level=info msg="Memory available for map entries (0.003% of 67421630464B): 168554076B" subsys=config level=info msg="option bpf-ct-global-tcp-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-ct-global-any-max set by dynamic sizing to 295708" subsys=config level=info msg="option bpf-nat-global-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-neigh-global-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-sock-rev-map-max set by dynamic sizing to 295708" subsys=config level=info msg=" --agent-health-port='9879'" subsys=daemon level=info msg=" --agent-labels=''" subsys=daemon level=info msg=" --agent-liveness-update-interval='1s'" subsys=daemon level=info msg=" --agent-not-ready-taint-key='node.cilium.io/agent-not-ready'" subsys=daemon level=info msg=" --allocator-list-timeout='3m0s'" subsys=daemon level=info msg=" --allow-icmp-frag-needed='true'" subsys=daemon level=info msg=" --allow-localhost='auto'" subsys=daemon level=info msg=" --annotate-k8s-node='false'" subsys=daemon level=info msg=" --api-rate-limit=''" subsys=daemon level=info msg=" --arping-refresh-period='30s'" subsys=daemon level=info msg=" --auto-create-cilium-node-resource='true'" subsys=daemon level=info msg=" --auto-direct-node-routes='false'" subsys=daemon level=info msg=" --bgp-announce-lb-ip='false'" subsys=daemon level=info msg=" --bgp-announce-pod-cidr='false'" subsys=daemon level=info msg=" --bgp-config-path='/var/lib/cilium/bgp/config.yaml'" subsys=daemon level=info msg=" --bpf-auth-map-max='524288'" subsys=daemon level=info msg=" --bpf-ct-global-any-max='262144'" subsys=daemon level=info msg=" --bpf-ct-global-tcp-max='524288'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-any='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp='6h0m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp-fin='10s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp-syn='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-any='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-tcp='6h0m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-tcp-grace='1m0s'" subsys=daemon level=info msg=" --bpf-filter-priority='1'" subsys=daemon level=info msg=" --bpf-fragments-map-max='8192'" subsys=daemon level=info msg=" --bpf-lb-acceleration='disabled'" subsys=daemon level=info msg=" --bpf-lb-affinity-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-algorithm='random'" subsys=daemon level=info msg=" --bpf-lb-dev-ip-addr-inherit=''" subsys=daemon level=info msg=" --bpf-lb-dsr-dispatch='opt'" subsys=daemon level=info msg=" --bpf-lb-dsr-l4-xlate='frontend'" subsys=daemon level=info msg=" --bpf-lb-external-clusterip='false'" subsys=daemon level=info msg=" --bpf-lb-maglev-hash-seed='JLfvgnHc2kaSUFaI'" subsys=daemon level=info msg=" --bpf-lb-maglev-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-maglev-table-size='16381'" subsys=daemon level=info msg=" --bpf-lb-map-max='65536'" subsys=daemon level=info msg=" --bpf-lb-mode='snat'" subsys=daemon level=info msg=" --bpf-lb-rev-nat-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-rss-ipv4-src-cidr=''" subsys=daemon level=info msg=" --bpf-lb-rss-ipv6-src-cidr=''" subsys=daemon level=info msg=" --bpf-lb-service-backend-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-service-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-sock='false'" subsys=daemon level=info msg=" --bpf-lb-sock-hostns-only='false'" subsys=daemon level=info msg=" --bpf-lb-source-range-map-max='0'" subsys=daemon level=info msg=" --bpf-map-dynamic-size-ratio='0.0025'" subsys=daemon level=info msg=" --bpf-map-event-buffers=''" subsys=daemon level=info msg=" --bpf-nat-global-max='524288'" subsys=daemon level=info msg=" --bpf-neigh-global-max='524288'" subsys=daemon level=info msg=" --bpf-policy-map-full-reconciliation-interval='15m0s'" subsys=daemon level=info msg=" --bpf-policy-map-max='16384'" subsys=daemon level=info msg=" --bpf-root='/sys/fs/bpf'" subsys=daemon level=info msg=" --bpf-sock-rev-map-max='262144'" subsys=daemon level=info msg=" --bypass-ip-availability-upon-restore='false'" subsys=daemon level=info msg=" --certificates-directory='/var/run/cilium/certs'" subsys=daemon level=info msg=" --cflags=''" subsys=daemon level=info msg=" --cgroup-root='/run/cilium/cgroupv2'" subsys=daemon level=info msg=" --cilium-endpoint-gc-interval='5m0s'" subsys=daemon level=info msg=" --cluster-health-port='4240'" subsys=daemon level=info msg=" --cluster-id='0'" subsys=daemon level=info msg=" --cluster-name='default'" subsys=daemon level=info msg=" --cluster-pool-ipv4-cidr='10.0.0.0/8'" subsys=daemon level=info msg=" --cluster-pool-ipv4-mask-size='24'" subsys=daemon level=info msg=" --clustermesh-config='/var/lib/cilium/clustermesh/'" subsys=daemon level=info msg=" --clustermesh-ip-identities-sync-timeout='1m0s'" subsys=daemon level=info msg=" --cmdref=''" subsys=daemon level=info msg=" --cni-chaining-mode='none'" subsys=daemon level=info msg=" --cni-chaining-target=''" subsys=daemon level=info msg=" --cni-exclusive='true'" subsys=daemon level=info msg=" --cni-external-routing='false'" subsys=daemon level=info msg=" --cni-log-file='/var/run/cilium/cilium-cni.log'" subsys=daemon level=info msg=" --cnp-node-status-gc-interval='0s'" subsys=daemon level=info msg=" --config=''" subsys=daemon level=info msg=" --config-dir='/tmp/cilium/config-map'" subsys=daemon level=info msg=" --config-sources='config-map:kube-system/cilium-config'" subsys=daemon level=info msg=" --conntrack-gc-interval='0s'" subsys=daemon level=info msg=" --conntrack-gc-max-interval='0s'" subsys=daemon level=info msg=" --crd-wait-timeout='5m0s'" subsys=daemon level=info msg=" --custom-cni-conf='false'" subsys=daemon level=info msg=" --datapath-mode='veth'" subsys=daemon level=info msg=" --debug='false'" subsys=daemon level=info msg=" --debug-verbose=''" subsys=daemon level=info msg=" --derive-masquerade-ip-addr-from-device=''" subsys=daemon level=info msg=" --devices=''" subsys=daemon level=info msg=" --direct-routing-device=''" subsys=daemon level=info msg=" --disable-cnp-status-updates='true'" subsys=daemon level=info msg=" --disable-endpoint-crd='false'" subsys=daemon level=info msg=" --disable-envoy-version-check='false'" subsys=daemon level=info msg=" --disable-iptables-feeder-rules=''" subsys=daemon level=info msg=" --dns-max-ips-per-restored-rule='1000'" subsys=daemon level=info msg=" --dns-policy-unload-on-shutdown='false'" subsys=daemon level=info msg=" --dnsproxy-concurrency-limit='0'" subsys=daemon level=info msg=" --dnsproxy-concurrency-processing-grace-period='0s'" subsys=daemon level=info msg=" --dnsproxy-enable-transparent-mode='true'" subsys=daemon level=info msg=" --dnsproxy-lock-count='128'" subsys=daemon level=info msg=" --dnsproxy-lock-timeout='500ms'" subsys=daemon level=info msg=" --egress-gateway-policy-map-max='16384'" subsys=daemon level=info msg=" --egress-gateway-reconciliation-trigger-interval='1s'" subsys=daemon level=info msg=" --egress-masquerade-interfaces=''" subsys=daemon level=info msg=" --egress-multi-home-ip-rule-compat='false'" subsys=daemon level=info msg=" --enable-auto-protect-node-port-range='true'" subsys=daemon level=info msg=" --enable-bandwidth-manager='false'" subsys=daemon level=info msg=" --enable-bbr='false'" subsys=daemon level=info msg=" --enable-bgp-control-plane='false'" subsys=daemon level=info msg=" --enable-bpf-clock-probe='false'" subsys=daemon level=info msg=" --enable-bpf-masquerade='false'" subsys=daemon level=info msg=" --enable-bpf-tproxy='false'" subsys=daemon level=info msg=" --enable-cilium-api-server-access='*'" subsys=daemon level=info msg=" --enable-cilium-endpoint-slice='false'" subsys=daemon level=info msg=" --enable-cilium-health-api-server-access='*'" subsys=daemon level=info msg=" --enable-custom-calls='false'" subsys=daemon level=info msg=" --enable-endpoint-health-checking='true'" subsys=daemon level=info msg=" --enable-endpoint-routes='false'" subsys=daemon level=info msg=" --enable-envoy-config='false'" subsys=daemon level=info msg=" --enable-external-ips='false'" subsys=daemon level=info