544 identity=39127 ipv4=10.0.0.19 ipv6= k8sPodName=openstack/barbican-db-sync-vzm28 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.104 b825e383-4224-4ce4-996f-714e49368a6c default }" containerID=a718c341c7e501a720200ab97c28f21cbb96a8a9e0f63a31fc33fe29847644c7 datapathConfiguration="&{false false false false false }" interface=lxca34bb911ddd0 k8sPodName=openstack/barbican-rabbit-init-rqhm2 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a718c341c7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=310 ipv4=10.0.0.104 ipv6= k8sPodName=openstack/barbican-rabbit-init-rqhm2 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a718c341c7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=310 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=c6cd5bf2-9a6a-41d3-84f6-9b36966615bf,k8s:batch.kubernetes.io/job-name=barbican-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=c6cd5bf2-9a6a-41d3-84f6-9b36966615bf,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-rabbit-init,k8s:release_group=barbican" ipv4=10.0.0.104 ipv6= k8sPodName=openstack/barbican-rabbit-init-rqhm2 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=a718c341c7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=310 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.104 ipv6= k8sPodName=openstack/barbican-rabbit-init-rqhm2 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=c6cd5bf2-9a6a-41d3-84f6-9b36966615bf;k8s:batch.kubernetes.io/job-name=barbican-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=c6cd5bf2-9a6a-41d3-84f6-9b36966615bf;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-rabbit-init;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a718c341c7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=310 identity=61088 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=c6cd5bf2-9a6a-41d3-84f6-9b36966615bf,k8s:batch.kubernetes.io/job-name=barbican-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=c6cd5bf2-9a6a-41d3-84f6-9b36966615bf,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-rabbit-init,k8s:release_group=barbican" ipv4=10.0.0.104 ipv6= k8sPodName=openstack/barbican-rabbit-init-rqhm2 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a718c341c7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=310 identity=61088 ipv4=10.0.0.104 ipv6= k8sPodName=openstack/barbican-rabbit-init-rqhm2 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a718c341c7 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=310 identity=61088 ipv4=10.0.0.104 ipv6= k8sPodName=openstack/barbican-rabbit-init-rqhm2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=a718c341c7 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=310 identity=61088 ipv4=10.0.0.104 ipv6= k8sPodName=openstack/barbican-rabbit-init-rqhm2 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=a718c341c7 endpointID=310 k8sNamespace=openstack k8sPodName=barbican-rabbit-init-rqhm2 subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=c6cd5bf2-9a6a-41d3-84f6-9b36966615bf k8s:batch.kubernetes.io/job-name=barbican-rabbit-init k8s:component=rabbit-init k8s:controller-uid=c6cd5bf2-9a6a-41d3-84f6-9b36966615bf k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-rabbit-init k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=a718c341c7 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=310 identity=61088 ipv4=10.0.0.104 ipv6= k8sPodName=openstack/barbican-rabbit-init-rqhm2 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.42 3d2fa175-96cf-48f4-8770-7089e123d9a5 default }" containerID=c721333fd05e2346dbf4aaf075e928a2847dd4cd1f5943505d34e3fc7969fbd1 datapathConfiguration="&{false false false false false }" interface=lxc9f91ba08273b k8sPodName=openstack/barbican-ks-service-k9xl7 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c721333fd0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1569 ipv4=10.0.0.42 ipv6= k8sPodName=openstack/barbican-ks-service-k9xl7 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c721333fd0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1569 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=ea101485-f508-4cce-bac8-8ec93a3eaedf,k8s:batch.kubernetes.io/job-name=barbican-ks-service,k8s:component=ks-service,k8s:controller-uid=ea101485-f508-4cce-bac8-8ec93a3eaedf,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-service,k8s:release_group=barbican" ipv4=10.0.0.42 ipv6= k8sPodName=openstack/barbican-ks-service-k9xl7 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=c721333fd0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1569 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.42 ipv6= k8sPodName=openstack/barbican-ks-service-k9xl7 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=ea101485-f508-4cce-bac8-8ec93a3eaedf;k8s:batch.kubernetes.io/job-name=barbican-ks-service;k8s:component=ks-service;k8s:controller-uid=ea101485-f508-4cce-bac8-8ec93a3eaedf;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-service;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c721333fd0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1569 identity=22782 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=ea101485-f508-4cce-bac8-8ec93a3eaedf,k8s:batch.kubernetes.io/job-name=barbican-ks-service,k8s:component=ks-service,k8s:controller-uid=ea101485-f508-4cce-bac8-8ec93a3eaedf,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-service,k8s:release_group=barbican" ipv4=10.0.0.42 ipv6= k8sPodName=openstack/barbican-ks-service-k9xl7 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c721333fd0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1569 identity=22782 ipv4=10.0.0.42 ipv6= k8sPodName=openstack/barbican-ks-service-k9xl7 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c721333fd0 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1569 identity=22782 ipv4=10.0.0.42 ipv6= k8sPodName=openstack/barbican-ks-service-k9xl7 subsys=endpoint level=info msg="Successful endpoint creation" containerID=c721333fd0 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1569 identity=22782 ipv4=10.0.0.42 ipv6= k8sPodName=openstack/barbican-ks-service-k9xl7 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Conntrack garbage collector interval recalculated" deleteRatio=0.03624859658852652 newInterval=11m15s subsys=map-ct level=info msg="Delete endpoint request" containerID=c721333fd0 endpointID=1569 k8sNamespace=openstack k8sPodName=barbican-ks-service-k9xl7 subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=ea101485-f508-4cce-bac8-8ec93a3eaedf k8s:batch.kubernetes.io/job-name=barbican-ks-service k8s:component=ks-service k8s:controller-uid=ea101485-f508-4cce-bac8-8ec93a3eaedf k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-service k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=c721333fd0 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1569 identity=22782 ipv4=10.0.0.42 ipv6= k8sPodName=openstack/barbican-ks-service-k9xl7 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.212 39bf69d4-67af-4737-9cce-7048f5bf07fb default }" containerID=982a82936c96955ea5bd35925f95cf5a3310182f2a00ef880034aa9e199fb4a0 datapathConfiguration="&{false false false false false }" interface=lxc2be9e03f5b0c k8sPodName=openstack/barbican-ks-endpoints-cdt24 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=982a82936c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1694 ipv4=10.0.0.212 ipv6= k8sPodName=openstack/barbican-ks-endpoints-cdt24 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=982a82936c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1694 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=eae84d13-11ce-432f-ae08-e8520b13d444,k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=eae84d13-11ce-432f-ae08-e8520b13d444,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-endpoints,k8s:release_group=barbican" ipv4=10.0.0.212 ipv6= k8sPodName=openstack/barbican-ks-endpoints-cdt24 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=eae84d13-11ce-432f-ae08-e8520b13d444;k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=eae84d13-11ce-432f-ae08-e8520b13d444;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-endpoints;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=982a82936c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1694 identity=13498 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=eae84d13-11ce-432f-ae08-e8520b13d444,k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=eae84d13-11ce-432f-ae08-e8520b13d444,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-endpoints,k8s:release_group=barbican" ipv4=10.0.0.212 ipv6= k8sPodName=openstack/barbican-ks-endpoints-cdt24 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=982a82936c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1694 identity=13498 ipv4=10.0.0.212 ipv6= k8sPodName=openstack/barbican-ks-endpoints-cdt24 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=982a82936c datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1694 identity=13498 ipv4=10.0.0.212 ipv6= k8sPodName=openstack/barbican-ks-endpoints-cdt24 subsys=endpoint level=info msg="Successful endpoint creation" containerID=982a82936c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1694 identity=13498 ipv4=10.0.0.212 ipv6= k8sPodName=openstack/barbican-ks-endpoints-cdt24 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=982a82936c endpointID=1694 k8sNamespace=openstack k8sPodName=barbican-ks-endpoints-cdt24 subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=eae84d13-11ce-432f-ae08-e8520b13d444 k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=eae84d13-11ce-432f-ae08-e8520b13d444 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-endpoints k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=982a82936c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1694 identity=13498 ipv4=10.0.0.212 ipv6= k8sPodName=openstack/barbican-ks-endpoints-cdt24 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.234 b02c7874-2f29-4d25-a70c-2e9713304de5 default }" containerID=8920f2ea7001d2fe003d389cd4ad93b7f1ac4d65188dc8ae41971bd1b016883d datapathConfiguration="&{false false false false false }" interface=lxc47d01269ffca k8sPodName=openstack/barbican-ks-user-78f96 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8920f2ea70 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2614 ipv4=10.0.0.234 ipv6= k8sPodName=openstack/barbican-ks-user-78f96 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8920f2ea70 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2614 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=483370f9-0c14-4122-ace6-20ab6a86d815,k8s:batch.kubernetes.io/job-name=barbican-ks-user,k8s:component=ks-user,k8s:controller-uid=483370f9-0c14-4122-ace6-20ab6a86d815,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-user,k8s:release_group=barbican" ipv4=10.0.0.234 ipv6= k8sPodName=openstack/barbican-ks-user-78f96 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=483370f9-0c14-4122-ace6-20ab6a86d815;k8s:batch.kubernetes.io/job-name=barbican-ks-user;k8s:component=ks-user;k8s:controller-uid=483370f9-0c14-4122-ace6-20ab6a86d815;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-user;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8920f2ea70 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2614 identity=4972 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=483370f9-0c14-4122-ace6-20ab6a86d815,k8s:batch.kubernetes.io/job-name=barbican-ks-user,k8s:component=ks-user,k8s:controller-uid=483370f9-0c14-4122-ace6-20ab6a86d815,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-user,k8s:release_group=barbican" ipv4=10.0.0.234 ipv6= k8sPodName=openstack/barbican-ks-user-78f96 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=8920f2ea70 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2614 identity=4972 ipv4=10.0.0.234 ipv6= k8sPodName=openstack/barbican-ks-user-78f96 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=8920f2ea70 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2614 identity=4972 ipv4=10.0.0.234 ipv6= k8sPodName=openstack/barbican-ks-user-78f96 subsys=endpoint level=info msg="Successful endpoint creation" containerID=8920f2ea70 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2614 identity=4972 ipv4=10.0.0.234 ipv6= k8sPodName=openstack/barbican-ks-user-78f96 subsys=daemon level=info msg="Delete endpoint request" containerID=8920f2ea70 endpointID=2614 k8sNamespace=openstack k8sPodName=barbican-ks-user-78f96 subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=483370f9-0c14-4122-ace6-20ab6a86d815 k8s:batch.kubernetes.io/job-name=barbican-ks-user k8s:component=ks-user k8s:controller-uid=483370f9-0c14-4122-ace6-20ab6a86d815 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-user k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=8920f2ea70 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2614 identity=4972 ipv4=10.0.0.234 ipv6= k8sPodName=openstack/barbican-ks-user-78f96 subsys=endpoint level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Create endpoint request" addressing="&{10.0.0.186 40dce5fc-24f7-4f63-a311-b61f058b631b default }" containerID=2e087c19084a3ea54dc650084baf27812d5673cd23f050b9c18a70e7903b0856 datapathConfiguration="&{false false false false false }" interface=lxcc1c89e8e745c k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-zv5pw labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2e087c1908 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3980 ipv4=10.0.0.186 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-zv5pw subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2e087c1908 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3980 identityLabels="k8s:app=rook-ceph-operator,k8s:helm.sh/chart=rook-ceph-v1.15.9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph,k8s:io.cilium.k8s.namespace.labels.name=rook-ceph,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system,k8s:io.kubernetes.pod.namespace=rook-ceph" ipv4=10.0.0.186 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-zv5pw subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:rook-ceph k8s:io.cilium.k8s.namespace.labels.name:rook-ceph]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-operator;k8s:helm.sh/chart=rook-ceph-v1.15.9;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph;k8s:io.cilium.k8s.namespace.labels.name=rook-ceph;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system;k8s:io.kubernetes.pod.namespace=rook-ceph;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2e087c1908 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3980 identity=6233 identityLabels="k8s:app=rook-ceph-operator,k8s:helm.sh/chart=rook-ceph-v1.15.9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph,k8s:io.cilium.k8s.namespace.labels.name=rook-ceph,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system,k8s:io.kubernetes.pod.namespace=rook-ceph" ipv4=10.0.0.186 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-zv5pw oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=2e087c1908 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3980 identity=6233 ipv4=10.0.0.186 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-zv5pw subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=2e087c1908 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3980 identity=6233 ipv4=10.0.0.186 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-zv5pw subsys=endpoint level=info msg="Successful endpoint creation" containerID=2e087c1908 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3980 identity=6233 ipv4=10.0.0.186 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-zv5pw subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.100 9580eb1f-be8f-4529-b06e-02c5eb3c992b default }" containerID=dff2198b347d21a978f62d906c1a8482b98fa7c7b0fb94b053f68b6123856e1f datapathConfiguration="&{false false false false false }" interface=lxc3f4b0ef5b241 k8sPodName=openstack/rook-ceph-detect-version-skq2c labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=dff2198b34 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=361 ipv4=10.0.0.100 ipv6= k8sPodName=openstack/rook-ceph-detect-version-skq2c subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=dff2198b34 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=361 identityLabels="k8s:app=rook-ceph-detect-version,k8s:batch.kubernetes.io/controller-uid=eb7bea16-32e5-4f87-af97-9cdd8479fbd1,k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version,k8s:controller-uid=eb7bea16-32e5-4f87-af97-9cdd8479fbd1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=rook-ceph-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.100 ipv6= k8sPodName=openstack/rook-ceph-detect-version-skq2c subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-detect-version;k8s:batch.kubernetes.io/controller-uid=eb7bea16-32e5-4f87-af97-9cdd8479fbd1;k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version;k8s:controller-uid=eb7bea16-32e5-4f87-af97-9cdd8479fbd1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=rook-ceph-detect-version;k8s:rook-version=v1.15.9;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=dff2198b34 