level=info msg="Memory available for map entries (0.003% of 67421626368B): 168554065B" subsys=config level=info msg="option bpf-ct-global-tcp-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-ct-global-any-max set by dynamic sizing to 295708" subsys=config level=info msg="option bpf-nat-global-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-neigh-global-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-sock-rev-map-max set by dynamic sizing to 295708" subsys=config level=info msg=" --agent-health-port='9879'" subsys=daemon level=info msg=" --agent-labels=''" subsys=daemon level=info msg=" --agent-liveness-update-interval='1s'" subsys=daemon level=info msg=" --agent-not-ready-taint-key='node.cilium.io/agent-not-ready'" subsys=daemon level=info msg=" --allocator-list-timeout='3m0s'" subsys=daemon level=info msg=" --allow-icmp-frag-needed='true'" subsys=daemon level=info msg=" --allow-localhost='auto'" subsys=daemon level=info msg=" --annotate-k8s-node='false'" subsys=daemon level=info msg=" --api-rate-limit=''" subsys=daemon level=info msg=" --arping-refresh-period='30s'" subsys=daemon level=info msg=" --auto-create-cilium-node-resource='true'" subsys=daemon level=info msg=" --auto-direct-node-routes='false'" subsys=daemon level=info msg=" --bgp-announce-lb-ip='false'" subsys=daemon level=info msg=" --bgp-announce-pod-cidr='false'" subsys=daemon level=info msg=" --bgp-config-path='/var/lib/cilium/bgp/config.yaml'" subsys=daemon level=info msg=" --bpf-auth-map-max='524288'" subsys=daemon level=info msg=" --bpf-ct-global-any-max='262144'" subsys=daemon level=info msg=" --bpf-ct-global-tcp-max='524288'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-any='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp='6h0m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp-fin='10s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp-syn='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-any='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-tcp='6h0m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-tcp-grace='1m0s'" subsys=daemon level=info msg=" --bpf-filter-priority='1'" subsys=daemon level=info msg=" --bpf-fragments-map-max='8192'" subsys=daemon level=info msg=" --bpf-lb-acceleration='disabled'" subsys=daemon level=info msg=" --bpf-lb-affinity-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-algorithm='random'" subsys=daemon level=info msg=" --bpf-lb-dev-ip-addr-inherit=''" subsys=daemon level=info msg=" --bpf-lb-dsr-dispatch='opt'" subsys=daemon level=info msg=" --bpf-lb-dsr-l4-xlate='frontend'" subsys=daemon level=info msg=" --bpf-lb-external-clusterip='false'" subsys=daemon level=info msg=" --bpf-lb-maglev-hash-seed='JLfvgnHc2kaSUFaI'" subsys=daemon level=info msg=" --bpf-lb-maglev-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-maglev-table-size='16381'" subsys=daemon level=info msg=" --bpf-lb-map-max='65536'" subsys=daemon level=info msg=" --bpf-lb-mode='snat'" subsys=daemon level=info msg=" --bpf-lb-rev-nat-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-rss-ipv4-src-cidr=''" subsys=daemon level=info msg=" --bpf-lb-rss-ipv6-src-cidr=''" subsys=daemon level=info msg=" --bpf-lb-service-backend-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-service-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-sock='false'" subsys=daemon level=info msg=" --bpf-lb-sock-hostns-only='false'" subsys=daemon level=info msg=" --bpf-lb-source-range-map-max='0'" subsys=daemon level=info msg=" --bpf-map-dynamic-size-ratio='0.0025'" subsys=daemon level=info msg=" --bpf-map-event-buffers=''" subsys=daemon level=info msg=" --bpf-nat-global-max='524288'" subsys=daemon level=info msg=" --bpf-neigh-global-max='524288'" subsys=daemon level=info msg=" --bpf-policy-map-full-reconciliation-interval='15m0s'" subsys=daemon level=info msg=" --bpf-policy-map-max='16384'" subsys=daemon level=info msg=" --bpf-root='/sys/fs/bpf'" subsys=daemon level=info msg=" --bpf-sock-rev-map-max='262144'" subsys=daemon level=info msg=" --bypass-ip-availability-upon-restore='false'" subsys=daemon level=info msg=" --certificates-directory='/var/run/cilium/certs'" subsys=daemon level=info msg=" --cflags=''" subsys=daemon level=info msg=" --cgroup-root='/run/cilium/cgroupv2'" subsys=daemon level=info msg=" --cilium-endpoint-gc-interval='5m0s'" subsys=daemon level=info msg=" --cluster-health-port='4240'" subsys=daemon level=info msg=" --cluster-id='0'" subsys=daemon level=info msg=" --cluster-name='default'" subsys=daemon level=info msg=" --cluster-pool-ipv4-cidr='10.0.0.0/8'" subsys=daemon level=info msg=" --cluster-pool-ipv4-mask-size='24'" subsys=daemon level=info msg=" --clustermesh-config='/var/lib/cilium/clustermesh/'" subsys=daemon level=info msg=" --clustermesh-ip-identities-sync-timeout='1m0s'" subsys=daemon level=info msg=" --cmdref=''" subsys=daemon level=info msg=" --cni-chaining-mode='none'" subsys=daemon level=info msg=" --cni-chaining-target=''" subsys=daemon level=info msg=" --cni-exclusive='true'" subsys=daemon level=info msg=" --cni-external-routing='false'" subsys=daemon level=info msg=" --cni-log-file='/var/run/cilium/cilium-cni.log'" subsys=daemon level=info msg=" --cnp-node-status-gc-interval='0s'" subsys=daemon level=info msg=" --config=''" subsys=daemon level=info msg=" --config-dir='/tmp/cilium/config-map'" subsys=daemon level=info msg=" --config-sources='config-map:kube-system/cilium-config'" subsys=daemon level=info msg=" --conntrack-gc-interval='0s'" subsys=daemon level=info msg=" --conntrack-gc-max-interval='0s'" subsys=daemon level=info msg=" --crd-wait-timeout='5m0s'" subsys=daemon level=info msg=" --custom-cni-conf='false'" subsys=daemon level=info msg=" --datapath-mode='veth'" subsys=daemon level=info msg=" --debug='false'" subsys=daemon level=info msg=" --debug-verbose=''" subsys=daemon level=info msg=" --derive-masquerade-ip-addr-from-device=''" subsys=daemon level=info msg=" --devices=''" subsys=daemon level=info msg=" --direct-routing-device=''" subsys=daemon level=info msg=" --disable-cnp-status-updates='true'" subsys=daemon level=info msg=" --disable-endpoint-crd='false'" subsys=daemon level=info msg=" --disable-envoy-version-check='false'" subsys=daemon level=info msg=" --disable-iptables-feeder-rules=''" subsys=daemon level=info msg=" --dns-max-ips-per-restored-rule='1000'" subsys=daemon level=info msg=" --dns-policy-unload-on-shutdown='false'" subsys=daemon level=info msg=" --dnsproxy-concurrency-limit='0'" subsys=daemon level=info msg=" --dnsproxy-concurrency-processing-grace-period='0s'" subsys=daemon level=info msg=" --dnsproxy-enable-transparent-mode='true'" subsys=daemon level=info msg=" --dnsproxy-lock-count='128'" subsys=daemon level=info msg=" --dnsproxy-lock-timeout='500ms'" subsys=daemon level=info msg=" --egress-gateway-policy-map-max='16384'" subsys=daemon level=info msg=" --egress-gateway-reconciliation-trigger-interval='1s'" subsys=daemon level=info msg=" --egress-masquerade-interfaces=''" subsys=daemon level=info msg=" --egress-multi-home-ip-rule-compat='false'" subsys=daemon level=info msg=" --enable-auto-protect-node-port-range='true'" subsys=daemon level=info msg=" --enable-bandwidth-manager='false'" subsys=daemon level=info msg=" --enable-bbr='false'" subsys=daemon level=info msg=" --enable-bgp-control-plane='false'" subsys=daemon level=info msg=" --enable-bpf-clock-probe='false'" subsys=daemon level=info msg=" --enable-bpf-masquerade='false'" subsys=daemon level=info msg=" --enable-bpf-tproxy='false'" subsys=daemon level=info msg=" --enable-cilium-api-server-access='*'" subsys=daemon level=info msg=" --enable-cilium-endpoint-slice='false'" subsys=daemon level=info msg=" --enable-cilium-health-api-server-access='*'" subsys=daemon level=info msg=" --enable-custom-calls='false'" subsys=daemon level=info msg=" --enable-endpoint-health-checking='true'" subsys=daemon level=info msg=" --enable-endpoint-routes='false'" subsys=daemon level=info msg=" --enable-envoy-config='false'" subsys=daemon level=info msg=" --enable-external-ips='false'" subsys=daemon level=info msg=" --enable-health-check-nodeport='true'" subsys=daemon level=info msg=" --enable-health-checking='true'" subsys=daemon level=info msg=" --enable-high-scale-ipcache='false'" subsys=daemon level=info msg=" --enable-host-firewall='false'" subsys=daemon level=info msg=" --enable-host-legacy-routing='false'" subsys=daemon level=info msg=" --enable-host-port='false'" subsys=daemon level=info msg=" --enable-hubble='false'" subsys=daemon level=info msg=" --enable-hubble-recorder-api='true'" subsys=daemon level=info msg=" --enable-icmp-rules='true'" subsys=daemon level=info msg=" --enable-identity-mark='true'" subsys=daemon level=info msg=" --enable-ip-masq-agent='false'" subsys=daemon level=info msg=" --enable-ipsec='false'" subsys=daemon level=info msg=" --enable-ipsec-key-watcher='true'" subsys=daemon level=info msg=" --enable-ipv4='true'" subsys=daemon level=info msg=" --enable-ipv4-big-tcp='false'" subsys=daemon level=info msg=" --enable-ipv4-egress-gateway='false'" subsys=daemon level=info msg=" --enable-ipv4-fragment-tracking='true'" subsys=daemon level=info msg=" --enable-ipv4-masquerade='true'" subsys=daemon level=info msg=" --enable-ipv6='false'" subsys=daemon level=info msg=" --enable-ipv6-big-tcp='false'" subsys=daemon level=info msg=" --enable-ipv6-masquerade='true'" subsys=daemon level=info msg=" --enable-ipv6-ndp='false'" subsys=daemon level=info msg=" --enable-k8s='true'" subsys=daemon level=info msg=" --enable-k8s-api-discovery='false'" subsys=daemon level=info msg=" --enable-k8s-endpoint-slice='true'" subsys=daemon level=info msg=" --enable-k8s-event-handover='false'" subsys=daemon level=info msg=" --enable-k8s-networkpolicy='true'" subsys=daemon level=info msg=" --enable-k8s-terminating-endpoint='true'" subsys=daemon level=info msg=" --enable-l2-announcements='false'" subsys=daemon level=info msg=" --enable-l2-neigh-discovery='true'" subsys=daemon level=info msg=" --enable-l2-pod-announcements='false'" subsys=daemon level=info msg=" --enable-l7-proxy='true'" subsys=daemon level=info msg=" --enable-local-node-route='true'" subsys=daemon level=info msg=" --enable-local-redirect-policy='false'" subsys=daemon level=info msg=" --enable-mke='false'" subsys=daemon level=info msg=" --enable-monitor='true'" subsys=daemon level=info msg=" --enable-nat46x64-gateway='false'" subsys=daemon level=info msg=" --enable-node-port='false'" subsys=daemon level=info msg=" --enable-pmtu-discovery='false'" subsys=daemon level=info msg=" --enable-policy='default'" subsys=daemon level=info msg=" --enable-recorder='false'" subsys=daemon level=info msg=" --enable-remote-node-identity='true'" subsys=daemon level=info msg=" --enable-runtime-device-detection='false'" subsys=daemon level=info msg=" --enable-sctp='false'" subsys=daemon level=info msg=" --enable-service-topology='false'" subsys=daemon level=info msg=" --enable-session-affinity='false'" subsys=daemon level=info msg=" --enable-srv6='false'" subsys=daemon level=info msg=" --enable-stale-cilium-endpoint-cleanup='true'" subsys=daemon level=info msg=" --enable-svc-source-range-check='true'" subsys=daemon level=info msg=" --enable-tracing='false'" subsys=daemon level=info msg=" --enable-unreachable-routes='false'" subsys=daemon level=info msg=" --enable-vtep='false'" subsys=daemon level=info msg=" --enable-well-known-identities='false'" subsys=daemon level=info msg=" --enable-wireguard='false'" subsys=daemon level=info msg=" --enable-wireguard-userspace-fallback='false'" subsys=daemon level=info msg=" --enable-xdp-prefilter='false'" subsys=daemon level=info msg=" --enable-xt-socket-fallback='true'" subsys=daemon level=info msg=" --encrypt-interface=''" subsys=daemon level=info msg=" --encrypt-node='false'" subsys=daemon level=info msg=" --endpoint-gc-interval='5m0s'" subsys=daemon level=info msg=" --endpoint-queue-size='25'" subsys=daemon level=info msg=" --endpoint-status=''" subsys=daemon level=info msg=" --envoy-config-timeout='2m0s'" subsys=daemon level=info msg=" --envoy-log=''" subsys=daemon level=info msg=" --exclude-local-address=''" subsys=daemon level=info msg=" --external-envoy-proxy='false'" subsys=daemon level=info msg=" --fixed-identity-mapping=''" subsys=daemon level=info msg=" --fqdn-regex-compile-lru-size='1024'" subsys=daemon level=info msg=" --gops-port='9890'" subsys=daemon level=info msg=" --http-403-msg=''" subsys=daemon level=info msg=" --http-idle-timeout='0'" subsys=daemon level=info msg=" --http-max-grpc-timeout='0'" subsys=daemon level=info msg=" --http-normalize-path='true'" subsys=daemon level=info msg=" --http-request-timeout='3600'" subsys=daemon level=info msg=" --http-retry-count='3'" subsys=daemon level=info msg=" --http-retry-timeout='0'" subsys=daemon level=info msg=" --hubble-disable-tls='false'" subsys=daemon level=info msg=" --hubble-event-buffer-capacity='4095'" subsys=daemon level=info msg=" --hubble-event-queue-size='0'" subsys=daemon level=info msg=" --hubble-export-file-compress='false'" subsys=daemon level=info msg=" --hubble-export-file-max-backups='5'" subsys=daemon level=info msg=" --hubble-export-file-max-size-mb='10'" subsys=daemon level=info msg=" --hubble-export-file-path=''" subsys=daemon level=info msg=" --hubble-listen-address=''" subsys=daemon level=info msg=" --hubble-metrics=''" subsys=daemon level=info msg=" --hubble-metrics-server=''" subsys=daemon level=info msg=" --hubble-monitor-events=''" subsys=daemon level=info msg=" --hubble-prefer-ipv6='false'" subsys=daemon level=info msg=" --hubble-recorder-sink-queue-size='1024'" subsys=daemon level=info msg=" --hubble-recorder-storage-path='/var/run/cilium/pcaps'" subsys=daemon level=info msg=" --hubble-skip-unknown-cgroup-ids='true'" subsys=daemon level=info msg=" --hubble-socket-path='/var/run/cilium/hubble.sock'" subsys=daemon level=info msg=" --hubble-tls-cert-file=''" subsys=daemon level=info msg=" --hubble-tls-client-ca-files=''" subsys=daemon level=info msg=" --hubble-tls-key-file=''" subsys=daemon level=info msg=" --identity-allocation-mode='crd'" subsys=daemon level=info msg=" --identity-change-grace-period='5s'" subsys=daemon level=info msg=" --identity-gc-interval='15m0s'" subsys=daemon level=info msg=" --identity-heartbeat-timeout='30m0s'" subsys=daemon level=info msg=" --identity-restore-grace-period='10m0s'" subsys=daemon level=info msg=" --install-egress-gateway-routes='false'" subsys=daemon level=info msg=" --install-iptables-rules='true'" subsys=daemon level=info msg=" --install-no-conntrack-iptables-rules='false'" subsys=daemon level=info msg=" --ip-allocation-timeout='2m0s'" subsys=daemon level=info msg=" --ip-masq-agent-config-path='/etc/config/ip-masq-agent'" subsys=daemon level=info msg=" --ipam='cluster-pool'" subsys=daemon level=info msg=" --ipam-cilium-node-update-rate='15s'" subsys=daemon level=info msg=" --ipam-multi-pool-pre-allocation='default=8'" subsys=daemon level=info msg=" --ipsec-key-file=''" subsys=daemon level=info msg=" --ipsec-key-rotation-duration='5m0s'" subsys=daemon level=info msg=" --iptables-lock-timeout='5s'" subsys=daemon level=info msg=" --iptables-random-fully='false'" subsys=daemon level=info msg=" --ipv4-native-routing-cidr=''" subsys=daemon level=info msg=" --ipv4-node='auto'" subsys=daemon level=info msg=" --ipv4-pod-subnets=''" subsys=daemon level=info msg=" --ipv4-range='auto'" subsys=daemon level=info msg=" --ipv4-service-loopback-address='169.254.42.1'" subsys=daemon level=info msg=" --ipv4-service-range='auto'" subsys=daemon level=info msg=" --ipv6-cluster-alloc-cidr='f00d::/64'" subsys=daemon level=info msg=" --ipv6-mcast-device=''" subsys=daemon level=info msg=" --ipv6-native-routing-cidr=''" subsys=daemon level=info msg=" --ipv6-node='auto'" subsys=daemon level=info msg=" --ipv6-pod-subnets=''" subsys=daemon level=info msg=" --ipv6-range='auto'" subsys=daemon level=info msg=" --ipv6-service-range='auto'" subsys=daemon level=info msg=" --join-cluster='false'" subsys=daemon level=info msg=" --k8s-api-server=''" subsys=daemon level=info msg=" --k8s-client-burst='10'" subsys=daemon level=info msg=" --k8s-client-qps='5'" subsys=daemon level=info msg=" --k8s-heartbeat-timeout='30s'" subsys=daemon level=info msg=" --k8s-kubeconfig-path=''" subsys=daemon level=info msg=" --k8s-namespace='kube-system'" subsys=daemon level=info msg=" --k8s-require-ipv4-pod-cidr='false'" subsys=daemon level=info msg=" --k8s-require-ipv6-pod-cidr='false'" subsys=daemon level=info msg=" --k8s-service-cache-size='128'" subsys=daemon level=info msg=" --k8s-service-proxy-name=''" subsys=daemon level=info msg=" --k8s-sync-timeout='3m0s'" subsys=daemon level=info msg=" --k8s-watcher-endpoint-selector='metadata.name!=kube-scheduler,metadata.name!=kube-controller-manager,metadata.name!=etcd-operator,metadata.name!=gcp-controller-manager'" subsys=daemon level=info msg=" --keep-config='false'" subsys=daemon level=info msg=" --kube-proxy-replacement='disabled'" subsys=daemon level=info msg=" --kube-proxy-replacement-healthz-bind-address=''" subsys=daemon level=info msg=" --kvstore=''" subsys=daemon level=info msg=" --kvstore-connectivity-timeout='2m0s'" subsys=daemon level=info msg=" --kvstore-lease-ttl='15m0s'" subsys=daemon level=info msg=" --kvstore-max-consecutive-quorum-errors='2'" subsys=daemon level=info msg=" --kvstore-opt=''" subsys=daemon level=info msg=" --kvstore-periodic-sync='5m0s'" subsys=daemon level=info msg=" --l2-announcements-lease-duration='15s'" subsys=daemon level=info msg=" --l2-announcements-renew-deadline='5s'" subsys=daemon level=info msg=" --l2-announcements-retry-period='2s'" subsys=daemon level=info msg=" --l2-pod-announcements-interface=''" subsys=daemon level=info msg=" --label-prefix-file=''" subsys=daemon level=info msg=" --labels=''" subsys=daemon level=info msg=" --lib-dir='/var/lib/cilium'" subsys=daemon level=info msg=" --local-max-addr-scope='252'" subsys=daemon level=info msg=" --local-router-ipv4=''" subsys=daemon level=info msg=" --local-router-ipv6=''" subsys=daemon level=info msg=" --log-driver=''" subsys=daemon level=info msg=" --log-opt=''" subsys=daemon level=info msg=" --log-system-load='false'" subsys=daemon level=info msg=" --max-controller-interval='0'" subsys=daemon level=info msg=" --mesh-auth-enabled='true'" subsys=daemon level=info msg=" --mesh-auth-gc-interval='5m0s'" subsys=daemon level=info msg=" --mesh-auth-mutual-listener-port='0'" subsys=daemon level=info msg=" --mesh-auth-queue-size='1024'" subsys=daemon level=info msg=" --mesh-auth-rotated-identities-queue-size='1024'" subsys=daemon level=info msg=" --mesh-auth-signal-backoff-duration='1s'" subsys=daemon level=info msg=" --mesh-auth-spiffe-trust-domain='spiffe.cilium'" subsys=daemon level=info msg=" --mesh-auth-spire-admin-socket=''" subsys=daemon level=info msg=" --metrics=''" subsys=daemon level=info msg=" --mke-cgroup-mount=''" subsys=daemon level=info msg=" --monitor-aggregation='medium'" subsys=daemon level=info msg=" --monitor-aggregation-flags='all'" subsys=daemon level=info msg=" --monitor-aggregation-interval='5s'" subsys=daemon level=info msg=" --monitor-queue-size='0'" subsys=daemon level=info msg=" --mtu='0'" subsys=daemon level=info msg=" --node-encryption-opt-out-labels='node-role.kubernetes.io/control-plane'" subsys=daemon level=info msg=" --node-port-acceleration='disabled'" subsys=daemon level=info msg=" --node-port-algorithm='random'" subsys=daemon level=info msg=" --node-port-bind-protection='true'" subsys=daemon level=info msg=" --node-port-mode='snat'" subsys=daemon level=info msg=" --node-port-range='30000,32767'" subsys=daemon level=info msg=" --nodes-gc-interval='5m0s'" subsys=daemon level=info msg=" --operator-api-serve-addr='127.0.0.1:9234'" subsys=daemon level=info msg=" --policy-audit-mode='false'" subsys=daemon level=info msg=" --policy-queue-size='100'" subsys=daemon level=info msg=" --policy-trigger-interval='1s'" subsys=daemon level=info msg=" --pprof='false'" subsys=daemon level=info msg=" --pprof-address='localhost'" subsys=daemon level=info msg=" --pprof-port='6060'" subsys=daemon level=info msg=" --preallocate-bpf-maps='false'" subsys=daemon level=info msg=" --prepend-iptables-chains='true'" subsys=daemon level=info msg=" --procfs='/host/proc'" subsys=daemon level=info msg=" --prometheus-serve-addr=':9962'" subsys=daemon level=info msg=" --proxy-connect-timeout='2'" subsys=daemon level=info msg=" --proxy-gid='1337'" subsys=daemon level=info msg=" --proxy-idle-timeout-seconds='60'" subsys=daemon level=info msg=" --proxy-max-connection-duration-seconds='0'" subsys=daemon level=info msg=" --proxy-max-requests-per-connection='0'" subsys=daemon level=info msg=" --proxy-prometheus-port='9964'" subsys=daemon level=info msg=" --read-cni-conf=''" subsys=daemon level=info msg=" --remove-cilium-node-taints='true'" subsys=daemon level=info msg=" --restore='true'" subsys=daemon level=info msg=" --route-metric='0'" subsys=daemon level=info msg=" --routing-mode='tunnel'" subsys=daemon level=info msg=" --set-cilium-is-up-condition='true'" subsys=daemon level=info msg=" --set-cilium-node-taints='true'" subsys=daemon level=info msg=" --sidecar-istio-proxy-image='cilium/istio_proxy'" subsys=daemon level=info msg=" --single-cluster-route='false'" subsys=daemon level=info msg=" --skip-cnp-status-startup-clean='false'" subsys=daemon level=info msg=" --socket-path='/var/run/cilium/cilium.sock'" subsys=daemon level=info msg=" --srv6-encap-mode='reduced'" subsys=daemon level=info msg=" --state-dir='/var/run/cilium'" subsys=daemon level=info msg=" --synchronize-k8s-nodes='true'" subsys=daemon level=info msg=" --tofqdns-dns-reject-response-code='refused'" subsys=daemon level=info msg=" --tofqdns-enable-dns-compression='true'" subsys=daemon level=info msg=" --tofqdns-endpoint-max-ip-per-hostname='50'" subsys=daemon level=info msg=" --tofqdns-idle-connection-grace-period='0s'" subsys=daemon level=info msg=" --tofqdns-max-deferred-connection-deletes='10000'" subsys=daemon level=info msg=" --tofqdns-min-ttl='0'" subsys=daemon level=info msg=" --tofqdns-pre-cache=''" subsys=daemon level=info msg=" --tofqdns-proxy-port='0'" subsys=daemon level=info msg=" --tofqdns-proxy-response-max-delay='100ms'" subsys=daemon level=info msg=" --trace-payloadlen='128'" subsys=daemon level=info msg=" --trace-sock='true'" subsys=daemon level=info msg=" --tunnel=''" subsys=daemon level=info msg=" --tunnel-port='6082'" subsys=daemon level=info msg=" --tunnel-protocol='geneve'" subsys=daemon level=info msg=" --unmanaged-pod-watcher-interval='15'" subsys=daemon level=info msg=" --use-cilium-internal-ip-for-ipsec='false'" subsys=daemon level=info msg=" --version='false'" subsys=daemon level=info msg=" --vlan-bpf-bypass=''" subsys=daemon level=info msg=" --vtep-cidr=''" subsys=daemon level=info msg=" --vtep-endpoint=''" subsys=daemon level=info msg=" --vtep-mac=''" subsys=daemon level=info msg=" --vtep-mask=''" subsys=daemon level=info msg=" --wireguard-encapsulate='false'" subsys=daemon level=info msg=" --write-cni-conf-when-ready='/host/etc/cni/net.d/05-cilium.conflist'" subsys=daemon level=info msg=" _ _ _" subsys=daemon level=info msg=" ___|_| |_|_ _ _____" subsys=daemon level=info msg="| _| | | | | | |" subsys=daemon level=info msg="|___|_|_|_|___|_|_|_|" subsys=daemon level=info msg="Cilium 1.14.8 cf6e022e 2024-03-13T12:23:35-04:00 go version go1.21.8 linux/amd64" subsys=daemon level=info msg="clang (10.0.0) and kernel (5.15.0) versions: OK!" subsys=linux-datapath level=info msg="linking environment: OK!" subsys=linux-datapath level=info msg="Kernel config file not found: if the agent fails to start, check the system requirements at https://docs.cilium.io/en/stable/operations/system_requirements" subsys=probes level=info msg="Detected mounted BPF filesystem at /sys/fs/bpf" subsys=bpf level=info msg="Mounted cgroupv2 filesystem at /run/cilium/cgroupv2" subsys=cgroups level=info msg="Parsing base label prefixes from default label list" subsys=labels-filter level=info msg="Parsing additional label prefixes from user inputs: []" subsys=labels-filter level=info msg="Final label prefixes to be used for identity evaluation:" subsys=labels-filter level=info msg=" - reserved:.*" subsys=labels-filter level=info msg=" - :io\\.kubernetes\\.pod\\.namespace" subsys=labels-filter level=info msg=" - :io\\.cilium\\.k8s\\.namespace\\.labels" subsys=labels-filter level=info msg=" - :app\\.kubernetes\\.io" subsys=labels-filter level=info msg=" - !:io\\.kubernetes" subsys=labels-filter level=info msg=" - !:kubernetes\\.io" subsys=labels-filter level=info msg=" - !:.*beta\\.kubernetes\\.io" subsys=labels-filter level=info msg=" - !:k8s\\.io" subsys=labels-filter level=info msg=" - !:pod-template-generation" subsys=labels-filter level=info msg=" - !:pod-template-hash" subsys=labels-filter level=info msg=" - !:controller-revision-hash" subsys=labels-filter level=info msg=" - !:annotation.*" subsys=labels-filter level=info msg=" - !:etcd_node" subsys=labels-filter level=info msg=Invoked duration=1.196938ms function="pprof.glob..func1 (cell.go:50)" subsys=hive level=info msg=Invoked duration="81.493µs" function="gops.registerGopsHooks (cell.go:38)" subsys=hive level=info msg=Invoked duration=1.24034ms function="metrics.NewRegistry (registry.go:65)" subsys=hive level=info msg=Invoked duration="23.121µs" function="metrics.glob..func1 (cell.go:12)" subsys=hive level=info msg="Spire Delegate API Client is disabled as no socket path is configured" subsys=spire-delegate level=info msg="Mutual authentication handler is disabled as no port is configured" subsys=auth level=info msg=Invoked duration=99.137434ms function="cmd.glob..func4 (daemon_main.go:1607)" subsys=hive level=info msg=Invoked duration="12.72µs" function="gc.registerSignalHandler (cell.go:47)" subsys=hive level=info msg=Invoked duration="20.69µs" function="utime.initUtimeSync (cell.go:29)" subsys=hive level=info msg=Invoked duration="69.852µs" function="agentliveness.newAgentLivenessUpdater (agent_liveness.go:43)" subsys=hive level=info msg=Invoked duration="88.113µs" function="l2responder.NewL2ResponderReconciler (l2responder.go:63)" subsys=hive level=info msg=Invoked duration="64.702µs" function="garp.newGARPProcessor (processor.go:27)" subsys=hive level=info msg=Starting subsys=hive level=info msg="Started gops server" address="127.0.0.1:9890" subsys=gops level=info msg="Start hook executed" duration="445.845µs" function="gops.registerGopsHooks.func1 (cell.go:43)" subsys=hive level=info msg="Start hook executed" duration="1.561µs" function="metrics.NewRegistry.func1 (registry.go:86)" subsys=hive level=info msg="Establishing connection to apiserver" host="https://10.96.0.1:443" subsys=k8s-client level=info msg="Serving prometheus metrics on :9962" subsys=metrics level=info msg="Connected to apiserver" subsys=k8s-client level=info msg="Start hook executed" duration=13.530706ms function="client.(*compositeClientset).onStart" subsys=hive level=info msg="Start hook executed" duration=6.643674ms function="authmap.newAuthMap.func1 (cell.go:27)" subsys=hive level=info msg="Start hook executed" duration="43.671µs" function="configmap.newMap.func1 (cell.go:23)" subsys=hive level=info msg="Start hook executed" duration="49.992µs" function="signalmap.newMap.func1 (cell.go:44)" subsys=hive level=info msg="Start hook executed" duration="483.156µs" function="nodemap.newNodeMap.func1 (cell.go:23)" subsys=hive level=info msg="Start hook executed" duration="99.233µs" function="eventsmap.newEventsMap.func1 (cell.go:35)" subsys=hive level=info msg="Start hook executed" duration="73.882µs" function="*cni.cniConfigManager.Start" subsys=hive level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Wrote CNI configuration file to /host/etc/cni/net.d/05-cilium.conflist" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Start hook executed" duration=44.597337ms function="datapath.newDatapath.func1 (cells.go:113)" subsys=hive level=info msg="Restored 0 node IDs from the BPF map" subsys=linux-datapath level=info msg="Start hook executed" duration="89.123µs" function="datapath.newDatapath.func2 (cells.go:126)" subsys=hive level=info msg="Start hook executed" duration="13.47µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Node].Start" subsys=hive level=info msg="Start hook executed" duration="2.73µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumNode].Start" subsys=hive level=info msg="Using autogenerated IPv4 allocation range" subsys=node v4Prefix=10.84.0.0/16 level=info msg="no local ciliumnode found, will not restore cilium internal ips from k8s" subsys=daemon level=info msg="Start hook executed" duration=103.411792ms function="node.NewLocalNodeStore.func1 (local_node_store.go:76)" subsys=hive level=info msg="Start hook executed" duration="11.62µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Start" subsys=hive level=info msg="Start hook executed" duration=100.687504ms function="*manager.diffStore[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Start" subsys=hive level=info msg="Start hook executed" duration="5.93µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s.Endpoints].Start" subsys=hive level=info msg="Using discoveryv1.EndpointSlice" subsys=k8s level=info msg="Start hook executed" duration=200.155729ms function="*manager.diffStore[*github.com/cilium/cilium/pkg/k8s.Endpoints].Start" subsys=hive level=info msg="Start hook executed" duration="32.931µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Pod].Start" subsys=hive level=info msg="Start hook executed" duration="5.73µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Namespace].Start" subsys=hive level=info msg="Start hook executed" duration="1.95µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumNetworkPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="1.9µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumClusterwideNetworkPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="2.15µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumCIDRGroup].Start" subsys=hive level=info msg="Start hook executed" duration="30.721µs" function="endpointmanager.newDefaultEndpointManager.func1 (cell.go:203)" subsys=hive level=info msg="Start hook executed" duration="18.591µs" function="cmd.newPolicyTrifecta.func1 (policy.go:135)" subsys=hive level=info msg="Start hook executed" duration="74.232µs" function="*manager.manager.Start" subsys=hive level=info msg="Serving cilium node monitor v1.2 API at unix:///var/run/cilium/monitor1_2.sock" subsys=monitor-agent level=info msg="Start hook executed" duration="377.402µs" function="agent.newMonitorAgent.func1 (cell.go:61)" subsys=hive level=info msg="Start hook executed" duration="3.12µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumL2AnnouncementPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="8.511µs" function="*job.group.Start" subsys=hive level=info msg="Envoy: Starting xDS gRPC server listening on /var/run/cilium/envoy/sockets/xds.sock" subsys=envoy-manager level=info msg="Start hook executed" duration="287.709µs" function="proxy.newProxy.func1 (cell.go:55)" subsys=hive level=info msg="Start hook executed" duration="819.457µs" function="signal.provideSignalManager.func1 (cell.go:25)" subsys=hive level=info msg="Datapath signal listener running" subsys=signal level=info msg="Start hook executed" duration=1.163887ms function="auth.registerAuthManager.func1 (cell.go:109)" subsys=hive level=info msg="Start hook executed" duration="5.211µs" function="auth.registerGCJobs.func1 (cell.go:158)" subsys=hive level=info msg="Start hook executed" duration="21.731µs" function="*job.group.Start" subsys=hive level=warning msg="Deprecated value for --kube-proxy-replacement: disabled (use either \"true\", or \"false\")" subsys=daemon level=info msg="Auto-disabling \"enable-node-port\", \"enable-external-ips\", \"bpf-lb-sock\", \"enable-host-port\" features and falling back to \"enable-host-legacy-routing\"" subsys=daemon level=info msg="Inheriting MTU from external network interface" device=ens3 ipAddr=199.19.213.84 mtu=1500 subsys=mtu level=info msg="Removed map pin at /sys/fs/bpf/tc/globals/cilium_ipcache, recreating and re-pinning map cilium_ipcache" file-path=/sys/fs/bpf/tc/globals/cilium_ipcache name=cilium_ipcache subsys=bpf level=info msg="Removed map pin at /sys/fs/bpf/tc/globals/cilium_tunnel_map, recreating and re-pinning map cilium_tunnel_map" file-path=/sys/fs/bpf/tc/globals/cilium_tunnel_map name=cilium_tunnel_map subsys=bpf level=info msg="Restored services from maps" failedServices=0 restoredServices=0 subsys=service level=info msg="Restored backends from maps" failedBackends=0 restoredBackends=0 skippedBackends=0 subsys=service level=info msg="Reading old endpoints..." subsys=daemon level=info msg="No old endpoints found." subsys=daemon level=info msg="Waiting until all Cilium CRDs are available" subsys=k8s level=info msg="All Cilium CRDs have been found and are available" subsys=k8s level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=warning msg="Unable to get node resource" error="ciliumnodes.cilium.io \"instance\" not found" subsys=nodediscovery level=warning msg="Unable to get node resource" error="ciliumnodes.cilium.io \"instance\" not found" subsys=nodediscovery level=info msg="Successfully created CiliumNode resource" subsys=nodediscovery level=warning msg="Unable to create CiliumNode resource, will retry" error="ciliumnodes.cilium.io \"instance\" already exists" subsys=nodediscovery level=info msg="Retrieved node information from cilium node" nodeName=instance subsys=k8s level=warning msg="Waiting for k8s node information" error="required IPv4 PodCIDR not available" subsys=k8s level=info msg="Retrieved node information from cilium node" nodeName=instance subsys=k8s level=info msg="Received own node information from API server" ipAddr.ipv4=199.19.213.84 ipAddr.ipv6="" k8sNodeIP=199.19.213.84 labels="map[beta.kubernetes.io/arch:amd64 beta.kubernetes.io/os:linux kubernetes.io/arch:amd64 kubernetes.io/hostname:instance kubernetes.io/os:linux node-role.kubernetes.io/control-plane: node.kubernetes.io/exclude-from-external-load-balancers:]" nodeName=instance subsys=k8s v4Prefix=10.0.0.0/24 v6Prefix="" level=info msg="k8s mode: Allowing localhost to reach local endpoints" subsys=daemon level=info msg="Detected devices" devices="[]" subsys=linux-datapath level=info msg="Enabling k8s event listener" subsys=k8s-watcher level=info msg="Removing stale endpoint interfaces" subsys=daemon level=info msg="Waiting until local node addressing before starting watchers depending on it" subsys=k8s-watcher level=info msg="Skipping kvstore configuration" subsys=daemon level=info msg="Initializing node addressing" subsys=daemon level=info msg="Initializing cluster-pool IPAM" subsys=ipam v4Prefix=10.0.0.0/24 v6Prefix="" level=info msg="Restoring endpoints..." subsys=daemon level=info msg="Endpoints restored" failed=0 restored=0 subsys=daemon level=info msg="Addressing information:" subsys=daemon level=info msg=" Cluster-Name: default" subsys=daemon level=info msg=" Cluster-ID: 0" subsys=daemon level=info msg=" Local node-name: instance" subsys=daemon level=info msg=" Node-IPv6: " subsys=daemon level=info msg=" External-Node IPv4: 199.19.213.84" subsys=daemon level=info msg=" Internal-Node IPv4: 10.0.0.149" subsys=daemon level=info msg=" IPv4 allocation prefix: 10.0.0.0/24" subsys=daemon level=info msg=" Loopback IPv4: 169.254.42.1" subsys=daemon level=info msg=" Local IPv4 addresses:" subsys=daemon level=info msg=" - 199.19.213.84" subsys=daemon level=info msg=" - 172.17.0.100" subsys=daemon level=info msg=" - 10.96.240.200" subsys=daemon level=info msg="Node updated" clusterName=default nodeName=instance subsys=nodemanager level=info msg="Adding local node to cluster" node="{instance default [{InternalIP 199.19.213.84} {CiliumInternalIP 10.0.0.149}] 10.0.0.0/24 [] [] 10.0.0.15 0 local 0 map[beta.kubernetes.io/arch:amd64 beta.kubernetes.io/os:linux kubernetes.io/arch:amd64 kubernetes.io/hostname:instance kubernetes.io/os:linux node-role.kubernetes.io/control-plane: node.kubernetes.io/exclude-from-external-load-balancers:] map[] 1 }" subsys=nodediscovery level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Waiting until all pre-existing resources have been received" subsys=k8s-watcher level=info msg="Initializing identity allocator" subsys=identity-cache level=info msg="Allocating identities between range" cluster-id=0 max=65535 min=256 subsys=identity-cache level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.forwarding sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.accept_local sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.send_redirects sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.forwarding sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.accept_local sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.send_redirects sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.core.bpf_jit_enable sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.all.