msg=" --enable-health-check-nodeport='true'" subsys=daemon level=info msg=" --enable-health-checking='true'" subsys=daemon level=info msg=" --enable-high-scale-ipcache='false'" subsys=daemon level=info msg=" --enable-host-firewall='false'" subsys=daemon level=info msg=" --enable-host-legacy-routing='false'" subsys=daemon level=info msg=" --enable-host-port='false'" subsys=daemon level=info msg=" --enable-hubble='false'" subsys=daemon level=info msg=" --enable-hubble-recorder-api='true'" subsys=daemon level=info msg=" --enable-icmp-rules='true'" subsys=daemon level=info msg=" --enable-identity-mark='true'" subsys=daemon level=info msg=" --enable-ip-masq-agent='false'" subsys=daemon level=info msg=" --enable-ipsec='false'" subsys=daemon level=info msg=" --enable-ipsec-key-watcher='true'" subsys=daemon level=info msg=" --enable-ipv4='true'" subsys=daemon level=info msg=" --enable-ipv4-big-tcp='false'" subsys=daemon level=info msg=" --enable-ipv4-egress-gateway='false'" subsys=daemon level=info msg=" --enable-ipv4-fragment-tracking='true'" subsys=daemon level=info msg=" --enable-ipv4-masquerade='true'" subsys=daemon level=info msg=" --enable-ipv6='false'" subsys=daemon level=info msg=" --enable-ipv6-big-tcp='false'" subsys=daemon level=info msg=" --enable-ipv6-masquerade='true'" subsys=daemon level=info msg=" --enable-ipv6-ndp='false'" subsys=daemon level=info msg=" --enable-k8s='true'" subsys=daemon level=info msg=" --enable-k8s-api-discovery='false'" subsys=daemon level=info msg=" --enable-k8s-endpoint-slice='true'" subsys=daemon level=info msg=" --enable-k8s-event-handover='false'" subsys=daemon level=info msg=" --enable-k8s-networkpolicy='true'" subsys=daemon level=info msg=" --enable-k8s-terminating-endpoint='true'" subsys=daemon level=info msg=" --enable-l2-announcements='false'" subsys=daemon level=info msg=" --enable-l2-neigh-discovery='true'" subsys=daemon level=info msg=" --enable-l2-pod-announcements='false'" subsys=daemon level=info msg=" --enable-l7-proxy='true'" subsys=daemon level=info msg=" --enable-local-node-route='true'" subsys=daemon level=info msg=" --enable-local-redirect-policy='false'" subsys=daemon level=info msg=" --enable-mke='false'" subsys=daemon level=info msg=" --enable-monitor='true'" subsys=daemon level=info msg=" --enable-nat46x64-gateway='false'" subsys=daemon level=info msg=" --enable-node-port='false'" subsys=daemon level=info msg=" --enable-pmtu-discovery='false'" subsys=daemon level=info msg=" --enable-policy='default'" subsys=daemon level=info msg=" --enable-recorder='false'" subsys=daemon level=info msg=" --enable-remote-node-identity='true'" subsys=daemon level=info msg=" --enable-runtime-device-detection='false'" subsys=daemon level=info msg=" --enable-sctp='false'" subsys=daemon level=info msg=" --enable-service-topology='false'" subsys=daemon level=info msg=" --enable-session-affinity='false'" subsys=daemon level=info msg=" --enable-srv6='false'" subsys=daemon level=info msg=" --enable-stale-cilium-endpoint-cleanup='true'" subsys=daemon level=info msg=" --enable-svc-source-range-check='true'" subsys=daemon level=info msg=" --enable-tracing='false'" subsys=daemon level=info msg=" --enable-unreachable-routes='false'" subsys=daemon level=info msg=" --enable-vtep='false'" subsys=daemon level=info msg=" --enable-well-known-identities='false'" subsys=daemon level=info msg=" --enable-wireguard='false'" subsys=daemon level=info msg=" --enable-wireguard-userspace-fallback='false'" subsys=daemon level=info msg=" --enable-xdp-prefilter='false'" subsys=daemon level=info msg=" --enable-xt-socket-fallback='true'" subsys=daemon level=info msg=" --encrypt-interface=''" subsys=daemon level=info msg=" --encrypt-node='false'" subsys=daemon level=info msg=" --endpoint-gc-interval='5m0s'" subsys=daemon level=info msg=" --endpoint-queue-size='25'" subsys=daemon level=info msg=" --endpoint-status=''" subsys=daemon level=info msg=" --envoy-config-timeout='2m0s'" subsys=daemon level=info msg=" --envoy-log=''" subsys=daemon level=info msg=" --exclude-local-address=''" subsys=daemon level=info msg=" --external-envoy-proxy='false'" subsys=daemon level=info msg=" --fixed-identity-mapping=''" subsys=daemon level=info msg=" --fqdn-regex-compile-lru-size='1024'" subsys=daemon level=info msg=" --gops-port='9890'" subsys=daemon level=info msg=" --http-403-msg=''" subsys=daemon level=info msg=" --http-idle-timeout='0'" subsys=daemon level=info msg=" --http-max-grpc-timeout='0'" subsys=daemon level=info msg=" --http-normalize-path='true'" subsys=daemon level=info msg=" --http-request-timeout='3600'" subsys=daemon level=info msg=" --http-retry-count='3'" subsys=daemon level=info msg=" --http-retry-timeout='0'" subsys=daemon level=info msg=" --hubble-disable-tls='false'" subsys=daemon level=info msg=" --hubble-event-buffer-capacity='4095'" subsys=daemon level=info msg=" --hubble-event-queue-size='0'" subsys=daemon level=info msg=" --hubble-export-file-compress='false'" subsys=daemon level=info msg=" --hubble-export-file-max-backups='5'" subsys=daemon level=info msg=" --hubble-export-file-max-size-mb='10'" subsys=daemon level=info msg=" --hubble-export-file-path=''" subsys=daemon level=info msg=" --hubble-listen-address=''" subsys=daemon level=info msg=" --hubble-metrics=''" subsys=daemon level=info msg=" --hubble-metrics-server=''" subsys=daemon level=info msg=" --hubble-monitor-events=''" subsys=daemon level=info msg=" --hubble-prefer-ipv6='false'" subsys=daemon level=info msg=" --hubble-recorder-sink-queue-size='1024'" subsys=daemon level=info msg=" --hubble-recorder-storage-path='/var/run/cilium/pcaps'" subsys=daemon level=info msg=" --hubble-skip-unknown-cgroup-ids='true'" subsys=daemon level=info msg=" --hubble-socket-path='/var/run/cilium/hubble.sock'" subsys=daemon level=info msg=" --hubble-tls-cert-file=''" subsys=daemon level=info msg=" --hubble-tls-client-ca-files=''" subsys=daemon level=info msg=" --hubble-tls-key-file=''" subsys=daemon level=info msg=" --identity-allocation-mode='crd'" subsys=daemon level=info msg=" --identity-change-grace-period='5s'" subsys=daemon level=info msg=" --identity-gc-interval='15m0s'" subsys=daemon level=info msg=" --identity-heartbeat-timeout='30m0s'" subsys=daemon level=info msg=" --identity-restore-grace-period='10m0s'" subsys=daemon level=info msg=" --install-egress-gateway-routes='false'" subsys=daemon level=info msg=" --install-iptables-rules='true'" subsys=daemon level=info msg=" --install-no-conntrack-iptables-rules='false'" subsys=daemon level=info msg=" --ip-allocation-timeout='2m0s'" subsys=daemon level=info msg=" --ip-masq-agent-config-path='/etc/config/ip-masq-agent'" subsys=daemon level=info msg=" --ipam='cluster-pool'" subsys=daemon level=info msg=" --ipam-cilium-node-update-rate='15s'" subsys=daemon level=info msg=" --ipam-multi-pool-pre-allocation='default=8'" subsys=daemon level=info msg=" --ipsec-key-file=''" subsys=daemon level=info msg=" --ipsec-key-rotation-duration='5m0s'" subsys=daemon level=info msg=" --iptables-lock-timeout='5s'" subsys=daemon level=info msg=" --iptables-random-fully='false'" subsys=daemon level=info msg=" --ipv4-native-routing-cidr=''" subsys=daemon level=info msg=" --ipv4-node='auto'" subsys=daemon level=info msg=" --ipv4-pod-subnets=''" subsys=daemon level=info msg=" --ipv4-range='auto'" subsys=daemon level=info msg=" --ipv4-service-loopback-address='169.254.42.1'" subsys=daemon level=info msg=" --ipv4-service-range='auto'" subsys=daemon level=info msg=" --ipv6-cluster-alloc-cidr='f00d::/64'" subsys=daemon level=info msg=" --ipv6-mcast-device=''" subsys=daemon level=info msg=" --ipv6-native-routing-cidr=''" subsys=daemon level=info msg=" --ipv6-node='auto'" subsys=daemon level=info msg=" --ipv6-pod-subnets=''" subsys=daemon level=info msg=" --ipv6-range='auto'" subsys=daemon level=info msg=" --ipv6-service-range='auto'" subsys=daemon level=info msg=" --join-cluster='false'" subsys=daemon level=info msg=" --k8s-api-server=''" subsys=daemon level=info msg=" --k8s-client-burst='10'" subsys=daemon level=info msg=" --k8s-client-qps='5'" subsys=daemon level=info msg=" --k8s-heartbeat-timeout='30s'" subsys=daemon level=info msg=" --k8s-kubeconfig-path=''" subsys=daemon level=info msg=" --k8s-namespace='kube-system'" subsys=daemon level=info msg=" --k8s-require-ipv4-pod-cidr='false'" subsys=daemon level=info msg=" --k8s-require-ipv6-pod-cidr='false'" subsys=daemon level=info msg=" --k8s-service-cache-size='128'" subsys=daemon level=info msg=" --k8s-service-proxy-name=''" subsys=daemon level=info msg=" --k8s-sync-timeout='3m0s'" subsys=daemon level=info msg=" --k8s-watcher-endpoint-selector='metadata.name!