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=361 identity=11139 identityLabels="k8s:app=rook-ceph-detect-version,k8s:batch.kubernetes.io/controller-uid=eb7bea16-32e5-4f87-af97-9cdd8479fbd1,k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version,k8s:controller-uid=eb7bea16-32e5-4f87-af97-9cdd8479fbd1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=rook-ceph-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.100 ipv6= k8sPodName=openstack/rook-ceph-detect-version-skq2c oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=dff2198b34 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=361 identity=11139 ipv4=10.0.0.100 ipv6= k8sPodName=openstack/rook-ceph-detect-version-skq2c subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=dff2198b34 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=361 identity=11139 ipv4=10.0.0.100 ipv6= k8sPodName=openstack/rook-ceph-detect-version-skq2c subsys=endpoint level=info msg="Successful endpoint creation" containerID=dff2198b34 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=361 identity=11139 ipv4=10.0.0.100 ipv6= k8sPodName=openstack/rook-ceph-detect-version-skq2c subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=dff2198b34 endpointID=361 k8sNamespace=openstack k8sPodName=rook-ceph-detect-version-skq2c subsys=daemon level=info msg="Releasing key" key="[k8s:app=rook-ceph-detect-version k8s:batch.kubernetes.io/controller-uid=eb7bea16-32e5-4f87-af97-9cdd8479fbd1 k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version k8s:controller-uid=eb7bea16-32e5-4f87-af97-9cdd8479fbd1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=rook-ceph-detect-version k8s:rook-version=v1.15.9]" subsys=allocator level=info msg="Removed endpoint" containerID=dff2198b34 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=361 identity=11139 ipv4=10.0.0.100 ipv6= k8sPodName=openstack/rook-ceph-detect-version-skq2c subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.197 1fe77d73-5bf4-4b6c-8444-765abc4d01a0 default }" containerID=c2734f76a37f4d281a50b27234d515b1b2faa9bede3047a70cf7fb2162260163 datapathConfiguration="&{false false false false false }" interface=lxc2978bcaaddee k8sPodName=openstack/ceph-object-controller-detect-version-bsbgz labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c2734f76a3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3641 ipv4=10.0.0.197 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-bsbgz subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c2734f76a3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3641 identityLabels="k8s:app=ceph-object-controller-detect-version,k8s:batch.kubernetes.io/controller-uid=9abe5b3d-61e7-487c-a530-1f12142197f6,k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version,k8s:controller-uid=9abe5b3d-61e7-487c-a530-1f12142197f6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=ceph-object-controller-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.197 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-bsbgz subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app=ceph-object-controller-detect-version;k8s:batch.kubernetes.io/controller-uid=9abe5b3d-61e7-487c-a530-1f12142197f6;k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version;k8s:controller-uid=9abe5b3d-61e7-487c-a530-1f12142197f6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=ceph-object-controller-detect-version;k8s:rook-version=v1.15.9;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c2734f76a3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3641 identity=7933 identityLabels="k8s:app=ceph-object-controller-detect-version,k8s:batch.kubernetes.io/controller-uid=9abe5b3d-61e7-487c-a530-1f12142197f6,k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version,k8s:controller-uid=9abe5b3d-61e7-487c-a530-1f12142197f6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=ceph-object-controller-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.197 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-bsbgz oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c2734f76a3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3641 identity=7933 ipv4=10.0.0.197 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-bsbgz subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c2734f76a3 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3641 identity=7933 ipv4=10.0.0.197 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-bsbgz subsys=endpoint level=info msg="Successful endpoint creation" containerID=c2734f76a3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3641 identity=7933 ipv4=10.0.0.197 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-bsbgz subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=c2734f76a3 endpointID=3641 k8sNamespace=openstack k8sPodName=ceph-object-controller-detect-version-bsbgz subsys=daemon level=info msg="Releasing key" key="[k8s:app=ceph-object-controller-detect-version k8s:batch.kubernetes.io/controller-uid=9abe5b3d-61e7-487c-a530-1f12142197f6 k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version k8s:controller-uid=9abe5b3d-61e7-487c-a530-1f12142197f6 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=ceph-object-controller-detect-version k8s:rook-version=v1.15.9]" subsys=allocator level=info msg="Removed endpoint" containerID=c2734f76a3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3641 identity=7933 ipv4=10.0.0.197 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-bsbgz subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.77 451358e0-db35-499f-a505-cf5dcb665453 default }" containerID=4d7afb3c9274918e268c9b2385b460ceac2e82b256922c19c03b5b3d8e4c9c64 datapathConfiguration="&{false false false false false }" interface=lxc5ee98da70806 k8sPodName=local-path-storage/helper-pod-create-pvc-23906b98-0aa0-4e49-83ea-052ad217688a labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4d7afb3c92 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1826 ipv4=10.0.0.77 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-23906b98-0aa0-4e49-83ea-052ad217688a subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4d7afb3c92 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1826 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.77 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-23906b98-0aa0-4e49-83ea-052ad217688a subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4d7afb3c92 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1826 identity=6594 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.77 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-23906b98-0aa0-4e49-83ea-052ad217688a oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4d7afb3c92 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1826 identity=6594 ipv4=10.0.0.77 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-23906b98-0aa0-4e49-83ea-052ad217688a subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=4d7afb3c92 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1826 identity=6594 ipv4=10.0.0.77 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-23906b98-0aa0-4e49-83ea-052ad217688a subsys=endpoint level=info msg="Successful endpoint creation" containerID=4d7afb3c92 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1826 identity=6594 ipv4=10.0.0.77 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-23906b98-0aa0-4e49-83ea-052ad217688a subsys=daemon level=info msg="Delete endpoint request" containerID=4d7afb3c92 endpointID=1826 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-23906b98-0aa0-4e49-83ea-052ad217688a subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=4d7afb3c92 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1826 identity=6594 ipv4=10.0.0.77 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-23906b98-0aa0-4e49-83ea-052ad217688a subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.221 c62d96b2-b99d-4644-a918-23214fed119a default }" containerID=ed9e3b0846e99063cee8f63b81947d81c05b86160644e3f8c9fb4cd2da6c6c83 datapathConfiguration="&{false false false false false }" interface=lxcf455a7e25a44 k8sPodName=openstack/rabbitmq-glance-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ed9e3b0846 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4047 ipv4=10.0.0.221 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ed9e3b0846 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4047 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-glance,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0" ipv4=10.0.0.221 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=ed9e3b0846 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4047 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.221 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-glance;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ed9e3b0846 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4047 identity=37593 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-glance,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0" ipv4=10.0.0.221 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ed9e3b0846 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4047 identity=37593 ipv4=10.0.0.221 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ed9e3b0846 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=4047 identity=37593 ipv4=10.0.0.221 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=ed9e3b0846 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=4047 identity=37593 ipv4=10.0.0.221 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.65 3ab3b2e8-0983-4137-aa0b-e14b02a6b38f default }" containerID=50819ddc4ab07dd795ad1da1d0a6849610eaab926a6b5b62602f92030c6ed9b5 datapathConfiguration="&{false false false false false }" interface=lxc3f5de36c32df k8sPodName=openstack/glance-db-init-dzdgk labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=50819ddc4a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1811 ipv4=10.0.0.65 ipv6= k8sPodName=openstack/glance-db-init-dzdgk subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=50819ddc4a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1811 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=b69db282-4cac-4db3-9707-e1a4101d7d35,k8s:batch.kubernetes.io/job-name=glance-db-init,k8s:component=db-init,k8s:controller-uid=b69db282-4cac-4db3-9707-e1a4101d7d35,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-init,k8s:release_group=glance" ipv4=10.0.0.65 ipv6= k8sPodName=openstack/glance-db-init-dzdgk subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=50819ddc4a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1811 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.65 ipv6= k8sPodName=openstack/glance-db-init-dzdgk line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=b69db282-4cac-4db3-9707-e1a4101d7d35;k8s:batch.kubernetes.io/job-name=glance-db-init;k8s:component=db-init;k8s:controller-uid=b69db282-4cac-4db3-9707-e1a4101d7d35;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-db-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=50819ddc4a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1811 identity=11455 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=b69db282-4cac-4db3-9707-e1a4101d7d35,k8s:batch.kubernetes.io/job-name=glance-db-init,k8s:component=db-init,k8s:controller-uid=b69db282-4cac-4db3-9707-e1a4101d7d35,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-init,k8s:release_group=glance" ipv4=10.0.0.65 ipv6= k8sPodName=openstack/glance-db-init-dzdgk oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=50819ddc4a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1811 identity=11455 ipv4=10.0.0.65 ipv6= k8sPodName=openstack/glance-db-init-dzdgk subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=50819ddc4a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1811 identity=11455 ipv4=10.0.0.65 ipv6= k8sPodName=openstack/glance-db-init-dzdgk subsys=endpoint level=info msg="Successful endpoint creation" containerID=50819ddc4a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1811 identity=11455 ipv4=10.0.0.65 ipv6= k8sPodName=openstack/glance-db-init-dzdgk subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=50819ddc4a endpointID=1811 k8sNamespace=openstack k8sPodName=glance-db-init-dzdgk subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=b69db282-4cac-4db3-9707-e1a4101d7d35 k8s:batch.kubernetes.io/job-name=glance-db-init k8s:component=db-init k8s:controller-uid=b69db282-4cac-4db3-9707-e1a4101d7d35 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-db-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=50819ddc4a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1811 identity=11455 ipv4=10.0.0.65 ipv6= k8sPodName=openstack/glance-db-init-dzdgk subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.87 754bf3e4-94d8-41d9-ace2-253026d6b9e4 default }" containerID=df8807160ce8147acd61e095f33269486e31a4c37c8725af9ede02cc6ccc60ef datapathConfiguration="&{false false false false false }" interface=lxc44c74afb35a5 k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-tdpw9 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=df8807160c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=267 ipv4=10.0.0.87 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-tdpw9 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=df8807160c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=267 identityLabels="k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io,k8s:app.kubernetes.io/created-by=rook-ceph-operator,k8s:app.kubernetes.io/instance=ceph,k8s:app.kubernetes.io/managed-by=rook-ceph-operator,k8s:app.kubernetes.io/name=ceph-rgw,k8s:app.kubernetes.io/part-of=ceph,k8s:app=rook-ceph-rgw,k8s:ceph_daemon_id=ceph,k8s:ceph_daemon_type=rgw,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw,k8s:io.kubernetes.pod.namespace=openstack,k8s:rgw=ceph,k8s:rook.io/operator-namespace=rook-ceph,k8s:rook_cluster=openstack,k8s:rook_object_store=ceph" ipv4=10.0.0.87 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-tdpw9 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-rgw;k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io;k8s:app.kubernetes.io/created-by=rook-ceph-operator;k8s:app.kubernetes.io/instance=ceph;k8s:app.kubernetes.io/managed-by=rook-ceph-operator;k8s:app.kubernetes.io/name=ceph-rgw;k8s:app.kubernetes.io/part-of=ceph;k8s:ceph_daemon_id=ceph;k8s:ceph_daemon_type=rgw;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw;k8s:io.kubernetes.pod.namespace=openstack;k8s:rgw=ceph;k8s:rook.io/operator-namespace=rook-ceph;k8s:rook_cluster=openstack;k8s:rook_object_store=ceph;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=df8807160c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=267 identity=10312 identityLabels="k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io,k8s:app.kubernetes.io/created-by=rook-ceph-operator,k8s:app.kubernetes.io/instance=ceph,k8s:app.kubernetes.io/managed-by=rook-ceph-operator,k8s:app.kubernetes.io/name=ceph-rgw,k8s:app.kubernetes.io/part-of=ceph,k8s:app=rook-ceph-rgw,k8s:ceph_daemon_id=ceph,k8s:ceph_daemon_type=rgw,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw,k8s:io.kubernetes.pod.namespace=openstack,k8s:rgw=ceph,k8s:rook.io/operator-namespace=rook-ceph,k8s:rook_cluster=openstack,k8s:rook_object_store=ceph" ipv4=10.0.0.87 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-tdpw9 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=df8807160c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=267 identity=10312 ipv4=10.0.0.87 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-tdpw9 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.154 cccf43b8-c37a-41da-a705-39d3eb7d852a default }" containerID=45bc3eea87b1f7483260a27bba1d0c5b2cceb1e1fa72a0d6acd918881a21a581 datapathConfiguration="&{false false false false false }" interface=lxcabf8f9a54fd8 k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-f4vdl labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=45bc3eea87 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1319 ipv4=10.0.0.154 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-f4vdl subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=45bc3eea87 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1319 identityLabels="k8s:app=rook-ceph-crashcollector,k8s:ceph-version=18.2.7-0,k8s:ceph_daemon_id=crash,k8s:crashcollector=crash,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default,k8s:io.kubernetes.pod.namespace=openstack,k8s:node_name=instance,k8s:rook_cluster=openstack" ipv4=10.0.0.154 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-f4vdl subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-crashcollector;k8s:ceph-version=18.2.7-0;k8s:ceph_daemon_id=crash;k8s:crashcollector=crash;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default;k8s:io.kubernetes.pod.namespace=openstack;k8s:node_name=instance;k8s:rook_cluster=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=45bc3eea87 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1319 identity=24180 identityLabels="k8s:app=rook-ceph-crashcollector,k8s:ceph-version=18.2.7-0,k8s:ceph_daemon_id=crash,k8s:crashcollector=crash,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default,k8s:io.kubernetes.pod.namespace=openstack,k8s:node_name=instance,k8s:rook_cluster=openstack" ipv4=10.0.0.154 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-f4vdl oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=45bc3eea87 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1319 identity=24180 ipv4=10.0.0.154 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-f4vdl subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=df8807160c datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=267 identity=10312 ipv4=10.0.0.87 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-tdpw9 subsys=endpoint level=info msg="Successful endpoint creation" containerID=df8807160c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=267 identity=10312 ipv4=10.0.0.87 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-tdpw9 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.198 6f995252-c765-4bcd-a07a-26fa1a841e55 default }" containerID=e7e9b0379a70c44a70c9ecbf53ae25c208cc81c3c86c9a349e9183126447a5c9 datapathConfiguration="&{false false false false false }" interface=lxce7be76522d1e k8sPodName=openstack/glance-db-sync-nzdtv labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e7e9b0379a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2268 ipv4=10.0.0.198 ipv6= k8sPodName=openstack/glance-db-sync-nzdtv subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e7e9b0379a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2268 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=7bde8e5d-10a8-4d0e-812c-89763d76c870,k8s:batch.kubernetes.io/job-name=glance-db-sync,k8s:component=db-sync,k8s:controller-uid=7bde8e5d-10a8-4d0e-812c-89763d76c870,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-sync,k8s:release_group=glance" ipv4=10.0.0.198 ipv6= k8sPodName=openstack/glance-db-sync-nzdtv subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=7bde8e5d-10a8-4d0e-812c-89763d76c870;k8s:batch.kubernetes.io/job-name=glance-db-sync;k8s:component=db-sync;k8s:controller-uid=7bde8e5d-10a8-4d0e-812c-89763d76c870;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-db-sync;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e7e9b0379a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2268 identity=28828 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=7bde8e5d-10a8-4d0e-812c-89763d76c870,k8s:batch.kubernetes.io/job-name=glance-db-sync,k8s:component=db-sync,k8s:controller-uid=7bde8e5d-10a8-4d0e-812c-89763d76c870,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-sync,k8s:release_group=glance" ipv4=10.0.0.198 ipv6= k8sPodName=openstack/glance-db-sync-nzdtv oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e7e9b0379a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2268 identity=28828 ipv4=10.0.0.198 ipv6= k8sPodName=openstack/glance-db-sync-nzdtv subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=45bc3eea87 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1319 identity=24180 ipv4=10.0.0.154 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-f4vdl subsys=endpoint level=info msg="Successful endpoint creation" containerID=45bc3eea87 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1319 identity=24180 ipv4=10.0.0.154 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-f4vdl subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=e7e9b0379a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2268 identity=28828 ipv4=10.0.0.198 ipv6= k8sPodName=openstack/glance-db-sync-nzdtv subsys=endpoint level=info msg="Successful endpoint creation" containerID=e7e9b0379a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2268 identity=28828 ipv4=10.0.0.198 ipv6= k8sPodName=openstack/glance-db-sync-nzdtv subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=e7e9b0379a endpointID=2268 k8sNamespace=openstack k8sPodName=glance-db-sync-nzdtv subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=7bde8e5d-10a8-4d0e-812c-89763d76c870 k8s:batch.kubernetes.io/job-name=glance-db-sync k8s:component=db-sync k8s:controller-uid=7bde8e5d-10a8-4d0e-812c-89763d76c870 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-db-sync k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=e7e9b0379a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2268 identity=28828 ipv4=10.0.0.198 ipv6= k8sPodName=openstack/glance-db-sync-nzdtv subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.230 dd36b5b4-38db-42f6-b400-4c08174a3f6d default }" containerID=39647dfc4176787405b69b41c86d18ad39bd7195740cee8a5158efa733f24b5a datapathConfiguration="&{false false false false false }" interface=lxceebc29092cf5 k8sPodName=openstack/glance-rabbit-init-9q8ck labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=39647dfc41 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1192 ipv4=10.0.0.230 ipv6= k8sPodName=openstack/glance-rabbit-init-9q8ck subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=39647dfc41 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1192 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=f161a7c0-fac0-4b35-a8a6-d9fe45eab829,k8s:batch.kubernetes.io/job-name=glance-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=f161a7c0-fac0-4b35-a8a6-d9fe45eab829,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-rabbit-init,k8s:release_group=glance" ipv4=10.0.0.230 ipv6= k8sPodName=openstack/glance-rabbit-init-9q8ck subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=f161a7c0-fac0-4b35-a8a6-d9fe45eab829;k8s:batch.kubernetes.io/job-name=glance-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=f161a7c0-fac0-4b35-a8a6-d9fe45eab829;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-rabbit-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=39647dfc41 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1192 identity=65500 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=f161a7c0-fac0-4b35-a8a6-d9fe45eab829,k8s:batch.kubernetes.io/job-name=glance-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=f161a7c0-fac0-4b35-a8a6-d9fe45eab829,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-rabbit-init,k8s:release_group=glance" ipv4=10.0.0.230 ipv6= k8sPodName=openstack/glance-rabbit-init-9q8ck oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=39647dfc41 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1192 identity=65500 ipv4=10.0.0.230 ipv6= k8sPodName=openstack/glance-rabbit-init-9q8ck subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=39647dfc41 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1192 identity=65500 ipv4=10.0.0.230 ipv6= k8sPodName=openstack/glance-rabbit-init-9q8ck subsys=endpoint level=info msg="Successful endpoint creation" containerID=39647dfc41 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1192 identity=65500 ipv4=10.0.0.230 ipv6= k8sPodName=openstack/glance-rabbit-init-9q8ck subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=39647dfc41 endpointID=1192 k8sNamespace=openstack k8sPodName=glance-rabbit-init-9q8ck subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=f161a7c0-fac0-4b35-a8a6-d9fe45eab829 k8s:batch.kubernetes.io/job-name=glance-rabbit-init k8s:component=rabbit-init k8s:controller-uid=f161a7c0-fac0-4b35-a8a6-d9fe45eab829 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-rabbit-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=39647dfc41 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1192 identity=65500 ipv4=10.0.0.230 ipv6= k8sPodName=openstack/glance-rabbit-init-9q8ck subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.40 47116b10-ef07-4112-9a15-1bdbec46278a default }" containerID=dea493c467d7dcaf18df5638bcfb0570885ceb8b7e21db9647d97262ee26d25a datapathConfiguration="&{false false false false false }" interface=lxcd79c6a82528f k8sPodName=openstack/glance-ks-service-dlfxz labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=dea493c467 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1465 ipv4=10.0.0.40 ipv6= k8sPodName=openstack/glance-ks-service-dlfxz subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=dea493c467 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1465 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=aa96eb57-019a-473a-967b-6a24bc00bacd,k8s:batch.kubernetes.io/job-name=glance-ks-service,k8s:component=ks-service,k8s:controller-uid=aa96eb57-019a-473a-967b-6a24bc00bacd,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-service,k8s:release_group=glance" ipv4=10.0.0.40 ipv6= k8sPodName=openstack/glance-ks-service-dlfxz subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=dea493c467 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1465 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.40 ipv6= k8sPodName=openstack/glance-ks-service-dlfxz line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=aa96eb57-019a-473a-967b-6a24bc00bacd;k8s:batch.kubernetes.io/job-name=glance-ks-service;k8s:component=ks-service;k8s:controller-uid=aa96eb57-019a-473a-967b-6a24bc00bacd;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-service;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=dea493c467 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1465 identity=36275 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=aa96eb57-019a-473a-967b-6a24bc00bacd,k8s:batch.kubernetes.io/job-name=glance-ks-service,k8s:component=ks-service,k8s:controller-uid=aa96eb57-019a-473a-967b-6a24bc00bacd,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-service,k8s:release_group=glance" ipv4=10.0.0.40 ipv6= k8sPodName=openstack/glance-ks-service-dlfxz oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=dea493c467 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1465 identity=36275 ipv4=10.0.0.40 ipv6= k8sPodName=openstack/glance-ks-service-dlfxz subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=dea493c467 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1465 identity=36275 ipv4=10.0.0.40 ipv6= k8sPodName=openstack/glance-ks-service-dlfxz subsys=endpoint level=info msg="Successful endpoint creation" containerID=dea493c467 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1465 identity=36275 ipv4=10.0.0.40 ipv6= k8sPodName=openstack/glance-ks-service-dlfxz subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=dea493c467 endpointID=1465 k8sNamespace=openstack k8sPodName=glance-ks-service-dlfxz subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=aa96eb57-019a-473a-967b-6a24bc00bacd k8s:batch.kubernetes.io/job-name=glance-ks-service k8s:component=ks-service k8s:controller-uid=aa96eb57-019a-473a-967b-6a24bc00bacd k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-service k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=dea493c467 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1465 identity=36275 ipv4=10.0.0.40 ipv6= k8sPodName=openstack/glance-ks-service-dlfxz subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.64 b2b9f760-b688-4557-86e4-6c0da808feee default }" containerID=608933486ebd7303c5d29b01dde8b5a757e9c7502a70e94b2ad9552ac1f717fa datapathConfiguration="&{false false false false false }" interface=lxce28fa1c9787d k8sPodName=openstack/glance-ks-endpoints-qlb2w labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=608933486e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1940 ipv4=10.0.0.64 ipv6= k8sPodName=openstack/glance-ks-endpoints-qlb2w subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=608933486e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1940 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=abe1a195-e0b2-49b4-8832-433ba2f186b4,k8s:batch.kubernetes.io/job-name=glance-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=abe1a195-e0b2-49b4-8832-433ba2f186b4,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-endpoints,k8s:release_group=glance" ipv4=10.0.0.64 ipv6= k8sPodName=openstack/glance-ks-endpoints-qlb2w subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=abe1a195-e0b2-49b4-8832-433ba2f186b4;k8s:batch.kubernetes.io/job-name=glance-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=abe1a195-e0b2-49b4-8832-433ba2f186b4;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-endpoints;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=608933486e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1940 identity=16172 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=abe1a195-e0b2-49b4-8832-433ba2f186b4,k8s:batch.kubernetes.io/job-name=glance-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=abe1a195-e0b2-49b4-8832-433ba2f186b4,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-endpoints,k8s:release_group=glance" ipv4=10.0.0.64 ipv6= k8sPodName=openstack/glance-ks-endpoints-qlb2w oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=608933486e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1940 identity=16172 ipv4=10.0.0.64 ipv6= k8sPodName=openstack/glance-ks-endpoints-qlb2w subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=608933486e datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1940 identity=16172 ipv4=10.0.0.64 ipv6= k8sPodName=openstack/glance-ks-endpoints-qlb2w subsys=endpoint level=info msg="Successful endpoint creation" containerID=608933486e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1940 identity=16172 ipv4=10.0.0.64 ipv6= k8sPodName=openstack/glance-ks-endpoints-qlb2w subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=608933486e endpointID=1940 k8sNamespace=openstack k8sPodName=glance-ks-endpoints-qlb2w subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=abe1a195-e0b2-49b4-8832-433ba2f186b4 k8s:batch.kubernetes.io/job-name=glance-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=abe1a195-e0b2-49b4-8832-433ba2f186b4 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-endpoints k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=608933486e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1940 identity=16172 ipv4=10.0.0.64 ipv6= k8sPodName=openstack/glance-ks-endpoints-qlb2w subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.208 70561960-3b67-4125-8590-89e4d39d2582 default }" containerID=e21a626144bd2f69f073467548980a35d0eba0bf62cccc6133bce9ace0419bd3 datapathConfiguration="&{false false false false false }" interface=lxc731418ee358b k8sPodName=openstack/glance-ks-user-hjkz2 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e21a626144 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=291 ipv4=10.0.0.208 ipv6= k8sPodName=openstack/glance-ks-user-hjkz2 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e21a626144 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=291 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=6bc971b0-0b6d-42e1-9d6a-e812705d0c57,k8s:batch.kubernetes.io/job-name=glance-ks-user,k8s:component=ks-user,k8s:controller-uid=6bc971b0-0b6d-42e1-9d6a-e812705d0c57,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-user,k8s:release_group=glance" ipv4=10.0.0.208 ipv6= k8sPodName=openstack/glance-ks-user-hjkz2 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=6bc971b0-0b6d-42e1-9d6a-e812705d0c57;k8s:batch.kubernetes.io/job-name=glance-ks-user;k8s:component=ks-user;k8s:controller-uid=6bc971b0-0b6d-42e1-9d6a-e812705d0c57;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-user;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e21a626144 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=291 identity=56182 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=6bc971b0-0b6d-42e1-9d6a-e812705d0c57,k8s:batch.kubernetes.io/job-name=glance-ks-user,k8s:component=ks-user,k8s:controller-uid=6bc971b0-0b6d-42e1-9d6a-e812705d0c57,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-user,k8s:release_group=glance" ipv4=10.0.0.208 ipv6= k8sPodName=openstack/glance-ks-user-hjkz2 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e21a626144 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=291 identity=56182 ipv4=10.0.0.208 ipv6= k8sPodName=openstack/glance-ks-user-hjkz2 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e21a626144 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=291 identity=56182 ipv4=10.0.0.208 ipv6= k8sPodName=openstack/glance-ks-user-hjkz2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=e21a626144 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=291 identity=56182 ipv4=10.0.0.208 ipv6= k8sPodName=openstack/glance-ks-user-hjkz2 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=e21a626144 endpointID=291 k8sNamespace=openstack k8sPodName=glance-ks-user-hjkz2 subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=6bc971b0-0b6d-42e1-9d6a-e812705d0c57 