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.fib_multipath_use_neigh sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=kernel.unprivileged_bpf_disabled sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=kernel.timer_migration sysParamValue=0 level=info msg="Setting up BPF datapath" bpfClockSource=ktime bpfInsnSet="" subsys=datapath-loader level=info msg="Iptables rules installed" subsys=iptables level=info msg="Adding new proxy port rules for cilium-dns-egress:37933" id=cilium-dns-egress subsys=proxy level=info msg="Iptables proxy rules installed" subsys=iptables level=info msg="Start hook executed" duration=2.504113332s function="cmd.newDaemonPromise.func1 (daemon_main.go:1663)" subsys=hive level=info msg="Starting IP identity watcher" subsys=ipcache level=info msg="Initializing daemon" subsys=daemon level=info msg="Validating configured node address ranges" subsys=daemon level=info msg="Starting connection tracking garbage collector" subsys=daemon level=info msg="Start hook executed" duration="14.501µs" function="utime.initUtimeSync.func1 (cell.go:33)" subsys=hive level=info msg="Start hook executed" duration="48.432µs" function="*job.group.Start" subsys=hive level=info msg="Start hook executed" duration="34.281µs" function="l2respondermap.newMap.func1 (l2_responder_map4.go:44)" subsys=hive level=info msg="Start hook executed" duration="11.66µs" function="*job.group.Start" subsys=hive level=info msg="Initial scan of connection tracking completed" subsys=ct-gc level=info msg="Regenerating restored endpoints" numRestored=0 subsys=daemon level=info msg="Creating host endpoint" subsys=daemon level=info msg="Finished regenerating restored endpoints" regenerated=0 subsys=daemon total=0 level=info msg="Deleted orphan backends" orphanBackends=0 subsys=service level=info msg="New endpoint" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2220 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2220 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Identity of endpoint changed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2220 identity=1 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,reserved:host" ipv4= ipv6= k8sPodName=/ oldIdentity="no identity" subsys=endpoint level=info msg="Launching Cilium health daemon" subsys=daemon level=info msg="Launching Cilium health endpoint" subsys=daemon level=info msg="Started healthz status API server" address="127.0.0.1:9879" subsys=daemon level=info msg="Processing queued endpoint deletion requests from /var/run/cilium/deleteQueue" subsys=daemon level=info msg="processing 0 queued deletion requests" subsys=daemon level=info msg="Initializing Cilium API" subsys=daemon level=info msg="Daemon initialization completed" bootstrapTime=3.557878035s subsys=daemon level=info msg="Hubble server is disabled" subsys=hubble level=info msg="Serving cilium API at unix:///var/run/cilium/cilium.sock" subsys=daemon level=info msg="Compiled new BPF template" BPFCompilationTime=302.124205ms file-path=/var/run/cilium/state/templates/bae59e370f438f850f4e3a22865c0b4017fb22ba084483c1b5129095e76aed2f/bpf_host.o subsys=datapath-loader level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2220 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="New endpoint" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3663 ipv4=10.0.0.15 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3663 identityLabels="reserved:health" ipv4=10.0.0.15 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Identity of endpoint changed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3663 identity=4 identityLabels="reserved:health" ipv4=10.0.0.15 ipv6= k8sPodName=/ oldIdentity="no identity" subsys=endpoint level=info msg="Serving cilium health API at unix:///var/run/cilium/health.sock" subsys=health-server level=info msg="Create endpoint request" addressing="&{10.0.0.163 12a66ad3-f997-433d-80ed-bee3611d5f6a default }" containerID=bf569006108975b880dd60c0f5bf6325de46b439fdc594f9df382f6d4e21bfc4 datapathConfiguration="&{false false false false false }" interface=lxc02a814c4fc37 k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-mxcbh labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=bf56900610 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1821 ipv4=10.0.0.163 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-mxcbh subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=bf56900610 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1821 identityLabels="k8s:app=certgen,k8s:batch.kubernetes.io/controller-uid=eb278e62-0959-45d7-8466-6ba21e761ad2,k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen,k8s:controller-uid=eb278e62-0959-45d7-8466-6ba21e761ad2,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen,k8s:io.kubernetes.pod.namespace=envoy-gateway-system,k8s:job-name=envoy-gateway-gateway-helm-certgen" ipv4=10.0.0.163 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-mxcbh subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name:envoy-gateway-system]" subsys=crd-allocator level=info msg="Create endpoint request" addressing="&{10.0.0.29 ddc2b2a9-a61e-4f5f-8ac5-9417ebca8dc4 default }" containerID=314a24d05709089bcce34ea34ca9664f6e5a39d64d0e3da34001e4283cce817d datapathConfiguration="&{false false false false false }" interface=lxc97db8619ae0f k8sPodName=kube-system/coredns-7c96b6546b-969h4 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=314a24d057 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1288 ipv4=10.0.0.29 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-969h4 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=314a24d057 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1288 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.29 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-969h4 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app=certgen;k8s:batch.kubernetes.io/controller-uid=eb278e62-0959-45d7-8466-6ba21e761ad2;k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen;k8s:controller-uid=eb278e62-0959-45d7-8466-6ba21e761ad2;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system;k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen;k8s:io.kubernetes.pod.namespace=envoy-gateway-system;k8s:job-name=envoy-gateway-gateway-helm-certgen;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=314a24d057 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1288 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.29 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-969h4 line=611 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:kube-system]" subsys=crd-allocator level=info msg="Invalid state transition skipped" containerID=bf56900610 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1821 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.163 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-mxcbh line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=bf56900610 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1821 identity=33557 identityLabels="k8s:app=certgen,k8s:batch.kubernetes.io/controller-uid=eb278e62-0959-45d7-8466-6ba21e761ad2,k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen,k8s:controller-uid=eb278e62-0959-45d7-8466-6ba21e761ad2,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen,k8s:io.kubernetes.pod.namespace=envoy-gateway-system,k8s:job-name=envoy-gateway-gateway-helm-certgen" ipv4=10.0.0.163 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-mxcbh oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=bf56900610 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1821 identity=33557 ipv4=10.0.0.163 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-mxcbh subsys=endpoint level=info msg="Allocated new global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=coredns;k8s:io.kubernetes.pod.namespace=kube-system;k8s:k8s-app=kube-dns;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=314a24d057 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1288 identity=6448 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.29 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-969h4 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=314a24d057 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1288 identity=6448 ipv4=10.0.0.29 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-969h4 subsys=endpoint level=info msg="Compiled new BPF template" BPFCompilationTime=1.155628853s file-path=/var/run/cilium/state/templates/1464dc9d19234fdb9b28b4ad6f465c2f705476b44d33c6e79a1de0da6bb44e23/bpf_lxc.o subsys=datapath-loader level=info msg="Rewrote endpoint BPF program" containerID=314a24d057 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1288 identity=6448 ipv4=10.0.0.29 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-969h4 subsys=endpoint level=info msg="Successful endpoint creation" containerID=314a24d057 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1288 identity=6448 ipv4=10.0.0.29 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-969h4 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=bf56900610 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1821 identity=33557 ipv4=10.0.0.163 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-mxcbh subsys=endpoint level=info msg="Successful endpoint creation" containerID=bf56900610 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1821 identity=33557 ipv4=10.0.0.163 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-mxcbh subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3663 identity=4 ipv4=10.0.0.15 ipv6= k8sPodName=/ subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=bf56900610 endpointID=1821 k8sNamespace=envoy-gateway-system k8sPodName=envoy-gateway-gateway-helm-certgen-mxcbh subsys=daemon level=info msg="Releasing key" key="[k8s:app=certgen k8s:batch.kubernetes.io/controller-uid=eb278e62-0959-45d7-8466-6ba21e761ad2 k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen k8s:controller-uid=eb278e62-0959-45d7-8466-6ba21e761ad2 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen k8s:io.kubernetes.pod.namespace=envoy-gateway-system k8s:job-name=envoy-gateway-gateway-helm-certgen]" subsys=allocator level=info msg="Removed endpoint" containerID=bf56900610 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1821 identity=33557 ipv4=10.0.0.163 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-mxcbh subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.181 15b44061-53d0-4907-9d20-24bf3468638e default }" containerID=e425ad9ce2c70e72e7a1119652cadb872b85bc74c1ca2204b223d471ee0c8c14 datapathConfiguration="&{false false false false false }" interface=lxc0e24ce317335 k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-tvppj labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e425ad9ce2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=195 ipv4=10.0.0.181 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-tvppj subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e425ad9ce2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=195 identityLabels="k8s:app.kubernetes.io/instance=envoy-gateway,k8s:app.kubernetes.io/name=gateway-helm,k8s:control-plane=envoy-gateway,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway,k8s:io.kubernetes.pod.namespace=envoy-gateway-system" ipv4=10.0.0.181 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-tvppj subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name:envoy-gateway-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=envoy-gateway;k8s:app.kubernetes.io/name=gateway-helm;k8s:control-plane=envoy-gateway;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system;k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway;k8s:io.kubernetes.pod.namespace=envoy-gateway-system;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e425ad9ce2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=195 identity=20386 identityLabels="k8s:app.kubernetes.io/instance=envoy-gateway,k8s:app.kubernetes.io/name=gateway-helm,k8s:control-plane=envoy-gateway,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway,k8s:io.kubernetes.pod.namespace=envoy-gateway-system" ipv4=10.0.0.181 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-tvppj oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=e425ad9ce2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=195 identity=20386 ipv4=10.0.0.181 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-tvppj subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e425ad9ce2 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=195 identity=20386 ipv4=10.0.0.181 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-tvppj subsys=endpoint level=info msg="Successful endpoint creation" containerID=e425ad9ce2 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=195 identity=20386 ipv4=10.0.0.181 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-tvppj subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2220 identity=1 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,k8s:openstack-compute-node=enabled,k8s:openstack-control-plane=enabled,k8s:openvswitch=enabled,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_hostns_02220 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_hostns_02220 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_hostns_02220 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_hostns_02220:pending" subsys=bpf level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_netdev_00005 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_netdev_00005 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005:pending" subsys=bpf level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2220 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.33 43728261-1880-4ceb-9850-2714959dba16 default }" containerID=2c83d22af023eecb7f4f6b9c256435cc2f5e27f7280a83c978957fd3160b65cf datapathConfiguration="&{false false false false false }" interface=lxcf46c7b2840ee k8sPodName=kube-system/coredns-67659f764b-q4nrv labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2c83d22af0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=470 ipv4=10.0.0.33 ipv6= k8sPodName=kube-system/coredns-67659f764b-q4nrv subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2c83d22af0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=470 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.33 ipv6= k8sPodName=kube-system/coredns-67659f764b-q4nrv subsys=endpoint level=info msg="Identity of endpoint changed" containerID=2c83d22af0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=470 identity=6448 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.33 ipv6= k8sPodName=kube-system/coredns-67659f764b-q4nrv oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2c83d22af0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=470 identity=6448 ipv4=10.0.0.33 ipv6= k8sPodName=kube-system/coredns-67659f764b-q4nrv subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.237 52f31f18-75d9-4e5a-bb81-4dda046c243e default }" containerID=bc372703632c62e773faeb626c9c4913fc535516b1ed52ce32356f0893fcfa04 datapathConfiguration="&{false false false false false }" interface=lxc3d2e83b3f709 k8sPodName=kube-system/coredns-67659f764b-jpmxp labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=bc37270363 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1909 ipv4=10.0.0.237 ipv6= k8sPodName=kube-system/coredns-67659f764b-jpmxp subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=bc37270363 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1909 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.237 ipv6= k8sPodName=kube-system/coredns-67659f764b-jpmxp subsys=endpoint level=info msg="Identity of endpoint changed" containerID=bc37270363 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1909 identity=6448 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.237 ipv6= k8sPodName=kube-system/coredns-67659f764b-jpmxp oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=bc37270363 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1909 identity=6448 ipv4=10.0.0.237 ipv6= k8sPodName=kube-system/coredns-67659f764b-jpmxp subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=2c83d22af0 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=470 identity=6448 ipv4=10.0.0.33 ipv6= k8sPodName=kube-system/coredns-67659f764b-q4nrv subsys=endpoint level=info msg="Successful endpoint creation" containerID=2c83d22af0 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=470 identity=6448 ipv4=10.0.0.33 ipv6= k8sPodName=kube-system/coredns-67659f764b-q4nrv subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=bc37270363 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1909 identity=6448 ipv4=10.0.0.237 ipv6= k8sPodName=kube-system/coredns-67659f764b-jpmxp subsys=endpoint level=info msg="Successful endpoint creation" containerID=bc37270363 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1909 identity=6448 ipv4=10.0.0.237 ipv6= k8sPodName=kube-system/coredns-67659f764b-jpmxp subsys=daemon level=info msg="Delete endpoint request" containerID=314a24d057 endpointID=1288 k8sNamespace=kube-system k8sPodName=coredns-7c96b6546b-969h4 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=coredns k8s:io.kubernetes.pod.namespace=kube-system k8s:k8s-app=kube-dns]" subsys=allocator level=info msg="Removed endpoint" containerID=314a24d057 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1288 identity=6448 ipv4=10.0.0.29 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-969h4 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.21 44fe47ba-82c6-4dfa-b87c-a0d37a588a33 default }" containerID=b0fc269e4760143a1603f2cf88090286a456a931731f4ef52785a6831157d37e datapathConfiguration="&{false false false false false }" interface=lxc81ffc11c675f k8sPodName=kube-system/ceph-csi-rbd-provisioner-69cb97fb6-h6mpv labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b0fc269e47 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=140 ipv4=10.0.0.21 ipv6= k8sPodName=kube-system/ceph-csi-rbd-provisioner-69cb97fb6-h6mpv subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b0fc269e47 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=140 identityLabels="k8s:app=ceph-csi-rbd,k8s:chart=ceph-csi-rbd-3.11.0,k8s:component=provisioner,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ceph-csi-rbd-provisioner,k8s:io.kubernetes.pod.namespace=kube-system,k8s:release=ceph-csi-rbd" ipv4=10.0.0.21 ipv6= k8sPodName=kube-system/ceph-csi-rbd-provisioner-69cb97fb6-h6mpv subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:kube-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=ceph-csi-rbd;k8s:chart=ceph-csi-rbd-3.11.0;k8s:component=provisioner;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ceph-csi-rbd-provisioner;k8s:io.kubernetes.pod.namespace=kube-system;k8s:release=ceph-csi-rbd;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=b0fc269e47 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=140 identity=36924 identityLabels="k8s:app=ceph-csi-rbd,k8s:chart=ceph-csi-rbd-3.11.0,k8s:component=provisioner,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ceph-csi-rbd-provisioner,k8s:io.kubernetes.pod.namespace=kube-system,k8s:release=ceph-csi-rbd" ipv4=10.0.0.21 ipv6= k8sPodName=kube-system/ceph-csi-rbd-provisioner-69cb97fb6-h6mpv oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b0fc269e47 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=140 identity=36924 ipv4=10.0.0.21 ipv6= k8sPodName=kube-system/ceph-csi-rbd-provisioner-69cb97fb6-h6mpv subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b0fc269e47 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=140 identity=36924 ipv4=10.0.0.21 ipv6= k8sPodName=kube-system/ceph-csi-rbd-provisioner-69cb97fb6-h6mpv subsys=endpoint level=info msg="Successful endpoint creation" containerID=b0fc269e47 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=140 identity=36924 ipv4=10.0.0.21 ipv6= k8sPodName=kube-system/ceph-csi-rbd-provisioner-69cb97fb6-h6mpv subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.159 6ea9c26e-2152-4185-a783-0c38c3255cc1 default }" containerID=1b0706f609804d1ddea085fc1233822d8e6ea4461e60931fb48b50d755377420 datapathConfiguration="&{false false false false false }" interface=lxc6ba4ccf46f1a k8sPodName=cert-manager/cert-manager-cainjector-579c9dd7cd-fvhnv labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1b0706f609 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=354 ipv4=10.0.0.159 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-579c9dd7cd-fvhnv subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1b0706f609 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=354 identityLabels="k8s:app.kubernetes.io/component=cainjector,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cainjector,k8s:app.kubernetes.io/version=v1.15.5,k8s:app=cainjector,k8s:helm.sh/chart=cert-manager-v1.15.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.159 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-579c9dd7cd-fvhnv subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app=cainjector;k8s:app.kubernetes.io/component=cainjector;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=cainjector;k8s:app.kubernetes.io/version=v1.15.5;k8s:helm.sh/chart=cert-manager-v1.15.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1b0706f609 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=354 identity=26977 identityLabels="k8s:app.kubernetes.io/component=cainjector,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cainjector,k8s:app.kubernetes.io/version=v1.15.5,k8s:app=cainjector,k8s:helm.sh/chart=cert-manager-v1.15.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.159 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-579c9dd7cd-fvhnv oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1b0706f609 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=354 identity=26977 ipv4=10.0.0.159 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-579c9dd7cd-fvhnv subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.25 7519404d-c2f5-4f24-97af-8b5773fd2192 default }" containerID=3b7769fa35d1944fa5b327fb18c97ee484d596154fae3d81ddb5c4d1dd55b5bc datapathConfiguration="&{false false false false false }" interface=lxcd727bd1a260e k8sPodName=cert-manager/cert-manager-79c48d47db-nvd4h labels="[]" subsys=daemon sync-build=true level=info msg="Create endpoint request" addressing="&{10.0.0.37 4e35e424-89af-449f-917f-02469709cf20 default }" containerID=3f322ddae798a0fe1ce5d7268eb43108762fea5ac91e1302274ac9290bf06623 datapathConfiguration="&{false false false false false }" interface=lxcce97f8ce16d7 k8sPodName=cert-manager/cert-manager-webhook-7d6b59cfdc-v552k labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3b7769fa35 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2333 ipv4=10.0.0.25 ipv6= k8sPodName=cert-manager/cert-manager-79c48d47db-nvd4h subsys=endpoint level=info msg="New endpoint" containerID=3f322ddae7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1793 ipv4=10.0.0.37 ipv6= k8sPodName=cert-manager/cert-manager-webhook-7d6b59cfdc-v552k subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3f322ddae7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1793 identityLabels="k8s:app.kubernetes.io/component=webhook,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=webhook,k8s:app.kubernetes.io/version=v1.15.5,k8s:app=webhook,k8s:helm.sh/chart=cert-manager-v1.15.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.37 ipv6= k8sPodName=cert-manager/cert-manager-webhook-7d6b59cfdc-v552k subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3b7769fa35 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2333 identityLabels="k8s:app.kubernetes.io/component=controller,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cert-manager,k8s:app.kubernetes.io/version=v1.15.5,k8s:app=cert-manager,k8s:helm.sh/chart=cert-manager-v1.15.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.25 ipv6= k8sPodName=cert-manager/cert-manager-79c48d47db-nvd4h subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=webhook;k8s:app.kubernetes.io/component=webhook;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=webhook;k8s:app.kubernetes.io/version=v1.15.5;k8s:helm.sh/chart=cert-manager-v1.15.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3f322ddae7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1793 identity=501 identityLabels="k8s:app.kubernetes.io/component=webhook,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=webhook,k8s:app.kubernetes.io/version=v1.15.5,k8s:app=webhook,k8s:helm.sh/chart=cert-manager-v1.15.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.37 ipv6= k8sPodName=cert-manager/cert-manager-webhook-7d6b59cfdc-v552k oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3f322ddae7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1793 identity=501 ipv4=10.0.0.37 ipv6= k8sPodName=cert-manager/cert-manager-webhook-7d6b59cfdc-v552k subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=cert-manager;k8s:app.kubernetes.io/component=controller;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=cert-manager;k8s:app.kubernetes.io/version=v1.15.5;k8s:helm.sh/chart=cert-manager-v1.15.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3b7769fa35 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2333 identity=35950 identityLabels="k8s:app.kubernetes.io/component=controller,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cert-manager,k8s:app.kubernetes.io/version=v1.15.5,k8s:app=cert-manager,k8s:helm.sh/chart=cert-manager-v1.15.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.25 ipv6= k8sPodName=cert-manager/cert-manager-79c48d47db-nvd4h oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3b7769fa35 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2333 identity=35950 ipv4=10.0.0.25 ipv6= k8sPodName=cert-manager/cert-manager-79c48d47db-nvd4h subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=1b0706f609 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=354 identity=26977 ipv4=10.0.0.159 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-579c9dd7cd-fvhnv subsys=endpoint level=info msg="Successful endpoint creation" containerID=1b0706f609 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=354 identity=26977 ipv4=10.0.0.159 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-579c9dd7cd-fvhnv subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=3b7769fa35 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2333 identity=35950 ipv4=10.0.0.25 ipv6= k8sPodName=cert-manager/cert-manager-79c48d47db-nvd4h subsys=endpoint level=info msg="Successful endpoint creation" containerID=3b7769fa35 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2333 identity=35950 ipv4=10.0.0.25 ipv6= k8sPodName=cert-manager/cert-manager-79c48d47db-nvd4h subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=3f322ddae7 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1793 identity=501 ipv4=10.0.0.37 ipv6= k8sPodName=cert-manager/cert-manager-webhook-7d6b59cfdc-v552k subsys=endpoint level=info msg="Successful endpoint creation" containerID=3f322ddae7 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1793 identity=501 ipv4=10.0.0.37 ipv6= k8sPodName=cert-manager/cert-manager-webhook-7d6b59cfdc-v552k subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.59 e05e25f5-1fc5-4fd8-9809-3e30f22e0c95 default }" containerID=0e444996e4173b11786ef12030e101a23a98c693ed312f758e3c79a065df5c4c datapathConfiguration="&{false false false false false }" interface=lxc552e1669a80b k8sPodName=cert-manager/cert-manager-startupapicheck-nsxcf labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0e444996e4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=181 ipv4=10.0.0.59 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-nsxcf subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0e444996e4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=181 identityLabels="k8s:app.kubernetes.io/component=startupapicheck,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=startupapicheck,k8s:app.kubernetes.io/version=v1.15.5,k8s:app=startupapicheck,k8s:batch.kubernetes.io/controller-uid=7f2c5a81-289e-4fd7-b68f-d5b8bc88d0ed,k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck,k8s:controller-uid=7f2c5a81-289e-4fd7-b68f-d5b8bc88d0ed,k8s:helm.sh/chart=cert-manager-v1.15.