=kube-scheduler,metadata.name!=kube-controller-manager,metadata.name!=etcd-operator,metadata.name!=gcp-controller-manager'" subsys=daemon level=info msg=" --keep-config='false'" subsys=daemon level=info msg=" --kube-proxy-replacement='disabled'" subsys=daemon level=info msg=" --kube-proxy-replacement-healthz-bind-address=''" subsys=daemon level=info msg=" --kvstore=''" subsys=daemon level=info msg=" --kvstore-connectivity-timeout='2m0s'" subsys=daemon level=info msg=" --kvstore-lease-ttl='15m0s'" subsys=daemon level=info msg=" --kvstore-max-consecutive-quorum-errors='2'" subsys=daemon level=info msg=" --kvstore-opt=''" subsys=daemon level=info msg=" --kvstore-periodic-sync='5m0s'" subsys=daemon level=info msg=" --l2-announcements-lease-duration='15s'" subsys=daemon level=info msg=" --l2-announcements-renew-deadline='5s'" subsys=daemon level=info msg=" --l2-announcements-retry-period='2s'" subsys=daemon level=info msg=" --l2-pod-announcements-interface=''" subsys=daemon level=info msg=" --label-prefix-file=''" subsys=daemon level=info msg=" --labels=''" subsys=daemon level=info msg=" --lib-dir='/var/lib/cilium'" subsys=daemon level=info msg=" --local-max-addr-scope='252'" subsys=daemon level=info msg=" --local-router-ipv4=''" subsys=daemon level=info msg=" --local-router-ipv6=''" subsys=daemon level=info msg=" --log-driver=''" subsys=daemon level=info msg=" --log-opt=''" subsys=daemon level=info msg=" --log-system-load='false'" subsys=daemon level=info msg=" --max-controller-interval='0'" subsys=daemon level=info msg=" --mesh-auth-enabled='true'" subsys=daemon level=info msg=" --mesh-auth-gc-interval='5m0s'" subsys=daemon level=info msg=" --mesh-auth-mutual-listener-port='0'" subsys=daemon level=info msg=" --mesh-auth-queue-size='1024'" subsys=daemon level=info msg=" --mesh-auth-rotated-identities-queue-size='1024'" subsys=daemon level=info msg=" --mesh-auth-signal-backoff-duration='1s'" subsys=daemon level=info msg=" --mesh-auth-spiffe-trust-domain='spiffe.cilium'" subsys=daemon level=info msg=" --mesh-auth-spire-admin-socket=''" subsys=daemon level=info msg=" --metrics=''" subsys=daemon level=info msg=" --mke-cgroup-mount=''" subsys=daemon level=info msg=" --monitor-aggregation='medium'" subsys=daemon level=info msg=" --monitor-aggregation-flags='all'" subsys=daemon level=info msg=" --monitor-aggregation-interval='5s'" subsys=daemon level=info msg=" --monitor-queue-size='0'" subsys=daemon level=info msg=" --mtu='0'" subsys=daemon level=info msg=" --node-encryption-opt-out-labels='node-role.kubernetes.io/control-plane'" subsys=daemon level=info msg=" --node-port-acceleration='disabled'" subsys=daemon level=info msg=" --node-port-algorithm='random'" subsys=daemon level=info msg=" --node-port-bind-protection='true'" subsys=daemon level=info msg=" --node-port-mode='snat'" subsys=daemon level=info msg=" --node-port-range='30000,32767'" subsys=daemon level=info msg=" --nodes-gc-interval='5m0s'" subsys=daemon level=info msg=" --operator-api-serve-addr='127.0.0.1:9234'" subsys=daemon level=info msg=" --policy-audit-mode='false'" subsys=daemon level=info msg=" --policy-queue-size='100'" subsys=daemon level=info msg=" --policy-trigger-interval='1s'" subsys=daemon level=info msg=" --pprof='false'" subsys=daemon level=info msg=" --pprof-address='localhost'" subsys=daemon level=info msg=" --pprof-port='6060'" subsys=daemon level=info msg=" --preallocate-bpf-maps='false'" subsys=daemon level=info msg=" --prepend-iptables-chains='true'" subsys=daemon level=info msg=" --procfs='/host/proc'" subsys=daemon level=info msg=" --prometheus-serve-addr=':9962'" subsys=daemon level=info msg=" --proxy-connect-timeout='2'" subsys=daemon level=info msg=" --proxy-gid='1337'" subsys=daemon level=info msg=" --proxy-idle-timeout-seconds='60'" subsys=daemon level=info msg=" --proxy-max-connection-duration-seconds='0'" subsys=daemon level=info msg=" --proxy-max-requests-per-connection='0'" subsys=daemon level=info msg=" --proxy-prometheus-port='9964'" subsys=daemon level=info msg=" --read-cni-conf=''" subsys=daemon level=info msg=" --remove-cilium-node-taints='true'" subsys=daemon level=info msg=" --restore='true'" subsys=daemon level=info msg=" --route-metric='0'" subsys=daemon level=info msg=" --routing-mode='tunnel'" subsys=daemon level=info msg=" --set-cilium-is-up-condition='true'" subsys=daemon level=info msg=" --set-cilium-node-taints='true'" subsys=daemon level=info msg=" --sidecar-istio-proxy-image='cilium/istio_proxy'" subsys=daemon level=info msg=" --single-cluster-route='false'" subsys=daemon level=info msg=" --skip-cnp-status-startup-clean='false'" subsys=daemon level=info msg=" --socket-path='/var/run/cilium/cilium.sock'" subsys=daemon level=info msg=" --srv6-encap-mode='reduced'" subsys=daemon level=info msg=" --state-dir='/var/run/cilium'" subsys=daemon level=info msg=" --synchronize-k8s-nodes='true'" subsys=daemon level=info msg=" --tofqdns-dns-reject-response-code='refused'" subsys=daemon level=info msg=" --tofqdns-enable-dns-compression='true'" subsys=daemon level=info msg=" --tofqdns-endpoint-max-ip-per-hostname='50'" subsys=daemon level=info msg=" --tofqdns-idle-connection-grace-period='0s'" subsys=daemon level=info msg=" --tofqdns-max-deferred-connection-deletes='10000'" subsys=daemon level=info msg=" --tofqdns-min-ttl='0'" subsys=daemon level=info msg=" --tofqdns-pre-cache=''" subsys=daemon level=info msg=" --tofqdns-proxy-port='0'" subsys=daemon level=info msg=" --tofqdns-proxy-response-max-delay='100ms'" subsys=daemon level=info msg=" --trace-payloadlen='128'" subsys=daemon level=info msg=" --trace-sock='true'" subsys=daemon level=info msg=" --tunnel=''" subsys=daemon level=info msg=" --tunnel-port='6082'" subsys=daemon level=info msg=" --tunnel-protocol='geneve'" subsys=daemon level=info msg=" --unmanaged-pod-watcher-interval='15'" subsys=daemon level=info msg=" --use-cilium-internal-ip-for-ipsec='false'" subsys=daemon level=info msg=" --version='false'" subsys=daemon level=info msg=" --vlan-bpf-bypass=''" subsys=daemon level=info msg=" --vtep-cidr=''" subsys=daemon level=info msg=" --vtep-endpoint=''" subsys=daemon level=info msg=" --vtep-mac=''" subsys=daemon level=info msg=" --vtep-mask=''" subsys=daemon level=info msg=" --wireguard-encapsulate='false'" subsys=daemon level=info msg=" --write-cni-conf-when-ready='/host/etc/cni/net.d/05-cilium.conflist'" subsys=daemon level=info msg=" _ _ _" subsys=daemon level=info msg=" ___|_| |_|_ _ _____" subsys=daemon level=info msg="| _| | | | | | |" subsys=daemon level=info msg="|___|_|_|_|___|_|_|_|" subsys=daemon level=info msg="Cilium 1.14.8 cf6e022e 2024-03-13T12:23:35-04:00 go version go1.21.8 linux/amd64" subsys=daemon level=info msg="clang (10.0.0) and kernel (5.15.0) versions: OK!" subsys=linux-datapath level=info msg="linking environment: OK!" subsys=linux-datapath level=info msg="Kernel config file not found: if the agent fails to start, check the system requirements at https://docs.cilium.io/en/stable/operations/system_requirements" subsys=probes level=info msg="Detected mounted BPF filesystem at /sys/fs/bpf" subsys=bpf level=info msg="Mounted cgroupv2 filesystem at /run/cilium/cgroupv2" subsys=cgroups level=info msg="Parsing base label prefixes from default label list" subsys=labels-filter level=info msg="Parsing additional label prefixes from user inputs: []" subsys=labels-filter level=info msg="Final label prefixes to be used for identity evaluation:" subsys=labels-filter level=info msg=" - reserved:.