k8s:batch.kubernetes.io/job-name=glance-ks-user k8s:component=ks-user k8s:controller-uid=6bc971b0-0b6d-42e1-9d6a-e812705d0c57 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-user k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=e21a626144 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=291 identity=56182 ipv4=10.0.0.208 ipv6= k8sPodName=openstack/glance-ks-user-hjkz2 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.159 9bc4046c-8ca3-4c5b-a141-89ba7927e32b default }" containerID=72df2fc284602b4ae63e9202d9ead37f79df3ca1ce43485217237fbe1f746fb2 datapathConfiguration="&{false false false false false }" interface=lxc61580dc48ac2 k8sPodName=openstack/glance-metadefs-load-4jjtc labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=72df2fc284 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1621 ipv4=10.0.0.159 ipv6= k8sPodName=openstack/glance-metadefs-load-4jjtc subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=72df2fc284 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1621 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=5e9a1176-820f-49df-82fa-c8a3ac3ba485,k8s:batch.kubernetes.io/job-name=glance-metadefs-load,k8s:component=metadefs_load,k8s:controller-uid=5e9a1176-820f-49df-82fa-c8a3ac3ba485,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-metadefs-load,k8s:release_group=glance" ipv4=10.0.0.159 ipv6= k8sPodName=openstack/glance-metadefs-load-4jjtc subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=72df2fc284 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1621 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.159 ipv6= k8sPodName=openstack/glance-metadefs-load-4jjtc line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=5e9a1176-820f-49df-82fa-c8a3ac3ba485;k8s:batch.kubernetes.io/job-name=glance-metadefs-load;k8s:component=metadefs_load;k8s:controller-uid=5e9a1176-820f-49df-82fa-c8a3ac3ba485;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-metadefs-load;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=72df2fc284 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1621 identity=3255 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=5e9a1176-820f-49df-82fa-c8a3ac3ba485,k8s:batch.kubernetes.io/job-name=glance-metadefs-load,k8s:component=metadefs_load,k8s:controller-uid=5e9a1176-820f-49df-82fa-c8a3ac3ba485,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-metadefs-load,k8s:release_group=glance" ipv4=10.0.0.159 ipv6= k8sPodName=openstack/glance-metadefs-load-4jjtc oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=72df2fc284 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1621 identity=3255 ipv4=10.0.0.159 ipv6= k8sPodName=openstack/glance-metadefs-load-4jjtc subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=72df2fc284 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1621 identity=3255 ipv4=10.0.0.159 ipv6= k8sPodName=openstack/glance-metadefs-load-4jjtc subsys=endpoint level=info msg="Successful endpoint creation" containerID=72df2fc284 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1621 identity=3255 ipv4=10.0.0.159 ipv6= k8sPodName=openstack/glance-metadefs-load-4jjtc subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=72df2fc284 endpointID=1621 k8sNamespace=openstack k8sPodName=glance-metadefs-load-4jjtc subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=5e9a1176-820f-49df-82fa-c8a3ac3ba485 k8s:batch.kubernetes.io/job-name=glance-metadefs-load k8s:component=metadefs_load k8s:controller-uid=5e9a1176-820f-49df-82fa-c8a3ac3ba485 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-metadefs-load k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=72df2fc284 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1621 identity=3255 ipv4=10.0.0.159 ipv6= k8sPodName=openstack/glance-metadefs-load-4jjtc subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.145 b3b96847-7e0b-4bdd-a20c-170750d0d457 default }" containerID=f50251b26383a4dd221ab544cd6b37df080152848a4106f13f9991d0f0321741 datapathConfiguration="&{false false false false false }" interface=lxc2f231d09c5cb k8sPodName=openstack/glance-storage-init-2vx6q labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f50251b263 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=390 ipv4=10.0.0.145 ipv6= k8sPodName=openstack/glance-storage-init-2vx6q subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f50251b263 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=390 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=0bf7cca3-37c0-4590-b1ae-d96e4abb11e0,k8s:batch.kubernetes.io/job-name=glance-storage-init,k8s:component=storage-init,k8s:controller-uid=0bf7cca3-37c0-4590-b1ae-d96e4abb11e0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-storage-init,k8s:release_group=glance" ipv4=10.0.0.145 ipv6= k8sPodName=openstack/glance-storage-init-2vx6q subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=0bf7cca3-37c0-4590-b1ae-d96e4abb11e0;k8s:batch.kubernetes.io/job-name=glance-storage-init;k8s:component=storage-init;k8s:controller-uid=0bf7cca3-37c0-4590-b1ae-d96e4abb11e0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-storage-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f50251b263 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=390 identity=1578 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=0bf7cca3-37c0-4590-b1ae-d96e4abb11e0,k8s:batch.kubernetes.io/job-name=glance-storage-init,k8s:component=storage-init,k8s:controller-uid=0bf7cca3-37c0-4590-b1ae-d96e4abb11e0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-storage-init,k8s:release_group=glance" ipv4=10.0.0.145 ipv6= k8sPodName=openstack/glance-storage-init-2vx6q oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=f50251b263 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=390 identity=1578 ipv4=10.0.0.145 ipv6= k8sPodName=openstack/glance-storage-init-2vx6q subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f50251b263 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=390 identity=1578 ipv4=10.0.0.145 ipv6= k8sPodName=openstack/glance-storage-init-2vx6q subsys=endpoint level=info msg="Successful endpoint creation" containerID=f50251b263 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=390 identity=1578 ipv4=10.0.0.145 ipv6= k8sPodName=openstack/glance-storage-init-2vx6q subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=f50251b263 endpointID=390 k8sNamespace=openstack k8sPodName=glance-storage-init-2vx6q subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=0bf7cca3-37c0-4590-b1ae-d96e4abb11e0 k8s:batch.kubernetes.io/job-name=glance-storage-init k8s:component=storage-init k8s:controller-uid=0bf7cca3-37c0-4590-b1ae-d96e4abb11e0 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-storage-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=f50251b263 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=390 identity=1578 ipv4=10.0.0.145 ipv6= k8sPodName=openstack/glance-storage-init-2vx6q subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.156 4457e695-7e71-4f2c-8704-ebf159e4405d default }" containerID=60947b864da5b08d3065f3f9a1ffbc9076ab586ed547344dc24b4b756c24371f datapathConfiguration="&{false false false false false }" interface=lxcdac8b97ff97d k8sPodName=openstack/glance-api-d64bccff6-xsj6j labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=60947b864d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3189 ipv4=10.0.0.156 ipv6= k8sPodName=openstack/glance-api-d64bccff6-xsj6j subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=60947b864d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3189 identityLabels="k8s:application=glance,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=glance" ipv4=10.0.0.156 ipv6= k8sPodName=openstack/glance-api-d64bccff6-xsj6j subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=60947b864d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3189 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.156 ipv6= k8sPodName=openstack/glance-api-d64bccff6-xsj6j line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=glance;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=60947b864d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3189 identity=2973 identityLabels="k8s:application=glance,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=glance" ipv4=10.0.0.156 ipv6= k8sPodName=openstack/glance-api-d64bccff6-xsj6j oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=60947b864d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3189 identity=2973 ipv4=10.0.0.156 ipv6= k8sPodName=openstack/glance-api-d64bccff6-xsj6j subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=60947b864d datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3189 identity=2973 ipv4=10.0.0.156 ipv6= k8sPodName=openstack/glance-api-d64bccff6-xsj6j subsys=endpoint level=info msg="Successful endpoint creation" containerID=60947b864d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3189 identity=2973 ipv4=10.0.0.156 ipv6= k8sPodName=openstack/glance-api-d64bccff6-xsj6j subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.205 9049726a-7283-4d8f-84df-64a9d1db2b2f default }" containerID=fc8d21560490f2c8c1a9991d4993e480a77bf139a40ac8aff23ce9bd61d44bb8 datapathConfiguration="&{false false false false false }" interface=lxc97765aedd135 k8sPodName=openstack/staffeln-api-5fc7c66749-nkq42 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=fc8d215604 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=139 ipv4=10.0.0.205 ipv6= k8sPodName=openstack/staffeln-api-5fc7c66749-nkq42 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=fc8d215604 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=139 identityLabels="k8s:application=staffeln,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.205 ipv6= k8sPodName=openstack/staffeln-api-5fc7c66749-nkq42 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=fc8d215604 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=139 identity=16328 identityLabels="k8s:application=staffeln,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.205 ipv6= k8sPodName=openstack/staffeln-api-5fc7c66749-nkq42 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=fc8d215604 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=139 identity=16328 ipv4=10.0.0.205 ipv6= k8sPodName=openstack/staffeln-api-5fc7c66749-nkq42 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.77 36135656-d31d-4c9e-ba84-91f74773cd46 default }" containerID=b9e832aea508048651bb346dca9ff02acc78ec195f7ca8b2a675cbf7ecf63605 datapathConfiguration="&{false false false false false }" interface=lxc46811b19a70c k8sPodName=openstack/staffeln-conductor-7dfd8558fb-24snz labels="[]" subsys=daemon sync-build=true level=info msg="Create endpoint request" addressing="&{10.0.0.182 778d12a5-aa3a-4a14-8924-2ab0cf121b1f default }" containerID=7a96d84c291a45f9cb68c9eebb60cae38652ea29e85e4aed27615caad6dc3eaf datapathConfiguration="&{false false false false false }" interface=lxc96c3e35e7876 k8sPodName=openstack/staffeln-db-init-2src4 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b9e832aea5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2260 ipv4=10.0.0.77 ipv6= k8sPodName=openstack/staffeln-conductor-7dfd8558fb-24snz subsys=endpoint level=info msg="New endpoint" containerID=7a96d84c29 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1814 ipv4=10.0.0.182 ipv6= k8sPodName=openstack/staffeln-db-init-2src4 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b9e832aea5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2260 identityLabels="k8s:application=staffeln,k8s:component=conductor,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.77 ipv6= k8sPodName=openstack/staffeln-conductor-7dfd8558fb-24snz subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7a96d84c29 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1814 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=98c801dc-675d-4d4f-8486-dc55314a36a7,k8s:batch.kubernetes.io/job-name=staffeln-db-init,k8s:component=db-init,k8s:controller-uid=98c801dc-675d-4d4f-8486-dc55314a36a7,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-init,k8s:release_group=staffeln" ipv4=10.0.0.182 ipv6= k8sPodName=openstack/staffeln-db-init-2src4 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:component=conductor;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b9e832aea5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2260 identity=56234 identityLabels="k8s:application=staffeln,k8s:component=conductor,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.77 ipv6= k8sPodName=openstack/staffeln-conductor-7dfd8558fb-24snz oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b9e832aea5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2260 identity=56234 ipv4=10.0.0.77 ipv6= k8sPodName=openstack/staffeln-conductor-7dfd8558fb-24snz subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:batch.kubernetes.io/controller-uid=98c801dc-675d-4d4f-8486-dc55314a36a7;k8s:batch.kubernetes.io/job-name=staffeln-db-init;k8s:component=db-init;k8s:controller-uid=98c801dc-675d-4d4f-8486-dc55314a36a7;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=staffeln-db-init;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7a96d84c29 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1814 identity=10493 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=98c801dc-675d-4d4f-8486-dc55314a36a7,k8s:batch.kubernetes.io/job-name=staffeln-db-init,k8s:component=db-init,k8s:controller-uid=98c801dc-675d-4d4f-8486-dc55314a36a7,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-init,k8s:release_group=staffeln" ipv4=10.0.0.182 ipv6= k8sPodName=openstack/staffeln-db-init-2src4 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7a96d84c29 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1814 identity=10493 ipv4=10.0.0.182 ipv6= k8sPodName=openstack/staffeln-db-init-2src4 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=fc8d215604 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=139 identity=16328 ipv4=10.0.0.205 ipv6= k8sPodName=openstack/staffeln-api-5fc7c66749-nkq42 subsys=endpoint level=info msg="Successful endpoint creation" containerID=fc8d215604 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=139 identity=16328 ipv4=10.0.0.205 ipv6= k8sPodName=openstack/staffeln-api-5fc7c66749-nkq42 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=b9e832aea5 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2260 identity=56234 ipv4=10.0.0.77 ipv6= k8sPodName=openstack/staffeln-conductor-7dfd8558fb-24snz subsys=endpoint level=info msg="Successful endpoint creation" containerID=b9e832aea5 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2260 identity=56234 ipv4=10.0.0.77 ipv6= k8sPodName=openstack/staffeln-conductor-7dfd8558fb-24snz subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=7a96d84c29 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1814 identity=10493 ipv4=10.0.0.182 ipv6= k8sPodName=openstack/staffeln-db-init-2src4 subsys=endpoint level=info msg="Successful endpoint creation" containerID=7a96d84c29 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1814 identity=10493 ipv4=10.0.0.182 ipv6= k8sPodName=openstack/staffeln-db-init-2src4 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=7a96d84c29 endpointID=1814 k8sNamespace=openstack k8sPodName=staffeln-db-init-2src4 subsys=daemon level=info msg="Releasing key" key="[k8s:application=staffeln k8s:batch.kubernetes.io/controller-uid=98c801dc-675d-4d4f-8486-dc55314a36a7 k8s:batch.kubernetes.io/job-name=staffeln-db-init k8s:component=db-init k8s:controller-uid=98c801dc-675d-4d4f-8486-dc55314a36a7 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=staffeln-db-init k8s:release_group=staffeln]" subsys=allocator level=info msg="Removed endpoint" containerID=7a96d84c29 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1814 identity=10493 ipv4=10.0.0.182 ipv6= k8sPodName=openstack/staffeln-db-init-2src4 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.226 b37935e6-de0a-4671-81ea-b15b687d3a0a default }" containerID=d7e3862b743dee8c05e4f97bff0c4faaf74f1c33ab19916fec0979c50c99d0ff datapathConfiguration="&{false false false false false }" interface=lxc53069c8a48d1 k8sPodName=openstack/staffeln-db-sync-g7l6g labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d7e3862b74 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2550 ipv4=10.0.0.226 ipv6= k8sPodName=openstack/staffeln-db-sync-g7l6g subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d7e3862b74 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2550 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=6e3c9afa-8574-46c7-b3e7-89e6406a9061,k8s:batch.kubernetes.io/job-name=staffeln-db-sync,k8s:component=db-sync,k8s:controller-uid=6e3c9afa-8574-46c7-b3e7-89e6406a9061,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-sync,k8s:release_group=staffeln" ipv4=10.0.0.226 ipv6= k8sPodName=openstack/staffeln-db-sync-g7l6g subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=d7e3862b74 