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck,k8s:io.kubernetes.pod.namespace=cert-manager,k8s:job-name=cert-manager-startupapicheck" ipv4=10.0.0.59 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-nsxcf subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=startupapicheck;k8s:app.kubernetes.io/component=startupapicheck;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=startupapicheck;k8s:app.kubernetes.io/version=v1.15.5;k8s:batch.kubernetes.io/controller-uid=7f2c5a81-289e-4fd7-b68f-d5b8bc88d0ed;k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck;k8s:controller-uid=7f2c5a81-289e-4fd7-b68f-d5b8bc88d0ed;k8s:helm.sh/chart=cert-manager-v1.15.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck;k8s:io.kubernetes.pod.namespace=cert-manager;k8s:job-name=cert-manager-startupapicheck;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0e444996e4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=181 identity=54946 identityLabels="k8s:app.kubernetes.io/component=startupapicheck,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=startupapicheck,k8s:app.kubernetes.io/version=v1.15.5,k8s:app=startupapicheck,k8s:batch.kubernetes.io/controller-uid=7f2c5a81-289e-4fd7-b68f-d5b8bc88d0ed,k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck,k8s:controller-uid=7f2c5a81-289e-4fd7-b68f-d5b8bc88d0ed,k8s:helm.sh/chart=cert-manager-v1.15.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck,k8s:io.kubernetes.pod.namespace=cert-manager,k8s:job-name=cert-manager-startupapicheck" ipv4=10.0.0.59 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-nsxcf oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0e444996e4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=181 identity=54946 ipv4=10.0.0.59 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-nsxcf subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=0e444996e4 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=181 identity=54946 ipv4=10.0.0.59 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-nsxcf subsys=endpoint level=info msg="Successful endpoint creation" containerID=0e444996e4 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=181 identity=54946 ipv4=10.0.0.59 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-nsxcf subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=0e444996e4 endpointID=181 k8sNamespace=cert-manager k8sPodName=cert-manager-startupapicheck-nsxcf subsys=daemon level=info msg="Releasing key" key="[k8s:app=startupapicheck k8s:app.kubernetes.io/component=startupapicheck k8s:app.kubernetes.io/instance=cert-manager k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=startupapicheck k8s:app.kubernetes.io/version=v1.15.5 k8s:batch.kubernetes.io/controller-uid=7f2c5a81-289e-4fd7-b68f-d5b8bc88d0ed k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck k8s:controller-uid=7f2c5a81-289e-4fd7-b68f-d5b8bc88d0ed k8s:helm.sh/chart=cert-manager-v1.15.5 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager k8s:io.cilium.k8s.namespace.labels.name=cert-manager k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck k8s:io.kubernetes.pod.namespace=cert-manager k8s:job-name=cert-manager-startupapicheck]" subsys=allocator level=info msg="Removed endpoint" containerID=0e444996e4 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=181 identity=54946 ipv4=10.0.0.59 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-nsxcf subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.119 b07adb8a-b083-47f6-b25b-c9cbdf86f29f default }" containerID=bbfda1ec7a82646a2e93889fd7237f2c5270a716dfc99b5d16d7994a3395925a datapathConfiguration="&{false false false false false }" interface=lxcaf4fa5ff0425 k8sPodName=ingress-nginx/ingress-nginx-admission-create-jq2x6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=bbfda1ec7a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3350 ipv4=10.0.0.119 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-jq2x6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=bbfda1ec7a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3350 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=3e8b8264-0f2e-421c-85f6-3f2659ae43e5,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create,k8s:controller-uid=3e8b8264-0f2e-421c-85f6-3f2659ae43e5,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-create" ipv4=10.0.0.119 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-jq2x6 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=admission-webhook;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:batch.kubernetes.io/controller-uid=3e8b8264-0f2e-421c-85f6-3f2659ae43e5;k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create;k8s:controller-uid=3e8b8264-0f2e-421c-85f6-3f2659ae43e5;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission;k8s:io.kubernetes.pod.namespace=ingress-nginx;k8s:job-name=ingress-nginx-admission-create;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=bbfda1ec7a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3350 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.119 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-jq2x6 line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=bbfda1ec7a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3350 identity=14403 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=3e8b8264-0f2e-421c-85f6-3f2659ae43e5,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create,k8s:controller-uid=3e8b8264-0f2e-421c-85f6-3f2659ae43e5,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-create" ipv4=10.0.0.119 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-jq2x6 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=bbfda1ec7a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3350 identity=14403 ipv4=10.0.0.119 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-jq2x6 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=bbfda1ec7a datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3350 identity=14403 ipv4=10.0.0.119 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-jq2x6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=bbfda1ec7a datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3350 identity=14403 ipv4=10.0.0.119 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-jq2x6 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=bbfda1ec7a endpointID=3350 k8sNamespace=ingress-nginx k8sPodName=ingress-nginx-admission-create-jq2x6 subsys=daemon level=info msg="Releasing key" key="[k8s:app.kubernetes.io/component=admission-webhook k8s:app.kubernetes.io/instance=ingress-nginx k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=ingress-nginx k8s:app.kubernetes.io/part-of=ingress-nginx k8s:app.kubernetes.io/version=1.12.1 k8s:batch.kubernetes.io/controller-uid=3e8b8264-0f2e-421c-85f6-3f2659ae43e5 k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create k8s:controller-uid=3e8b8264-0f2e-421c-85f6-3f2659ae43e5 k8s:helm.sh/chart=ingress-nginx-4.12.1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission k8s:io.kubernetes.pod.namespace=ingress-nginx k8s:job-name=ingress-nginx-admission-create]" subsys=allocator level=info msg="Removed endpoint" containerID=bbfda1ec7a datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3350 identity=14403 ipv4=10.0.0.119 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-jq2x6 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.83 6839107d-6346-4f53-9c07-3fd772839e6c default }" containerID=20b03ce384917b4122372155b762d0c5b847546bd7e87abce60c41331f5347a0 datapathConfiguration="&{false false false false false }" interface=lxc9da355ccc2cc k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-dfk57 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=20b03ce384 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3186 ipv4=10.0.0.83 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-dfk57 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=20b03ce384 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3186 identityLabels="k8s:app.kubernetes.io/component=default-backend,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend,k8s:io.kubernetes.pod.namespace=ingress-nginx" ipv4=10.0.0.83 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-dfk57 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=default-backend;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend;k8s:io.kubernetes.pod.namespace=ingress-nginx;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=20b03ce384 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3186 identity=54419 identityLabels="k8s:app.kubernetes.io/component=default-backend,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend,k8s:io.kubernetes.pod.namespace=ingress-nginx" ipv4=10.0.0.83 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-dfk57 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=20b03ce384 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3186 identity=54419 ipv4=10.0.0.83 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-dfk57 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=20b03ce384 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3186 identity=54419 ipv4=10.0.0.83 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-dfk57 subsys=endpoint level=info msg="Successful endpoint creation" containerID=20b03ce384 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3186 identity=54419 ipv4=10.0.0.83 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-dfk57 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.108 a12155e1-de26-44d7-8bd7-b048ce07e4fd default }" containerID=5a3bb156d84c7315588d653acf18c4d54441f851bb6a4841455d4d1bfc707dfe datapathConfiguration="&{false false false false false }" interface=lxc5abfa50983f3 k8sPodName=ingress-nginx/ingress-nginx-admission-patch-xmqdv labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5a3bb156d8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=969 ipv4=10.0.0.108 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-xmqdv subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5a3bb156d8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=969 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=52af4cde-05d8-4d55-b857-de9b606692c3,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch,k8s:controller-uid=52af4cde-05d8-4d55-b857-de9b606692c3,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-patch" ipv4=10.0.0.108 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-xmqdv subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=admission-webhook;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:batch.kubernetes.io/controller-uid=52af4cde-05d8-4d55-b857-de9b606692c3;k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch;k8s:controller-uid=52af4cde-05d8-4d55-b857-de9b606692c3;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission;k8s:io.kubernetes.pod.namespace=ingress-nginx;k8s:job-name=ingress-nginx-admission-patch;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5a3bb156d8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=969 identity=3442 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=52af4cde-05d8-4d55-b857-de9b606692c3,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch,k8s:controller-uid=52af4cde-05d8-4d55-b857-de9b606692c3,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-patch" ipv4=10.0.0.108 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-xmqdv oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5a3bb156d8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=969 identity=3442 ipv4=10.0.0.108 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-xmqdv subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=5a3bb156d8 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=969 identity=3442 ipv4=10.0.0.108 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-xmqdv subsys=endpoint level=info msg="Successful endpoint creation" containerID=5a3bb156d8 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=969 identity=3442 ipv4=10.0.0.108 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-xmqdv subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=5a3bb156d8 endpointID=969 k8sNamespace=ingress-nginx k8sPodName=ingress-nginx-admission-patch-xmqdv subsys=daemon level=info msg="Releasing key" key="[k8s:app.kubernetes.io/component=admission-webhook k8s:app.kubernetes.io/instance=ingress-nginx k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=ingress-nginx k8s:app.kubernetes.io/part-of=ingress-nginx k8s:app.kubernetes.io/version=1.12.1 k8s:batch.kubernetes.io/controller-uid=52af4cde-05d8-4d55-b857-de9b606692c3 k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch k8s:controller-uid=52af4cde-05d8-4d55-b857-de9b606692c3 k8s:helm.sh/chart=ingress-nginx-4.12.1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission k8s:io.kubernetes.pod.namespace=ingress-nginx k8s:job-name=ingress-nginx-admission-patch]" subsys=allocator level=info msg="Removed endpoint" containerID=5a3bb156d8 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=969 identity=3442 ipv4=10.0.0.108 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-xmqdv subsys=endpoint level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"messaging-topology-operator\",\"k8s:app.kubernetes.io/instance\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/name\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/part-of\":\"rabbitmq\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:9443 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=rabbitmq-messaging-topology-operator k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=21bced5b-2e55-418e-8601-e261bec87f19] Description:}]" policyAddRequest=34ab4194-4818-4c73-9286-f2dc5864fb82 subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=34ab4194-4818-4c73-9286-f2dc5864fb82 policyRevision=2 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=rabbitmq-messaging-topology-operator subsys=k8s-watcher level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"rabbitmq-operator\",\"k8s:app.kubernetes.io/instance\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/name\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/part-of\":\"rabbitmq\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=rabbitmq-cluster-operator k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=88aa5f66-d036-4730-aee9-d56d0c75306b] Description:}]" policyAddRequest=aeba7935-7c65-45fd-b1f2-05d2c165f627 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=rabbitmq-cluster-operator subsys=k8s-watcher level=info msg="Policy imported via API, recalculating..." policyAddRequest=aeba7935-7c65-45fd-b1f2-05d2c165f627 policyRevision=3 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.47 e5c316a5-98de-45a2-805e-12eac8cf6906 default }" containerID=c124dc490a5e427d2c371361e0492358aa7d18d5d5bea860440988f924fa300a datapathConfiguration="&{false false false false false }" interface=lxc9178bb86fb35 k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-zpvmn labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c124dc490a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1043 ipv4=10.0.0.47 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-zpvmn subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c124dc490a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1043 identityLabels="k8s:app.kubernetes.io/component=rabbitmq-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=2.16.1,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.47 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-zpvmn subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq-operator;k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=rabbitmq-cluster-operator;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:app.kubernetes.io/version=2.16.1;k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c124dc490a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1043 identity=63505 identityLabels="k8s:app.kubernetes.io/component=rabbitmq-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=2.16.1,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.47 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-zpvmn oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c124dc490a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1043 identity=63505 ipv4=10.0.0.47 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-zpvmn subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=c124dc490a datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=1043 identity=63505 ipv4=10.0.0.47 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-zpvmn subsys=endpoint level=info msg="Successful endpoint creation" containerID=c124dc490a datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=1043 identity=63505 ipv4=10.0.0.47 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-zpvmn subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.222 f1dfefb4-dcdc-4fae-a91d-8a1632a78910 default }" containerID=0b7e81b84e91dfbe581d25afa481b2eab534952b1f66169d4856c726963e380c datapathConfiguration="&{false false false false false }" interface=lxc47688bb3103b k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-rz4l8 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0b7e81b84e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2278 ipv4=10.0.0.222 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-rz4l8 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0b7e81b84e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2278 identityLabels="k8s:app.kubernetes.io/component=messaging-topology-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=1.17.4,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.222 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-rz4l8 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=messaging-topology-operator;k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=rabbitmq-cluster-operator;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:app.kubernetes.io/version=1.17.4;k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0b7e81b84e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2278 identity=9241 identityLabels="k8s:app.kubernetes.io/component=messaging-topology-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=1.17.4,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.222 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-rz4l8 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0b7e81b84e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2278 identity=9241 ipv4=10.0.0.222 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-rz4l8 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=0b7e81b84e datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=2278 identity=9241 ipv4=10.0.0.222 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-rz4l8 subsys=endpoint level=info msg="Successful endpoint creation" containerID=0b7e81b84e datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=2278 identity=9241 ipv4=10.0.0.222 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-rz4l8 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.75 bd60241f-b0cd-4b81-a5c9-bc27ff1d98f8 default }" containerID=b598f4ff7a0b5ff233473f66330886f01af1ea640663b86be001e9ad103f38bf datapathConfiguration="&{false false false false false }" interface=lxcc8f40406d4cf k8sPodName=openstack/pxc-operator-69cb5bbdb9-9f4jl labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b598f4ff7a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=605 ipv4=10.0.0.75 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-9f4jl subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b598f4ff7a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=605 identityLabels="k8s:app.kubernetes.io/component=operator,k8s:app.kubernetes.io/instance=pxc-operator,k8s:app.kubernetes.io/name=pxc-operator,k8s:app.kubernetes.io/part-of=pxc-operator,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.75 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-9f4jl subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=operator;k8s:app.kubernetes.io/instance=pxc-operator;k8s:app.kubernetes.io/name=pxc-operator;k8s:app.kubernetes.io/part-of=pxc-operator;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b598f4ff7a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=605 identity=12582 identityLabels="k8s:app.kubernetes.io/component=operator,k8s:app.kubernetes.io/instance=pxc-operator,k8s:app.kubernetes.io/name=pxc-operator,k8s:app.kubernetes.io/part-of=pxc-operator,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.75 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-9f4jl oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=b598f4ff7a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=605 identity=12582 ipv4=10.0.0.75 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-9f4jl subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b598f4ff7a datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=605 identity=12582 ipv4=10.0.0.75 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-9f4jl subsys=endpoint level=info msg="Successful endpoint creation" containerID=b598f4ff7a datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=605 identity=12582 ipv4=10.0.0.75 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-9f4jl subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.248 3928dc09-6bfc-4822-9244-e9826af72f5f default }" containerID=1777911ec372ef5b9e1892c3c93cbee43b068d07188c9dc8d4014a51d72a0c68 datapathConfiguration="&{false false false false false }" interface=lxc82b4d43f0e0d k8sPodName=openstack/percona-xtradb-haproxy-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1777911ec3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=553 ipv4=10.0.0.248 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1777911ec3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=553 identityLabels="k8s:app.kubernetes.io/component=haproxy,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0" ipv4=10.0.0.248 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=haproxy;k8s:app.kubernetes.io/instance=percona-xtradb;k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator;k8s:app.kubernetes.io/name=percona-xtradb-cluster;k8s:app.kubernetes.io/part-of=percona-xtradb-cluster;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1777911ec3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=553 identity=12074 identityLabels="k8s:app.kubernetes.io/component=haproxy,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0" ipv4=10.0.0.248 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1777911ec3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=553 identity=12074 ipv4=10.0.0.248 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=1777911ec3 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=553 identity=12074 ipv4=10.0.0.248 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=1777911ec3 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=553 identity=12074 ipv4=10.0.0.248 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.23 2317abbe-112a-4398-a054-5df82fc5d9a5 default }" containerID=049bedef2b3e547e8c2c800fdc39a3472310550a812d8e47d8284454d9116186 datapathConfiguration="&{false false false false false }" interface=lxccf196c66db0e k8sPodName=openstack/percona-xtradb-pxc-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=049bedef2b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1251 ipv4=10.0.0.23 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=049bedef2b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1251 identityLabels="k8s:app.kubernetes.io/component=pxc,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0" ipv4=10.0.0.23 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=049bedef2b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1251 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.23 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=pxc;k8s:app.kubernetes.io/instance=percona-xtradb;k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator;k8s:app.kubernetes.io/name=percona-xtradb-cluster;k8s:app.kubernetes.io/part-of=percona-xtradb-cluster;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=049bedef2b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1251 identity=3491 identityLabels="k8s:app.kubernetes.io/component=pxc,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0" ipv4=10.0.0.23 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=049bedef2b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1251 identity=3491 ipv4=10.0.0.23 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=049bedef2b datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=1251 identity=3491 ipv4=10.0.0.23 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=049bedef2b datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=1251 identity=3491 ipv4=10.0.0.23 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"keycloak\",\"k8s:app.kubernetes.io/instance\":\"keycloak\",\"k8s:app.kubernetes.io/name\":\"keycloak\",\"k8s:io.kubernetes.pod.namespace\":\"auth-system\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:7800 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:} {Ports:[{Port:8080 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=keycloak k8s:io.cilium.k8s.policy.namespace=auth-system k8s:io.cilium.k8s.policy.uid=f9b05bc1-384a-406d-a493-41bcd3be74bc] Description:}]" policyAddRequest=486b64f7-97d6-4feb-9aa0-a8021583b754 subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=486b64f7-97d6-4feb-9aa0-a8021583b754 policyRevision=4 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=keycloak subsys=k8s-watcher level=info msg="Create endpoint request" addressing="&{10.0.0.224 70dbf2c9-6946-4e2e-a161-fe9e49ad05ec default }" containerID=0ca316c109f51b0ae1deee65acdcbeaa2f97594599a473fecf26c200778d8383 datapathConfiguration="&{false false false false false }" interface=lxc8962dd61a360 k8sPodName=auth-system/keycloak-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0ca316c109 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2823 ipv4=10.0.0.224 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0ca316c109 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2823 identityLabels="k8s:app.kubernetes.io/component=keycloak,k8s:app.kubernetes.io/instance=keycloak,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=keycloak,k8s:app.kubernetes.io/version=24.0.5,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=keycloak-21.4.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system,k8s:io.cilium.k8s.namespace.labels.name=auth-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keycloak,k8s:io.kubernetes.pod.namespace=auth-system,k8s:statefulset.kubernetes.io/pod-name=keycloak-0" ipv4=10.0.0.224 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:auth-system k8s:io.cilium.k8s.namespace.labels.name:auth-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=keycloak;k8s:app.kubernetes.io/instance=keycloak;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=keycloak;k8s:app.kubernetes.io/version=24.0.5;k8s:apps.kubernetes.io/pod-index=0;k8s:helm.sh/chart=keycloak-21.4.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system;k8s:io.cilium.k8s.namespace.labels.name=auth-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keycloak;k8s:io.kubernetes.pod.namespace=auth-system;k8s:statefulset.kubernetes.io/pod-name=keycloak-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0ca316c109 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2823 identity=33710 identityLabels="k8s:app.kubernetes.io/component=keycloak,k8s:app.kubernetes.io/instance=keycloak,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=keycloak,k8s:app.kubernetes.io/version=24.0.5,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=keycloak-21.4.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system,k8s:io.cilium.k8s.namespace.labels.name=auth-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keycloak,k8s:io.kubernetes.pod.namespace=auth-system,k8s:statefulset.kubernetes.io/pod-name=keycloak-0" ipv4=10.0.0.224 ipv6= k8sPodName=auth-system/keycloak-0 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=0ca316c109 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2823 identity=33710 ipv4=10.0.0.224 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=0ca316c109 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2823 identity=33710 ipv4=10.0.0.224 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=0ca316c109 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2823 identity=33710 ipv4=10.0.0.224 ipv6= k8sPodName=auth-system/keycloak-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Conntrack garbage collector interval recalculated" deleteRatio=0.004707346436349372 newInterval=7m30s subsys=map-ct level=info msg="Conntrack garbage collector interval recalculated" deleteRatio=0.031277476429450675 newInterval=11m15s subsys=map-ct level=info msg="Create endpoint request" addressing="&{10.0.0.232 1602ef5f-4bd0-4e46-834d-860c676c9153 default }" containerID=79e30401f3582cc703df6d89eab839514a33861c19502b688dc1d095cb3a0251 datapathConfiguration="&{false false false false false }" interface=lxccacbef265d09 k8sPodName=openstack/memcached-memcached-cf56b6468-8xjb4 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=79e30401f3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=815 ipv4=10.0.0.232 ipv6= k8sPodName=openstack/memcached-memcached-cf56b6468-8xjb4 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=79e30401f3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=815 identityLabels="k8s:application=memcached,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=memcached" ipv4=10.0.0.232 ipv6= k8sPodName=openstack/memcached-memcached-cf56b6468-8xjb4 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=memcached;k8s:component=server;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=memcached;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=79e30401f3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=815 identity=15257 identityLabels="k8s:application=memcached,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=memcached" ipv4=10.0.0.232 ipv6= k8sPodName=openstack/memcached-memcached-cf56b6468-8xjb4 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=79e30401f3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=815 identity=15257 ipv4=10.0.0.232 ipv6= k8sPodName=openstack/memcached-memcached-cf56b6468-8xjb4 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=79e30401f3 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=815 identity=15257 ipv4=10.0.0.232 ipv6= k8sPodName=openstack/memcached-memcached-cf56b6468-8xjb4 subsys=endpoint level=info msg="Successful endpoint creation" containerID=79e30401f3 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=815 identity=15257 ipv4=10.0.0.232 ipv6= k8sPodName=openstack/memcached-memcached-cf56b6468-8xjb4 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.74 44b80daf-b84c-4613-8239-8997b8b06894 default }" containerID=91e6fb364da59895bdfefd01721cacab87638d87042115a9c42464f3f01372c5 datapathConfiguration="&{false false false false false }" interface=lxc1c5ad8f6bb16 k8sPodName=openstack/rabbitmq-keystone-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=91e6fb364d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=970 ipv4=10.0.0.74 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=91e6fb364d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=970 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-keystone,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0" ipv4=10.0.0.74 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-keystone;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=91e6fb364d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=970 identity=13216 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-keystone,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0" ipv4=10.0.0.74 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=91e6fb364d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=970 identity=13216 ipv4=10.0.0.74 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=91e6fb364d datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=970 identity=13216 ipv4=10.0.0.74 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=91e6fb364d datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=970 identity=13216 ipv4=10.0.0.74 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.227 24b4c4fc-2581-4cac-8264-69b52501e160 default }" containerID=1f8fb45569bb9845e29487520a9e8f13bc29f83511d6d64da51250e518ae8b2e datapathConfiguration="&{false false false false false }" interface=lxc956c27611c75 k8sPodName=openstack/keystone-api-6dc44fc47f-tzptd labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1f8fb45569 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=832 ipv4=10.0.0.227 ipv6= k8sPodName=openstack/keystone-api-6dc44fc47f-tzptd subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1f8fb45569 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=832 identityLabels="k8s:application=keystone,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=keystone" ipv4=10.0.0.227 