*" subsys=labels-filter level=info msg=" - :io\\.kubernetes\\.pod\\.namespace" subsys=labels-filter level=info msg=" - :io\\.cilium\\.k8s\\.namespace\\.labels" subsys=labels-filter level=info msg=" - :app\\.kubernetes\\.io" subsys=labels-filter level=info msg=" - !:io\\.kubernetes" subsys=labels-filter level=info msg=" - !:kubernetes\\.io" subsys=labels-filter level=info msg=" - !:.*beta\\.kubernetes\\.io" subsys=labels-filter level=info msg=" - !:k8s\\.io" subsys=labels-filter level=info msg=" - !:pod-template-generation" subsys=labels-filter level=info msg=" - !:pod-template-hash" subsys=labels-filter level=info msg=" - !:controller-revision-hash" subsys=labels-filter level=info msg=" - !:annotation.*" subsys=labels-filter level=info msg=" - !:etcd_node" subsys=labels-filter level=info msg=Invoked duration=1.2335ms function="pprof.glob..func1 (cell.go:50)" subsys=hive level=info msg=Invoked duration="92.702µs" function="gops.registerGopsHooks (cell.go:38)" subsys=hive level=info msg=Invoked duration=1.449677ms function="metrics.NewRegistry (registry.go:65)" subsys=hive level=info msg=Invoked duration="46.731µs" function="metrics.glob..func1 (cell.go:12)" subsys=hive level=info msg="Spire Delegate API Client is disabled as no socket path is configured" subsys=spire-delegate level=info msg="Mutual authentication handler is disabled as no port is configured" subsys=auth level=info msg=Invoked duration=111.814999ms function="cmd.glob..func4 (daemon_main.go:1607)" subsys=hive level=info msg=Invoked duration="10.57µs" function="gc.registerSignalHandler (cell.go:47)" subsys=hive level=info msg=Invoked duration="12.76µs" function="utime.initUtimeSync (cell.go:29)" subsys=hive level=info msg=Invoked duration="50.811µs" function="agentliveness.newAgentLivenessUpdater (agent_liveness.go:43)" subsys=hive level=info msg=Invoked duration="53.921µs" function="l2responder.NewL2ResponderReconciler (l2responder.go:63)" subsys=hive level=info msg=Invoked duration="67.822µs" function="garp.newGARPProcessor (processor.go:27)" subsys=hive level=info msg=Starting subsys=hive level=info msg="Started gops server" address="127.0.0.1:9890" subsys=gops level=info msg="Start hook executed" duration="429.691µs" function="gops.registerGopsHooks.func1 (cell.go:43)" subsys=hive level=info msg="Start hook executed" duration="3.95µs" function="metrics.NewRegistry.func1 (registry.go:86)" subsys=hive level=info msg="Establishing connection to apiserver" host="https://10.96.0.1:443" subsys=k8s-client level=info msg="Serving prometheus metrics on :9962" subsys=metrics level=info msg="Connected to apiserver" subsys=k8s-client level=info msg="Start hook executed" duration=13.723385ms function="client.(*compositeClientset).onStart" subsys=hive level=info msg="Start hook executed" duration=7.495968ms function="authmap.newAuthMap.func1 (cell.go:27)" subsys=hive level=info msg="Start hook executed" duration="61.411µs" function="configmap.newMap.func1 (cell.go:23)" subsys=hive level=info msg="Start hook executed" duration="72.462µs" function="signalmap.newMap.func1 (cell.go:44)" subsys=hive level=info msg="Start hook executed" duration="308.518µs" function="nodemap.newNodeMap.func1 (cell.go:23)" subsys=hive level=info msg="Start hook executed" duration="278.047µs" function="eventsmap.newEventsMap.func1 (cell.go:35)" subsys=hive level=info msg="Start hook executed" duration="129.413µs" function="*cni.cniConfigManager.Start" subsys=hive level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Wrote CNI configuration file to /host/etc/cni/net.d/05-cilium.conflist" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Start hook executed" duration=42.17778ms function="datapath.newDatapath.func1 (cells.go:113)" subsys=hive level=info msg="Restored 0 node IDs from the BPF map" subsys=linux-datapath level=info msg="Start hook executed" duration="91.442µs" function="datapath.newDatapath.func2 (cells.go:126)" subsys=hive level=info msg="Start hook executed" duration="15.61µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Node].Start" subsys=hive level=info msg="Start hook executed" duration="2.94µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumNode].Start" subsys=hive level=info msg="Using autogenerated IPv4 allocation range" subsys=node v4Prefix=10.141.0.0/16 level=info msg="no local ciliumnode found, will not restore cilium internal ips from k8s" subsys=daemon level=info msg="Start hook executed" duration=605.67585ms function="node.NewLocalNodeStore.func1 (local_node_store.go:76)" subsys=hive level=info msg="Start hook executed" duration="3.64µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Start" subsys=hive level=info msg="Start hook executed" duration=100.795692ms function="*manager.diffStore[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Start" subsys=hive level=info msg="Start hook executed" duration="47.681µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s.Endpoints].Start" subsys=hive level=info msg="Using discoveryv1.EndpointSlice" subsys=k8s level=info msg="Start hook executed" duration=201.08001ms function="*manager.diffStore[*github.com/cilium/cilium/pkg/k8s.Endpoints].Start" subsys=hive level=info msg="Start hook executed" duration="29.731µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Pod].Start" subsys=hive level=info msg="Start hook executed" duration="10.08µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Namespace].Start" subsys=hive level=info msg="Start hook executed" duration="2.14µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumNetworkPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="2.77µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumClusterwideNetworkPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="2.53µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumCIDRGroup].Start" subsys=hive level=info msg="Start hook executed" duration="167.544µs" function="endpointmanager.newDefaultEndpointManager.func1 (cell.go:203)" subsys=hive level=info msg="Start hook executed" duration="43.661µs" function="cmd.newPolicyTrifecta.func1 (policy.go:135)" subsys=hive level=info msg="Start hook executed" duration="135.123µs" function="*manager.manager.Start" subsys=hive level=info msg="Serving cilium node monitor v1.2 API at unix:///var/run/cilium/monitor1_2.sock" subsys=monitor-agent level=info msg="Start hook executed" duration="453.861µs" function="agent.newMonitorAgent.func1 (cell.go:61)" subsys=hive level=info msg="Start hook executed" duration="4.09µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumL2AnnouncementPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="11.13µs" function="*job.group.Start" subsys=hive level=info msg="Envoy: Starting xDS gRPC server listening on /var/run/cilium/envoy/sockets/xds.sock" subsys=envoy-manager level=info msg="Start hook executed" duration="701.387µs" function="proxy.newProxy.func1 (cell.go:55)" subsys=hive level=info msg="Start hook executed" duration=1.055667ms function="signal.provideSignalManager.func1 (cell.go:25)" subsys=hive level=info msg="Datapath signal listener running" subsys=signal level=info msg="Start hook executed" duration=1.320243ms function="auth.registerAuthManager.func1 (cell.go:109)" subsys=hive level=info msg="Start hook executed" duration="5.351µs" function="auth.registerGCJobs.func1 (cell.go:158)" subsys=hive level=info msg="Start hook executed" duration="23.821µs" function="*job.group.Start" subsys=hive level=warning msg="Deprecated value for --kube-proxy-replacement: disabled (use either \"true\", or \"false\")" subsys=daemon level=info msg="Auto-disabling \"enable-node-port\", \"enable-external-ips\", \"bpf-lb-sock\", \"enable-host-port\" features and falling back to \"enable-host-legacy-routing\"" subsys=daemon level=info msg="Inheriting MTU from external network interface" device=ens3 ipAddr=199.19.213.141 mtu=1500 subsys=mtu level=info msg="Removed map pin at /sys/fs/bpf/tc/globals/cilium_ipcache, recreating and re-pinning map cilium_ipcache" file-path=/sys/fs/bpf/tc/globals/cilium_ipcache name=cilium_ipcache subsys=bpf level=info