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2550 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.226 ipv6= k8sPodName=openstack/staffeln-db-sync-g7l6g line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:batch.kubernetes.io/controller-uid=6e3c9afa-8574-46c7-b3e7-89e6406a9061;k8s:batch.kubernetes.io/job-name=staffeln-db-sync;k8s:component=db-sync;k8s:controller-uid=6e3c9afa-8574-46c7-b3e7-89e6406a9061;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=staffeln-db-sync;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d7e3862b74 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2550 identity=13459 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=6e3c9afa-8574-46c7-b3e7-89e6406a9061,k8s:batch.kubernetes.io/job-name=staffeln-db-sync,k8s:component=db-sync,k8s:controller-uid=6e3c9afa-8574-46c7-b3e7-89e6406a9061,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-sync,k8s:release_group=staffeln" ipv4=10.0.0.226 ipv6= k8sPodName=openstack/staffeln-db-sync-g7l6g oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d7e3862b74 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2550 identity=13459 ipv4=10.0.0.226 ipv6= k8sPodName=openstack/staffeln-db-sync-g7l6g subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d7e3862b74 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2550 identity=13459 ipv4=10.0.0.226 ipv6= k8sPodName=openstack/staffeln-db-sync-g7l6g subsys=endpoint level=info msg="Successful endpoint creation" containerID=d7e3862b74 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2550 identity=13459 ipv4=10.0.0.226 ipv6= k8sPodName=openstack/staffeln-db-sync-g7l6g subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=d7e3862b74 endpointID=2550 k8sNamespace=openstack k8sPodName=staffeln-db-sync-g7l6g subsys=daemon level=info msg="Releasing key" key="[k8s:application=staffeln k8s:batch.kubernetes.io/controller-uid=6e3c9afa-8574-46c7-b3e7-89e6406a9061 k8s:batch.kubernetes.io/job-name=staffeln-db-sync k8s:component=db-sync k8s:controller-uid=6e3c9afa-8574-46c7-b3e7-89e6406a9061 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=staffeln-db-sync k8s:release_group=staffeln]" subsys=allocator level=info msg="Removed endpoint" containerID=d7e3862b74 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2550 identity=13459 ipv4=10.0.0.226 ipv6= k8sPodName=openstack/staffeln-db-sync-g7l6g subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.150 40b5e754-e01b-4525-b851-96c9393a7605 default }" containerID=873fda1863255ce3603367b7b5b16b0b550e7a18b41191cf451aefcc521fd059 datapathConfiguration="&{false false false false false }" interface=lxcf0fcda6e7c60 k8sPodName=local-path-storage/helper-pod-create-pvc-6c7df86e-8a67-4847-b1da-24b7eee64e2f labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=873fda1863 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4071 ipv4=10.0.0.150 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-6c7df86e-8a67-4847-b1da-24b7eee64e2f subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=873fda1863 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4071 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.150 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-6c7df86e-8a67-4847-b1da-24b7eee64e2f subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=873fda1863 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4071 identity=6594 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.150 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-6c7df86e-8a67-4847-b1da-24b7eee64e2f oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=873fda1863 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4071 identity=6594 ipv4=10.0.0.150 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-6c7df86e-8a67-4847-b1da-24b7eee64e2f subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=873fda1863 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=4071 identity=6594 ipv4=10.0.0.150 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-6c7df86e-8a67-4847-b1da-24b7eee64e2f subsys=endpoint level=info msg="Successful endpoint creation" containerID=873fda1863 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=4071 identity=6594 ipv4=10.0.0.150 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-6c7df86e-8a67-4847-b1da-24b7eee64e2f subsys=daemon level=info msg="Delete endpoint request" containerID=873fda1863 endpointID=4071 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-6c7df86e-8a67-4847-b1da-24b7eee64e2f subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=873fda1863 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=4071 identity=6594 ipv4=10.0.0.150 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-6c7df86e-8a67-4847-b1da-24b7eee64e2f subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.211 9409784f-a771-49ec-b36a-112dff255016 default }" containerID=d5935ab5f0e05fb1ca963f5da59dcb32563174ba4fa924915f1dee1ffa48a3a7 datapathConfiguration="&{false false false false false }" interface=lxc879c870442c9 k8sPodName=openstack/rabbitmq-cinder-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d5935ab5f0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3990 ipv4=10.0.0.211 ipv6= k8sPodName=openstack/rabbitmq-cinder-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d5935ab5f0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3990 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-cinder,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cinder-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-cinder-server-0" ipv4=10.0.0.211 ipv6= k8sPodName=openstack/rabbitmq-cinder-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=d5935ab5f0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3990 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.211 ipv6= k8sPodName=openstack/rabbitmq-cinder-server-0 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-cinder;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cinder-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-cinder-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d5935ab5f0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3990 identity=14862 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-cinder,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cinder-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-cinder-server-0" ipv4=10.0.0.211 ipv6= k8sPodName=openstack/rabbitmq-cinder-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d5935ab5f0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3990 identity=14862 ipv4=10.0.0.211 ipv6= k8sPodName=openstack/rabbitmq-cinder-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d5935ab5f0 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3990 identity=14862 ipv4=10.0.0.211 ipv6= k8sPodName=openstack/rabbitmq-cinder-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=d5935ab5f0 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3990 identity=14862 ipv4=10.0.0.211 ipv6= k8sPodName=openstack/rabbitmq-cinder-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.97 8d9d32dc-e7c2-4ae1-8e91-2382bf28eb5a default }" containerID=b9d60907d550605481908acd0c497010c0de3a0c7c1251fb9793a661d758d3e5 datapathConfiguration="&{false false false false false }" interface=lxc322960c6f3d8 k8sPodName=openstack/cinder-api-6b66445777-z4krm labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b9d60907d5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2515 ipv4=10.0.0.97 ipv6= k8sPodName=openstack/cinder-api-6b66445777-z4krm subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.206 2b69ac1b-6e7b-4a8b-b788-96bc58a733c5 default }" containerID=526da6029a31d055c2414abd6b5da89be5092b4d73d0b36c498e5c865c85fef2 datapathConfiguration="&{false false false false false }" interface=lxc7966692781ea k8sPodName=openstack/cinder-scheduler-7c6cfff8c-688zg labels="[]" subsys=daemon sync-build=true level=info msg="Resolving identity labels (blocking)" containerID=b9d60907d5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2515 identityLabels="k8s:application=cinder,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=cinder" ipv4=10.0.0.97 ipv6= k8sPodName=openstack/cinder-api-6b66445777-z4krm subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="New endpoint" containerID=526da6029a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1103 ipv4=10.0.0.206 ipv6= k8sPodName=openstack/cinder-scheduler-7c6cfff8c-688zg subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=526da6029a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1103 identityLabels="k8s:application=cinder,k8s:component=scheduler,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-scheduler,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=cinder" ipv4=10.0.0.206 ipv6= k8sPodName=openstack/cinder-scheduler-7c6cfff8c-688zg subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=b9d60907d5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2515 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.97 ipv6= k8sPodName=openstack/cinder-api-6b66445777-z4krm line=611 subsys=endpoint level=info msg="Invalid state transition skipped" containerID=526da6029a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1103 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.206 ipv6= k8sPodName=openstack/cinder-scheduler-7c6cfff8c-688zg line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b9d60907d5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2515 identity=686 identityLabels="k8s:application=cinder,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=cinder" ipv4=10.0.0.97 ipv6= k8sPodName=openstack/cinder-api-6b66445777-z4krm oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b9d60907d5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2515 identity=686 ipv4=10.0.0.97 ipv6= k8sPodName=openstack/cinder-api-6b66445777-z4krm subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:component=scheduler;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-scheduler;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=526da6029a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1103 identity=18799 identityLabels="k8s:application=cinder,k8s:component=scheduler,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-scheduler,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=cinder" ipv4=10.0.0.206 ipv6= k8sPodName=openstack/cinder-scheduler-7c6cfff8c-688zg oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=526da6029a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1103 identity=18799 ipv4=10.0.0.206 ipv6= k8sPodName=openstack/cinder-scheduler-7c6cfff8c-688zg subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.208 aa6a3cb0-9eab-43f6-8bca-2e3ae13e93ee default }" containerID=1f6f1c5d36a762666b8af4e73e709be947d4172de538288b11cb6143fafc12e7 datapathConfiguration="&{false false false false false }" interface=lxcf53b73533477 k8sPodName=openstack/cinder-db-init-wz5rj labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1f6f1c5d36 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4054 ipv4=10.0.0.208 ipv6= k8sPodName=openstack/cinder-db-init-wz5rj subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1f6f1c5d36 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4054 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=a7cd6e47-4095-4223-815f-9f13a68cd5f9,k8s:batch.kubernetes.io/job-name=cinder-db-init,k8s:component=db-init,k8s:controller-uid=a7cd6e47-4095-4223-815f-9f13a68cd5f9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-db-init,k8s:release_group=cinder" ipv4=10.0.0.208 ipv6= k8sPodName=openstack/cinder-db-init-wz5rj subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=a7cd6e47-4095-4223-815f-9f13a68cd5f9;k8s:batch.kubernetes.io/job-name=cinder-db-init;k8s:component=db-init;k8s:controller-uid=a7cd6e47-4095-4223-815f-9f13a68cd5f9;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-db-init;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1f6f1c5d36 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4054 identity=17411 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=a7cd6e47-4095-4223-815f-9f13a68cd5f9,k8s:batch.kubernetes.io/job-name=cinder-db-init,k8s:component=db-init,k8s:controller-uid=a7cd6e47-4095-4223-815f-9f13a68cd5f9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-db-init,k8s:release_group=cinder" ipv4=10.0.0.208 ipv6= k8sPodName=openstack/cinder-db-init-wz5rj oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1f6f1c5d36 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4054 identity=17411 ipv4=10.0.0.208 ipv6= k8sPodName=openstack/cinder-db-init-wz5rj subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b9d60907d5 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2515 identity=686 ipv4=10.0.0.97 ipv6= k8sPodName=openstack/cinder-api-6b66445777-z4krm subsys=endpoint level=info msg="Successful endpoint creation" containerID=b9d60907d5 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2515 identity=686 ipv4=10.0.0.97 ipv6= k8sPodName=openstack/cinder-api-6b66445777-z4krm subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=526da6029a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1103 identity=18799 ipv4=10.0.0.206 ipv6= k8sPodName=openstack/cinder-scheduler-7c6cfff8c-688zg subsys=endpoint level=info msg="Successful endpoint creation" containerID=526da6029a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1103 identity=18799 ipv4=10.0.0.206 ipv6= k8sPodName=openstack/cinder-scheduler-7c6cfff8c-688zg subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=1f6f1c5d36 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=4054 identity=17411 ipv4=10.0.0.208 ipv6= k8sPodName=openstack/cinder-db-init-wz5rj subsys=endpoint level=info msg="Successful endpoint creation" containerID=1f6f1c5d36 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=4054 identity=17411 ipv4=10.0.0.208 ipv6= k8sPodName=openstack/cinder-db-init-wz5rj subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=1f6f1c5d36 endpointID=4054 k8sNamespace=openstack k8sPodName=cinder-db-init-wz5rj subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=a7cd6e47-4095-4223-815f-9f13a68cd5f9 k8s:batch.kubernetes.io/job-name=cinder-db-init k8s:component=db-init k8s:controller-uid=a7cd6e47-4095-4223-815f-9f13a68cd5f9 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-db-init k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=1f6f1c5d36 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=4054 identity=17411 ipv4=10.0.0.208 ipv6= k8sPodName=openstack/cinder-db-init-wz5rj subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.169 9090cdec-c14b-40c7-ad41-b7cd7326382b default }" containerID=b6a6fd66f8c858da0380e4deb09baf23a4bf05e34a6a1c518a3482d009751ae4 datapathConfiguration="&{false false false false false }" interface=lxc4d0498024b8a k8sPodName=openstack/cinder-db-sync-xz2q2 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b6a6fd66f8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2174 ipv4=10.0.0.169 ipv6= k8sPodName=openstack/cinder-db-sync-xz2q2 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b6a6fd66f8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2174 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=b8fede47-f94a-4250-b119-84bc618b3a52,k8s:batch.kubernetes.io/job-name=cinder-db-sync,k8s:component=db-sync,k8s:controller-uid=b8fede47-f94a-4250-b119-84bc618b3a52,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-db-sync,k8s:release_group=cinder" ipv4=10.0.0.169 ipv6= k8sPodName=openstack/cinder-db-sync-xz2q2 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=b8fede47-f94a-4250-b119-84bc618b3a52;k8s:batch.kubernetes.io/job-name=cinder-db-sync;k8s:component=db-sync;k8s:controller-uid=b8fede47-f94a-4250-b119-84bc618b3a52;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-db-sync;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b6a6fd66f8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2174 identity=24738 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=b8fede47-f94a-4250-b119-84bc618b3a52,k8s:batch.kubernetes.io/job-name=cinder-db-sync,k8s:component=db-sync,k8s:controller-uid=b8fede47-f94a-4250-b119-84bc618b3a52,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-db-sync,k8s:release_group=cinder" ipv4=10.0.0.169 ipv6= k8sPodName=openstack/cinder-db-sync-xz2q2 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=b6a6fd66f8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2174 identity=24738 ipv4=10.0.0.169 ipv6= k8sPodName=openstack/cinder-db-sync-xz2q2 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b6a6fd66f8 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2174 identity=24738 ipv4=10.0.0.169 ipv6= k8sPodName=openstack/cinder-db-sync-xz2q2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=b6a6fd66f8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2174 identity=24738 ipv4=10.0.0.169 ipv6= k8sPodName=openstack/cinder-db-sync-xz2q2 subsys=daemon level=info msg="Delete endpoint