ipv6= k8sPodName=openstack/keystone-api-6dc44fc47f-tzptd subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=1f8fb45569 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=832 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.227 ipv6= k8sPodName=openstack/keystone-api-6dc44fc47f-tzptd line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1f8fb45569 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=832 identity=32620 identityLabels="k8s:application=keystone,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=keystone" ipv4=10.0.0.227 ipv6= k8sPodName=openstack/keystone-api-6dc44fc47f-tzptd oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1f8fb45569 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=832 identity=32620 ipv4=10.0.0.227 ipv6= k8sPodName=openstack/keystone-api-6dc44fc47f-tzptd subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.226 019b76f7-c4a5-458b-8851-3a36533050e8 default }" containerID=bb27c356c2d014e80aa7bd151ec12c9d067fbb2d286adb399d94fcfd4e589ee1 datapathConfiguration="&{false false false false false }" interface=lxcb892a08b0a74 k8sPodName=openstack/keystone-credential-setup-d84qh labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=bb27c356c2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=523 ipv4=10.0.0.226 ipv6= k8sPodName=openstack/keystone-credential-setup-d84qh subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=bb27c356c2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=523 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=a949a6e1-5562-4bd3-b3fd-c405e54ad7e6,k8s:batch.kubernetes.io/job-name=keystone-credential-setup,k8s:component=credential-setup,k8s:controller-uid=a949a6e1-5562-4bd3-b3fd-c405e54ad7e6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-credential-setup,k8s:release_group=keystone" ipv4=10.0.0.226 ipv6= k8sPodName=openstack/keystone-credential-setup-d84qh subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=a949a6e1-5562-4bd3-b3fd-c405e54ad7e6;k8s:batch.kubernetes.io/job-name=keystone-credential-setup;k8s:component=credential-setup;k8s:controller-uid=a949a6e1-5562-4bd3-b3fd-c405e54ad7e6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-credential-setup;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=bb27c356c2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=523 identity=48209 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=a949a6e1-5562-4bd3-b3fd-c405e54ad7e6,k8s:batch.kubernetes.io/job-name=keystone-credential-setup,k8s:component=credential-setup,k8s:controller-uid=a949a6e1-5562-4bd3-b3fd-c405e54ad7e6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-credential-setup,k8s:release_group=keystone" ipv4=10.0.0.226 ipv6= k8sPodName=openstack/keystone-credential-setup-d84qh oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=bb27c356c2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=523 identity=48209 ipv4=10.0.0.226 ipv6= k8sPodName=openstack/keystone-credential-setup-d84qh subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=1f8fb45569 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=832 identity=32620 ipv4=10.0.0.227 ipv6= k8sPodName=openstack/keystone-api-6dc44fc47f-tzptd subsys=endpoint level=info msg="Successful endpoint creation" containerID=1f8fb45569 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=832 identity=32620 ipv4=10.0.0.227 ipv6= k8sPodName=openstack/keystone-api-6dc44fc47f-tzptd subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=bb27c356c2 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=523 identity=48209 ipv4=10.0.0.226 ipv6= k8sPodName=openstack/keystone-credential-setup-d84qh subsys=endpoint level=info msg="Successful endpoint creation" containerID=bb27c356c2 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=523 identity=48209 ipv4=10.0.0.226 ipv6= k8sPodName=openstack/keystone-credential-setup-d84qh subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=bb27c356c2 endpointID=523 k8sNamespace=openstack k8sPodName=keystone-credential-setup-d84qh subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=a949a6e1-5562-4bd3-b3fd-c405e54ad7e6 k8s:batch.kubernetes.io/job-name=keystone-credential-setup k8s:component=credential-setup k8s:controller-uid=a949a6e1-5562-4bd3-b3fd-c405e54ad7e6 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-credential-setup k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=bb27c356c2 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=523 identity=48209 ipv4=10.0.0.226 ipv6= k8sPodName=openstack/keystone-credential-setup-d84qh subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.73 ac614945-e0f9-4bf8-a223-1f7e8812c409 default }" containerID=a58fc9b41a6be7bb8f6e1072bccdd76ce0a35ce3628b5a73e26e51911a7b7d2e datapathConfiguration="&{false false false false false }" interface=lxc2b0fea57d848 k8sPodName=openstack/keystone-db-init-8wgnb labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a58fc9b41a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=163 ipv4=10.0.0.73 ipv6= k8sPodName=openstack/keystone-db-init-8wgnb subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a58fc9b41a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=163 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=38c879d6-e3c5-4f95-a244-5f07bdbec65b,k8s:batch.kubernetes.io/job-name=keystone-db-init,k8s:component=db-init,k8s:controller-uid=38c879d6-e3c5-4f95-a244-5f07bdbec65b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-init,k8s:release_group=keystone" ipv4=10.0.0.73 ipv6= k8sPodName=openstack/keystone-db-init-8wgnb subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=38c879d6-e3c5-4f95-a244-5f07bdbec65b;k8s:batch.kubernetes.io/job-name=keystone-db-init;k8s:component=db-init;k8s:controller-uid=38c879d6-e3c5-4f95-a244-5f07bdbec65b;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-db-init;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a58fc9b41a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=163 identity=4765 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=38c879d6-e3c5-4f95-a244-5f07bdbec65b,k8s:batch.kubernetes.io/job-name=keystone-db-init,k8s:component=db-init,k8s:controller-uid=38c879d6-e3c5-4f95-a244-5f07bdbec65b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-init,k8s:release_group=keystone" ipv4=10.0.0.73 ipv6= k8sPodName=openstack/keystone-db-init-8wgnb oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a58fc9b41a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=163 identity=4765 ipv4=10.0.0.73 ipv6= k8sPodName=openstack/keystone-db-init-8wgnb subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=a58fc9b41a datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=163 identity=4765 ipv4=10.0.0.73 ipv6= k8sPodName=openstack/keystone-db-init-8wgnb subsys=endpoint level=info msg="Successful endpoint creation" containerID=a58fc9b41a datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=163 identity=4765 ipv4=10.0.0.73 ipv6= k8sPodName=openstack/keystone-db-init-8wgnb subsys=daemon level=info msg="Delete endpoint request" containerID=a58fc9b41a endpointID=163 k8sNamespace=openstack k8sPodName=keystone-db-init-8wgnb subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=38c879d6-e3c5-4f95-a244-5f07bdbec65b k8s:batch.kubernetes.io/job-name=keystone-db-init k8s:component=db-init k8s:controller-uid=38c879d6-e3c5-4f95-a244-5f07bdbec65b k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-db-init k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=a58fc9b41a datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=163 identity=4765 ipv4=10.0.0.73 ipv6= k8sPodName=openstack/keystone-db-init-8wgnb subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.62 565a984d-9320-4969-a25b-2f80f3ce25c0 default }" containerID=c338c2f8aca28e95548ab82c770f8853263ebf48e53adc0e13ba1f9db67b6a30 datapathConfiguration="&{false false false false false }" interface=lxc1dc51add61b1 k8sPodName=openstack/keystone-fernet-setup-fh4tt labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c338c2f8ac datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1400 ipv4=10.0.0.62 ipv6= k8sPodName=openstack/keystone-fernet-setup-fh4tt subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c338c2f8ac datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1400 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=8841014d-c8a7-44c1-8eb5-b1f90ab2d86f,k8s:batch.kubernetes.io/job-name=keystone-fernet-setup,k8s:component=fernet-setup,k8s:controller-uid=8841014d-c8a7-44c1-8eb5-b1f90ab2d86f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-setup,k8s:release_group=keystone" ipv4=10.0.0.62 ipv6= k8sPodName=openstack/keystone-fernet-setup-fh4tt subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=c338c2f8ac datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1400 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.62 ipv6= k8sPodName=openstack/keystone-fernet-setup-fh4tt line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=8841014d-c8a7-44c1-8eb5-b1f90ab2d86f;k8s:batch.kubernetes.io/job-name=keystone-fernet-setup;k8s:component=fernet-setup;k8s:controller-uid=8841014d-c8a7-44c1-8eb5-b1f90ab2d86f;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-fernet-setup;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c338c2f8ac datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1400 identity=43195 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=8841014d-c8a7-44c1-8eb5-b1f90ab2d86f,k8s:batch.kubernetes.io/job-name=keystone-fernet-setup,k8s:component=fernet-setup,k8s:controller-uid=8841014d-c8a7-44c1-8eb5-b1f90ab2d86f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-setup,k8s:release_group=keystone" ipv4=10.0.0.62 ipv6= k8sPodName=openstack/keystone-fernet-setup-fh4tt oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c338c2f8ac datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1400 identity=43195 ipv4=10.0.0.62 ipv6= k8sPodName=openstack/keystone-fernet-setup-fh4tt subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c338c2f8ac datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1400 identity=43195 ipv4=10.0.0.62 ipv6= k8sPodName=openstack/keystone-fernet-setup-fh4tt subsys=endpoint level=info msg="Successful endpoint creation" containerID=c338c2f8ac datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1400 identity=43195 ipv4=10.0.0.62 ipv6= k8sPodName=openstack/keystone-fernet-setup-fh4tt subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=c338c2f8ac endpointID=1400 k8sNamespace=openstack k8sPodName=keystone-fernet-setup-fh4tt subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=8841014d-c8a7-44c1-8eb5-b1f90ab2d86f k8s:batch.kubernetes.io/job-name=keystone-fernet-setup k8s:component=fernet-setup k8s:controller-uid=8841014d-c8a7-44c1-8eb5-b1f90ab2d86f k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-fernet-setup k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=c338c2f8ac datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1400 identity=43195 ipv4=10.0.0.62 ipv6= k8sPodName=openstack/keystone-fernet-setup-fh4tt subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.141 ce667d15-1ac1-47ab-8aaf-aca89f2a22e8 default }" containerID=2a52fb8e4f3fd554f8ca904a0e7714cac1a35faa1870f997e81fbaa2ac468bc1 datapathConfiguration="&{false false false false false }" interface=lxc3746c5550857 k8sPodName=openstack/keystone-db-sync-wqph5 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2a52fb8e4f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=374 ipv4=10.0.0.141 ipv6= k8sPodName=openstack/keystone-db-sync-wqph5 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2a52fb8e4f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=374 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=fdba1f8b-2c2c-4258-aa86-bfdf2b627e17,k8s:batch.kubernetes.io/job-name=keystone-db-sync,k8s:component=db-sync,k8s:controller-uid=fdba1f8b-2c2c-4258-aa86-bfdf2b627e17,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-sync,k8s:release_group=keystone" ipv4=10.0.0.141 ipv6= k8sPodName=openstack/keystone-db-sync-wqph5 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=fdba1f8b-2c2c-4258-aa86-bfdf2b627e17;k8s:batch.kubernetes.io/job-name=keystone-db-sync;k8s:component=db-sync;k8s:controller-uid=fdba1f8b-2c2c-4258-aa86-bfdf2b627e17;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-db-sync;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2a52fb8e4f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=374 identity=19576 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=fdba1f8b-2c2c-4258-aa86-bfdf2b627e17,k8s:batch.kubernetes.io/job-name=keystone-db-sync,k8s:component=db-sync,k8s:controller-uid=fdba1f8b-2c2c-4258-aa86-bfdf2b627e17,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-sync,k8s:release_group=keystone" ipv4=10.0.0.141 ipv6= k8sPodName=openstack/keystone-db-sync-wqph5 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2a52fb8e4f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=374 identity=19576 ipv4=10.0.0.141 ipv6= k8sPodName=openstack/keystone-db-sync-wqph5 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=2a52fb8e4f datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=374 identity=19576 ipv4=10.0.0.141 ipv6= k8sPodName=openstack/keystone-db-sync-wqph5 subsys=endpoint level=info msg="Successful endpoint creation" containerID=2a52fb8e4f datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=374 identity=19576 ipv4=10.0.0.141 ipv6= k8sPodName=openstack/keystone-db-sync-wqph5 subsys=daemon level=info msg="Delete endpoint request" containerID=2a52fb8e4f endpointID=374 k8sNamespace=openstack k8sPodName=keystone-db-sync-wqph5 subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=fdba1f8b-2c2c-4258-aa86-bfdf2b627e17 k8s:batch.kubernetes.io/job-name=keystone-db-sync k8s:component=db-sync k8s:controller-uid=fdba1f8b-2c2c-4258-aa86-bfdf2b627e17 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-db-sync k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=2a52fb8e4f datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=374 identity=19576 ipv4=10.0.0.141 ipv6= k8sPodName=openstack/keystone-db-sync-wqph5 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.141 48842986-4468-4695-b5c5-024bda201865 default }" containerID=ef1655c2506b8ca9fb8a3bbf4d5e50d17794e21bc562461f8f04399f9e88404d datapathConfiguration="&{false false false false false }" interface=lxc6b548b56d6f9 k8sPodName=openstack/keystone-rabbit-init-8qlj2 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ef1655c250 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=653 ipv4=10.0.0.141 ipv6= k8sPodName=openstack/keystone-rabbit-init-8qlj2 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ef1655c250 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=653 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=f6a2f6c1-eb86-4ead-86ce-da1823065dad,k8s:batch.kubernetes.io/job-name=keystone-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=f6a2f6c1-eb86-4ead-86ce-da1823065dad,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-rabbit-init,k8s:release_group=keystone" ipv4=10.0.0.141 ipv6= k8sPodName=openstack/keystone-rabbit-init-8qlj2 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=ef1655c250 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=653 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.141 ipv6= k8sPodName=openstack/keystone-rabbit-init-8qlj2 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=f6a2f6c1-eb86-4ead-86ce-da1823065dad;k8s:batch.kubernetes.io/job-name=keystone-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=f6a2f6c1-eb86-4ead-86ce-da1823065dad;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-rabbit-init;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ef1655c250 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=653 identity=57506 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=f6a2f6c1-eb86-4ead-86ce-da1823065dad,k8s:batch.kubernetes.io/job-name=keystone-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=f6a2f6c1-eb86-4ead-86ce-da1823065dad,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-rabbit-init,k8s:release_group=keystone" ipv4=10.0.0.141 ipv6= k8sPodName=openstack/keystone-rabbit-init-8qlj2 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ef1655c250 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=653 identity=57506 ipv4=10.0.0.141 ipv6= k8sPodName=openstack/keystone-rabbit-init-8qlj2 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ef1655c250 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=653 identity=57506 ipv4=10.0.0.141 ipv6= k8sPodName=openstack/keystone-rabbit-init-8qlj2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=ef1655c250 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=653 identity=57506 ipv4=10.0.0.141 ipv6= k8sPodName=openstack/keystone-rabbit-init-8qlj2 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=ef1655c250 endpointID=653 k8sNamespace=openstack k8sPodName=keystone-rabbit-init-8qlj2 subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=f6a2f6c1-eb86-4ead-86ce-da1823065dad k8s:batch.kubernetes.io/job-name=keystone-rabbit-init k8s:component=rabbit-init k8s:controller-uid=f6a2f6c1-eb86-4ead-86ce-da1823065dad k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-rabbit-init k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=ef1655c250 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=653 identity=57506 ipv4=10.0.0.141 ipv6= k8sPodName=openstack/keystone-rabbit-init-8qlj2 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.238 00996f82-e178-4741-9770-56c5cbcafca5 default }" containerID=9da17a8519bf0f51dfaaa51fc33e1204a2171d1494838bf84fbae7620691de4f datapathConfiguration="&{false false false false false }" interface=lxc90dde9f74479 k8sPodName=openstack/keystone-domain-manage-ld7km labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9da17a8519 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1758 ipv4=10.0.0.238 ipv6= k8sPodName=openstack/keystone-domain-manage-ld7km subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9da17a8519 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1758 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=ca7b7db8-f524-4f22-baff-578fc4e07828,k8s:batch.kubernetes.io/job-name=keystone-domain-manage,k8s:component=domain-manage,k8s:controller-uid=ca7b7db8-f524-4f22-baff-578fc4e07828,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-domain-manage,k8s:release_group=keystone" ipv4=10.0.0.238 ipv6= k8sPodName=openstack/keystone-domain-manage-ld7km subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=ca7b7db8-f524-4f22-baff-578fc4e07828;k8s:batch.kubernetes.io/job-name=keystone-domain-manage;k8s:component=domain-manage;k8s:controller-uid=ca7b7db8-f524-4f22-baff-578fc4e07828;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-domain-manage;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9da17a8519 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1758 identity=2556 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=ca7b7db8-f524-4f22-baff-578fc4e07828,k8s:batch.kubernetes.io/job-name=keystone-domain-manage,k8s:component=domain-manage,k8s:controller-uid=ca7b7db8-f524-4f22-baff-578fc4e07828,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-domain-manage,k8s:release_group=keystone" ipv4=10.0.0.238 ipv6= k8sPodName=openstack/keystone-domain-manage-ld7km oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9da17a8519 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1758 identity=2556 ipv4=10.0.0.238 ipv6= k8sPodName=openstack/keystone-domain-manage-ld7km subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=9da17a8519 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1758 identity=2556 ipv4=10.0.0.238 ipv6= k8sPodName=openstack/keystone-domain-manage-ld7km subsys=endpoint level=info msg="Successful endpoint creation" containerID=9da17a8519 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1758 identity=2556 ipv4=10.0.0.238 ipv6= k8sPodName=openstack/keystone-domain-manage-ld7km subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=9da17a8519 endpointID=1758 k8sNamespace=openstack k8sPodName=keystone-domain-manage-ld7km subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=ca7b7db8-f524-4f22-baff-578fc4e07828 k8s:batch.kubernetes.io/job-name=keystone-domain-manage k8s:component=domain-manage k8s:controller-uid=ca7b7db8-f524-4f22-baff-578fc4e07828 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-domain-manage k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=9da17a8519 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1758 identity=2556 ipv4=10.0.0.238 ipv6= k8sPodName=openstack/keystone-domain-manage-ld7km subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.208 de799aa4-42f0-4c1e-a0e8-fafd9d557d01 default }" containerID=be0822aaa420e0991b62d2b2362b030e3d494ed3c959de60f78744511c34606e datapathConfiguration="&{false false false false false }" interface=lxcf889a2042ff9 k8sPodName=openstack/keystone-bootstrap-5jr2p labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=be0822aaa4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=610 ipv4=10.0.0.208 ipv6= k8sPodName=openstack/keystone-bootstrap-5jr2p subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=be0822aaa4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=610 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=712e261c-b9db-404a-a127-d166bf6c245d,k8s:batch.kubernetes.io/job-name=keystone-bootstrap,k8s:component=bootstrap,k8s:controller-uid=712e261c-b9db-404a-a127-d166bf6c245d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-bootstrap,k8s:release_group=keystone" ipv4=10.0.0.208 ipv6= k8sPodName=openstack/keystone-bootstrap-5jr2p subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=712e261c-b9db-404a-a127-d166bf6c245d;k8s:batch.kubernetes.io/job-name=keystone-bootstrap;k8s:component=bootstrap;k8s:controller-uid=712e261c-b9db-404a-a127-d166bf6c245d;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-bootstrap;k8s:release_group=keystone;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=be0822aaa4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=610 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.208 ipv6= k8sPodName=openstack/keystone-bootstrap-5jr2p line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=be0822aaa4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=610 identity=11636 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=712e261c-b9db-404a-a127-d166bf6c245d,k8s:batch.kubernetes.io/job-name=keystone-bootstrap,k8s:component=bootstrap,k8s:controller-uid=712e261c-b9db-404a-a127-d166bf6c245d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-bootstrap,k8s:release_group=keystone" ipv4=10.0.0.208 ipv6= k8sPodName=openstack/keystone-bootstrap-5jr2p oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=be0822aaa4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=610 identity=11636 ipv4=10.0.0.208 ipv6= k8sPodName=openstack/keystone-bootstrap-5jr2p subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=be0822aaa4 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=610 identity=11636 ipv4=10.0.0.208 ipv6= k8sPodName=openstack/keystone-bootstrap-5jr2p subsys=endpoint level=info msg="Successful endpoint creation" containerID=be0822aaa4 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=610 identity=11636 ipv4=10.0.0.208 ipv6= k8sPodName=openstack/keystone-bootstrap-5jr2p subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=be0822aaa4 endpointID=610 k8sNamespace=openstack k8sPodName=keystone-bootstrap-5jr2p subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=712e261c-b9db-404a-a127-d166bf6c245d k8s:batch.kubernetes.io/job-name=keystone-bootstrap k8s:component=bootstrap k8s:controller-uid=712e261c-b9db-404a-a127-d166bf6c245d k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-bootstrap k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=be0822aaa4 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=610 identity=11636 ipv4=10.0.0.208 ipv6= k8sPodName=openstack/keystone-bootstrap-5jr2p subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.170 00dcee85-5548-435f-936d-f97bc8a8ae4b default }" containerID=1ebbae6664ef6aceb5d383c7455383da84c43358fca2397fac8a7a5ba23fb176 datapathConfiguration="&{false false false false false }" interface=lxc90d36fff862b k8sPodName=openstack/rabbitmq-glance-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1ebbae6664 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2190 ipv4=10.0.0.170 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1ebbae6664 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2190 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-glance,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0" ipv4=10.0.0.170 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-glance;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1ebbae6664 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2190 identity=57721 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-glance,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0" ipv4=10.0.0.170 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1ebbae6664 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2190 identity=57721 ipv4=10.0.0.170 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=1ebbae6664 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2190 identity=57721 ipv4=10.0.0.170 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=1ebbae6664 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2190 identity=57721 ipv4=10.0.0.170 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.206 e1fa55c3-4887-4253-87e9-fb5467a910db default }" containerID=902caabfa943a2f2466a13eaeffa4b4f1a115c5aafc35b3f873b54f04e9fcfe9 datapathConfiguration="&{false false false false false }" interface=lxcf05e30777993 k8sPodName=openstack/glance-db-init-djc4g labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=902caabfa9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1298 ipv4=10.0.0.206 ipv6= k8sPodName=openstack/glance-db-init-djc4g subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=902caabfa9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1298 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=ebfe1844-32ed-451f-b3de-18c0dfb68cdf,k8s:batch.kubernetes.io/job-name=glance-db-init,k8s:component=db-init,k8s:controller-uid=ebfe1844-32ed-451f-b3de-18c0dfb68cdf,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-init,k8s:release_group=glance" ipv4=10.0.0.206 ipv6= k8sPodName=openstack/glance-db-init-djc4g subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=ebfe1844-32ed-451f-b3de-18c0dfb68cdf;k8s:batch.kubernetes.io/job-name=glance-db-init;k8s:component=db-init;k8s:controller-uid=ebfe1844-32ed-451f-b3de-18c0dfb68cdf;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-db-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=902caabfa9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1298 identity=30661 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=ebfe1844-32ed-451f-b3de-18c0dfb68cdf,k8s:batch.kubernetes.io/job-name=glance-db-init,k8s:component=db-init,k8s:controller-uid=ebfe1844-32ed-451f-b3de-18c0dfb68cdf,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-init,k8s:release_group=glance" ipv4=10.0.0.206 ipv6= k8sPodName=openstack/glance-db-init-djc4g oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=902caabfa9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1298 identity=30661 ipv4=10.0.0.206 ipv6= k8sPodName=openstack/glance-db-init-djc4g subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=902caabfa9 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1298 identity=30661 ipv4=10.0.0.206 ipv6= k8sPodName=openstack/glance-db-init-djc4g subsys=endpoint level=info msg="Successful endpoint creation" containerID=902caabfa9 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1298 identity=30661 ipv4=10.0.0.206 ipv6= k8sPodName=openstack/glance-db-init-djc4g subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=902caabfa9 endpointID=1298 k8sNamespace=openstack k8sPodName=glance-db-init-djc4g subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=ebfe1844-32ed-451f-b3de-18c0dfb68cdf k8s:batch.kubernetes.io/job-name=glance-db-init k8s:component=db-init k8s:controller-uid=ebfe1844-32ed-451f-b3de-18c0dfb68cdf k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-db-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=902caabfa9 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1298 identity=30661 ipv4=10.0.0.206 ipv6= k8sPodName=openstack/glance-db-init-djc4g subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.54 2c33e20d-7b3d-4e29-82fd-22117654ab78 default }" containerID=38eef1764c5aab02e8a9121f190b5ecd5f59325f79c99050b4c2ece06e457df0 datapathConfiguration="&{false false false false false }" interface=lxc0f339a9cf64d k8sPodName=openstack/glance-db-sync-6x7lp labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=38eef1764c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1061 ipv4=10.0.0.54 ipv6= k8sPodName=openstack/glance-db-sync-6x7lp subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=38eef1764c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1061 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=8857e679-3e6e-420c-b05d-aabe630e4607,k8s:batch.kubernetes.io/job-name=glance-db-sync,k8s:component=db-sync,k8s:controller-uid=8857e679-3e6e-420c-b05d-aabe630e4607,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-sync,k8s:release_group=glance" ipv4=10.0.0.54 ipv6= k8sPodName=openstack/glance-db-sync-6x7lp subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=8857e679-3e6e-420c-b05d-aabe630e4607;k8s:batch.kubernetes.io/job-name=glance-db-sync;k8s:component=db-sync;k8s:controller-uid=8857e679-3e6e-420c-b05d-aabe630e4607;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-db-sync;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=38eef1764c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1061 identity=20918 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=8857e679-3e6e-420c-b05d-aabe630e4607,k8s:batch.kubernetes.io/job-name=glance-db-sync,k8s:component=db-sync,k8s:controller-uid=8857e679-3e6e-420c-b05d-aabe630e4607,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-sync,k8s:release_group=glance" ipv4=10.0.0.54 ipv6= k8sPodName=openstack/glance-db-sync-6x7lp oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=38eef1764c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1061 identity=20918 ipv4=10.0.0.54 ipv6= k8sPodName=openstack/glance-db-sync-6x7lp subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=38eef1764c datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1061 identity=20918 ipv4=10.0.0.54 ipv6= k8sPodName=openstack/glance-db-sync-6x7lp subsys=endpoint level=info msg="Successful endpoint creation" containerID=38eef1764c datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1061 identity=20918 ipv4=10.0.0.54 ipv6= k8sPodName=openstack/glance-db-sync-6x7lp subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=38eef1764c endpointID=1061 k8sNamespace=openstack k8sPodName=glance-db-sync-6x7lp subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=8857e679-3e6e-420c-b05d-aabe630e4607 k8s:batch.kubernetes.io/job-name=glance-db-sync k8s:component=db-sync k8s:controller-uid=8857e679-3e6e-420c-b05d-aabe630e4607 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-db-sync k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=38eef1764c datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1061 identity=20918 ipv4=10.0.0.54 ipv6= k8sPodName=openstack/glance-db-sync-6x7lp subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.93 a61e7112-39a2-41af-9500-2c7600739fed default }" containerID=c64539de44d3efff1152fdd0b3e17ea2a178fc1d5fef9d4fe0538e5fd8d88d57 datapathConfiguration="&{false false false false false }" interface=lxc05b8b983abb5 k8sPodName=openstack/glance-rabbit-init-wmjhl labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c64539de44 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3009 ipv4=10.0.0.93 ipv6= k8sPodName=openstack/glance-rabbit-init-wmjhl subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c64539de44 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3009 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=80859109-8d05-4041-a98b-8a7ad9cb0172,k8s:batch.kubernetes.io/job-name=glance-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=80859109-8d05-4041-a98b-8a7ad9cb0172,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-rabbit-init,k8s:release_group=glance" ipv4=10.0.0.93 ipv6= k8sPodName=openstack/glance-rabbit-init-wmjhl subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=c64539de44 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3009 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.93 ipv6= k8sPodName=openstack/glance-rabbit-init-wmjhl