msg="Removed map pin at /sys/fs/bpf/tc/globals/cilium_tunnel_map, recreating and re-pinning map cilium_tunnel_map" file-path=/sys/fs/bpf/tc/globals/cilium_tunnel_map name=cilium_tunnel_map subsys=bpf level=info msg="Restored services from maps" failedServices=0 restoredServices=0 subsys=service level=info msg="Restored backends from maps" failedBackends=0 restoredBackends=0 skippedBackends=0 subsys=service level=info msg="Reading old endpoints..." subsys=daemon level=info msg="No old endpoints found." subsys=daemon level=info msg="Waiting until all Cilium CRDs are available" subsys=k8s level=info msg="All Cilium CRDs have been found and are available" subsys=k8s level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=warning msg="Unable to get node resource" error="ciliumnodes.cilium.io \"instance\" not found" subsys=nodediscovery level=warning msg="Unable to get node resource" error="ciliumnodes.cilium.io \"instance\" not found" subsys=nodediscovery level=info msg="Successfully created CiliumNode resource" subsys=nodediscovery level=warning msg="Unable to create CiliumNode resource, will retry" error="ciliumnodes.cilium.io \"instance\" already exists" subsys=nodediscovery level=info msg="Retrieved node information from cilium node" nodeName=instance subsys=k8s level=info msg="Received own node information from API server" ipAddr.ipv4=199.19.213.141 ipAddr.ipv6="" k8sNodeIP=199.19.213.141 labels="map[beta.kubernetes.io/arch:amd64 beta.kubernetes.io/os:linux kubernetes.io/arch:amd64 kubernetes.io/hostname:instance kubernetes.io/os:linux node-role.kubernetes.io/control-plane: node.kubernetes.io/exclude-from-external-load-balancers:]" nodeName=instance subsys=k8s v4Prefix=10.0.0.0/24 v6Prefix="" level=info msg="k8s mode: Allowing localhost to reach local endpoints" subsys=daemon level=info msg="Detected devices" devices="[]" subsys=linux-datapath level=info msg="Enabling k8s event listener" subsys=k8s-watcher level=info msg="Removing stale endpoint interfaces" subsys=daemon level=info msg="Skipping kvstore configuration" subsys=daemon level=info msg="Waiting until local node addressing before starting watchers depending on it" subsys=k8s-watcher level=info msg="Initializing node addressing" subsys=daemon level=info msg="Initializing cluster-pool IPAM" subsys=ipam v4Prefix=10.0.0.0/24 v6Prefix="" level=info msg="Restoring endpoints..." subsys=daemon level=info msg="Endpoints restored" failed=0 restored=0 subsys=daemon level=info msg="Addressing information:" subsys=daemon level=info msg=" Cluster-Name: default" subsys=daemon level=info msg=" Cluster-ID: 0" subsys=daemon level=info msg=" Local node-name: instance" subsys=daemon level=info msg=" Node-IPv6: " subsys=daemon level=info msg=" External-Node IPv4: 199.19.213.141" subsys=daemon level=info msg=" Internal-Node IPv4: 10.0.0.140" subsys=daemon level=info msg=" IPv4 allocation prefix: 10.0.0.0/24" subsys=daemon level=info msg=" Loopback IPv4: 169.254.42.1" subsys=daemon level=info msg=" Local IPv4 addresses:" subsys=daemon level=info msg=" - 199.19.213.141" subsys=daemon level=info msg=" - 172.17.0.100" subsys=daemon level=info msg=" - 10.96.240.200" subsys=daemon level=info msg="Node updated" clusterName=default nodeName=instance subsys=nodemanager level=info msg="Adding local node to cluster" node="{instance default [{InternalIP 199.19.213.141} {CiliumInternalIP 10.0.0.140}] 10.0.0.0/24 [] [] 10.0.0.96 0 local 0 map[beta.kubernetes.io/arch:amd64 beta.kubernetes.io/os:linux kubernetes.io/arch:amd64 kubernetes.io/hostname:instance kubernetes.io/os:linux node-role.kubernetes.io/control-plane: node.kubernetes.io/exclude-from-external-load-balancers:] map[] 1 }" subsys=nodediscovery level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Waiting until all pre-existing resources have been received" subsys=k8s-watcher level=info msg="Initializing identity allocator" subsys=identity-cache level=info msg="Allocating identities between range" cluster-id=0 max=65535 min=256 subsys=identity-cache level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.forwarding sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.accept_local sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.send_redirects sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.forwarding sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.accept_local sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.send_redirects sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.core.bpf_jit_enable sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.all.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.fib_multipath_use_neigh sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=kernel.unprivileged_bpf_disabled sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=kernel.timer_migration sysParamValue=0 level=info msg="Setting up BPF datapath" bpfClockSource=ktime bpfInsnSet="" subsys=datapath-loader level=info msg="Iptables rules installed" subsys=iptables level=info msg="Adding new proxy port rules for cilium-dns-egress:44549" id=cilium-dns-egress subsys=proxy level=info msg="Iptables proxy rules installed" subsys=iptables level=info msg="Start hook executed" duration=2.675574403s function="cmd.newDaemonPromise.func1 (daemon_main.go:1663)" subsys=hive level=info msg="Initializing daemon" subsys=daemon level=info msg="Validating configured node address ranges" subsys=daemon level=info msg="Starting IP identity watcher" subsys=ipcache level=info msg="Start hook executed" duration="28.151µs" function="utime.initUtimeSync.func1 (cell.go:33)" subsys=hive level=info msg="Start hook executed" duration="9.45µs" function="*job.group.Start" subsys=hive level=info msg="Starting connection tracking garbage collector" subsys=daemon level=info msg="Start hook executed" duration="44.391µs" function="l2respondermap.newMap.func1 (l2_responder_map4.go:44)" subsys=hive level=info msg="Start hook executed" duration="3.98µs" function="*job.group.Start" subsys=hive level=info msg="Initial scan of connection tracking completed" subsys=ct-gc level=info msg="Regenerating restored endpoints" numRestored=0 subsys=daemon level=info msg="Creating host endpoint" subsys=daemon level=info msg="Deleted orphan backends" orphanBackends=0 subsys=service level=info msg="New endpoint" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3484 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Finished regenerating restored endpoints" regenerated=0 subsys=daemon total=0 level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3484 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Identity of endpoint changed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3484 identity=1 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,reserved:host" ipv4= ipv6= k8sPodName=/ oldIdentity="no identity" subsys=endpoint level=info msg="Launching Cilium health daemon" subsys=daemon level=info msg="Launching Cilium health endpoint" subsys=daemon level=info msg="Started healthz status API server" address="127.0.0.1:9879" subsys=daemon level=info msg="Processing queued endpoint deletion requests from /var/run/cilium/deleteQueue" subsys=daemon level=info msg="processing 0 queued deletion requests" subsys=daemon level=info msg="Initializing Cilium API" subsys=daemon level=info msg="Daemon initialization completed" bootstrapTime=4.305514555s subsys=daemon level=info msg="Hubble server is disabled" subsys=hubble level=info msg="Serving cilium API at unix:///var/run/cilium/cilium.sock" subsys=daemon level=info msg="Compiled new BPF template" BPFCompilationTime=317.463792ms file-path=/var/run/cilium/state/templates/43835d016c76c164f8ce8640d26d7acbd8529a1dd384ce171a9a547be96119f9/bpf_host.o subsys=datapath-loader level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3484 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="New endpoint" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1012 ipv4=10.0.0.96 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1012 identityLabels="reserved:health" ipv4=10.0.0.96 