request" containerID=b6a6fd66f8 endpointID=2174 k8sNamespace=openstack k8sPodName=cinder-db-sync-xz2q2 subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=b8fede47-f94a-4250-b119-84bc618b3a52 k8s:batch.kubernetes.io/job-name=cinder-db-sync k8s:component=db-sync k8s:controller-uid=b8fede47-f94a-4250-b119-84bc618b3a52 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-db-sync k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=b6a6fd66f8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2174 identity=24738 ipv4=10.0.0.169 ipv6= k8sPodName=openstack/cinder-db-sync-xz2q2 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.100 841b3281-36c4-4fbd-8482-98c0e62f7f04 default }" containerID=9be36d4a2e455e3ae8a71b1e24621a2c4cc18001f2096c70d7d2c51e0d2b177a datapathConfiguration="&{false false false false false }" interface=lxcd5837488662d k8sPodName=openstack/cinder-rabbit-init-dgfml labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9be36d4a2e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1643 ipv4=10.0.0.100 ipv6= k8sPodName=openstack/cinder-rabbit-init-dgfml subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9be36d4a2e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1643 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=2463dacd-cdc3-4531-af3e-39942fc5381c,k8s:batch.kubernetes.io/job-name=cinder-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=2463dacd-cdc3-4531-af3e-39942fc5381c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-rabbit-init,k8s:release_group=cinder" ipv4=10.0.0.100 ipv6= k8sPodName=openstack/cinder-rabbit-init-dgfml subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=2463dacd-cdc3-4531-af3e-39942fc5381c;k8s:batch.kubernetes.io/job-name=cinder-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=2463dacd-cdc3-4531-af3e-39942fc5381c;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-rabbit-init;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9be36d4a2e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1643 identity=36247 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=2463dacd-cdc3-4531-af3e-39942fc5381c,k8s:batch.kubernetes.io/job-name=cinder-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=2463dacd-cdc3-4531-af3e-39942fc5381c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-rabbit-init,k8s:release_group=cinder" ipv4=10.0.0.100 ipv6= k8sPodName=openstack/cinder-rabbit-init-dgfml oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9be36d4a2e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1643 identity=36247 ipv4=10.0.0.100 ipv6= k8sPodName=openstack/cinder-rabbit-init-dgfml subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=9be36d4a2e datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1643 identity=36247 ipv4=10.0.0.100 ipv6= k8sPodName=openstack/cinder-rabbit-init-dgfml subsys=endpoint level=info msg="Successful endpoint creation" containerID=9be36d4a2e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1643 identity=36247 ipv4=10.0.0.100 ipv6= k8sPodName=openstack/cinder-rabbit-init-dgfml subsys=daemon level=info msg="Delete endpoint request" containerID=9be36d4a2e endpointID=1643 k8sNamespace=openstack k8sPodName=cinder-rabbit-init-dgfml subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=2463dacd-cdc3-4531-af3e-39942fc5381c k8s:batch.kubernetes.io/job-name=cinder-rabbit-init k8s:component=rabbit-init k8s:controller-uid=2463dacd-cdc3-4531-af3e-39942fc5381c k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-rabbit-init k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=9be36d4a2e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1643 identity=36247 ipv4=10.0.0.100 ipv6= k8sPodName=openstack/cinder-rabbit-init-dgfml subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.65 bb1e30dd-0f71-4dbd-ae4c-fbab57dac2d6 default }" containerID=9bb99cfc720933ad8bd270165e36d4478141b552e40eef25fdf5c676f8a639fe datapathConfiguration="&{false false false false false }" interface=lxc709ff0f71ca8 k8sPodName=openstack/cinder-ks-service-4725t labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9bb99cfc72 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=554 ipv4=10.0.0.65 ipv6= k8sPodName=openstack/cinder-ks-service-4725t subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9bb99cfc72 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=554 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=b125dfb0-5d8d-45a4-b1fd-be74dded612e,k8s:batch.kubernetes.io/job-name=cinder-ks-service,k8s:component=ks-service,k8s:controller-uid=b125dfb0-5d8d-45a4-b1fd-be74dded612e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-ks-service,k8s:release_group=cinder" ipv4=10.0.0.65 ipv6= k8sPodName=openstack/cinder-ks-service-4725t subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=9bb99cfc72 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=554 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.65 ipv6= k8sPodName=openstack/cinder-ks-service-4725t line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=b125dfb0-5d8d-45a4-b1fd-be74dded612e;k8s:batch.kubernetes.io/job-name=cinder-ks-service;k8s:component=ks-service;k8s:controller-uid=b125dfb0-5d8d-45a4-b1fd-be74dded612e;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-ks-service;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9bb99cfc72 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=554 identity=12018 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=b125dfb0-5d8d-45a4-b1fd-be74dded612e,k8s:batch.kubernetes.io/job-name=cinder-ks-service,k8s:component=ks-service,k8s:controller-uid=b125dfb0-5d8d-45a4-b1fd-be74dded612e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-ks-service,k8s:release_group=cinder" ipv4=10.0.0.65 ipv6= k8sPodName=openstack/cinder-ks-service-4725t oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9bb99cfc72 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=554 identity=12018 ipv4=10.0.0.65 ipv6= k8sPodName=openstack/cinder-ks-service-4725t subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=9bb99cfc72 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=554 identity=12018 ipv4=10.0.0.65 ipv6= k8sPodName=openstack/cinder-ks-service-4725t subsys=endpoint level=info msg="Successful endpoint creation" containerID=9bb99cfc72 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=554 identity=12018 ipv4=10.0.0.65 ipv6= k8sPodName=openstack/cinder-ks-service-4725t subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=9bb99cfc72 endpointID=554 k8sNamespace=openstack k8sPodName=cinder-ks-service-4725t subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=b125dfb0-5d8d-45a4-b1fd-be74dded612e k8s:batch.kubernetes.io/job-name=cinder-ks-service k8s:component=ks-service k8s:controller-uid=b125dfb0-5d8d-45a4-b1fd-be74dded612e k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-ks-service k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=9bb99cfc72 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=554 identity=12018 ipv4=10.0.0.65 ipv6= k8sPodName=openstack/cinder-ks-service-4725t subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.142 fe8a5b69-0c36-4ef1-926c-8ce9464deb43 default }" containerID=2df932b29d0a2ff94f6afb1a5f684a20f3368f093b81c9a18455595b3752a380 datapathConfiguration="&{false false false false false }" interface=lxc8bb39d12bfe7 k8sPodName=openstack/cinder-ks-endpoints-rsthk labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2df932b29d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1252 ipv4=10.0.0.142 ipv6= k8sPodName=openstack/cinder-ks-endpoints-rsthk subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2df932b29d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1252 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=aabfdda5-c9b7-476b-938b-7b7073ce875c,k8s:batch.kubernetes.io/job-name=cinder-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=aabfdda5-c9b7-476b-938b-7b7073ce875c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-ks-endpoints,k8s:release_group=cinder" ipv4=10.0.0.142 ipv6= k8sPodName=openstack/cinder-ks-endpoints-rsthk subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=2df932b29d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1252 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.142 ipv6= k8sPodName=openstack/cinder-ks-endpoints-rsthk line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=aabfdda5-c9b7-476b-938b-7b7073ce875c;k8s:batch.kubernetes.io/job-name=cinder-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=aabfdda5-c9b7-476b-938b-7b7073ce875c;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-ks-endpoints;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2df932b29d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1252 identity=62058 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=aabfdda5-c9b7-476b-938b-7b7073ce875c,k8s:batch.kubernetes.io/job-name=cinder-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=aabfdda5-c9b7-476b-938b-7b7073ce875c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-ks-endpoints,k8s:release_group=cinder" ipv4=10.0.0.142 ipv6= k8sPodName=openstack/cinder-ks-endpoints-rsthk oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2df932b29d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1252 identity=62058 ipv4=10.0.0.142 ipv6= k8sPodName=openstack/cinder-ks-endpoints-rsthk subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=2df932b29d datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1252 identity=62058 ipv4=10.0.0.142 ipv6= k8sPodName=openstack/cinder-ks-endpoints-rsthk subsys=endpoint level=info msg="Successful endpoint creation" containerID=2df932b29d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1252 identity=62058 ipv4=10.0.0.142 ipv6= k8sPodName=openstack/cinder-ks-endpoints-rsthk subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=2df932b29d endpointID=1252 k8sNamespace=openstack k8sPodName=cinder-ks-endpoints-rsthk subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=aabfdda5-c9b7-476b-938b-7b7073ce875c k8s:batch.kubernetes.io/job-name=cinder-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=aabfdda5-c9b7-476b-938b-7b7073ce875c k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-ks-endpoints k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=2df932b29d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1252 identity=62058 ipv4=10.0.0.142 ipv6= k8sPodName=openstack/cinder-ks-endpoints-rsthk subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.93 36831146-aa0a-4d61-8684-3a93f727242e default }" containerID=89b579c0caa4538bf117af66ac35721fc1912e9b58da5ccd021a2663b09a2149 datapathConfiguration="&{false false false false false }" interface=lxcfcb55fddc887 k8sPodName=openstack/cinder-ks-user-nddlc labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=89b579c0ca datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=403 ipv4=10.0.0.93 ipv6= k8sPodName=openstack/cinder-ks-user-nddlc subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=89b579c0ca datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=403 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=333adc25-66a6-4dcf-9b95-94dc5d651efd,k8s:batch.kubernetes.io/job-name=cinder-ks-user,k8s:component=ks-user,k8s:controller-uid=333adc25-66a6-4dcf-9b95-94dc5d651efd,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-ks-user,k8s:release_group=cinder" ipv4=10.0.0.93 ipv6= k8sPodName=openstack/cinder-ks-user-nddlc subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=333adc25-66a6-4dcf-9b95-94dc5d651efd;k8s:batch.kubernetes.io/job-name=cinder-ks-user;k8s:component=ks-user;k8s:controller-uid=333adc25-66a6-4dcf-9b95-94dc5d651efd;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-ks-user;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=89b579c0ca datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=403 identity=5572 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=333adc25-66a6-4dcf-9b95-94dc5d651efd,k8s:batch.kubernetes.io/job-name=cinder-ks-user,k8s:component=ks-user,k8s:controller-uid=333adc25-66a6-4dcf-9b95-94dc5d651efd,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-ks-user,k8s:release_group=cinder" ipv4=10.0.0.93 ipv6= k8sPodName=openstack/cinder-ks-user-nddlc oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=89b579c0ca datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=403 identity=5572 ipv4=10.0.0.93 ipv6= k8sPodName=openstack/cinder-ks-user-nddlc subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=89b579c0ca datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=403 identity=5572 ipv4=10.0.0.93 ipv6= k8sPodName=openstack/cinder-ks-user-nddlc subsys=endpoint level=info msg="Successful endpoint creation" containerID=89b579c0ca datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=403 identity=5572 ipv4=10.0.0.93 ipv6= k8sPodName=openstack/cinder-ks-user-nddlc subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=89b579c0ca endpointID=403 k8sNamespace=openstack k8sPodName=cinder-ks-user-nddlc subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=333adc25-66a6-4dcf-9b95-94dc5d651efd k8s:batch.kubernetes.io/job-name=cinder-ks-user k8s:component=ks-user k8s:controller-uid=333adc25-66a6-4dcf-9b95-94dc5d651efd k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-ks-user k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=89b579c0ca datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=403 identity=5572 ipv4=10.0.0.93 ipv6= k8sPodName=openstack/cinder-ks-user-nddlc subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.2 e620578e-4b91-4a01-93e5-88429342d79d default }" containerID=397b4b76d12335885a5d8b9e66994cd7bfa0fcb6f56c56320146fa0d59a64588 datapathConfiguration="&{false false false false false }" interface=lxc2f5765d873fe k8sPodName=openstack/cinder-backup-storage-init-4b25v labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=397b4b76d1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2150 ipv4=10.0.0.2 ipv6= k8sPodName=openstack/cinder-backup-storage-init-4b25v subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=397b4b76d1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2150 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=0884895a-8234-4d3a-aea9-040aafdf0dcd,k8s:batch.kubernetes.io/job-name=cinder-backup-storage-init,k8s:component=storage-init,k8s:controller-uid=0884895a-8234-4d3a-aea9-040aafdf0dcd,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-backup-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-backup-storage-init,k8s:release_group=cinder" ipv4=10.0.0.2 ipv6= k8sPodName=openstack/cinder-backup-storage-init-4b25v subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=0884895a-8234-4d3a-aea9-040aafdf0dcd;k8s:batch.kubernetes.io/job-name=cinder-backup-storage-init;k8s:component=storage-init;k8s:controller-uid=0884895a-8234-4d3a-aea9-040aafdf0dcd;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-backup-storage-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-backup-storage-init;k8s:release_group=cinder;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=397b4b76d1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2150 identity=11007 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=0884895a-8234-4d3a-aea9-040aafdf0dcd,k8s:batch.kubernetes.io/job-name=cinder-backup-storage-init,k8s:component=storage-init,k8s:controller-uid=0884895a-8234-4d3a-aea9-040aafdf0dcd,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-backup-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-backup-storage-init,k8s:release_group=cinder" ipv4=10.0.0.2 ipv6= k8sPodName=openstack/cinder-backup-storage-init-4b25v oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=397b4b76d1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2150 identity=11007 ipv4=10.0.0.2 ipv6= k8sPodName=openstack/cinder-backup-storage-init-4b25v subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=397b4b76d1 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2150 identity=11007 ipv4=10.0.0.2 ipv6= k8sPodName=openstack/cinder-backup-storage-init-4b25v subsys=endpoint level=info msg="Successful endpoint creation" containerID=397b4b76d1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2150 identity=11007 ipv4=10.0.0.2 ipv6= k8sPodName=openstack/cinder-backup-storage-init-4b25v subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=397b4b76d1 endpointID=2150 k8sNamespace=openstack k8sPodName=cinder-backup-storage-init-4b25v subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=0884895a-8234-4d3a-aea9-040aafdf0dcd k8s:batch.kubernetes.io/job-name=cinder-backup-storage-init k8s:component=storage-init k8s:controller-uid=0884895a-8234-4d3a-aea9-040aafdf0dcd k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-backup-storage-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-backup-storage-init k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=397b4b76d1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2150 identity=11007 ipv4=10.0.0.2 