line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=80859109-8d05-4041-a98b-8a7ad9cb0172;k8s:batch.kubernetes.io/job-name=glance-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=80859109-8d05-4041-a98b-8a7ad9cb0172;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-rabbit-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c64539de44 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3009 identity=13566 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=80859109-8d05-4041-a98b-8a7ad9cb0172,k8s:batch.kubernetes.io/job-name=glance-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=80859109-8d05-4041-a98b-8a7ad9cb0172,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-rabbit-init,k8s:release_group=glance" ipv4=10.0.0.93 ipv6= k8sPodName=openstack/glance-rabbit-init-wmjhl oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c64539de44 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3009 identity=13566 ipv4=10.0.0.93 ipv6= k8sPodName=openstack/glance-rabbit-init-wmjhl subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c64539de44 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=3009 identity=13566 ipv4=10.0.0.93 ipv6= k8sPodName=openstack/glance-rabbit-init-wmjhl subsys=endpoint level=info msg="Successful endpoint creation" containerID=c64539de44 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3009 identity=13566 ipv4=10.0.0.93 ipv6= k8sPodName=openstack/glance-rabbit-init-wmjhl subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=c64539de44 endpointID=3009 k8sNamespace=openstack k8sPodName=glance-rabbit-init-wmjhl subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=80859109-8d05-4041-a98b-8a7ad9cb0172 k8s:batch.kubernetes.io/job-name=glance-rabbit-init k8s:component=rabbit-init k8s:controller-uid=80859109-8d05-4041-a98b-8a7ad9cb0172 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-rabbit-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=c64539de44 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3009 identity=13566 ipv4=10.0.0.93 ipv6= k8sPodName=openstack/glance-rabbit-init-wmjhl subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.35 98a25123-7de5-4858-84e5-70b246c3fa42 default }" containerID=afac15cf526e9909e8affde96e32bdaae13e41296a51058a3977b58b6003a998 datapathConfiguration="&{false false false false false }" interface=lxc76b512a90b49 k8sPodName=openstack/glance-ks-service-mrwn4 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=afac15cf52 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1110 ipv4=10.0.0.35 ipv6= k8sPodName=openstack/glance-ks-service-mrwn4 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=afac15cf52 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1110 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=847423a9-725d-4027-a0ff-fd718c62f90d,k8s:batch.kubernetes.io/job-name=glance-ks-service,k8s:component=ks-service,k8s:controller-uid=847423a9-725d-4027-a0ff-fd718c62f90d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-service,k8s:release_group=glance" ipv4=10.0.0.35 ipv6= k8sPodName=openstack/glance-ks-service-mrwn4 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=847423a9-725d-4027-a0ff-fd718c62f90d;k8s:batch.kubernetes.io/job-name=glance-ks-service;k8s:component=ks-service;k8s:controller-uid=847423a9-725d-4027-a0ff-fd718c62f90d;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-service;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=afac15cf52 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1110 identity=6681 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=847423a9-725d-4027-a0ff-fd718c62f90d,k8s:batch.kubernetes.io/job-name=glance-ks-service,k8s:component=ks-service,k8s:controller-uid=847423a9-725d-4027-a0ff-fd718c62f90d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-service,k8s:release_group=glance" ipv4=10.0.0.35 ipv6= k8sPodName=openstack/glance-ks-service-mrwn4 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=afac15cf52 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1110 identity=6681 ipv4=10.0.0.35 ipv6= k8sPodName=openstack/glance-ks-service-mrwn4 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=afac15cf52 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1110 identity=6681 ipv4=10.0.0.35 ipv6= k8sPodName=openstack/glance-ks-service-mrwn4 subsys=endpoint level=info msg="Successful endpoint creation" containerID=afac15cf52 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1110 identity=6681 ipv4=10.0.0.35 ipv6= k8sPodName=openstack/glance-ks-service-mrwn4 subsys=daemon level=info msg="Delete endpoint request" containerID=afac15cf52 endpointID=1110 k8sNamespace=openstack k8sPodName=glance-ks-service-mrwn4 subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=847423a9-725d-4027-a0ff-fd718c62f90d k8s:batch.kubernetes.io/job-name=glance-ks-service k8s:component=ks-service k8s:controller-uid=847423a9-725d-4027-a0ff-fd718c62f90d k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-service k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=afac15cf52 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1110 identity=6681 ipv4=10.0.0.35 ipv6= k8sPodName=openstack/glance-ks-service-mrwn4 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.103 c48b7fb2-d67e-4370-9924-a175c6e287c8 default }" containerID=bb437d74ee467d043a7a63c274300fc5c509597f5a397306693d703d30f9d808 datapathConfiguration="&{false false false false false }" interface=lxcf5a81e710e5d k8sPodName=openstack/glance-ks-endpoints-gqgzz labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=bb437d74ee datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=911 ipv4=10.0.0.103 ipv6= k8sPodName=openstack/glance-ks-endpoints-gqgzz subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=bb437d74ee datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=911 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=3e08c575-303b-4c9e-9b99-1d4d6b9f5039,k8s:batch.kubernetes.io/job-name=glance-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=3e08c575-303b-4c9e-9b99-1d4d6b9f5039,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-endpoints,k8s:release_group=glance" ipv4=10.0.0.103 ipv6= k8sPodName=openstack/glance-ks-endpoints-gqgzz subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=3e08c575-303b-4c9e-9b99-1d4d6b9f5039;k8s:batch.kubernetes.io/job-name=glance-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=3e08c575-303b-4c9e-9b99-1d4d6b9f5039;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-endpoints;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=bb437d74ee datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=911 identity=63217 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=3e08c575-303b-4c9e-9b99-1d4d6b9f5039,k8s:batch.kubernetes.io/job-name=glance-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=3e08c575-303b-4c9e-9b99-1d4d6b9f5039,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-endpoints,k8s:release_group=glance" ipv4=10.0.0.103 ipv6= k8sPodName=openstack/glance-ks-endpoints-gqgzz oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=bb437d74ee datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=911 identity=63217 ipv4=10.0.0.103 ipv6= k8sPodName=openstack/glance-ks-endpoints-gqgzz subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=bb437d74ee datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=911 identity=63217 ipv4=10.0.0.103 ipv6= k8sPodName=openstack/glance-ks-endpoints-gqgzz subsys=endpoint level=info msg="Successful endpoint creation" containerID=bb437d74ee datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=911 identity=63217 ipv4=10.0.0.103 ipv6= k8sPodName=openstack/glance-ks-endpoints-gqgzz subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=bb437d74ee endpointID=911 k8sNamespace=openstack k8sPodName=glance-ks-endpoints-gqgzz subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=3e08c575-303b-4c9e-9b99-1d4d6b9f5039 k8s:batch.kubernetes.io/job-name=glance-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=3e08c575-303b-4c9e-9b99-1d4d6b9f5039 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-endpoints k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=bb437d74ee datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=911 identity=63217 ipv4=10.0.0.103 ipv6= k8sPodName=openstack/glance-ks-endpoints-gqgzz subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.251 caff9dfd-20ea-42d8-9d40-dbbfb3abd20e default }" containerID=2cce2dc13bd38ac89c07a60f8c93a68cd24c9e23db74ab03c256a890d90c8a45 datapathConfiguration="&{false false false false false }" interface=lxc2ec4e96d340e k8sPodName=openstack/glance-ks-user-slcpz labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2cce2dc13b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1138 ipv4=10.0.0.251 ipv6= k8sPodName=openstack/glance-ks-user-slcpz subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2cce2dc13b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1138 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=d20ceb26-e49c-476d-9509-85c7de713588,k8s:batch.kubernetes.io/job-name=glance-ks-user,k8s:component=ks-user,k8s:controller-uid=d20ceb26-e49c-476d-9509-85c7de713588,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-user,k8s:release_group=glance" ipv4=10.0.0.251 ipv6= k8sPodName=openstack/glance-ks-user-slcpz subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=2cce2dc13b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1138 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.251 ipv6= k8sPodName=openstack/glance-ks-user-slcpz line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=d20ceb26-e49c-476d-9509-85c7de713588;k8s:batch.kubernetes.io/job-name=glance-ks-user;k8s:component=ks-user;k8s:controller-uid=d20ceb26-e49c-476d-9509-85c7de713588;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-user;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2cce2dc13b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1138 identity=35483 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=d20ceb26-e49c-476d-9509-85c7de713588,k8s:batch.kubernetes.io/job-name=glance-ks-user,k8s:component=ks-user,k8s:controller-uid=d20ceb26-e49c-476d-9509-85c7de713588,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-user,k8s:release_group=glance" ipv4=10.0.0.251 ipv6= k8sPodName=openstack/glance-ks-user-slcpz oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2cce2dc13b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1138 identity=35483 ipv4=10.0.0.251 ipv6= k8sPodName=openstack/glance-ks-user-slcpz subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=2cce2dc13b datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1138 identity=35483 ipv4=10.0.0.251 ipv6= k8sPodName=openstack/glance-ks-user-slcpz subsys=endpoint level=info msg="Successful endpoint creation" containerID=2cce2dc13b datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1138 identity=35483 ipv4=10.0.0.251 ipv6= k8sPodName=openstack/glance-ks-user-slcpz subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=2cce2dc13b endpointID=1138 k8sNamespace=openstack k8sPodName=glance-ks-user-slcpz subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=d20ceb26-e49c-476d-9509-85c7de713588 k8s:batch.kubernetes.io/job-name=glance-ks-user k8s:component=ks-user k8s:controller-uid=d20ceb26-e49c-476d-9509-85c7de713588 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-user k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=2cce2dc13b datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1138 identity=35483 ipv4=10.0.0.251 ipv6= k8sPodName=openstack/glance-ks-user-slcpz subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.172 2cfc9b3c-d5ea-4c77-b298-ec80cc00124a default }" containerID=1d0445c665b9d5dfe6954e30eced544554e3211beff6372344d60471bbd65565 datapathConfiguration="&{false false false false false }" interface=lxcd4bb065eba5b k8sPodName=openstack/glance-metadefs-load-zg9zh labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1d0445c665 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=130 ipv4=10.0.0.172 ipv6= k8sPodName=openstack/glance-metadefs-load-zg9zh subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1d0445c665 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=130 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=9630fdb7-764b-43cf-a9b5-2ecc224dc144,k8s:batch.kubernetes.io/job-name=glance-metadefs-load,k8s:component=metadefs_load,k8s:controller-uid=9630fdb7-764b-43cf-a9b5-2ecc224dc144,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-metadefs-load,k8s:release_group=glance" ipv4=10.0.0.172 ipv6= k8sPodName=openstack/glance-metadefs-load-zg9zh subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=9630fdb7-764b-43cf-a9b5-2ecc224dc144;k8s:batch.kubernetes.io/job-name=glance-metadefs-load;k8s:component=metadefs_load;k8s:controller-uid=9630fdb7-764b-43cf-a9b5-2ecc224dc144;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-metadefs-load;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1d0445c665 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=130 identity=11429 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=9630fdb7-764b-43cf-a9b5-2ecc224dc144,k8s:batch.kubernetes.io/job-name=glance-metadefs-load,k8s:component=metadefs_load,k8s:controller-uid=9630fdb7-764b-43cf-a9b5-2ecc224dc144,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-metadefs-load,k8s:release_group=glance" ipv4=10.0.0.172 ipv6= k8sPodName=openstack/glance-metadefs-load-zg9zh oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1d0445c665 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=130 identity=11429 ipv4=10.0.0.172 ipv6= k8sPodName=openstack/glance-metadefs-load-zg9zh subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=1d0445c665 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=130 identity=11429 ipv4=10.0.0.172 ipv6= k8sPodName=openstack/glance-metadefs-load-zg9zh subsys=endpoint level=info msg="Successful endpoint creation" containerID=1d0445c665 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=130 identity=11429 ipv4=10.0.0.172 ipv6= k8sPodName=openstack/glance-metadefs-load-zg9zh subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=1d0445c665 endpointID=130 k8sNamespace=openstack k8sPodName=glance-metadefs-load-zg9zh subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=9630fdb7-764b-43cf-a9b5-2ecc224dc144 k8s:batch.kubernetes.io/job-name=glance-metadefs-load k8s:component=metadefs_load k8s:controller-uid=9630fdb7-764b-43cf-a9b5-2ecc224dc144 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-metadefs-load k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=1d0445c665 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=130 identity=11429 ipv4=10.0.0.172 ipv6= k8sPodName=openstack/glance-metadefs-load-zg9zh subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.42 642417ce-ca61-44e0-9a81-325bb3656328 default }" containerID=1562d06ad05122acdbf214d098cfa923a782a5d2b42eb5f71b59f624d2054225 datapathConfiguration="&{false false false false false }" interface=lxc2cc180fce3f9 k8sPodName=openstack/glance-storage-init-wxbw7 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1562d06ad0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2477 ipv4=10.0.0.42 ipv6= k8sPodName=openstack/glance-storage-init-wxbw7 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1562d06ad0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2477 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=73a71d9d-0b16-4dba-904f-761b24dd8cd3,k8s:batch.kubernetes.io/job-name=glance-storage-init,k8s:component=storage-init,k8s:controller-uid=73a71d9d-0b16-4dba-904f-761b24dd8cd3,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-storage-init,k8s:release_group=glance" ipv4=10.0.0.42 ipv6= k8sPodName=openstack/glance-storage-init-wxbw7 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=73a71d9d-0b16-4dba-904f-761b24dd8cd3;k8s:batch.kubernetes.io/job-name=glance-storage-init;k8s:component=storage-init;k8s:controller-uid=73a71d9d-0b16-4dba-904f-761b24dd8cd3;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-storage-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1562d06ad0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2477 identity=3403 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=73a71d9d-0b16-4dba-904f-761b24dd8cd3,k8s:batch.kubernetes.io/job-name=glance-storage-init,k8s:component=storage-init,k8s:controller-uid=73a71d9d-0b16-4dba-904f-761b24dd8cd3,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-storage-init,k8s:release_group=glance" ipv4=10.0.0.42 ipv6= k8sPodName=openstack/glance-storage-init-wxbw7 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=1562d06ad0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2477 identity=3403 ipv4=10.0.0.42 ipv6= k8sPodName=openstack/glance-storage-init-wxbw7 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=1562d06ad0 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2477 identity=3403 ipv4=10.0.0.42 ipv6= k8sPodName=openstack/glance-storage-init-wxbw7 subsys=endpoint level=info msg="Successful endpoint creation" containerID=1562d06ad0 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2477 identity=3403 ipv4=10.0.0.42 ipv6= k8sPodName=openstack/glance-storage-init-wxbw7 subsys=daemon level=info msg="Delete endpoint request" containerID=1562d06ad0 endpointID=2477 k8sNamespace=openstack k8sPodName=glance-storage-init-wxbw7 subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=73a71d9d-0b16-4dba-904f-761b24dd8cd3 k8s:batch.kubernetes.io/job-name=glance-storage-init k8s:component=storage-init k8s:controller-uid=73a71d9d-0b16-4dba-904f-761b24dd8cd3 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-storage-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=1562d06ad0 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2477 identity=3403 ipv4=10.0.0.42 ipv6= k8sPodName=openstack/glance-storage-init-wxbw7 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.52 c01b0727-b443-48a2-88ae-d532f06cdbf3 default }" containerID=0e51378c8c3eada799e3869fd9115a737787ddc0b84d43e914c8793c0c5bf646 datapathConfiguration="&{false false false false false }" interface=lxc8b3bbd471c10 k8sPodName=openstack/glance-api-69dc967d89-qpwz9 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0e51378c8c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=644 ipv4=10.0.0.52 ipv6= k8sPodName=openstack/glance-api-69dc967d89-qpwz9 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0e51378c8c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=644 identityLabels="k8s:application=glance,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=glance" ipv4=10.0.0.52 ipv6= k8sPodName=openstack/glance-api-69dc967d89-qpwz9 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0e51378c8c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=644 identity=50489 identityLabels="k8s:application=glance,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=glance" ipv4=10.0.0.52 ipv6= k8sPodName=openstack/glance-api-69dc967d89-qpwz9 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0e51378c8c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=644 identity=50489 ipv4=10.0.0.52 ipv6= k8sPodName=openstack/glance-api-69dc967d89-qpwz9 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=0e51378c8c datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=644 identity=50489 ipv4=10.0.0.52 ipv6= k8sPodName=openstack/glance-api-69dc967d89-qpwz9 subsys=endpoint level=info msg="Successful endpoint creation" containerID=0e51378c8c datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=644 identity=50489 ipv4=10.0.0.52 ipv6= k8sPodName=openstack/glance-api-69dc967d89-qpwz9 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.137 cfb149e4-fa8d-4654-9d27-74d7e6af7582 default }" containerID=1c477aa0c225aba002dea235c456ee4e733f32364785fa11031840bbe7212a0f datapathConfiguration="&{false false false false false }" interface=lxcc7e05e77d437 k8sPodName=openstack/placement-api-85bd4f9fc-wb4g7 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1c477aa0c2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1687 ipv4=10.0.0.137 ipv6= k8sPodName=openstack/placement-api-85bd4f9fc-wb4g7 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1c477aa0c2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1687 identityLabels="k8s:application=placement,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=placement" ipv4=10.0.0.137 ipv6= k8sPodName=openstack/placement-api-85bd4f9fc-wb4g7 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=placement;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=placement-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=placement;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1c477aa0c2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1687 identity=59717 identityLabels="k8s:application=placement,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=placement" ipv4=10.0.0.137 ipv6= k8sPodName=openstack/placement-api-85bd4f9fc-wb4g7 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=1c477aa0c2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1687 identity=59717 ipv4=10.0.0.137 ipv6= k8sPodName=openstack/placement-api-85bd4f9fc-wb4g7 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.39 952336b4-912c-4c7a-afde-f2319201f2c4 default }" containerID=dbfcc4d2eb1261858d28febb3abda9852f742463c3f6aa55002f9d7f8a6047c8 datapathConfiguration="&{false false false false false }" interface=lxc62314d5bd36c k8sPodName=openstack/placement-db-init-rz8qh labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=dbfcc4d2eb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2140 ipv4=10.0.0.39 ipv6= k8sPodName=openstack/placement-db-init-rz8qh subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=dbfcc4d2eb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2140 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=2396d634-37f2-4a62-b1ac-305b7aaaf18e,k8s:batch.kubernetes.io/job-name=placement-db-init,k8s:component=db-init,k8s:controller-uid=2396d634-37f2-4a62-b1ac-305b7aaaf18e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-db-init,k8s:release_group=placement" ipv4=10.0.0.39 ipv6= k8sPodName=openstack/placement-db-init-rz8qh subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=placement;k8s:batch.kubernetes.io/controller-uid=2396d634-37f2-4a62-b1ac-305b7aaaf18e;k8s:batch.kubernetes.io/job-name=placement-db-init;k8s:component=db-init;k8s:controller-uid=2396d634-37f2-4a62-b1ac-305b7aaaf18e;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=placement-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=placement-db-init;k8s:release_group=placement;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=dbfcc4d2eb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2140 identity=21837 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=2396d634-37f2-4a62-b1ac-305b7aaaf18e,k8s:batch.kubernetes.io/job-name=placement-db-init,k8s:component=db-init,k8s:controller-uid=2396d634-37f2-4a62-b1ac-305b7aaaf18e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-db-init,k8s:release_group=placement" ipv4=10.0.0.39 ipv6= k8sPodName=openstack/placement-db-init-rz8qh oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=dbfcc4d2eb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2140 identity=21837 ipv4=10.0.0.39 ipv6= k8sPodName=openstack/placement-db-init-rz8qh subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=1c477aa0c2 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1687 identity=59717 ipv4=10.0.0.137 ipv6= k8sPodName=openstack/placement-api-85bd4f9fc-wb4g7 subsys=endpoint level=info msg="Successful endpoint creation" containerID=1c477aa0c2 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1687 identity=59717 ipv4=10.0.0.137 ipv6= k8sPodName=openstack/placement-api-85bd4f9fc-wb4g7 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=dbfcc4d2eb datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2140 identity=21837 ipv4=10.0.0.39 ipv6= k8sPodName=openstack/placement-db-init-rz8qh subsys=endpoint level=info msg="Successful endpoint creation" containerID=dbfcc4d2eb datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2140 identity=21837 ipv4=10.0.0.39 ipv6= k8sPodName=openstack/placement-db-init-rz8qh subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=dbfcc4d2eb endpointID=2140 k8sNamespace=openstack k8sPodName=placement-db-init-rz8qh subsys=daemon level=info msg="Releasing key" key="[k8s:application=placement k8s:batch.kubernetes.io/controller-uid=2396d634-37f2-4a62-b1ac-305b7aaaf18e k8s:batch.kubernetes.io/job-name=placement-db-init k8s:component=db-init k8s:controller-uid=2396d634-37f2-4a62-b1ac-305b7aaaf18e k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=placement-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=placement-db-init k8s:release_group=placement]" subsys=allocator level=info msg="Removed endpoint" containerID=dbfcc4d2eb datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2140 identity=21837 ipv4=10.0.0.39 ipv6= k8sPodName=openstack/placement-db-init-rz8qh subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.51 0ec9aacf-d61f-4569-9b22-3efef216fac0 default }" containerID=77e551f6bbdb064e2353662c8834626435887047d83c8ed753cb5899ccd3232d datapathConfiguration="&{false false false false false }" interface=lxce9f6c0a09370 k8sPodName=openstack/placement-db-sync-t265h labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=77e551f6bb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3899 ipv4=10.0.0.51 ipv6= k8sPodName=openstack/placement-db-sync-t265h subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=77e551f6bb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3899 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=cd76fcda-4f35-4cac-bb8a-ee9f8a7f50bc,k8s:batch.kubernetes.io/job-name=placement-db-sync,k8s:component=db-sync,k8s:controller-uid=cd76fcda-4f35-4cac-bb8a-ee9f8a7f50bc,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-db-sync,k8s:release_group=placement" ipv4=10.0.0.51 ipv6= k8sPodName=openstack/placement-db-sync-t265h subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=placement;k8s:batch.kubernetes.io/controller-uid=cd76fcda-4f35-4cac-bb8a-ee9f8a7f50bc;k8s:batch.kubernetes.io/job-name=placement-db-sync;k8s:component=db-sync;k8s:controller-uid=cd76fcda-4f35-4cac-bb8a-ee9f8a7f50bc;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=placement-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=placement-db-sync;k8s:release_group=placement;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=77e551f6bb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3899 identity=45951 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=cd76fcda-4f35-4cac-bb8a-ee9f8a7f50bc,k8s:batch.kubernetes.io/job-name=placement-db-sync,k8s:component=db-sync,k8s:controller-uid=cd76fcda-4f35-4cac-bb8a-ee9f8a7f50bc,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-db-sync,k8s:release_group=placement" ipv4=10.0.0.51 ipv6= k8sPodName=openstack/placement-db-sync-t265h oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=77e551f6bb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3899 identity=45951 ipv4=10.0.0.51 ipv6= k8sPodName=openstack/placement-db-sync-t265h subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=77e551f6bb datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=3899 identity=45951 ipv4=10.0.0.51 ipv6= k8sPodName=openstack/placement-db-sync-t265h subsys=endpoint level=info msg="Successful endpoint creation" containerID=77e551f6bb datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3899 identity=45951 ipv4=10.0.0.51 ipv6= k8sPodName=openstack/placement-db-sync-t265h subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=77e551f6bb endpointID=3899 k8sNamespace=openstack k8sPodName=placement-db-sync-t265h subsys=daemon level=info msg="Releasing key" key="[k8s:application=placement k8s:batch.kubernetes.io/controller-uid=cd76fcda-4f35-4cac-bb8a-ee9f8a7f50bc k8s:batch.kubernetes.io/job-name=placement-db-sync k8s:component=db-sync k8s:controller-uid=cd76fcda-4f35-4cac-bb8a-ee9f8a7f50bc k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=placement-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=placement-db-sync k8s:release_group=placement]" subsys=allocator level=info msg="Removed endpoint" containerID=77e551f6bb datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3899 identity=45951 ipv4=10.0.0.51 ipv6= k8sPodName=openstack/placement-db-sync-t265h subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.163 47815ba0-2848-48cf-a470-bd71c337da34 default }" containerID=adcb979a7e1f30fd0faea3182d4d9ff5222294fa13ba0dbfc578ed8b182163d5 datapathConfiguration="&{false false false false false }" interface=lxc35764cfabec7 k8sPodName=openstack/placement-ks-service-lzvxf labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=adcb979a7e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=569 ipv4=10.0.0.163 ipv6= k8sPodName=openstack/placement-ks-service-lzvxf subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=adcb979a7e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=569 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=9dc317df-1215-4d7a-8b55-d7cc2a861b16,k8s:batch.kubernetes.io/job-name=placement-ks-service,k8s:component=ks-service,k8s:controller-uid=9dc317df-1215-4d7a-8b55-d7cc2a861b16,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-ks-service,k8s:release_group=placement" ipv4=10.0.0.163 ipv6= k8sPodName=openstack/placement-ks-service-lzvxf subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=adcb979a7e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=569 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.163 ipv6= k8sPodName=openstack/placement-ks-service-lzvxf line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=placement;k8s:batch.kubernetes.io/controller-uid=9dc317df-1215-4d7a-8b55-d7cc2a861b16;k8s:batch.kubernetes.io/job-name=placement-ks-service;k8s:component=ks-service;k8s:controller-uid=9dc317df-1215-4d7a-8b55-d7cc2a861b16;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=placement-ks-service;k8s:release_group=placement;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=adcb979a7e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=569 identity=31177 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=9dc317df-1215-4d7a-8b55-d7cc2a861b16,k8s:batch.kubernetes.io/job-name=placement-ks-service,k8s:component=ks-service,k8s:controller-uid=9dc317df-1215-4d7a-8b55-d7cc2a861b16,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-ks-service,k8s:release_group=placement" ipv4=10.0.0.163 ipv6= k8sPodName=openstack/placement-ks-service-lzvxf oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=adcb979a7e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=569 identity=31177 ipv4=10.0.0.163 ipv6= k8sPodName=openstack/placement-ks-service-lzvxf subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=adcb979a7e datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=569 identity=31177 ipv4=10.0.0.163 ipv6= k8sPodName=openstack/placement-ks-service-lzvxf subsys=endpoint level=info msg="Successful endpoint creation" containerID=adcb979a7e datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=569 identity=31177 ipv4=10.0.0.163 ipv6= k8sPodName=openstack/placement-ks-service-lzvxf subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=adcb979a7e endpointID=569 k8sNamespace=openstack k8sPodName=placement-ks-service-lzvxf subsys=daemon level=info msg="Releasing key" key="[k8s:application=placement k8s:batch.kubernetes.io/controller-uid=9dc317df-1215-4d7a-8b55-d7cc2a861b16 k8s:batch.kubernetes.io/job-name=placement-ks-service k8s:component=ks-service k8s:controller-uid=9dc317df-1215-4d7a-8b55-d7cc2a861b16 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=placement-ks-service k8s:release_group=placement]" subsys=allocator level=info msg="Removed endpoint" containerID=adcb979a7e datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=569 identity=31177 ipv4=10.0.0.163 ipv6= k8sPodName=openstack/placement-ks-service-lzvxf subsys=endpoint level=info msg="Conntrack garbage collector interval recalculated" deleteRatio=0.04855127355364075 newInterval=16m53s subsys=map-ct level=info msg="Create endpoint request" addressing="&{10.0.0.243 1908edb5-1b2c-45ce-b34d-c44b53c5b0f3 default }" containerID=a013513c0aa5a1e580c7cb796d4f7cd2c000b8e8ff7780f45ec417a61c62e288 datapathConfiguration="&{false false false false false }" interface=lxcf43c34b80b60 k8sPodName=openstack/placement-ks-user-z88z4 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a013513c0a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2105 ipv4=10.0.0.243 ipv6= k8sPodName=openstack/placement-ks-user-z88z4 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a013513c0a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2105 