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Identity of endpoint changed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1012 identity=4 identityLabels="reserved:health" ipv4=10.0.0.96 ipv6= k8sPodName=/ oldIdentity="no identity" subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.165 ec997828-121b-43b2-a794-98c5914510d0 default }" containerID=2c470982e1e4731b06dbe488d5f41121cba932ebe047f0bcfa9b3e90e0e13208 datapathConfiguration="&{false false false false false }" interface=lxc50b907744a23 k8sPodName=kube-system/coredns-7c96b6546b-qnp2s labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2c470982e1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1549 ipv4=10.0.0.165 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-qnp2s subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2c470982e1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1549 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.165 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-qnp2s subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:kube-system]" subsys=crd-allocator level=info msg="Create endpoint request" addressing="&{10.0.0.141 4eebfb3c-5eee-48cb-bd65-04a721473e0c default }" containerID=a07d1cfb1ff5a5cc9ebd43d47b6def2a72cdd58d08bb5e4d64538285c17d60b8 datapathConfiguration="&{false false false false false }" interface=lxcf930a88aa636 k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-7l7rz labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a07d1cfb1f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=84 ipv4=10.0.0.141 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-7l7rz subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a07d1cfb1f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=84 identityLabels="k8s:app=certgen,k8s:batch.kubernetes.io/controller-uid=02a1cac9-dfa3-4a5f-b66e-a26ea8846051,k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen,k8s:controller-uid=02a1cac9-dfa3-4a5f-b66e-a26ea8846051,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen,k8s:io.kubernetes.pod.namespace=envoy-gateway-system,k8s:job-name=envoy-gateway-gateway-helm-certgen" ipv4=10.0.0.141 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-7l7rz subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=a07d1cfb1f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=84 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.141 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-7l7rz line=611 subsys=endpoint level=info msg="Invalid state transition skipped" containerID=2c470982e1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1549 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.165 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-qnp2s line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=coredns;k8s:io.kubernetes.pod.namespace=kube-system;k8s:k8s-app=kube-dns;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2c470982e1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1549 identity=15928 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.165 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-qnp2s oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2c470982e1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1549 identity=15928 ipv4=10.0.0.165 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-qnp2s subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name:envoy-gateway-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=certgen;k8s:batch.kubernetes.io/controller-uid=02a1cac9-dfa3-4a5f-b66e-a26ea8846051;k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen;k8s:controller-uid=02a1cac9-dfa3-4a5f-b66e-a26ea8846051;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system;k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen;k8s:io.kubernetes.pod.namespace=envoy-gateway-system;k8s:job-name=envoy-gateway-gateway-helm-certgen;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a07d1cfb1f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=84 identity=18970 identityLabels="k8s:app=certgen,k8s:batch.kubernetes.io/controller-uid=02a1cac9-dfa3-4a5f-b66e-a26ea8846051,k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen,k8s:controller-uid=02a1cac9-dfa3-4a5f-b66e-a26ea8846051,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen,k8s:io.kubernetes.pod.namespace=envoy-gateway-system,k8s:job-name=envoy-gateway-gateway-helm-certgen" ipv4=10.0.0.141 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-7l7rz oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a07d1cfb1f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=84 identity=18970 ipv4=10.0.0.141 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-7l7rz subsys=endpoint level=info msg="Serving cilium health API at unix:///var/run/cilium/health.sock" subsys=health-server level=info msg="Compiled new BPF template" BPFCompilationTime=1.138679676s file-path=/var/run/cilium/state/templates/100f33f434956a213cd9ceb2bbf367902321c1fc82dbb417428a62b484a9904a/bpf_lxc.o subsys=datapath-loader level=info msg="Rewrote endpoint BPF program" containerID=2c470982e1 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1549 identity=15928 ipv4=10.0.0.165 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-qnp2s subsys=endpoint level=info msg="Successful endpoint creation" containerID=2c470982e1 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1549 identity=15928 ipv4=10.0.0.165 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-qnp2s subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=a07d1cfb1f datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=84 identity=18970 ipv4=10.0.0.141 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-7l7rz subsys=endpoint level=info msg="Successful endpoint creation" containerID=a07d1cfb1f datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=84 identity=18970 ipv4=10.0.0.141 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-7l7rz subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1012 identity=4 ipv4=10.0.0.96 ipv6= k8sPodName=/ subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=a07d1cfb1f endpointID=84 k8sNamespace=envoy-gateway-system k8sPodName=envoy-gateway-gateway-helm-certgen-7l7rz subsys=daemon level=info msg="Releasing key" key="[k8s:app=certgen k8s:batch.kubernetes.io/controller-uid=02a1cac9-dfa3-4a5f-b66e-a26ea8846051 k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen k8s:controller-uid=02a1cac9-dfa3-4a5f-b66e-a26ea8846051 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen k8s:io.kubernetes.pod.namespace=envoy-gateway-system k8s:job-name=envoy-gateway-gateway-helm-certgen]" subsys=allocator level=info msg="Removed endpoint" containerID=a07d1cfb1f datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=84 identity=18970 ipv4=10.0.0.141 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-7l7rz subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.204 4a140118-25d7-4413-ae37-57579b8e96cc default }" containerID=9b7ebca5859c37d580cb8bad59e45b574984aaca07c503cde54f0bad00637f20 datapathConfiguration="&{false false false false false }" interface=lxc17ead2b46ffa k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-xzwzj labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9b7ebca585 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2119 ipv4=10.0.0.204 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-xzwzj subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9b7ebca585 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2119 identityLabels="k8s:app.kubernetes.io/instance=envoy-gateway,k8s:app.kubernetes.io/name=gateway-helm,k8s:control-plane=envoy-gateway,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway,k8s:io.kubernetes.pod.namespace=envoy-gateway-system" ipv4=10.0.0.204 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-xzwzj subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name:envoy-gateway-system]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=9b7ebca585 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2119 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.204 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-xzwzj