ipv6= k8sPodName=openstack/cinder-backup-storage-init-4b25v subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.250 e22168f5-6431-475f-aa1b-b61a2e86aaff default }" containerID=c0af9e61aae3f5baaf549a274a1c8565c0fffe760482b00c71477e23608824c1 datapathConfiguration="&{false false false false false }" interface=lxc76770ac29c32 k8sPodName=openstack/cinder-create-internal-tenant-rgkj2 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c0af9e61aa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1236 ipv4=10.0.0.250 ipv6= k8sPodName=openstack/cinder-create-internal-tenant-rgkj2 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c0af9e61aa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1236 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=b61d3c59-5cb2-4c5b-99a6-523e8bfa1c4b,k8s:batch.kubernetes.io/job-name=cinder-create-internal-tenant,k8s:component=create-internal-tenant,k8s:controller-uid=b61d3c59-5cb2-4c5b-99a6-523e8bfa1c4b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-create-internal-tenant,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-create-internal-tenant,k8s:release_group=cinder" ipv4=10.0.0.250 ipv6= k8sPodName=openstack/cinder-create-internal-tenant-rgkj2 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=b61d3c59-5cb2-4c5b-99a6-523e8bfa1c4b;k8s:batch.kubernetes.io/job-name=cinder-create-internal-tenant;k8s:component=create-internal-tenant;k8s:controller-uid=b61d3c59-5cb2-4c5b-99a6-523e8bfa1c4b;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-create-internal-tenant;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-create-internal-tenant;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c0af9e61aa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1236 identity=6427 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=b61d3c59-5cb2-4c5b-99a6-523e8bfa1c4b,k8s:batch.kubernetes.io/job-name=cinder-create-internal-tenant,k8s:component=create-internal-tenant,k8s:controller-uid=b61d3c59-5cb2-4c5b-99a6-523e8bfa1c4b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-create-internal-tenant,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-create-internal-tenant,k8s:release_group=cinder" ipv4=10.0.0.250 ipv6= k8sPodName=openstack/cinder-create-internal-tenant-rgkj2 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c0af9e61aa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1236 identity=6427 ipv4=10.0.0.250 ipv6= k8sPodName=openstack/cinder-create-internal-tenant-rgkj2 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=c0af9e61aa datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1236 identity=6427 ipv4=10.0.0.250 ipv6= k8sPodName=openstack/cinder-create-internal-tenant-rgkj2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=c0af9e61aa datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1236 identity=6427 ipv4=10.0.0.250 ipv6= k8sPodName=openstack/cinder-create-internal-tenant-rgkj2 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=c0af9e61aa endpointID=1236 k8sNamespace=openstack k8sPodName=cinder-create-internal-tenant-rgkj2 subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=b61d3c59-5cb2-4c5b-99a6-523e8bfa1c4b k8s:batch.kubernetes.io/job-name=cinder-create-internal-tenant k8s:component=create-internal-tenant k8s:controller-uid=b61d3c59-5cb2-4c5b-99a6-523e8bfa1c4b k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-create-internal-tenant k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-create-internal-tenant k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=c0af9e61aa datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1236 identity=6427 ipv4=10.0.0.250 ipv6= k8sPodName=openstack/cinder-create-internal-tenant-rgkj2 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.142 3a20f1ae-6c42-4b93-8476-0fe0320880b7 default }" containerID=4b4964545316ce50843aafa6299e8e6e71cd8e758a685c2e49c818c623e8dd18 datapathConfiguration="&{false false false false false }" interface=lxc50f28829ad21 k8sPodName=openstack/cinder-storage-init-67nnw labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4b49645453 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2281 ipv4=10.0.0.142 ipv6= k8sPodName=openstack/cinder-storage-init-67nnw subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4b49645453 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2281 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=39450b24-35b4-4945-8c6a-66be045e4331,k8s:batch.kubernetes.io/job-name=cinder-storage-init,k8s:component=storage-init,k8s:controller-uid=39450b24-35b4-4945-8c6a-66be045e4331,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-storage-init,k8s:release_group=cinder" ipv4=10.0.0.142 ipv6= k8sPodName=openstack/cinder-storage-init-67nnw subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=39450b24-35b4-4945-8c6a-66be045e4331;k8s:batch.kubernetes.io/job-name=cinder-storage-init;k8s:component=storage-init;k8s:controller-uid=39450b24-35b4-4945-8c6a-66be045e4331;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-storage-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-storage-init;k8s:release_group=cinder;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=4b49645453 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2281 identity=7993 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=39450b24-35b4-4945-8c6a-66be045e4331,k8s:batch.kubernetes.io/job-name=cinder-storage-init,k8s:component=storage-init,k8s:controller-uid=39450b24-35b4-4945-8c6a-66be045e4331,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-storage-init,k8s:release_group=cinder" ipv4=10.0.0.142 ipv6= k8sPodName=openstack/cinder-storage-init-67nnw oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4b49645453 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2281 identity=7993 ipv4=10.0.0.142 ipv6= k8sPodName=openstack/cinder-storage-init-67nnw subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=4b49645453 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2281 identity=7993 ipv4=10.0.0.142 ipv6= k8sPodName=openstack/cinder-storage-init-67nnw subsys=endpoint level=info msg="Successful endpoint creation" containerID=4b49645453 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2281 identity=7993 ipv4=10.0.0.142 ipv6= k8sPodName=openstack/cinder-storage-init-67nnw subsys=daemon level=info msg="Delete endpoint request" containerID=4b49645453 endpointID=2281 k8sNamespace=openstack k8sPodName=cinder-storage-init-67nnw subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=39450b24-35b4-4945-8c6a-66be045e4331 k8s:batch.kubernetes.io/job-name=cinder-storage-init k8s:component=storage-init k8s:controller-uid=39450b24-35b4-4945-8c6a-66be045e4331 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-storage-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-storage-init k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=4b49645453 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2281 identity=7993 ipv4=10.0.0.142 ipv6= k8sPodName=openstack/cinder-storage-init-67nnw subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.136 ffde0586-30f5-44f2-ac47-c3085a2ac5cd default }" containerID=0e35ffaac15edd48469eae4761a9e4a8da98435184c1e4329e9da892dcaa1aab datapathConfiguration="&{false false false false false }" interface=lxcef29bd0b2518 k8sPodName=openstack/cinder-bootstrap-6k79z labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0e35ffaac1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3962 ipv4=10.0.0.136 ipv6= k8sPodName=openstack/cinder-bootstrap-6k79z subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0e35ffaac1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3962 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=ed16c21b-bea5-4ebd-bfa0-975744f93236,k8s:batch.kubernetes.io/job-name=cinder-bootstrap,k8s:component=bootstrap,k8s:controller-uid=ed16c21b-bea5-4ebd-bfa0-975744f93236,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-bootstrap,k8s:release_group=cinder" ipv4=10.0.0.136 ipv6= k8sPodName=openstack/cinder-bootstrap-6k79z subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=ed16c21b-bea5-4ebd-bfa0-975744f93236;k8s:batch.kubernetes.io/job-name=cinder-bootstrap;k8s:component=bootstrap;k8s:controller-uid=ed16c21b-bea5-4ebd-bfa0-975744f93236;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-bootstrap;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-bootstrap;k8s:release_group=cinder;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=0e35ffaac1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3962 identity=7030 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=ed16c21b-bea5-4ebd-bfa0-975744f93236,k8s:batch.kubernetes.io/job-name=cinder-bootstrap,k8s:component=bootstrap,k8s:controller-uid=ed16c21b-bea5-4ebd-bfa0-975744f93236,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-bootstrap,k8s:release_group=cinder" ipv4=10.0.0.136 ipv6= k8sPodName=openstack/cinder-bootstrap-6k79z oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0e35ffaac1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3962 identity=7030 ipv4=10.0.0.136 ipv6= k8sPodName=openstack/cinder-bootstrap-6k79z subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=0e35ffaac1 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3962 identity=7030 ipv4=10.0.0.136 ipv6= k8sPodName=openstack/cinder-bootstrap-6k79z subsys=endpoint level=info msg="Successful endpoint creation" containerID=0e35ffaac1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3962 identity=7030 ipv4=10.0.0.136 ipv6= k8sPodName=openstack/cinder-bootstrap-6k79z subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.245 aad9d858-36d8-4714-9cad-a81a8f14a338 default }" containerID=5cef0151ce8352927ab29990a54269d890019b96a6b9de07e18b23820680c91e datapathConfiguration="&{false false false false false }" interface=lxc3d8a072999be k8sPodName=openstack/cinder-volume-6f84f4d95c-8z5q5 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5cef0151ce datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2170 ipv4=10.0.0.245 ipv6= k8sPodName=openstack/cinder-volume-6f84f4d95c-8z5q5 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5cef0151ce datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2170 identityLabels="k8s:application=cinder,k8s:component=volume,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-volume,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=cinder" ipv4=10.0.0.245 ipv6= k8sPodName=openstack/cinder-volume-6f84f4d95c-8z5q5 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=5cef0151ce datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2170 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.245 ipv6= k8sPodName=openstack/cinder-volume-6f84f4d95c-8z5q5 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:component=volume;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-volume;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5cef0151ce datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2170 identity=935 identityLabels="k8s:application=cinder,k8s:component=volume,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-volume,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=cinder" ipv4=10.0.0.245 ipv6= k8sPodName=openstack/cinder-volume-6f84f4d95c-8z5q5 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5cef0151ce datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2170 identity=935 ipv4=10.0.0.245 ipv6= k8sPodName=openstack/cinder-volume-6f84f4d95c-8z5q5 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=5cef0151ce datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2170 identity=935 ipv4=10.0.0.245 ipv6= k8sPodName=openstack/cinder-volume-6f84f4d95c-8z5q5 subsys=endpoint level=info msg="Successful endpoint creation" containerID=5cef0151ce datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2170 identity=935 ipv4=10.0.0.245 ipv6= k8sPodName=openstack/cinder-volume-6f84f4d95c-8z5q5 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.52 3e58a7ab-24e0-45dd-9f61-de241e988dac default }" containerID=c484651c8a6f417b5fa23a879a6a25526c426c923044150a2c9c65d9153f8ac4 datapathConfiguration="&{false false false false false }" interface=lxc9de6727f1ee7 k8sPodName=openstack/cinder-backup-58ccdbb999-pbwts labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c484651c8a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3398 ipv4=10.0.0.52 ipv6= k8sPodName=openstack/cinder-backup-58ccdbb999-pbwts subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c484651c8a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3398 identityLabels="k8s:application=cinder,k8s:component=backup,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-backup,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=cinder" ipv4=10.0.0.52 ipv6= k8sPodName=openstack/cinder-backup-58ccdbb999-pbwts subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:component=backup;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-backup;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c484651c8a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3398 identity=6369 identityLabels="k8s:application=cinder,k8s:component=backup,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-backup,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=cinder" ipv4=10.0.0.52 ipv6= k8sPodName=openstack/cinder-backup-58ccdbb999-pbwts oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c484651c8a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3398 identity=6369 ipv4=10.0.0.52 ipv6= k8sPodName=openstack/cinder-backup-58ccdbb999-pbwts subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c484651c8a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3398 identity=6369 ipv4=10.0.0.52 ipv6= k8sPodName=openstack/cinder-backup-58ccdbb999-pbwts subsys=endpoint level=info msg="Successful endpoint creation" containerID=c484651c8a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3398 identity=6369 ipv4=10.0.0.52 ipv6= k8sPodName=openstack/cinder-backup-58ccdbb999-pbwts subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=0e35ffaac1 endpointID=3962 k8sNamespace=openstack k8sPodName=cinder-bootstrap-6k79z subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=ed16c21b-bea5-4ebd-bfa0-975744f93236 k8s:batch.kubernetes.io/job-name=cinder-bootstrap k8s:component=bootstrap k8s:controller-uid=ed16c21b-bea5-4ebd-bfa0-975744f93236 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-bootstrap k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-bootstrap k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=0e35ffaac1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3962 identity=7030 ipv4=10.0.0.136 ipv6= k8sPodName=openstack/cinder-bootstrap-6k79z subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.207 e2e7a088-d284-4c27-820f-464cbfe3885b default }" containerID=a5da52b066fb28e759d5cea989813d085521215b630553dcd37e8732dcd2a5ca datapathConfiguration="&{false false false false false }" interface=lxcff3aecb60feb k8sPodName=openstack/placement-api-696cd7b869-jxjf6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a5da52b066 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2998 ipv4=10.0.0.207 ipv6= k8sPodName=openstack/placement-api-696cd7b869-jxjf6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a5da52b066 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2998 identityLabels="k8s:application=placement,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=placement" ipv4=10.0.0.207 ipv6= k8sPodName=openstack/placement-api-696cd7b869-jxjf6 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=placement;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=placement-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=placement;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a5da52b066 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2998 identity=6461 identityLabels="k8s:application=placement,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=placement" ipv4=10.0.0.207 ipv6= k8sPodName=openstack/placement-api-696cd7b869-jxjf6 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a5da52b066 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2998 identity=6461 ipv4=10.0.0.207 ipv6= k8sPodName=openstack/placement-api-696cd7b869-jxjf6 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.173 7f6b6fb3-6f8b-4cee-91d6-9da3662523a3 default }" containerID=9957231e21c93b67b50f84239a7f09107bb19e3af3ea28b48fb05840dd082f26 datapathConfiguration="&{false false false false false }" interface=lxc4e68135e5c7b k8sPodName=openstack/placement-db-init-2j4tp labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9957231e21 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=621 ipv4=10.0.0.173 ipv6= k8sPodName=openstack/placement-db-init-2j4tp subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9957231e21 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=621 