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=3699aa26-49ad-41a1-b817-6134c11cbefb,k8s:batch.kubernetes.io/job-name=placement-ks-user,k8s:component=ks-user,k8s:controller-uid=3699aa26-49ad-41a1-b817-6134c11cbefb,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-ks-user,k8s:release_group=placement" ipv4=10.0.0.243 ipv6= k8sPodName=openstack/placement-ks-user-z88z4 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=placement;k8s:batch.kubernetes.io/controller-uid=3699aa26-49ad-41a1-b817-6134c11cbefb;k8s:batch.kubernetes.io/job-name=placement-ks-user;k8s:component=ks-user;k8s:controller-uid=3699aa26-49ad-41a1-b817-6134c11cbefb;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=placement-ks-user;k8s:release_group=placement;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a013513c0a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2105 identity=33400 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=3699aa26-49ad-41a1-b817-6134c11cbefb,k8s:batch.kubernetes.io/job-name=placement-ks-user,k8s:component=ks-user,k8s:controller-uid=3699aa26-49ad-41a1-b817-6134c11cbefb,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-ks-user,k8s:release_group=placement" ipv4=10.0.0.243 ipv6= k8sPodName=openstack/placement-ks-user-z88z4 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=a013513c0a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2105 identity=33400 ipv4=10.0.0.243 ipv6= k8sPodName=openstack/placement-ks-user-z88z4 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a013513c0a datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2105 identity=33400 ipv4=10.0.0.243 ipv6= k8sPodName=openstack/placement-ks-user-z88z4 subsys=endpoint level=info msg="Successful endpoint creation" containerID=a013513c0a datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2105 identity=33400 ipv4=10.0.0.243 ipv6= k8sPodName=openstack/placement-ks-user-z88z4 subsys=daemon level=info msg="Delete endpoint request" containerID=a013513c0a endpointID=2105 k8sNamespace=openstack k8sPodName=placement-ks-user-z88z4 subsys=daemon level=info msg="Releasing key" key="[k8s:application=placement k8s:batch.kubernetes.io/controller-uid=3699aa26-49ad-41a1-b817-6134c11cbefb k8s:batch.kubernetes.io/job-name=placement-ks-user k8s:component=ks-user k8s:controller-uid=3699aa26-49ad-41a1-b817-6134c11cbefb k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=placement-ks-user k8s:release_group=placement]" subsys=allocator level=info msg="Removed endpoint" containerID=a013513c0a datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2105 identity=33400 ipv4=10.0.0.243 ipv6= k8sPodName=openstack/placement-ks-user-z88z4 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.66 31f52e40-4e5d-4d46-956e-e531595b5c23 default }" containerID=98f9fc1f0fbaa6fafd1b9f92a0b744a352370fa4038bc0e79aad29f8f1bbe8a4 datapathConfiguration="&{false false false false false }" interface=lxc4589a625c135 k8sPodName=openstack/placement-ks-endpoints-86nr5 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=98f9fc1f0f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3641 ipv4=10.0.0.66 ipv6= k8sPodName=openstack/placement-ks-endpoints-86nr5 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=98f9fc1f0f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3641 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=ede16a81-6602-4c3c-94e5-ef5af164fb72,k8s:batch.kubernetes.io/job-name=placement-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=ede16a81-6602-4c3c-94e5-ef5af164fb72,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-ks-endpoints,k8s:release_group=placement" ipv4=10.0.0.66 ipv6= k8sPodName=openstack/placement-ks-endpoints-86nr5 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=placement;k8s:batch.kubernetes.io/controller-uid=ede16a81-6602-4c3c-94e5-ef5af164fb72;k8s:batch.kubernetes.io/job-name=placement-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=ede16a81-6602-4c3c-94e5-ef5af164fb72;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=placement-ks-endpoints;k8s:release_group=placement;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=98f9fc1f0f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3641 identity=62448 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=ede16a81-6602-4c3c-94e5-ef5af164fb72,k8s:batch.kubernetes.io/job-name=placement-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=ede16a81-6602-4c3c-94e5-ef5af164fb72,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-ks-endpoints,k8s:release_group=placement" ipv4=10.0.0.66 ipv6= k8sPodName=openstack/placement-ks-endpoints-86nr5 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=98f9fc1f0f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3641 identity=62448 ipv4=10.0.0.66 ipv6= k8sPodName=openstack/placement-ks-endpoints-86nr5 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=98f9fc1f0f datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=3641 identity=62448 ipv4=10.0.0.66 ipv6= k8sPodName=openstack/placement-ks-endpoints-86nr5 subsys=endpoint level=info msg="Successful endpoint creation" containerID=98f9fc1f0f datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3641 identity=62448 ipv4=10.0.0.66 ipv6= k8sPodName=openstack/placement-ks-endpoints-86nr5 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=98f9fc1f0f endpointID=3641 k8sNamespace=openstack k8sPodName=placement-ks-endpoints-86nr5 subsys=daemon level=info msg="Releasing key" key="[k8s:application=placement k8s:batch.kubernetes.io/controller-uid=ede16a81-6602-4c3c-94e5-ef5af164fb72 k8s:batch.kubernetes.io/job-name=placement-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=ede16a81-6602-4c3c-94e5-ef5af164fb72 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=placement-ks-endpoints k8s:release_group=placement]" subsys=allocator level=info msg="Removed endpoint" containerID=98f9fc1f0f datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3641 identity=62448 ipv4=10.0.0.66 ipv6= k8sPodName=openstack/placement-ks-endpoints-86nr5 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.76 3760445b-eb6c-4048-84ba-5009077d67cc default }" containerID=6468903035a63c3366d0875af571a9322725c2852d808b883e4a9c368dea5d29 datapathConfiguration="&{false false false false false }" interface=lxc132bfb31872a k8sPodName=openstack/ovn-northd-7659bd74f8-q4lsv labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6468903035 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=378 ipv4=10.0.0.76 ipv6= k8sPodName=openstack/ovn-northd-7659bd74f8-q4lsv subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6468903035 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=378 identityLabels="k8s:application=ovn,k8s:component=ovn-northd,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ovn-northd,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=ovn" ipv4=10.0.0.76 ipv6= k8sPodName=openstack/ovn-northd-7659bd74f8-q4lsv subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=ovn;k8s:component=ovn-northd;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ovn-northd;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=ovn;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6468903035 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=378 identity=11275 identityLabels="k8s:application=ovn,k8s:component=ovn-northd,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ovn-northd,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=ovn" ipv4=10.0.0.76 ipv6= k8sPodName=openstack/ovn-northd-7659bd74f8-q4lsv oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=6468903035 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=378 identity=11275 ipv4=10.0.0.76 ipv6= k8sPodName=openstack/ovn-northd-7659bd74f8-q4lsv subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=6468903035 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=378 identity=11275 ipv4=10.0.0.76 ipv6= k8sPodName=openstack/ovn-northd-7659bd74f8-q4lsv subsys=endpoint level=info msg="Successful endpoint creation" containerID=6468903035 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=378 identity=11275 ipv4=10.0.0.76 ipv6= k8sPodName=openstack/ovn-northd-7659bd74f8-q4lsv subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.147 47ea1700-3b91-4a11-aef0-951450ecdfcf default }" containerID=31eabe6167a7c2446e11b9d8b973a4af8cc52520fdec8fbd3b5d091684b78c1d datapathConfiguration="&{false false false false false }" interface=lxc10b18e8816a3 k8sPodName=openstack/ovn-ovsdb-sb-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=31eabe6167 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1061 ipv4=10.0.0.147 ipv6= k8sPodName=openstack/ovn-ovsdb-sb-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=31eabe6167 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1061 identityLabels="k8s:application=ovn,k8s:apps.kubernetes.io/pod-index=0,k8s:component=ovn-ovsdb-sb,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ovn-ovsdb-sb,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=ovn,k8s:statefulset.kubernetes.io/pod-name=ovn-ovsdb-sb-0" ipv4=10.0.0.147 ipv6= k8sPodName=openstack/ovn-ovsdb-sb-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Create endpoint request" addressing="&{10.0.0.41 7e535c39-198d-48b2-bbaf-7ff7eef2c13c default }" containerID=792d6a3fabb1370d7eb5709ac1952506009d5392ce6c86153d06eea72f824fc9 datapathConfiguration="&{false false false false false }" interface=lxc777abdf468c0 k8sPodName=openstack/ovn-ovsdb-nb-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=792d6a3fab datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=745 ipv4=10.0.0.41 ipv6= k8sPodName=openstack/ovn-ovsdb-nb-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=792d6a3fab datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=745 identityLabels="k8s:application=ovn,k8s:apps.kubernetes.io/pod-index=0,k8s:component=ovn-ovsdb-nb,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ovn-ovsdb-nb,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=ovn,k8s:statefulset.kubernetes.io/pod-name=ovn-ovsdb-nb-0" ipv4=10.0.0.41 ipv6= k8sPodName=openstack/ovn-ovsdb-nb-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=31eabe6167 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1061 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.147 ipv6= k8sPodName=openstack/ovn-ovsdb-sb-0 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=ovn;k8s:apps.kubernetes.io/pod-index=0;k8s:component=ovn-ovsdb-sb;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ovn-ovsdb-sb;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=ovn;k8s:statefulset.kubernetes.io/pod-name=ovn-ovsdb-sb-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=31eabe6167 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1061 identity=37241 identityLabels="k8s:application=ovn,k8s:apps.kubernetes.io/pod-index=0,k8s:component=ovn-ovsdb-sb,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ovn-ovsdb-sb,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=ovn,k8s:statefulset.kubernetes.io/pod-name=ovn-ovsdb-sb-0" ipv4=10.0.0.147 ipv6= k8sPodName=openstack/ovn-ovsdb-sb-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=31eabe6167 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1061 identity=37241 ipv4=10.0.0.147 ipv6= k8sPodName=openstack/ovn-ovsdb-sb-0 subsys=endpoint level=info msg="Invalid state transition skipped" containerID=792d6a3fab datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=745 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.41 ipv6= k8sPodName=openstack/ovn-ovsdb-nb-0 line=611 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=ovn;k8s:apps.kubernetes.io/pod-index=0;k8s:component=ovn-ovsdb-nb;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ovn-ovsdb-nb;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=ovn;k8s:statefulset.kubernetes.io/pod-name=ovn-ovsdb-nb-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=792d6a3fab datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=745 identity=41988 identityLabels="k8s:application=ovn,k8s:apps.kubernetes.io/pod-index=0,k8s:component=ovn-ovsdb-nb,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ovn-ovsdb-nb,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=ovn,k8s:statefulset.kubernetes.io/pod-name=ovn-ovsdb-nb-0" ipv4=10.0.0.41 ipv6= k8sPodName=openstack/ovn-ovsdb-nb-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=792d6a3fab datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=745 identity=41988 ipv4=10.0.0.41 ipv6= k8sPodName=openstack/ovn-ovsdb-nb-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=31eabe6167 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1061 identity=37241 ipv4=10.0.0.147 ipv6= k8sPodName=openstack/ovn-ovsdb-sb-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=31eabe6167 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1061 identity=37241 ipv4=10.0.0.147 ipv6= k8sPodName=openstack/ovn-ovsdb-sb-0 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=792d6a3fab datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=745 identity=41988 ipv4=10.0.0.41 ipv6= k8sPodName=openstack/ovn-ovsdb-nb-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=792d6a3fab datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=745 identity=41988 ipv4=10.0.0.41 ipv6= k8sPodName=openstack/ovn-ovsdb-nb-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.127 9806813c-396a-47f4-8c8d-54cdf7eb1749 default }" containerID=5282c576295299e653128907331237cbb1f8e73acfbe4bd0d9a01e44b26cd5c6 datapathConfiguration="&{false false false false false }" interface=lxc380ee021020f k8sPodName=openstack/rabbitmq-nova-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5282c57629 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=186 ipv4=10.0.0.127 ipv6= k8sPodName=openstack/rabbitmq-nova-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5282c57629 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=186 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-nova,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-nova-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-nova-server-0" ipv4=10.0.0.127 ipv6= k8sPodName=openstack/rabbitmq-nova-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-nova;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-nova-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-nova-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5282c57629 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=186 identity=3681 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-nova,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-nova-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-nova-server-0" ipv4=10.0.0.127 ipv6= k8sPodName=openstack/rabbitmq-nova-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=5282c57629 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=186 identity=3681 ipv4=10.0.0.127 ipv6= k8sPodName=openstack/rabbitmq-nova-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=5282c57629 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=186 identity=3681 ipv4=10.0.0.127 ipv6= k8sPodName=openstack/rabbitmq-nova-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=5282c57629 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=186 identity=3681 ipv4=10.0.0.127 ipv6= k8sPodName=openstack/rabbitmq-nova-server-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.19 d0ac3e91-003e-4904-8d93-98dd825b1e41 default }" containerID=976fea20b7d7b2e872aa0818b54874ca9e2aa6a14a5051ff01950ea58e7ab501 datapathConfiguration="&{false false false false false }" interface=lxcad6e185911de k8sPodName=openstack/nova-conductor-676bfcb948-4wn8k labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=976fea20b7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3751 ipv4=10.0.0.19 ipv6= k8sPodName=openstack/nova-conductor-676bfcb948-4wn8k subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=976fea20b7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3751 identityLabels="k8s:application=nova,k8s:component=conductor,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-conductor,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=nova" ipv4=10.0.0.19 ipv6= k8sPodName=openstack/nova-conductor-676bfcb948-4wn8k subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=976fea20b7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3751 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.19 ipv6= k8sPodName=openstack/nova-conductor-676bfcb948-4wn8k line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=nova;k8s:component=conductor;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=nova-conductor;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=nova;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=976fea20b7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3751 identity=23385 identityLabels="k8s:application=nova,k8s:component=conductor,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-conductor,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=nova" ipv4=10.0.0.19 ipv6= k8sPodName=openstack/nova-conductor-676bfcb948-4wn8k oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=976fea20b7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3751 identity=23385 ipv4=10.0.0.19 ipv6= k8sPodName=openstack/nova-conductor-676bfcb948-4wn8k subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.90 20f9e4fb-abe2-45ec-a21f-53dc591ba4c3 default }" containerID=c09a4cacce55c05efe258348f6f19d6aa48394bcefe8ccb1cab79dcb71e8c072 datapathConfiguration="&{false false false false false }" interface=lxc477edcb95c80 k8sPodName=openstack/nova-scheduler-686564fcb8-6lvmt labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c09a4cacce datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3645 ipv4=10.0.0.90 ipv6= k8sPodName=openstack/nova-scheduler-686564fcb8-6lvmt subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c09a4cacce datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3645 identityLabels="k8s:application=nova,k8s:component=scheduler,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-scheduler,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=nova" ipv4=10.0.0.90 ipv6= k8sPodName=openstack/nova-scheduler-686564fcb8-6lvmt subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=nova;k8s:component=scheduler;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=nova-scheduler;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=nova;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c09a4cacce datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3645 identity=876 identityLabels="k8s:application=nova,k8s:component=scheduler,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-scheduler,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=nova" ipv4=10.0.0.90 ipv6= k8sPodName=openstack/nova-scheduler-686564fcb8-6lvmt oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c09a4cacce datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3645 identity=876 ipv4=10.0.0.90 ipv6= k8sPodName=openstack/nova-scheduler-686564fcb8-6lvmt subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.189 16469a68-22f2-455b-9d41-479d965bd2c8 default }" containerID=464af2bd3f427d6eefe3b6b683edbbe704b56a47d6a4a25f38fa049200a65ca2 datapathConfiguration="&{false false false false false }" interface=lxc4cd1c50e76b2 k8sPodName=openstack/nova-cell-setup-7zbhb labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=464af2bd3f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=793 ipv4=10.0.0.189 ipv6= k8sPodName=openstack/nova-cell-setup-7zbhb subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=464af2bd3f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=793 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=8fc1f1df-9522-4009-ba6e-2490e6bffa7e,k8s:batch.kubernetes.io/job-name=nova-cell-setup,k8s:component=cell-setup,k8s:controller-uid=8fc1f1df-9522-4009-ba6e-2490e6bffa7e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-cell-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-cell-setup,k8s:release_group=nova" ipv4=10.0.0.189 ipv6= k8sPodName=openstack/nova-cell-setup-7zbhb subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Create endpoint request" addressing="&{10.0.0.200 c4bdeeb9-97f4-448d-bb67-c5969806e39f default }" containerID=c8ce1ad9bf8f77432b36f811a82ce31e81e476ee3f2671c8c4954b595e42f56e datapathConfiguration="&{false false false false false }" interface=lxc0946767b416e k8sPodName=openstack/nova-bootstrap-frlk2 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c8ce1ad9bf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2729 ipv4=10.0.0.200 ipv6= k8sPodName=openstack/nova-bootstrap-frlk2 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=nova;k8s:batch.kubernetes.io/controller-uid=8fc1f1df-9522-4009-ba6e-2490e6bffa7e;k8s:batch.kubernetes.io/job-name=nova-cell-setup;k8s:component=cell-setup;k8s:controller-uid=8fc1f1df-9522-4009-ba6e-2490e6bffa7e;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=nova-cell-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=nova-cell-setup;k8s:release_group=nova;" subsys=allocator level=info msg="Resolving identity labels (blocking)" containerID=c8ce1ad9bf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2729 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=d4eec6bb-f85e-42b2-b9a5-47983f0f785f,k8s:batch.kubernetes.io/job-name=nova-bootstrap,k8s:component=bootstrap,k8s:controller-uid=d4eec6bb-f85e-42b2-b9a5-47983f0f785f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-bootstrap,k8s:release_group=nova" ipv4=10.0.0.200 ipv6= k8sPodName=openstack/nova-bootstrap-frlk2 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=464af2bd3f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=793 identity=19917 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=8fc1f1df-9522-4009-ba6e-2490e6bffa7e,k8s:batch.kubernetes.io/job-name=nova-cell-setup,k8s:component=cell-setup,k8s:controller-uid=8fc1f1df-9522-4009-ba6e-2490e6bffa7e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-cell-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-cell-setup,k8s:release_group=nova" ipv4=10.0.0.189 ipv6= k8sPodName=openstack/nova-cell-setup-7zbhb oldIdentity="no identity" subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Waiting for endpoint to be generated" containerID=464af2bd3f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=793 identity=19917 ipv4=10.0.0.189 ipv6= k8sPodName=openstack/nova-cell-setup-7zbhb subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=nova;k8s:batch.kubernetes.io/controller-uid=d4eec6bb-f85e-42b2-b9a5-47983f0f785f;k8s:batch.kubernetes.io/job-name=nova-bootstrap;k8s:component=bootstrap;k8s:controller-uid=d4eec6bb-f85e-42b2-b9a5-47983f0f785f;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=nova-bootstrap;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=nova-bootstrap;k8s:release_group=nova;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c8ce1ad9bf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2729 identity=22808 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=d4eec6bb-f85e-42b2-b9a5-47983f0f785f,k8s:batch.kubernetes.io/job-name=nova-bootstrap,k8s:component=bootstrap,k8s:controller-uid=d4eec6bb-f85e-42b2-b9a5-47983f0f785f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-bootstrap,k8s:release_group=nova" ipv4=10.0.0.200 ipv6= k8sPodName=openstack/nova-bootstrap-frlk2 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c8ce1ad9bf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2729 identity=22808 ipv4=10.0.0.200 ipv6= k8sPodName=openstack/nova-bootstrap-frlk2 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=976fea20b7 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=3751 identity=23385 ipv4=10.0.0.19 ipv6= k8sPodName=openstack/nova-conductor-676bfcb948-4wn8k subsys=endpoint level=info msg="Successful endpoint creation" containerID=976fea20b7 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3751 identity=23385 ipv4=10.0.0.19 ipv6= k8sPodName=openstack/nova-conductor-676bfcb948-4wn8k subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=c09a4cacce datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=3645 identity=876 ipv4=10.0.0.90 ipv6= k8sPodName=openstack/nova-scheduler-686564fcb8-6lvmt subsys=endpoint level=info msg="Successful endpoint creation" containerID=c09a4cacce datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3645 identity=876 ipv4=10.0.0.90 ipv6= k8sPodName=openstack/nova-scheduler-686564fcb8-6lvmt subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.102 6ae23e0c-2e95-4233-a725-df3c6b3c4d27 default }" containerID=ba57e0857dea67d86acddb6a1ed7d71abf4af07f0bfb876af8463636a7bc046a datapathConfiguration="&{false false false false false }" interface=lxc2b7381b34631 k8sPodName=openstack/nova-api-metadata-5bf9f4bd99-7zvxl labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ba57e0857d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=161 ipv4=10.0.0.102 ipv6= k8sPodName=openstack/nova-api-metadata-5bf9f4bd99-7zvxl subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ba57e0857d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=161 identityLabels="k8s:application=nova,k8s:component=metadata,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-api-metadata,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=nova" ipv4=10.0.0.102 ipv6= k8sPodName=openstack/nova-api-metadata-5bf9f4bd99-7zvxl subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Rewrote endpoint BPF program" containerID=464af2bd3f datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=793 identity=19917 ipv4=10.0.0.189 ipv6= k8sPodName=openstack/nova-cell-setup-7zbhb subsys=endpoint level=info msg="Successful endpoint creation" containerID=464af2bd3f datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=793 identity=19917 ipv4=10.0.0.189 ipv6= k8sPodName=openstack/nova-cell-setup-7zbhb subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.168 d7d486ce-6def-40a5-90a3-43f673cd53ad default }" containerID=927e7942d7720396f971c09d9d78762579d2b870d22f4324087ffac457513697 datapathConfiguration="&{false false false false false }" interface=lxc489f309c003c k8sPodName=openstack/nova-api-osapi-6574c4f99b-nlkcb labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=927e7942d7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1074 ipv4=10.0.0.168 ipv6= k8sPodName=openstack/nova-api-osapi-6574c4f99b-nlkcb subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=927e7942d7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1074 identityLabels="k8s:application=nova,k8s:component=os-api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-api-osapi,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=nova" ipv4=10.0.0.168 ipv6= k8sPodName=openstack/nova-api-osapi-6574c4f99b-nlkcb subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c8ce1ad9bf datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2729 identity=22808 ipv4=10.0.0.200 ipv6= k8sPodName=openstack/nova-bootstrap-frlk2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=c8ce1ad9bf datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2729 identity=22808 ipv4=10.0.0.200 ipv6= k8sPodName=openstack/nova-bootstrap-frlk2 subsys=daemon level=info msg="Allocated new global key" key="k8s:application=nova;k8s:component=metadata;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=nova-api-metadata;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=nova;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ba57e0857d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=161 identity=47996 identityLabels="k8s:application=nova,k8s:component=metadata,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-api-metadata,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=nova" ipv4=10.0.0.102 ipv6= k8sPodName=openstack/nova-api-metadata-5bf9f4bd99-7zvxl oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ba57e0857d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=161 identity=47996 ipv4=10.0.0.102 ipv6= k8sPodName=openstack/nova-api-metadata-5bf9f4bd99-7zvxl subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Create endpoint request" addressing="&{10.0.0.154 8283eef9-a277-4548-9cf8-be7769e81d4b default }" containerID=3553b81f3d7fbc6afc925c6da6e94a76234ee3d7b988b9c8bd1c65583317fbeb datapathConfiguration="&{false false false false false }" interface=lxcd07257fd9894 k8sPodName=openstack/nova-db-init-mmtdv labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3553b81f3d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1498 ipv4=10.0.0.154 ipv6= k8sPodName=openstack/nova-db-init-mmtdv subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3553b81f3d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1498 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=dcf80e3a-9c82-420a-8871-64285e65c125,k8s:batch.kubernetes.io/job-name=nova-db-init,k8s:component=db-init,k8s:controller-uid=dcf80e3a-9c82-420a-8871-64285e65c125,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-db-init,k8s:release_group=nova" ipv4=10.0.0.154 ipv6= k8sPodName=openstack/nova-db-init-mmtdv subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ba57e0857d datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=161 identity=47996 ipv4=10.0.0.102 ipv6= k8sPodName=openstack/nova-api-metadata-5bf9f4bd99-7zvxl subsys=endpoint level=info msg="Successful endpoint creation" containerID=ba57e0857d datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=161 identity=47996 ipv4=10.0.0.102 ipv6= k8sPodName=openstack/nova-api-metadata-5bf9f4bd99-7zvxl subsys=daemon level=info msg="Allocated new global key" key="k8s:application=nova;k8s:component=os-api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=nova-api-osapi;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=nova;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=927e7942d7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1074 identity=3092 identityLabels="k8s:application=nova,k8s:component=os-api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-api-osapi,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=nova" ipv4=10.0.0.168 ipv6= k8sPodName=openstack/nova-api-osapi-6574c4f99b-nlkcb oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=927e7942d7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1074 identity=3092 ipv4=10.0.0.168 ipv6= k8sPodName=openstack/nova-api-osapi-6574c4f99b-nlkcb subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Rewrote endpoint BPF program" containerID=927e7942d7 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1074 identity=3092 ipv4=10.0.0.168 ipv6= k8sPodName=openstack/nova-api-osapi-6574c4f99b-nlkcb subsys=endpoint level=info msg="Successful endpoint creation" containerID=927e7942d7 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1074 identity=3092 ipv4=10.0.0.168 ipv6= k8sPodName=openstack/nova-api-osapi-6574c4f99b-nlkcb subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=3553b81f3d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1498 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.154 ipv6= k8sPodName=openstack/nova-db-init-mmtdv line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=nova;k8s:batch.kubernetes.io/controller-uid=dcf80e3a-9c82-420a-8871-64285e65c125;k8s:batch.kubernetes.io/job-name=nova-db-init;k8s:component=db-init;k8s:controller-uid=dcf80e3a-9c82-420a-8871-64285e65c125;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=nova-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=nova-db-init;k8s:release_group=nova;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3553b81f3d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1498 identity=746 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=dcf80e3a-9c82-420a-8871-64285e65c125,k8s:batch.kubernetes.io/job-name=nova-db-init,k8s:component=db-init,k8s:controller-uid=dcf80e3a-9c82-420a-8871-64285e65c125,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-db-init,k8s:release_group=nova" ipv4=10.0.0.154 ipv6= k8sPodName=openstack/nova-db-init-mmtdv oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3553b81f3d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1498 identity=746 ipv4=10.0.0.154 ipv6= k8sPodName=openstack/nova-db-init-mmtdv subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=3553b81f3d datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1498 identity=746 ipv4=10.0.0.154 ipv6= k8sPodName=openstack/nova-db-init-mmtdv subsys=endpoint level=info msg="Successful endpoint creation" containerID=3553b81f3d datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1498 identity=746 ipv4=10.0.0.154 ipv6= k8sPodName=openstack/nova-db-init-mmtdv subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.29 f1475fee-547d-4db2-9cbc-1fdd0a192808 default }" containerID=a9123f1fb37d367d98faab3d6a804b8613fc88071ded81a215f8b4d5c1ddc391 datapathConfiguration="&{false false false false false }" interface=lxcdd5ed602ff54 k8sPodName=openstack/nova-novncproxy-86c974877c-dqq6h labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a9123f1fb3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1885 ipv4=10.0.0.29 ipv6= k8sPodName=openstack/nova-novncproxy-86c974877c-dqq6h subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a9123f1fb3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1885 identityLabels="k8s:application=nova,k8s:component=novnc-proxy,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-novncproxy,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=nova" ipv4=10.0.0.29 ipv6= k8sPodName=openstack/nova-novncproxy-86c974877c-dqq6h subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=a9123f1fb3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1885 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.29 ipv6= k8sPodName=openstack/nova-novncproxy-86c974877c-dqq6h line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=nova;k8s:component=novnc-proxy;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=nova-novncproxy;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=nova;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a9123f1fb3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1885 identity=11713 identityLabels="k8s:application=nova,k8s:component=novnc-proxy,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-novncproxy,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=nova" ipv4=10.0.0.29 ipv6= k8sPodName=openstack/nova-novncproxy-86c974877c-dqq6h oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a9123f1fb3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1885 identity=11713 ipv4=10.0.0.29 ipv6= k8sPodName=openstack/nova-novncproxy-86c974877c-dqq6h subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a9123f1fb3 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1885 identity=11713 ipv4=10.0.0.29 ipv6= k8sPodName=openstack/nova-novncproxy-86c974877c-dqq6h subsys=endpoint level=info msg="Successful endpoint creation" containerID=a9123f1fb3 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1885 identity=11713 ipv4=10.0.0.29 ipv6= k8sPodName=openstack/nova-novncproxy-86c974877c-dqq6h subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=3553b81f3d endpointID=1498 k8sNamespace=openstack k8sPodName=nova-db-init-mmtdv subsys=daemon level=info msg="Releasing key" key="[k8s:application=nova k8s:batch.kubernetes.io/controller-uid=dcf80e3a-9c82-420a-8871-64285e65c125 k8s:batch.kubernetes.io/job-name=nova-db-init k8s:component=db-init k8s:controller-uid=dcf80e3a-9c82-420a-8871-64285e65c125 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=nova-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=nova-db-init k8s:release_group=nova]" subsys=allocator level=info msg="Removed endpoint" containerID=3553b81f3d datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1498 identity=746 ipv4=10.0.0.154 ipv6= k8sPodName=openstack/nova-db-init-mmtdv subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.144 e2a1d664-7303-416d-9e51-237085718a08 default }" containerID=d2a5875cb81f9c376136a79f5413a5f6e2227f44cf735d21c25ba606dbbe3074 datapathConfiguration="&{false false false false false }" interface=lxc5d578dde6758 k8sPodName=openstack/nova-db-sync-tn86g labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d2a5875cb8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=136 ipv4=10.0.0.144 ipv6= k8sPodName=openstack/nova-db-sync-tn86g subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d2a5875cb8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=136 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=08b31f39-4d90-40dc-bbc5-7be8a9b9ff34,k8s:batch.kubernetes.io/job-name=nova-db-sync,k8s:component=db-sync,k8s:controller-uid=08b31f39-4d90-40dc-bbc5-7be8a9b9ff34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-db-sync,k8s:release_group=nova" ipv4=10.0.0.144 ipv6= k8sPodName=openstack/nova-db-sync-tn86g subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=nova;k8s:batch.kubernetes.io/controller-uid=08b31f39-4d90-40dc-bbc5-7be8a9b9ff34;k8s:batch.kubernetes.io/job-name=nova-db-sync;k8s:component=db-sync;k8s:controller-uid=08b31f39-4d90-40dc-bbc5-7be8a9b9ff34;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=nova-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=nova-db-sync;k8s:release_group=nova;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d2a5875cb8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=136 identity=4802 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=08b31f39-4d90-40dc-bbc5-7be8a9b9ff34,k8s:batch.kubernetes.io/job-name=nova-db-sync,k8s:component=db-sync,k8s:controller-uid=08b31f39-4d90-40dc-bbc5-7be8a9b9ff34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-db-sync,k8s:release_group=nova" ipv4=10.0.0.144 ipv6= k8sPodName=openstack/nova-db-sync-tn86g oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=d2a5875cb8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=136 identity=4802 ipv4=10.0.0.144 ipv6= k8sPodName=openstack/nova-db-sync-tn86g subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d2a5875cb8 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=136 identity=4802 ipv4=10.0.0.144 ipv6= k8sPodName=openstack/nova-db-sync-tn86g subsys=endpoint level=info msg="Successful endpoint creation" containerID=d2a5875cb8 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=136 identity=4802 ipv4=10.0.0.144 ipv6= k8sPodName=openstack/nova-db-sync-tn86g subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=d2a5875cb8 endpointID=136 k8sNamespace=openstack k8sPodName=nova-db-sync-tn86g subsys=daemon level=info msg="Releasing key" key="[k8s:application=nova k8s:batch.kubernetes.io/controller-uid=08b31f39-4d90-40dc-bbc5-7be8a9b9ff34 k8s:batch.kubernetes.io/job-name=nova-db-sync k8s:component=db-sync k8s:controller-uid=08b31f39-4d90-40dc-bbc5-7be8a9b9ff34 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=nova-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=nova-db-sync k8s:release_group=nova]" subsys=allocator level=info msg="Removed endpoint" containerID=d2a5875cb8 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=136 identity=4802 ipv4=10.0.0.144 ipv6= k8sPodName=openstack/nova-db-sync-tn86g subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.234 3fe8cb8c-2a1c-48a3-8a7c-521e8ba31f76 default }" containerID=436cc4881dced3b79ee4f9d23f4a2f6ddcc726d2a08e8376e29ee1b02317729f datapathConfiguration="&{false false false false false }" interface=lxc680e3c15ab64 k8sPodName=openstack/nova-rabbit-init-92x7x labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=436cc4881d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1192 ipv4=10.0.0.234 ipv6= k8sPodName=openstack/nova-rabbit-init-92x7x subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=436cc4881d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1192 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=d3f1a87f-3018-47d6-9ba8-b611927a7ac4,k8s:batch.kubernetes.io/job-name=nova-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=d3f1a87f-3018-47d6-9ba8-b611927a7ac4,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-rabbit-init,k8s:release_group=nova" ipv4=10.0.0.234 ipv6= k8sPodName=openstack/nova-rabbit-init-92x7x subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=436cc4881d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1192 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.234 ipv6= k8sPodName=openstack/nova-rabbit-init-92x7x line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=nova;k8s:batch.kubernetes.io/controller-uid=d3f1a87f-3018-47d6-9ba8-b611927a7ac4;k8s:batch.kubernetes.io/job-name=nova-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=d3f1a87f-3018-47d6-9ba8-b611927a7ac4;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=nova-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=nova-rabbit-init;k8s:release_group=nova;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=436cc4881d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1192 identity=29245 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=d3f1a87f-3018-47d6-9ba8-b611927a7ac4,k8s:batch.kubernetes.io/job-name=nova-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=d3f1a87f-3018-47d6-9ba8-b611927a7ac4,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-rabbit-init,k8s:release_group=nova" ipv4=10.0.0.234 ipv6= k8sPodName=openstack/nova-rabbit-init-92x7x oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=436cc4881d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1192 identity=29245 ipv4=10.0.0.234 ipv6= k8sPodName=openstack/nova-rabbit-init-92x7x subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=436cc4881d datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1192 identity=29245 ipv4=10.0.0.234 ipv6= k8sPodName=openstack/nova-rabbit-init-92x7x subsys=endpoint level=info msg="Successful endpoint creation" containerID=436cc4881d datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1192 identity=29245 ipv4=10.0.0.234 ipv6= k8sPodName=openstack/nova-rabbit-init-92x7x subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=436cc4881d endpointID=1192 k8sNamespace=openstack k8sPodName=nova-rabbit-init-92x7x subsys=daemon level=info msg="Releasing key" key="[k8s:application=nova k8s:batch.kubernetes.io/controller-uid=d3f1a87f-3018-47d6-9ba8-b611927a7ac4 k8s:batch.kubernetes.io/job-name=nova-rabbit-init k8s:component=rabbit-init k8s:controller-uid=d3f1a87f-3018-47d6-9ba8-b611927a7ac4 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=nova-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=nova-rabbit-init k8s:release_group=nova]" subsys=allocator level=info msg="Removed endpoint" containerID=436cc4881d datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1192 identity=29245 ipv4=10.0.0.234 ipv6= k8sPodName=openstack/nova-rabbit-init-92x7x subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.251 46125433-f87b-4bd9-9755-3c1c21de5609 default }" containerID=d407d3d2a3d190fc8c977b8e357835c84bb712fb0d65ee100ae746384148bbe8 datapathConfiguration="&{false false false false false }" interface=lxc267efc2bcb22 k8sPodName=openstack/nova-ks-service-5xwpf labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d407d3d2a3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=84 ipv4=10.0.0.251 ipv6= k8sPodName=openstack/nova-ks-service-5xwpf subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d407d3d2a3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=84 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=42545e32-069e-4a3b-af64-85f55fe7f86a,k8s:batch.kubernetes.io/job-name=nova-ks-service,k8s:component=ks-service,k8s:controller-uid=42545e32-069e-4a3b-af64-85f55fe7f86a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-ks-service,k8s:release_group=nova" ipv4=10.0.0.251 ipv6= k8sPodName=openstack/nova-ks-service-5xwpf subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=nova;k8s:batch.kubernetes.io/controller-uid=42545e32-069e-4a3b-af64-85f55fe7f86a;k8s:batch.kubernetes.io/job-name=nova-ks-service;k8s:component=ks-service;k8s:controller-uid=42545e32-069e-4a3b-af64-85f55fe7f86a;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=nova-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=nova-ks-service;k8s:release_group=nova;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d407d3d2a3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=84 identity=31709 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=42545e32-069e-4a3b-af64-85f55fe7f86a,k8s:batch.kubernetes.io/job-name=nova-ks-service,k8s:component=ks-service,k8s:controller-uid=42545e32-069e-4a3b-af64-85f55fe7f86a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-ks-service,k8s:release_group=nova" ipv4=10.0.0.251 ipv6= k8sPodName=openstack/nova-ks-service-5xwpf oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d407d3d2a3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=84 identity=31709 ipv4=10.0.0.251 ipv6= k8sPodName=openstack/nova-ks-service-5xwpf subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=d407d3d2a3 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=84 identity=31709 ipv4=10.0.0.251 ipv6= k8sPodName=openstack/nova-ks-service-5xwpf subsys=endpoint level=info msg="Successful endpoint creation" containerID=d407d3d2a3 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=84 identity=31709 ipv4=10.0.0.251 ipv6= k8sPodName=openstack/nova-ks-service-5xwpf subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=d407d3d2a3 endpointID=84 k8sNamespace=openstack k8sPodName=nova-ks-service-5xwpf subsys=daemon level=info msg="Releasing key" key="[k8s:application=nova k8s:batch.kubernetes.io/controller-uid=42545e32-069e-4a3b-af64-85f55fe7f86a k8s:batch.kubernetes.io/job-name=nova-ks-service k8s:component=ks-service k8s:controller-uid=42545e32-069e-4a3b-af64-85f55fe7f86a k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=nova-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=nova-ks-service k8s:release_group=nova]" subsys=allocator level=info msg="Removed endpoint" containerID=d407d3d2a3 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=84 identity=31709 ipv4=10.0.0.251 ipv6= k8sPodName=openstack/nova-ks-service-5xwpf subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.42 baa16c74-2371-44b7-978a-9dba3930c5b0 default }" containerID=dce3012e380bb62651298daafc520acb29edaa4a0f77b493cef9331af7264482 datapathConfiguration="&{false false false false false }" interface=lxca46044115154 k8sPodName=openstack/nova-ks-endpoints-t4tw6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=dce3012e38 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=790 ipv4=10.0.0.42 ipv6= k8sPodName=openstack/nova-ks-endpoints-t4tw6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=dce3012e38 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=790 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=d5fda337-1ec2-4573-9eae-b4c451741d17,k8s:batch.kubernetes.io/job-name=nova-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=d5fda337-1ec2-4573-9eae-b4c451741d17,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-ks-endpoints,k8s:release_group=nova" ipv4=10.0.0.42 ipv6= k8sPodName=openstack/nova-ks-endpoints-t4tw6 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=dce3012e38 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=790 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.42 ipv6= k8sPodName=openstack/nova-ks-endpoints-t4tw6 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=nova;k8s:batch.kubernetes.io/controller-uid=d5fda337-1ec2-4573-9eae-b4c451741d17;k8s:batch.kubernetes.io/job-name=nova-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=d5fda337-1ec2-4573-9eae-b4c451741d17;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=nova-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=nova-ks-endpoints;k8s:release_group=nova;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=dce3012e38 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=790 identity=47003 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=d5fda337-1ec2-4573-9eae-b4c451741d17,k8s:batch.kubernetes.io/job-name=nova-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=d5fda337-1ec2-4573-9eae-b4c451741d17,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-ks-endpoints,k8s:release_group=nova" ipv4=10.0.0.42 ipv6= k8sPodName=openstack/nova-ks-endpoints-t4tw6 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=dce3012e38 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=790 identity=47003 ipv4=10.0.0.42 ipv6= k8sPodName=openstack/nova-ks-endpoints-t4tw6 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=dce3012e38 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=790 identity=47003 ipv4=10.0.0.42 ipv6= k8sPodName=openstack/nova-ks-endpoints-t4tw6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=dce3012e38 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=790 identity=47003 ipv4=10.0.0.42 ipv6= k8sPodName=openstack/nova-ks-endpoints-t4tw6 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=dce3012e38 endpointID=790 k8sNamespace=openstack k8sPodName=nova-ks-endpoints-t4tw6 subsys=daemon level=info msg="Releasing key" key="[k8s:application=nova k8s:batch.kubernetes.io/controller-uid=d5fda337-1ec2-4573-9eae-b4c451741d17 k8s:batch.kubernetes.io/job-name=nova-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=d5fda337-1ec2-4573-9eae-b4c451741d17 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=nova-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=nova-ks-endpoints k8s:release_group=nova]" subsys=allocator level=info msg="Removed endpoint" containerID=dce3012e38 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=790 identity=47003 ipv4=10.0.0.42 ipv6= k8sPodName=openstack/nova-ks-endpoints-t4tw6 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.249 8bc72de5-a830-48d8-a348-1e45ac980a1d default }" containerID=a322d6ea37ee59d9e197812d26e72bbbbda7fc4e41b7d97d119c6d577772fcfd datapathConfiguration="&{false false false false false }" interface=lxc9eb4c86eeddd k8sPodName=openstack/nova-ks-user-mjw46 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a322d6ea37 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1314 ipv4=10.0.0.249 ipv6= k8sPodName=openstack/nova-ks-user-mjw46 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a322d6ea37 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1314 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=a2cecb68-29b4-4523-a884-3ec0ef00ad49,k8s:batch.kubernetes.io/job-name=nova-ks-user,k8s:component=ks-user,k8s:controller-uid=a2cecb68-29b4-4523-a884-3ec0ef00ad49,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-ks-user,k8s:release_group=nova" ipv4=10.0.0.249 ipv6= k8sPodName=openstack/nova-ks-user-mjw46 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=nova;k8s:batch.kubernetes.io/controller-uid=a2cecb68-29b4-4523-a884-3ec0ef00ad49;k8s:batch.kubernetes.io/job-name=nova-ks-user;k8s:component=ks-user;k8s:controller-uid=a2cecb68-29b4-4523-a884-3ec0ef00ad49;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=nova-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=nova-ks-user;k8s:release_group=nova;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=a322d6ea37 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1314 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.249 ipv6= k8sPodName=openstack/nova-ks-user-mjw46 line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=a322d6ea37 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1314 identity=35373 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=a2cecb68-29b4-4523-a884-3ec0ef00ad49,k8s:batch.kubernetes.io/job-name=nova-ks-user,k8s:component=ks-user,k8s:controller-uid=a2cecb68-29b4-4523-a884-3ec0ef00ad49,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-ks-user,k8s:release_group=nova" ipv4=10.0.0.249 ipv6= k8sPodName=openstack/nova-ks-user-mjw46 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a322d6ea37 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1314 identity=35373 ipv4=10.0.0.249 ipv6= k8sPodName=openstack/nova-ks-user-mjw46 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a322d6ea37 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1314 identity=35373 ipv4=10.0.0.249 ipv6= k8sPodName=openstack/nova-ks-user-mjw46 subsys=endpoint level=info msg="Successful endpoint creation" containerID=a322d6ea37 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1314 identity=35373 ipv4=10.0.0.249 ipv6= k8sPodName=openstack/nova-ks-user-mjw46 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=a322d6ea37 endpointID=1314 k8sNamespace=openstack k8sPodName=nova-ks-user-mjw46 subsys=daemon level=info msg="Releasing key" key="[k8s:application=nova k8s:batch.kubernetes.io/controller-uid=a2cecb68-29b4-4523-a884-3ec0ef00ad49 k8s:batch.kubernetes.io/job-name=nova-ks-user k8s:component=ks-user k8s:controller-uid=a2cecb68-29b4-4523-a884-3ec0ef00ad49 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=nova-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=nova-ks-user k8s:release_group=nova]" subsys=allocator level=info msg="Removed endpoint" containerID=a322d6ea37 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1314 identity=35373 ipv4=10.0.0.249 ipv6= k8sPodName=openstack/nova-ks-user-mjw46 subsys=endpoint level=info msg="Delete endpoint request" containerID=c8ce1ad9bf endpointID=2729 k8sNamespace=openstack k8sPodName=nova-bootstrap-frlk2 subsys=daemon level=info msg="Releasing key" key="[k8s:application=nova k8s:batch.kubernetes.io/controller-uid=d4eec6bb-f85e-42b2-b9a5-47983f0f785f k8s:batch.kubernetes.io/job-name=nova-bootstrap k8s:component=bootstrap k8s:controller-uid=d4eec6bb-f85e-42b2-b9a5-47983f0f785f k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=nova-bootstrap k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=nova-bootstrap k8s:release_group=nova]" subsys=allocator level=info msg="Removed endpoint" containerID=c8ce1ad9bf datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2729 identity=22808 ipv4=10.0.0.200 ipv6= k8sPodName=openstack/nova-bootstrap-frlk2 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.18 c1171db4-d820-4bf3-ab76-51a061e5300a default }" containerID=365acda41831923b258bd347ec0126fa8c2335533c6f4eb709d9f8f59351e2d2 datapathConfiguration="&{false false false false false }" interface=lxc4c1fe0fcb054 k8sPodName=openstack/rabbitmq-neutron-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=365acda418 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2277 ipv4=10.0.0.18 ipv6= k8sPodName=openstack/rabbitmq-neutron-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=365acda418 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2277 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-neutron,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-neutron-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-neutron-server-0" ipv4=10.0.0.18 ipv6= k8sPodName=openstack/rabbitmq-neutron-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=365acda418 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2277 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.18 ipv6= k8sPodName=openstack/rabbitmq-neutron-server-0 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-neutron;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-neutron-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-neutron-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=365acda418 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2277 identity=23029 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-neutron,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-neutron-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-neutron-server-0" ipv4=10.0.0.18 ipv6= k8sPodName=openstack/rabbitmq-neutron-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=365acda418 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2277 identity=23029 ipv4=10.0.0.18 ipv6= k8sPodName=openstack/rabbitmq-neutron-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=365acda418 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2277 identity=23029 ipv4=10.0.0.18 ipv6= k8sPodName=openstack/rabbitmq-neutron-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=365acda418 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2277 identity=23029 ipv4=10.0.0.18 ipv6= k8sPodName=openstack/rabbitmq-neutron-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.145 49038d11-2758-40cd-94d8-5a56c6a9ded1 default }" containerID=79e4a62ed7e89b06a7316e621c293636b51245f03815f250b4fbb5049a34927f datapathConfiguration="&{false false false false false }" interface=lxc905f6801da5f k8sPodName=openstack/neutron-server-c4dc5fcdc-hvnwv labels="[]" subsys=daemon sync-build=true level=info msg="Create endpoint request" addressing="&{10.0.0.10 94f3808a-3d10-4746-880c-83b340a09af9 default }" containerID=172e92623c43115fd8dd478090d2466e6e014d81b9e1139a9496663f6a1b6467 datapathConfiguration="&{false false false false false }" interface=lxc5a414d6b8567 k8sPodName=openstack/neutron-rpc-server-86b98d8656-2tvzs labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=79e4a62ed7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1606 ipv4=10.0.0.145 ipv6= k8sPodName=openstack/neutron-server-c4dc5fcdc-hvnwv subsys=endpoint level=info msg="New endpoint" containerID=172e92623c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3340 ipv4=10.0.0.10 ipv6= k8sPodName=openstack/neutron-rpc-server-86b98d8656-2tvzs subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=79e4a62ed7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1606 identityLabels="k8s:application=neutron,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=neutron-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=neutron" ipv4=10.0.0.145 ipv6= k8sPodName=openstack/neutron-server-c4dc5fcdc-hvnwv subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Resolving identity labels (blocking)" containerID=172e92623c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3340 identityLabels="k8s:application=neutron,k8s:component=rpc_server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=neutron-rpc-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=neutron" ipv4=10.0.0.10 ipv6= k8sPodName=openstack/neutron-rpc-server-86b98d8656-2tvzs subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=neutron;k8s:component=server;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=neutron-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=neutron;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=79e4a62ed7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1606 identity=47205 identityLabels="k8s:application=neutron,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=neutron-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=neutron" ipv4=10.0.0.145 ipv6= k8sPodName=openstack/neutron-server-c4dc5fcdc-hvnwv oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=79e4a62ed7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1606 identity=47205 ipv4=10.0.0.145 ipv6= k8sPodName=openstack/neutron-server-c4dc5fcdc-hvnwv subsys=endpoint level=info msg="Invalid state transition skipped" containerID=172e92623c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3340 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.10 ipv6= k8sPodName=openstack/neutron-rpc-server-86b98d8656-2tvzs line=611 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=neutron;k8s:component=rpc_server;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=neutron-rpc-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=neutron;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=172e92623c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3340 identity=33209 identityLabels="k8s:application=neutron,k8s:component=rpc_server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=neutron-rpc-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=neutron" ipv4=10.0.0.10 ipv6= k8sPodName=openstack/neutron-rpc-server-86b98d8656-2tvzs oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=172e92623c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3340 identity=33209 ipv4=10.0.0.10 ipv6= k8sPodName=openstack/neutron-rpc-server-86b98d8656-2tvzs subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.32 f94329f1-12fb-4048-bd00-fc9b2e121a08 default }" containerID=7e82bdc965c9d74901c6bda809eb131565957b86acb5c67ed3dcaa4b5a5dad3a datapathConfiguration="&{false false false false false }" interface=lxcc97cc37672a5 k8sPodName=openstack/neutron-db-init-6zk7m labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7e82bdc965 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=471 ipv4=10.0.0.32 ipv6= k8sPodName=openstack/neutron-db-init-6zk7m subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7e82bdc965 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=471 identityLabels="k8s:application=neutron,k8s:batch.kubernetes.io/controller-uid=f611b8d5-929f-42a7-b042-7a730d6a56a9,k8s:batch.kubernetes.io/job-name=neutron-db-init,k8s:component=db-init,k8s:controller-uid=f611b8d5-929f-42a7-b042-7a730d6a56a9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=neutron-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=neutron-db-init,k8s:release_group=neutron" ipv4=10.0.0.32 ipv6= k8sPodName=openstack/neutron-db-init-6zk7m subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=neutron;k8s:batch.kubernetes.io/controller-uid=f611b8d5-929f-42a7-b042-7a730d6a56a9;k8s:batch.kubernetes.io/job-name=neutron-db-init;k8s:component=db-init;k8s:controller-uid=f611b8d5-929f-42a7-b042-7a730d6a56a9;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=neutron-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=neutron-db-init;k8s:release_group=neutron;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7e82bdc965 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=471 identity=9232 identityLabels="k8s:application=neutron,k8s:batch.kubernetes.io/controller-uid=f611b8d5-929f-42a7-b042-7a730d6a56a9,k8s:batch.kubernetes.io/job-name=neutron-db-init,k8s:component=db-init,k8s:controller-uid=f611b8d5-929f-42a7-b042-7a730d6a56a9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=neutron-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=neutron-db-init,k8s:release_group=neutron" ipv4=10.0.0.32 ipv6= k8sPodName=openstack/neutron-db-init-6zk7m oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7e82bdc965 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=471 identity=9232 ipv4=10.0.0.32 ipv6= k8sPodName=openstack/neutron-db-init-6zk7m subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=79e4a62ed7 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1606 identity=47205 ipv4=10.0.0.145 ipv6= k8sPodName=openstack/neutron-server-c4dc5fcdc-hvnwv subsys=endpoint level=info msg="Successful endpoint creation" containerID=79e4a62ed7 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1606 identity=47205 ipv4=10.0.0.145 ipv6= k8sPodName=openstack/neutron-server-c4dc5fcdc-hvnwv subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=172e92623c datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=3340 identity=33209 ipv4=10.0.0.10 ipv6= k8sPodName=openstack/neutron-rpc-server-86b98d8656-2tvzs subsys=endpoint level=info msg="Successful endpoint creation" containerID=172e92623c datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3340 identity=33209 ipv4=10.0.0.10 ipv6= k8sPodName=openstack/neutron-rpc-server-86b98d8656-2tvzs subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=7e82bdc965 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=471 identity=9232 ipv4=10.0.0.32 ipv6= k8sPodName=openstack/neutron-db-init-6zk7m subsys=endpoint level=info msg="Successful endpoint creation" containerID=7e82bdc965 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=471 identity=9232 ipv4=10.0.0.32 ipv6= k8sPodName=openstack/neutron-db-init-6zk7m subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=7e82bdc965 endpointID=471 k8sNamespace=openstack k8sPodName=neutron-db-init-6zk7m subsys=daemon level=info msg="Releasing key" key="[k8s:application=neutron k8s:batch.kubernetes.io/controller-uid=f611b8d5-929f-42a7-b042-7a730d6a56a9 k8s:batch.kubernetes.io/job-name=neutron-db-init k8s:component=db-init k8s:controller-uid=f611b8d5-929f-42a7-b042-7a730d6a56a9 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=neutron-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=neutron-db-init k8s:release_group=neutron]" subsys=allocator level=info msg="Removed endpoint" containerID=7e82bdc965 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=471 identity=9232 ipv4=10.0.0.32 ipv6= k8sPodName=openstack/neutron-db-init-6zk7m subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.128 33364f49-2df5-4af4-b01f-a663e614cab9 default }" containerID=d3c2b7baa49e2c72916cdc78f3e5c3639aa69fc6e941f411a12ecbbdc3432723 datapathConfiguration="&{false false false false false }" interface=lxc7234b4150de7 k8sPodName=openstack/neutron-db-sync-dx4gj labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d3c2b7baa4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1401 ipv4=10.0.0.128 ipv6= k8sPodName=openstack/neutron-db-sync-dx4gj subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d3c2b7baa4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1401 identityLabels="k8s:application=neutron,k8s:batch.kubernetes.io/controller-uid=df153fae-5cdb-4e19-b302-3b1b998b8c36,k8s:batch.kubernetes.io/job-name=neutron-db-sync,k8s:component=db-sync,k8s:controller-uid=df153fae-5cdb-4e19-b302-3b1b998b8c36,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=neutron-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=neutron-db-sync,k8s:release_group=neutron" ipv4=10.0.0.128 ipv6= k8sPodName=openstack/neutron-db-sync-dx4gj subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=neutron;k8s:batch.kubernetes.io/controller-uid=df153fae-5cdb-4e19-b302-3b1b998b8c36;k8s:batch.kubernetes.io/job-name=neutron-db-sync;k8s:component=db-sync;k8s:controller-uid=df153fae-5cdb-4e19-b302-3b1b998b8c36;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=neutron-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=neutron-db-sync;k8s:release_group=neutron;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d3c2b7baa4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1401 identity=1943 identityLabels="k8s:application=neutron,k8s:batch.kubernetes.io/controller-uid=df153fae-5cdb-4e19-b302-3b1b998b8c36,k8s:batch.kubernetes.io/job-name=neutron-db-sync,k8s:component=db-sync,k8s:controller-uid=df153fae-5cdb-4e19-b302-3b1b998b8c36,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=neutron-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=neutron-db-sync,k8s:release_group=neutron" ipv4=10.0.0.128 ipv6= k8sPodName=openstack/neutron-db-sync-dx4gj oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=d3c2b7baa4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1401 identity=1943 ipv4=10.0.0.128 ipv6= k8sPodName=openstack/neutron-db-sync-dx4gj subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d3c2b7baa4 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1401 identity=1943 ipv4=10.0.0.128 ipv6= k8sPodName=openstack/neutron-db-sync-dx4gj subsys=endpoint level=info msg="Successful endpoint creation" containerID=d3c2b7baa4 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1401 identity=1943 ipv4=10.0.0.128 ipv6= k8sPodName=openstack/neutron-db-sync-dx4gj subsys=daemon level=info msg="Delete endpoint request" containerID=d3c2b7baa4 endpointID=1401 k8sNamespace=openstack k8sPodName=neutron-db-sync-dx4gj subsys=daemon level=info msg="Releasing key" key="[k8s:application=neutron k8s:batch.kubernetes.io/controller-uid=df153fae-5cdb-4e19-b302-3b1b998b8c36 k8s:batch.kubernetes.io/job-name=neutron-db-sync k8s:component=db-sync k8s:controller-uid=df153fae-5cdb-4e19-b302-3b1b998b8c36 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=neutron-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=neutron-db-sync k8s:release_group=neutron]" subsys=allocator level=info msg="Removed endpoint" containerID=d3c2b7baa4 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1401 identity=1943 ipv4=10.0.0.128 ipv6= k8sPodName=openstack/neutron-db-sync-dx4gj subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.20 796112f6-731e-48da-94dc-6a9746f91be5 default }" containerID=1c71bdd7d46f272faec6f05d83a9e721e6ab641721c489329aef51c578b20ff7 datapathConfiguration="&{false false false false false }" interface=lxce85896cb057b k8sPodName=openstack/neutron-rabbit-init-b8wn7 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1c71bdd7d4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2102 ipv4=10.0.0.20 ipv6= k8sPodName=openstack/neutron-rabbit-init-b8wn7 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1c71bdd7d4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2102 identityLabels="k8s:application=neutron,k8s:batch.kubernetes.io/controller-uid=fee8bac0-e290-457c-bc3b-37e2e0dc1d19,k8s:batch.kubernetes.io/job-name=neutron-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=fee8bac0-e290-457c-bc3b-37e2e0dc1d19,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=neutron-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=neutron-rabbit-init,k8s:release_group=neutron" ipv4=10.0.0.20 ipv6= k8sPodName=openstack/neutron-rabbit-init-b8wn7 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=1c71bdd7d4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2102 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.20 ipv6= k8sPodName=openstack/neutron-rabbit-init-b8wn7 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=neutron;k8s:batch.kubernetes.io/controller-uid=fee8bac0-e290-457c-bc3b-37e2e0dc1d19;k8s:batch.kubernetes.io/job-name=neutron-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=fee8bac0-e290-457c-bc3b-37e2e0dc1d19;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=neutron-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=neutron-rabbit-init;k8s:release_group=neutron;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1c71bdd7d4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2102 identity=9944 identityLabels="k8s:application=neutron,k8s:batch.kubernetes.io/controller-uid=fee8bac0-e290-457c-bc3b-37e2e0dc1d19,k8s:batch.kubernetes.io/job-name=neutron-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=fee8bac0-e290-457c-bc3b-37e2e0dc1d19,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=neutron-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=neutron-rabbit-init,k8s:release_group=neutron" ipv4=10.0.0.20 ipv6= k8sPodName=openstack/neutron-rabbit-init-b8wn7 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1c71bdd7d4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2102 identity=9944 ipv4=10.0.0.20 ipv6= k8sPodName=openstack/neutron-rabbit-init-b8wn7 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=1c71bdd7d4 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2102 identity=9944 ipv4=10.0.0.20 ipv6= k8sPodName=openstack/neutron-rabbit-init-b8wn7 subsys=endpoint level=info msg="Successful endpoint creation" containerID=1c71bdd7d4 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2102 identity=9944 ipv4=10.0.0.20 ipv6= k8sPodName=openstack/neutron-rabbit-init-b8wn7 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=1c71bdd7d4 endpointID=2102 k8sNamespace=openstack k8sPodName=neutron-rabbit-init-b8wn7 subsys=daemon level=info msg="Releasing key" key="[k8s:application=neutron k8s:batch.kubernetes.io/controller-uid=fee8bac0-e290-457c-bc3b-37e2e0dc1d19 k8s:batch.kubernetes.io/job-name=neutron-rabbit-init k8s:component=rabbit-init k8s:controller-uid=fee8bac0-e290-457c-bc3b-37e2e0dc1d19 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=neutron-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=neutron-rabbit-init k8s:release_group=neutron]" subsys=allocator level=info msg="Removed endpoint" containerID=1c71bdd7d4 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2102 identity=9944 ipv4=10.0.0.20 ipv6= k8sPodName=openstack/neutron-rabbit-init-b8wn7 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.164 44e5df09-e532-436e-bcc0-f36e0be2cfcc default }" containerID=0f4bb75c06a624debbe8c36d31084925df7cf4f8ecf2b8eed033a8cbb6231201 datapathConfiguration="&{false false false false false }" interface=lxc0d4d744b5ed1 k8sPodName=openstack/neutron-ks-service-c4c5d labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0f4bb75c06 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=43 ipv4=10.0.0.164 ipv6= k8sPodName=openstack/neutron-ks-service-c4c5d subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0f4bb75c06 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=43 identityLabels="k8s:application=neutron,k8s:batch.kubernetes.io/controller-uid=7f1a3ec8-ee8c-4e24-822f-191f015a4498,k8s:batch.kubernetes.io/job-name=neutron-ks-service,k8s:component=ks-service,k8s:controller-uid=7f1a3ec8-ee8c-4e24-822f-191f015a4498,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=neutron-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=neutron-ks-service,k8s:release_group=neutron" ipv4=10.0.0.164 ipv6= k8sPodName=openstack/neutron-ks-service-c4c5d subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=0f4bb75c06 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=43 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.164 ipv6= k8sPodName=openstack/neutron-ks-service-c4c5d line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=neutron;k8s:batch.kubernetes.io/controller-uid=7f1a3ec8-ee8c-4e24-822f-191f015a4498;k8s:batch.kubernetes.io/job-name=neutron-ks-service;k8s:component=ks-service;k8s:controller-uid=7f1a3ec8-ee8c-4e24-822f-191f015a4498;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=neutron-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=neutron-ks-service;k8s:release_group=neutron;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0f4bb75c06 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=43 identity=44241 identityLabels="k8s:application=neutron,k8s:batch.kubernetes.io/controller-uid=7f1a3ec8-ee8c-4e24-822f-191f015a4498,k8s:batch.kubernetes.io/job-name=neutron-ks-service,k8s:component=ks-service,k8s:controller-uid=7f1a3ec8-ee8c-4e24-822f-191f015a4498,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=neutron-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=neutron-ks-service,k8s:release_group=neutron" ipv4=10.0.0.164 ipv6= k8sPodName=openstack/neutron-ks-service-c4c5d oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0f4bb75c06 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=43 identity=44241 ipv4=10.0.0.164 ipv6= k8sPodName=openstack/neutron-ks-service-c4c5d subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=0f4bb75c06 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=43 identity=44241 ipv4=10.0.0.164 ipv6= k8sPodName=openstack/neutron-ks-service-c4c5d subsys=endpoint level=info msg="Successful endpoint creation" containerID=0f4bb75c06 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=43 identity=44241 ipv4=10.0.0.164 ipv6= k8sPodName=openstack/neutron-ks-service-c4c5d subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=0f4bb75c06 endpointID=43 k8sNamespace=openstack k8sPodName=neutron-ks-service-c4c5d subsys=daemon level=info msg="Releasing key" key="[k8s:application=neutron k8s:batch.kubernetes.io/controller-uid=7f1a3ec8-ee8c-4e24-822f-191f015a4498 k8s:batch.kubernetes.io/job-name=neutron-ks-service k8s:component=ks-service k8s:controller-uid=7f1a3ec8-ee8c-4e24-822f-191f015a4498 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=neutron-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=neutron-ks-service k8s:release_group=neutron]" subsys=allocator level=info msg="Removed endpoint" containerID=0f4bb75c06 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=43 identity=44241 ipv4=10.0.0.164 ipv6= k8sPodName=openstack/neutron-ks-service-c4c5d subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.53 2a7f1a3a-1e64-4de7-b0f5-51d9f9c02e26 default }" containerID=03b25fe13a9f7434d57a4cdb600b98ce70a72f9f69a3743cf7b123c23c11a84e datapathConfiguration="&{false false false false false }" interface=lxc0c7e471abaee k8sPodName=openstack/neutron-ks-endpoints-hbg6g labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=03b25fe13a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3895 ipv4=10.0.0.53 ipv6= k8sPodName=openstack/neutron-ks-endpoints-hbg6g subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=03b25fe13a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3895 identityLabels="k8s:application=neutron,k8s:batch.kubernetes.io/controller-uid=f5f9e8b5-f9b3-423f-8db5-dfa9eddccd2a,k8s:batch.kubernetes.io/job-name=neutron-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=f5f9e8b5-f9b3-423f-8db5-dfa9eddccd2a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=neutron-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=neutron-ks-endpoints,k8s:release_group=neutron" ipv4=10.0.0.53 ipv6= k8sPodName=openstack/neutron-ks-endpoints-hbg6g subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=neutron;k8s:batch.kubernetes.io/controller-uid=f5f9e8b5-f9b3-423f-8db5-dfa9eddccd2a;k8s:batch.kubernetes.io/job-name=neutron-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=f5f9e8b5-f9b3-423f-8db5-dfa9eddccd2a;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=neutron-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=neutron-ks-endpoints;k8s:release_group=neutron;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=03b25fe13a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3895 identity=10736 identityLabels="k8s:application=neutron,k8s:batch.kubernetes.io/controller-uid=f5f9e8b5-f9b3-423f-8db5-dfa9eddccd2a,k8s:batch.kubernetes.io/job-name=neutron-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=f5f9e8b5-f9b3-423f-8db5-dfa9eddccd2a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=neutron-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=neutron-ks-endpoints,k8s:release_group=neutron" ipv4=10.0.0.53 ipv6= k8sPodName=openstack/neutron-ks-endpoints-hbg6g oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=03b25fe13a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3895 identity=10736 ipv4=10.0.0.53 ipv6= k8sPodName=openstack/neutron-ks-endpoints-hbg6g subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=03b25fe13a datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=3895 identity=10736 ipv4=10.0.0.53 ipv6= k8sPodName=openstack/neutron-ks-endpoints-hbg6g subsys=endpoint level=info msg="Successful endpoint creation" containerID=03b25fe13a datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3895 identity=10736 ipv4=10.0.0.53 ipv6= k8sPodName=openstack/neutron-ks-endpoints-hbg6g subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=03b25fe13a endpointID=3895 k8sNamespace=openstack k8sPodName=neutron-ks-endpoints-hbg6g subsys=daemon level=info msg="Releasing key" key="[k8s:application=neutron k8s:batch.kubernetes.io/controller-uid=f5f9e8b5-f9b3-423f-8db5-dfa9eddccd2a k8s:batch.kubernetes.io/job-name=neutron-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=f5f9e8b5-f9b3-423f-8db5-dfa9eddccd2a k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=neutron-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=neutron-ks-endpoints k8s:release_group=neutron]" subsys=allocator level=info msg="Removed endpoint" containerID=03b25fe13a datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3895 identity=10736 ipv4=10.0.0.53 ipv6= k8sPodName=openstack/neutron-ks-endpoints-hbg6g subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.141 5e986dd4-8f86-4fb6-b77a-7283a8ef1abf default }" containerID=50959170d33100841898a20fff7c1ccba393fe0e511186b1563d438c96d40b03 datapathConfiguration="&{false false false false false }" interface=lxc25a4d779c2c9 k8sPodName=openstack/neutron-ks-user-9bhqk labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=50959170d3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2161 ipv4=10.0.0.141 ipv6= k8sPodName=openstack/neutron-ks-user-9bhqk subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=50959170d3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2161 identityLabels="k8s:application=neutron,k8s:batch.kubernetes.io/controller-uid=3a1e9019-44c1-404a-b427-e129969a3df7,k8s:batch.kubernetes.io/job-name=neutron-ks-user,k8s:component=ks-user,k8s:controller-uid=3a1e9019-44c1-404a-b427-e129969a3df7,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=neutron-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=neutron-ks-user,k8s:release_group=neutron" ipv4=10.0.0.141 ipv6= k8sPodName=openstack/neutron-ks-user-9bhqk subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=neutron;k8s:batch.kubernetes.io/controller-uid=3a1e9019-44c1-404a-b427-e129969a3df7;k8s:batch.kubernetes.io/job-name=neutron-ks-user;k8s:component=ks-user;k8s:controller-uid=3a1e9019-44c1-404a-b427-e129969a3df7;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=neutron-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=neutron-ks-user;k8s:release_group=neutron;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=50959170d3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2161 identity=26466 identityLabels="k8s:application=neutron,k8s:batch.kubernetes.io/controller-uid=3a1e9019-44c1-404a-b427-e129969a3df7,k8s:batch.kubernetes.io/job-name=neutron-ks-user,k8s:component=ks-user,k8s:controller-uid=3a1e9019-44c1-404a-b427-e129969a3df7,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=neutron-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=neutron-ks-user,k8s:release_group=neutron" ipv4=10.0.0.141 ipv6= k8sPodName=openstack/neutron-ks-user-9bhqk oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=50959170d3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2161 identity=26466 ipv4=10.0.0.141 ipv6= k8sPodName=openstack/neutron-ks-user-9bhqk subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=50959170d3 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2161 identity=26466 ipv4=10.0.0.141 ipv6= k8sPodName=openstack/neutron-ks-user-9bhqk subsys=endpoint level=info msg="Successful endpoint creation" containerID=50959170d3 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2161 identity=26466 ipv4=10.0.0.141 ipv6= k8sPodName=openstack/neutron-ks-user-9bhqk subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=50959170d3 endpointID=2161 k8sNamespace=openstack k8sPodName=neutron-ks-user-9bhqk subsys=daemon level=info msg="Releasing key" key="[k8s:application=neutron k8s:batch.kubernetes.io/controller-uid=3a1e9019-44c1-404a-b427-e129969a3df7 k8s:batch.kubernetes.io/job-name=neutron-ks-user k8s:component=ks-user k8s:controller-uid=3a1e9019-44c1-404a-b427-e129969a3df7 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=neutron-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=neutron-ks-user k8s:release_group=neutron]" subsys=allocator level=info msg="Removed endpoint" containerID=50959170d3 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2161 identity=26466 ipv4=10.0.0.141 ipv6= k8sPodName=openstack/neutron-ks-user-9bhqk subsys=endpoint level=info msg="Delete endpoint request" containerID=464af2bd3f endpointID=793 k8sNamespace=openstack k8sPodName=nova-cell-setup-7zbhb subsys=daemon level=info msg="Releasing key" key="[k8s:application=nova k8s:batch.kubernetes.io/controller-uid=8fc1f1df-9522-4009-ba6e-2490e6bffa7e k8s:batch.kubernetes.io/job-name=nova-cell-setup k8s:component=cell-setup k8s:controller-uid=8fc1f1df-9522-4009-ba6e-2490e6bffa7e k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=nova-cell-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=nova-cell-setup k8s:release_group=nova]" subsys=allocator level=info msg="Removed endpoint" containerID=464af2bd3f datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=793 identity=19917 ipv4=10.0.0.189 ipv6= k8sPodName=openstack/nova-cell-setup-7zbhb subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.6 fd27de18-4145-4c6e-9dee-0decf950248e default }" containerID=8cdce57c059dc6b76e78eab710863d8193b9aaadb2e210905044c850b770d942 datapathConfiguration="&{false false false false false }" interface=lxc9df4cce187b3 k8sPodName=openstack/nova-cell-setup-29757480-bxk76 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8cdce57c05 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1381 ipv4=10.0.0.6 ipv6= k8sPodName=openstack/nova-cell-setup-29757480-bxk76 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8cdce57c05 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1381 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=9ff16f39-3f42-463b-a01d-e47f70456b7e,k8s:batch.kubernetes.io/job-name=nova-cell-setup-29757480,k8s:component=cell-setup,k8s:controller-uid=9ff16f39-3f42-463b-a01d-e47f70456b7e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-cell-setup-cron,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-cell-setup-29757480,k8s:release_group=nova" ipv4=10.0.0.6 ipv6= k8sPodName=openstack/nova-cell-setup-29757480-bxk76 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=nova;k8s:batch.kubernetes.io/controller-uid=9ff16f39-3f42-463b-a01d-e47f70456b7e;k8s:batch.kubernetes.io/job-name=nova-cell-setup-29757480;k8s:component=cell-setup;k8s:controller-uid=9ff16f39-3f42-463b-a01d-e47f70456b7e;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=nova-cell-setup-cron;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=nova-cell-setup-29757480;k8s:release_group=nova;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=8cdce57c05 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1381 identity=20736 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=9ff16f39-3f42-463b-a01d-e47f70456b7e,k8s:batch.kubernetes.io/job-name=nova-cell-setup-29757480,k8s:component=cell-setup,k8s:controller-uid=9ff16f39-3f42-463b-a01d-e47f70456b7e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-cell-setup-cron,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-cell-setup-29757480,k8s:release_group=nova" ipv4=10.0.0.6 ipv6= k8sPodName=openstack/nova-cell-setup-29757480-bxk76 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8cdce57c05 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1381 identity=20736 ipv4=10.0.0.6 ipv6= k8sPodName=openstack/nova-cell-setup-29757480-bxk76 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.109 317e3c63-55e2-4763-99ae-9ef07055918f default }" containerID=747cb9c5a1379e052ff1e52341a2de7ba3f623274461c29d248edb2fdb5c54bb datapathConfiguration="&{false false false false false }" interface=lxc2813abdd0fbb k8sPodName=openstack/nova-service-cleaner-29757480-xdpsz labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=747cb9c5a1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=600 ipv4=10.0.0.109 ipv6= k8sPodName=openstack/nova-service-cleaner-29757480-xdpsz subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=747cb9c5a1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=600 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=7c2bbc81-460a-4230-bc1c-74976d322825,k8s:batch.kubernetes.io/job-name=nova-service-cleaner-29757480,k8s:component=service-cleaner,k8s:controller-uid=7c2bbc81-460a-4230-bc1c-74976d322825,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-service-cleaner,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-service-cleaner-29757480,k8s:release_group=nova" ipv4=10.0.0.109 ipv6= k8sPodName=openstack/nova-service-cleaner-29757480-xdpsz subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=nova;k8s:batch.kubernetes.io/controller-uid=7c2bbc81-460a-4230-bc1c-74976d322825;k8s:batch.kubernetes.io/job-name=nova-service-cleaner-29757480;k8s:component=service-cleaner;k8s:controller-uid=7c2bbc81-460a-4230-bc1c-74976d322825;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=nova-service-cleaner;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=nova-service-cleaner-29757480;k8s:release_group=nova;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=747cb9c5a1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=600 identity=45483 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=7c2bbc81-460a-4230-bc1c-74976d322825,k8s:batch.kubernetes.io/job-name=nova-service-cleaner-29757480,k8s:component=service-cleaner,k8s:controller-uid=7c2bbc81-460a-4230-bc1c-74976d322825,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-service-cleaner,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-service-cleaner-29757480,k8s:release_group=nova" ipv4=10.0.0.109 ipv6= k8sPodName=openstack/nova-service-cleaner-29757480-xdpsz oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=747cb9c5a1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=600 identity=45483 ipv4=10.0.0.109 ipv6= k8sPodName=openstack/nova-service-cleaner-29757480-xdpsz subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=8cdce57c05 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1381 identity=20736 ipv4=10.0.0.6 ipv6= k8sPodName=openstack/nova-cell-setup-29757480-bxk76 subsys=endpoint level=info msg="Successful endpoint creation" containerID=8cdce57c05 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1381 identity=20736 ipv4=10.0.0.6 ipv6= k8sPodName=openstack/nova-cell-setup-29757480-bxk76 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=747cb9c5a1 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=600 identity=45483 ipv4=10.0.0.109 ipv6= k8sPodName=openstack/nova-service-cleaner-29757480-xdpsz subsys=endpoint level=info msg="Successful endpoint creation" containerID=747cb9c5a1 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=600 identity=45483 ipv4=10.0.0.109 ipv6= k8sPodName=openstack/nova-service-cleaner-29757480-xdpsz subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.125 c344b1ee-9fb7-4f47-89fb-70a7cf04f1d9 default }" containerID=e9a10b6b4356ea9e45cb1e7cf2f64d6489ce78e8faedb62fe6bbb30f0ad36778 datapathConfiguration="&{false false false false false }" interface=lxc454f8b74cf8e k8sPodName=openstack/tempest-ks-user-k8h84 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e9a10b6b43 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=108 ipv4=10.0.0.125 ipv6= k8sPodName=openstack/tempest-ks-user-k8h84 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e9a10b6b43 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=108 identityLabels="k8s:application=tempest,k8s:batch.kubernetes.io/controller-uid=80432f80-1783-4330-85c4-75333a1b6573,k8s:batch.kubernetes.io/job-name=tempest-ks-user,k8s:component=ks-user,k8s:controller-uid=80432f80-1783-4330-85c4-75333a1b6573,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=tempest-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=tempest-ks-user,k8s:release_group=tempest" ipv4=10.0.0.125 ipv6= k8sPodName=openstack/tempest-ks-user-k8h84 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=tempest;k8s:batch.kubernetes.io/controller-uid=80432f80-1783-4330-85c4-75333a1b6573;k8s:batch.kubernetes.io/job-name=tempest-ks-user;k8s:component=ks-user;k8s:controller-uid=80432f80-1783-4330-85c4-75333a1b6573;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=tempest-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=tempest-ks-user;k8s:release_group=tempest;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=e9a10b6b43 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=108 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.125 ipv6= k8sPodName=openstack/tempest-ks-user-k8h84 line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=e9a10b6b43 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=108 identity=29284 identityLabels="k8s:application=tempest,k8s:batch.kubernetes.io/controller-uid=80432f80-1783-4330-85c4-75333a1b6573,k8s:batch.kubernetes.io/job-name=tempest-ks-user,k8s:component=ks-user,k8s:controller-uid=80432f80-1783-4330-85c4-75333a1b6573,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=tempest-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=tempest-ks-user,k8s:release_group=tempest" ipv4=10.0.0.125 ipv6= k8sPodName=openstack/tempest-ks-user-k8h84 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e9a10b6b43 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=108 identity=29284 ipv4=10.0.0.125 ipv6= k8sPodName=openstack/tempest-ks-user-k8h84 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e9a10b6b43 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=108 identity=29284 ipv4=10.0.0.125 ipv6= k8sPodName=openstack/tempest-ks-user-k8h84 subsys=endpoint level=info msg="Successful endpoint creation" containerID=e9a10b6b43 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=108 identity=29284 ipv4=10.0.0.125 ipv6= k8sPodName=openstack/tempest-ks-user-k8h84 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=8cdce57c05 endpointID=1381 k8sNamespace=openstack k8sPodName=nova-cell-setup-29757480-bxk76 subsys=daemon level=info msg="Releasing key" key="[k8s:application=nova k8s:batch.kubernetes.io/controller-uid=9ff16f39-3f42-463b-a01d-e47f70456b7e k8s:batch.kubernetes.io/job-name=nova-cell-setup-29757480 k8s:component=cell-setup k8s:controller-uid=9ff16f39-3f42-463b-a01d-e47f70456b7e k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=nova-cell-setup-cron k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=nova-cell-setup-29757480 k8s:release_group=nova]" subsys=allocator level=info msg="Removed endpoint" containerID=8cdce57c05 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1381 identity=20736 ipv4=10.0.0.6 ipv6= k8sPodName=openstack/nova-cell-setup-29757480-bxk76 subsys=endpoint level=info msg="Delete endpoint request" containerID=747cb9c5a1 endpointID=600 k8sNamespace=openstack k8sPodName=nova-service-cleaner-29757480-xdpsz subsys=daemon level=info msg="Releasing key" key="[k8s:application=nova k8s:batch.kubernetes.io/controller-uid=7c2bbc81-460a-4230-bc1c-74976d322825 k8s:batch.kubernetes.io/job-name=nova-service-cleaner-29757480 k8s:component=service-cleaner k8s:controller-uid=7c2bbc81-460a-4230-bc1c-74976d322825 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=nova-service-cleaner k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=nova-service-cleaner-29757480 k8s:release_group=nova]" subsys=allocator level=info msg="Removed endpoint" containerID=747cb9c5a1 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=600 identity=45483 ipv4=10.0.0.109 ipv6= k8sPodName=openstack/nova-service-cleaner-29757480-xdpsz subsys=endpoint level=info msg="Delete endpoint request" containerID=e9a10b6b43 endpointID=108 k8sNamespace=openstack k8sPodName=tempest-ks-user-k8h84 subsys=daemon level=info msg="Releasing key" key="[k8s:application=tempest k8s:batch.kubernetes.io/controller-uid=80432f80-1783-4330-85c4-75333a1b6573 k8s:batch.kubernetes.io/job-name=tempest-ks-user k8s:component=ks-user k8s:controller-uid=80432f80-1783-4330-85c4-75333a1b6573 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=tempest-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=tempest-ks-user k8s:release_group=tempest]" subsys=allocator level=info msg="Removed endpoint" containerID=e9a10b6b43 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=108 identity=29284 ipv4=10.0.0.125 ipv6= k8sPodName=openstack/tempest-ks-user-k8h84 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.8 af000f49-2269-4746-95b4-f10c1ca7dd24 default }" containerID=4dbd0409a6f03ec7641594195dde4ecbf4637b2c17fa9b2146dbbcc0dc8838fe datapathConfiguration="&{false false false false false }" interface=lxc117fd38b30e5 k8sPodName=openstack/tempest-run-tests-6htgl labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4dbd0409a6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=853 ipv4=10.0.0.8 ipv6= k8sPodName=openstack/tempest-run-tests-6htgl subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4dbd0409a6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=853 identityLabels="k8s:application=tempest,k8s:batch.kubernetes.io/controller-uid=b4051769-5f65-4082-a05a-6847dd684c01,k8s:batch.kubernetes.io/job-name=tempest-run-tests,k8s:component=run-tests,k8s:controller-uid=b4051769-5f65-4082-a05a-6847dd684c01,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=tempest-run-tests,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=tempest-run-tests,k8s:release_group=tempest" ipv4=10.0.0.8 ipv6= k8sPodName=openstack/tempest-run-tests-6htgl subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=tempest;k8s:batch.kubernetes.io/controller-uid=b4051769-5f65-4082-a05a-6847dd684c01;k8s:batch.kubernetes.io/job-name=tempest-run-tests;k8s:component=run-tests;k8s:controller-uid=b4051769-5f65-4082-a05a-6847dd684c01;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=tempest-run-tests;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=tempest-run-tests;k8s:release_group=tempest;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=4dbd0409a6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=853 identity=16675 identityLabels="k8s:application=tempest,k8s:batch.kubernetes.io/controller-uid=b4051769-5f65-4082-a05a-6847dd684c01,k8s:batch.kubernetes.io/job-name=tempest-run-tests,k8s:component=run-tests,k8s:controller-uid=b4051769-5f65-4082-a05a-6847dd684c01,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=tempest-run-tests,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=tempest-run-tests,k8s:release_group=tempest" ipv4=10.0.0.8 ipv6= k8sPodName=openstack/tempest-run-tests-6htgl oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4dbd0409a6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=853 identity=16675 ipv4=10.0.0.8 ipv6= k8sPodName=openstack/tempest-run-tests-6htgl subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=4dbd0409a6 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=853 identity=16675 ipv4=10.0.0.8 ipv6= k8sPodName=openstack/tempest-run-tests-6htgl subsys=endpoint level=info msg="Successful endpoint creation" containerID=4dbd0409a6 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=853 identity=16675 ipv4=10.0.0.8 ipv6= k8sPodName=openstack/tempest-run-tests-6htgl subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=4dbd0409a6 endpointID=853 k8sNamespace=openstack k8sPodName=tempest-run-tests-6htgl subsys=daemon level=info msg="Releasing key" key="[k8s:application=tempest k8s:batch.kubernetes.io/controller-uid=b4051769-5f65-4082-a05a-6847dd684c01 k8s:batch.kubernetes.io/job-name=tempest-run-tests k8s:component=run-tests k8s:controller-uid=b4051769-5f65-4082-a05a-6847dd684c01 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=tempest-run-tests k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=tempest-run-tests k8s:release_group=tempest]" subsys=allocator level=info msg="Removed endpoint" containerID=4dbd0409a6 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=853 identity=16675 ipv4=10.0.0.8 ipv6= k8sPodName=openstack/tempest-run-tests-6htgl subsys=endpoint