line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=envoy-gateway;k8s:app.kubernetes.io/name=gateway-helm;k8s:control-plane=envoy-gateway;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system;k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway;k8s:io.kubernetes.pod.namespace=envoy-gateway-system;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9b7ebca585 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2119 identity=14742 identityLabels="k8s:app.kubernetes.io/instance=envoy-gateway,k8s:app.kubernetes.io/name=gateway-helm,k8s:control-plane=envoy-gateway,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway,k8s:io.kubernetes.pod.namespace=envoy-gateway-system" ipv4=10.0.0.204 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-xzwzj oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9b7ebca585 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2119 identity=14742 ipv4=10.0.0.204 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-xzwzj subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=9b7ebca585 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2119 identity=14742 ipv4=10.0.0.204 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-xzwzj subsys=endpoint level=info msg="Successful endpoint creation" containerID=9b7ebca585 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2119 identity=14742 ipv4=10.0.0.204 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-xzwzj subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3484 identity=1 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,k8s:openstack-compute-node=enabled,k8s:openstack-control-plane=enabled,k8s:openvswitch=enabled,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_hostns_03484 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_hostns_03484 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_hostns_03484 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_hostns_03484:pending" subsys=bpf level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_netdev_00005 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_netdev_00005 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005:pending" subsys=bpf level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3484 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.98 fadd3c40-3714-43b4-9aa1-ccc9d1c592ac default }" containerID=d17042f08f6061addfa5a2075a8372ebd65b026717e170cabfa7dc1141f02713 datapathConfiguration="&{false false false false false }" interface=lxc411c1535da08 k8sPodName=kube-system/coredns-67659f764b-rwxzm labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d17042f08f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=222 ipv4=10.0.0.98 ipv6= k8sPodName=kube-system/coredns-67659f764b-rwxzm subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d17042f08f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=222 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.98 ipv6= k8sPodName=kube-system/coredns-67659f764b-rwxzm subsys=endpoint level=info msg="Identity of endpoint changed" containerID=d17042f08f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=222 identity=15928 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.98 ipv6= k8sPodName=kube-system/coredns-67659f764b-rwxzm oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d17042f08f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=222 identity=15928 ipv4=10.0.0.98 ipv6= k8sPodName=kube-system/coredns-67659f764b-rwxzm subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.214 98853cc9-a473-4394-83e1-e0695a66e83c default }" containerID=252cb903d31f4e3e931c3159175f0d38cc7b777936c1219b8c47b21630789a6f datapathConfiguration="&{false false false false false }" interface=lxc97a5c64bbba2 k8sPodName=kube-system/coredns-67659f764b-px78p labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=252cb903d3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1070 ipv4=10.0.0.214 ipv6= k8sPodName=kube-system/coredns-67659f764b-px78p subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=252cb903d3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1070 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.214 ipv6= k8sPodName=kube-system/coredns-67659f764b-px78p subsys=endpoint level=info msg="Identity of endpoint changed" containerID=252cb903d3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1070 identity=15928 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.214 ipv6= k8sPodName=kube-system/coredns-67659f764b-px78p oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=252cb903d3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1070 identity=15928 ipv4=10.0.0.214 ipv6= k8sPodName=kube-system/coredns-67659f764b-px78p subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d17042f08f datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=222 identity=15928 ipv4=10.0.0.98 ipv6= k8sPodName=kube-system/coredns-67659f764b-rwxzm subsys=endpoint level=info msg="Successful endpoint creation" containerID=d17042f08f datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=222 identity=15928 ipv4=10.0.0.98 ipv6= k8sPodName=kube-system/coredns-67659f764b-rwxzm subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=252cb903d3 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1070 identity=15928 ipv4=10.0.0.214 ipv6= k8sPodName=kube-system/coredns-67659f764b-px78p subsys=endpoint level=info msg="Successful endpoint creation" containerID=252cb903d3 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1070 identity=15928 ipv4=10.0.0.214 ipv6= k8sPodName=kube-system/coredns-67659f764b-px78p subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.237 0b6524d4-9604-43de-b424-14bce1f13b03 default }" containerID=8637905117569276c3012c6362cc5f90f91a9eeadddfb7b57e47795cf5140f56 datapathConfiguration="&{false false false false false }" interface=lxced8d6c703201 k8sPodName=local-path-storage/local-path-provisioner-679c578f5-hcbhg labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8637905117 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=313 ipv4=10.0.0.237 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-hcbhg subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8637905117 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=313 identityLabels="k8s:app.kubernetes.io/instance=local-path-provisioner,k8s:app.kubernetes.io/name=local-path-provisioner,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.237 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-hcbhg subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:local-path-storage k8s:io.cilium.k8s.namespace.labels.name:local-path-storage]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=local-path-provisioner;k8s:app.kubernetes.io/name=local-path-provisioner;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8637905117 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=313 identity=22266 identityLabels="k8s:app.kubernetes.io/instance=local-path-provisioner,k8s:app.kubernetes.io/name=local-path-provisioner,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.237 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-hcbhg oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=8637905117 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=313 identity=22266 ipv4=10.0.0.237 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-hcbhg subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=8637905117 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=313 identity=22266 ipv4=10.0.0.237 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-hcbhg subsys=endpoint level=info msg="Successful endpoint creation" containerID=8637905117 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=313 identity=22266 ipv4=10.0.0.237 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-hcbhg subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=2c470982e1 endpointID=1549 k8sNamespace=kube-system k8sPodName=coredns-7c96b6546b-qnp2s subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=coredns k8s:io.kubernetes.pod.namespace=kube-system k8s:k8s-app=kube-dns]" subsys=allocator