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=d4df7b72-be84-4a22-a571-7851fc605a2e,k8s:batch.kubernetes.io/job-name=placement-db-init,k8s:component=db-init,k8s:controller-uid=d4df7b72-be84-4a22-a571-7851fc605a2e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-db-init,k8s:release_group=placement" ipv4=10.0.0.173 ipv6= k8sPodName=openstack/placement-db-init-2j4tp subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=placement;k8s:batch.kubernetes.io/controller-uid=d4df7b72-be84-4a22-a571-7851fc605a2e;k8s:batch.kubernetes.io/job-name=placement-db-init;k8s:component=db-init;k8s:controller-uid=d4df7b72-be84-4a22-a571-7851fc605a2e;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=placement-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=placement-db-init;k8s:release_group=placement;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9957231e21 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=621 identity=43748 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=d4df7b72-be84-4a22-a571-7851fc605a2e,k8s:batch.kubernetes.io/job-name=placement-db-init,k8s:component=db-init,k8s:controller-uid=d4df7b72-be84-4a22-a571-7851fc605a2e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-db-init,k8s:release_group=placement" ipv4=10.0.0.173 ipv6= k8sPodName=openstack/placement-db-init-2j4tp oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9957231e21 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=621 identity=43748 ipv4=10.0.0.173 ipv6= k8sPodName=openstack/placement-db-init-2j4tp subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a5da52b066 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2998 identity=6461 ipv4=10.0.0.207 ipv6= k8sPodName=openstack/placement-api-696cd7b869-jxjf6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=a5da52b066 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2998 identity=6461 ipv4=10.0.0.207 ipv6= k8sPodName=openstack/placement-api-696cd7b869-jxjf6 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=9957231e21 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=621 identity=43748 ipv4=10.0.0.173 ipv6= k8sPodName=openstack/placement-db-init-2j4tp subsys=endpoint level=info msg="Successful endpoint creation" containerID=9957231e21 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=621 identity=43748 ipv4=10.0.0.173 ipv6= k8sPodName=openstack/placement-db-init-2j4tp subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=9957231e21 endpointID=621 k8sNamespace=openstack k8sPodName=placement-db-init-2j4tp subsys=daemon level=info msg="Releasing key" key="[k8s:application=placement k8s:batch.kubernetes.io/controller-uid=d4df7b72-be84-4a22-a571-7851fc605a2e k8s:batch.kubernetes.io/job-name=placement-db-init k8s:component=db-init k8s:controller-uid=d4df7b72-be84-4a22-a571-7851fc605a2e k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=placement-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=placement-db-init k8s:release_group=placement]" subsys=allocator level=info msg="Removed endpoint" containerID=9957231e21 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=621 identity=43748 ipv4=10.0.0.173 ipv6= k8sPodName=openstack/placement-db-init-2j4tp subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.228 684d1e31-083d-47a4-ac2e-98726228edb3 default }" containerID=c9ebb4cc136018f885e8c9eecd72df5628c9003a788c03dc27c343971d4785f7 datapathConfiguration="&{false false false false false }" interface=lxc44278663177f k8sPodName=openstack/placement-db-sync-88qpw labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c9ebb4cc13 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2599 ipv4=10.0.0.228 ipv6= k8sPodName=openstack/placement-db-sync-88qpw subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c9ebb4cc13 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2599 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=abb3b0ca-fe30-478d-86c0-bbace2e974dd,k8s:batch.kubernetes.io/job-name=placement-db-sync,k8s:component=db-sync,k8s:controller-uid=abb3b0ca-fe30-478d-86c0-bbace2e974dd,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-db-sync,k8s:release_group=placement" ipv4=10.0.0.228 ipv6= k8sPodName=openstack/placement-db-sync-88qpw subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=c9ebb4cc13 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2599 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.228 ipv6= k8sPodName=openstack/placement-db-sync-88qpw line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=placement;k8s:batch.kubernetes.io/controller-uid=abb3b0ca-fe30-478d-86c0-bbace2e974dd;k8s:batch.kubernetes.io/job-name=placement-db-sync;k8s:component=db-sync;k8s:controller-uid=abb3b0ca-fe30-478d-86c0-bbace2e974dd;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=placement-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=placement-db-sync;k8s:release_group=placement;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c9ebb4cc13 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2599 identity=35123 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=abb3b0ca-fe30-478d-86c0-bbace2e974dd,k8s:batch.kubernetes.io/job-name=placement-db-sync,k8s:component=db-sync,k8s:controller-uid=abb3b0ca-fe30-478d-86c0-bbace2e974dd,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-db-sync,k8s:release_group=placement" ipv4=10.0.0.228 ipv6= k8sPodName=openstack/placement-db-sync-88qpw oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c9ebb4cc13 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2599 identity=35123 ipv4=10.0.0.228 ipv6= k8sPodName=openstack/placement-db-sync-88qpw subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c9ebb4cc13 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2599 identity=35123 ipv4=10.0.0.228 ipv6= k8sPodName=openstack/placement-db-sync-88qpw subsys=endpoint level=info msg="Successful endpoint creation" containerID=c9ebb4cc13 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2599 identity=35123 ipv4=10.0.0.228 ipv6= k8sPodName=openstack/placement-db-sync-88qpw subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=c9ebb4cc13 endpointID=2599 k8sNamespace=openstack k8sPodName=placement-db-sync-88qpw subsys=daemon level=info msg="Releasing key" key="[k8s:application=placement k8s:batch.kubernetes.io/controller-uid=abb3b0ca-fe30-478d-86c0-bbace2e974dd k8s:batch.kubernetes.io/job-name=placement-db-sync k8s:component=db-sync k8s:controller-uid=abb3b0ca-fe30-478d-86c0-bbace2e974dd k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=placement-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=placement-db-sync k8s:release_group=placement]" subsys=allocator level=info msg="Removed endpoint" containerID=c9ebb4cc13 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2599 identity=35123 ipv4=10.0.0.228 ipv6= k8sPodName=openstack/placement-db-sync-88qpw subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.208 808b287a-752d-41b5-b9aa-aa330fcbd6c7 default }" containerID=7252aa68d63704ac9fae034ba8f1e3e0a8740d570f0a4c7b61fd65acd9a1f038 datapathConfiguration="&{false false false false false }" interface=lxcb58a7ba67097 k8sPodName=openstack/placement-ks-service-2559b labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7252aa68d6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3426 ipv4=10.0.0.208 ipv6= k8sPodName=openstack/placement-ks-service-2559b subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7252aa68d6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3426 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=9a41f68d-5be3-4e27-b091-18a828a8de06,k8s:batch.kubernetes.io/job-name=placement-ks-service,k8s:component=ks-service,k8s:controller-uid=9a41f68d-5be3-4e27-b091-18a828a8de06,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-ks-service,k8s:release_group=placement" ipv4=10.0.0.208 ipv6= k8sPodName=openstack/placement-ks-service-2559b subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=placement;k8s:batch.kubernetes.io/controller-uid=9a41f68d-5be3-4e27-b091-18a828a8de06;k8s:batch.kubernetes.io/job-name=placement-ks-service;k8s:component=ks-service;k8s:controller-uid=9a41f68d-5be3-4e27-b091-18a828a8de06;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=placement-ks-service;k8s:release_group=placement;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7252aa68d6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3426 identity=63531 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=9a41f68d-5be3-4e27-b091-18a828a8de06,k8s:batch.kubernetes.io/job-name=placement-ks-service,k8s:component=ks-service,k8s:controller-uid=9a41f68d-5be3-4e27-b091-18a828a8de06,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-ks-service,k8s:release_group=placement" ipv4=10.0.0.208 ipv6= k8sPodName=openstack/placement-ks-service-2559b oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7252aa68d6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3426 identity=63531 ipv4=10.0.0.208 ipv6= k8sPodName=openstack/placement-ks-service-2559b subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=7252aa68d6 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3426 identity=63531 ipv4=10.0.0.208 ipv6= k8sPodName=openstack/placement-ks-service-2559b subsys=endpoint level=info msg="Successful endpoint creation" containerID=7252aa68d6 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3426 identity=63531 ipv4=10.0.0.208 ipv6= k8sPodName=openstack/placement-ks-service-2559b subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=7252aa68d6 endpointID=3426 k8sNamespace=openstack k8sPodName=placement-ks-service-2559b subsys=daemon level=info msg="Releasing key" key="[k8s:application=placement k8s:batch.kubernetes.io/controller-uid=9a41f68d-5be3-4e27-b091-18a828a8de06 k8s:batch.kubernetes.io/job-name=placement-ks-service k8s:component=ks-service k8s:controller-uid=9a41f68d-5be3-4e27-b091-18a828a8de06 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=placement-ks-service k8s:release_group=placement]" subsys=allocator level=info msg="Removed endpoint" containerID=7252aa68d6 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3426 identity=63531 ipv4=10.0.0.208 ipv6= k8sPodName=openstack/placement-ks-service-2559b subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.49 49118f71-4c29-4024-b5fb-d627f5010507 default }" containerID=cb369d3543fd9a60211d7ea62236efb3d3af491477723d4f6290905bc5a2517a datapathConfiguration="&{false false false false false }" interface=lxce0634e6b7e3c k8sPodName=openstack/placement-ks-user-b5tsc labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=cb369d3543 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3614 ipv4=10.0.0.49 ipv6= k8sPodName=openstack/placement-ks-user-b5tsc subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=cb369d3543 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3614 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=91698e68-5957-4c9c-b7f8-e51e9e221d88,k8s:batch.kubernetes.io/job-name=placement-ks-user,k8s:component=ks-user,k8s:controller-uid=91698e68-5957-4c9c-b7f8-e51e9e221d88,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-ks-user,k8s:release_group=placement" ipv4=10.0.0.49 ipv6= k8sPodName=openstack/placement-ks-user-b5tsc subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=placement;k8s:batch.kubernetes.io/controller-uid=91698e68-5957-4c9c-b7f8-e51e9e221d88;k8s:batch.kubernetes.io/job-name=placement-ks-user;k8s:component=ks-user;k8s:controller-uid=91698e68-5957-4c9c-b7f8-e51e9e221d88;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=placement-ks-user;k8s:release_group=placement;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=cb369d3543 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3614 identity=31875 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=91698e68-5957-4c9c-b7f8-e51e9e221d88,k8s:batch.kubernetes.io/job-name=placement-ks-user,k8s:component=ks-user,k8s:controller-uid=91698e68-5957-4c9c-b7f8-e51e9e221d88,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-ks-user,k8s:release_group=placement" ipv4=10.0.0.49 ipv6= k8sPodName=openstack/placement-ks-user-b5tsc oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=cb369d3543 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3614 identity=31875 ipv4=10.0.0.49 ipv6= k8sPodName=openstack/placement-ks-user-b5tsc subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=cb369d3543 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3614 identity=31875 ipv4=10.0.0.49 ipv6= k8sPodName=openstack/placement-ks-user-b5tsc subsys=endpoint level=info msg="Successful endpoint creation" containerID=cb369d3543 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3614 identity=31875 ipv4=10.0.0.49 ipv6= k8sPodName=openstack/placement-ks-user-b5tsc subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=cb369d3543 endpointID=3614 k8sNamespace=openstack k8sPodName=placement-ks-user-b5tsc subsys=daemon level=info msg="Releasing key" key="[k8s:application=placement k8s:batch.kubernetes.io/controller-uid=91698e68-5957-4c9c-b7f8-e51e9e221d88 k8s:batch.kubernetes.io/job-name=placement-ks-user k8s:component=ks-user k8s:controller-uid=91698e68-5957-4c9c-b7f8-e51e9e221d88 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=placement-ks-user k8s:release_group=placement]" subsys=allocator level=info msg="Removed endpoint" containerID=cb369d3543 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3614 identity=31875 ipv4=10.0.0.49 ipv6= k8sPodName=openstack/placement-ks-user-b5tsc subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.226 800e795f-79c0-4213-bd2a-49cf769f9a46 default }" containerID=5cb56411806b88178aaee27622f862aeca1ad714dc9a10787b70ada1fe543955 datapathConfiguration="&{false false false false false }" interface=lxc7734fadf8812 k8sPodName=openstack/placement-ks-endpoints-2zv5f labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5cb5641180 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1728 ipv4=10.0.0.226 ipv6= k8sPodName=openstack/placement-ks-endpoints-2zv5f subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5cb5641180 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1728 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=033c0474-1eaa-4538-b28a-0e90ae8de467,k8s:batch.kubernetes.io/job-name=placement-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=033c0474-1eaa-4538-b28a-0e90ae8de467,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-ks-endpoints,k8s:release_group=placement" ipv4=10.0.0.226 ipv6= k8sPodName=openstack/placement-ks-endpoints-2zv5f subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=5cb5641180 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1728 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.226 ipv6= k8sPodName=openstack/placement-ks-endpoints-2zv5f line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=placement;k8s:batch.kubernetes.io/controller-uid=033c0474-1eaa-4538-b28a-0e90ae8de467;k8s:batch.kubernetes.io/job-name=placement-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=033c0474-1eaa-4538-b28a-0e90ae8de467;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=placement-ks-endpoints;k8s:release_group=placement;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5cb5641180 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1728 identity=49080 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=033c0474-1eaa-4538-b28a-0e90ae8de467,k8s:batch.kubernetes.io/job-name=placement-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=033c0474-1eaa-4538-b28a-0e90ae8de467,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-ks-endpoints,k8s:release_group=placement" ipv4=10.0.0.226 ipv6= k8sPodName=openstack/placement-ks-endpoints-2zv5f oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5cb5641180 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1728 identity=49080 ipv4=10.0.0.226 ipv6= k8sPodName=openstack/placement-ks-endpoints-2zv5f subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=5cb5641180 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1728 identity=49080 ipv4=10.0.0.226 ipv6= k8sPodName=openstack/placement-ks-endpoints-2zv5f subsys=endpoint level=info msg="Successful endpoint creation" containerID=5cb5641180 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1728 identity=49080 ipv4=10.0.0.226 ipv6= k8sPodName=openstack/placement-ks-endpoints-2zv5f subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=5cb5641180 endpointID=1728 k8sNamespace=openstack k8sPodName=placement-ks-endpoints-2zv5f subsys=daemon level=info msg="Releasing key" key="[k8s:application=placement k8s:batch.kubernetes.io/controller-uid=033c0474-1eaa-4538-b28a-0e90ae8de467 k8s:batch.kubernetes.io/job-name=placement-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=033c0474-1eaa-4538-b28a-0e90ae8de467 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=placement-ks-endpoints k8s:release_group=placement]" subsys=allocator level=info msg="Removed endpoint" containerID=5cb5641180 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1728 identity=49080 ipv4=10.0.0.226 ipv6= k8sPodName=openstack/placement-ks-endpoints-2zv5f subsys=endpoint