level=info msg="Removed endpoint" containerID=2c470982e1 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1549 identity=15928 ipv4=10.0.0.165 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-qnp2s subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.44 6d3fa899-2aca-403b-be1a-8fba730bdb66 default }" containerID=24402bc3b71f6cfbeef1703e0bd6527bda5374a2f1a64741e9668068d2639b3d datapathConfiguration="&{false false false false false }" interface=lxc690f9daa402e k8sPodName=cert-manager/cert-manager-webhook-548949fc64-6v8hs labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=24402bc3b7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1470 ipv4=10.0.0.44 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-6v8hs subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=24402bc3b7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1470 identityLabels="k8s:app.kubernetes.io/component=webhook,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=webhook,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=webhook,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.44 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-6v8hs subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=24402bc3b7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1470 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.44 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-6v8hs line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=webhook;k8s:app.kubernetes.io/component=webhook;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=webhook;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=24402bc3b7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1470 identity=59414 identityLabels="k8s:app.kubernetes.io/component=webhook,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=webhook,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=webhook,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.44 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-6v8hs oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=24402bc3b7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1470 identity=59414 ipv4=10.0.0.44 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-6v8hs subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=24402bc3b7 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1470 identity=59414 ipv4=10.0.0.44 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-6v8hs subsys=endpoint level=info msg="Successful endpoint creation" containerID=24402bc3b7 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1470 identity=59414 ipv4=10.0.0.44 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-6v8hs subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.58 4bed8119-50a8-486c-9723-cc1dc10b2895 default }" containerID=74e9ed5b6af727ee9586da8d1dd6234d0b36f091d108c7936b6994c732da77ee datapathConfiguration="&{false false false false false }" interface=lxc4d8b492776a2 k8sPodName=cert-manager/cert-manager-75c4c745bc-vw9qc labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=74e9ed5b6a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=142 ipv4=10.0.0.58 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-vw9qc subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=74e9ed5b6a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=142 identityLabels="k8s:app.kubernetes.io/component=controller,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cert-manager,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cert-manager,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.58 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-vw9qc subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=cert-manager;k8s:app.kubernetes.io/component=controller;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=cert-manager;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=74e9ed5b6a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=142 identity=12823 identityLabels="k8s:app.kubernetes.io/component=controller,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cert-manager,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cert-manager,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.58 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-vw9qc oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=74e9ed5b6a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=142 identity=12823 ipv4=10.0.0.58 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-vw9qc subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.220 863b7df2-0dc5-4137-bc89-a94083f3c68c default }" containerID=4958976173e6568a61479a343c13373af318d119d44e7395f4433dcdf244a8e9 datapathConfiguration="&{false false false false false }" interface=lxccc4d4f3514ab k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-6sttk labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4958976173 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1683 ipv4=10.0.0.220 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-6sttk subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4958976173 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1683 identityLabels="k8s:app.kubernetes.io/component=cainjector,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cainjector,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cainjector,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.220 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-6sttk subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=cainjector;k8s:app.kubernetes.io/component=cainjector;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=cainjector;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4958976173 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1683 identity=2227 identityLabels="k8s:app.kubernetes.io/component=cainjector,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cainjector,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cainjector,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.220 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-6sttk oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4958976173 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1683 identity=2227 ipv4=10.0.0.220 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-6sttk subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=74e9ed5b6a datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=142 identity=12823 ipv4=10.0.0.58 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-vw9qc subsys=endpoint level=info msg="Successful endpoint creation" containerID=74e9ed5b6a datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=142 identity=12823 ipv4=10.0.0.58 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-vw9qc subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=4958976173 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1683 identity=2227 ipv4=10.0.0.220 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-6sttk subsys=endpoint level=info msg="Successful endpoint creation" containerID=4958976173 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1683 identity=2227 ipv4=10.0.0.220 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-6sttk subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.242 28b31ad3-b59e-4c45-9c20-1168eb50ad51 default }" containerID=ad43cd4c0da104c6728608571b45859a8b19c994ae9e00d50fc1deb3cfb1444a datapathConfiguration="&{false false false false false }" interface=lxc511067cc3cca k8sPodName=cert-manager/cert-manager-startupapicheck-wzmqj labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ad43cd4c0d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2896 ipv4=10.0.0.242 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-wzmqj subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ad43cd4c0d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2896 identityLabels="k8s:app.kubernetes.io/component=startupapicheck,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=startupapicheck,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=startupapicheck,k8s:batch.kubernetes.io/controller-uid=5034e8a8-1b5c-42c0-b4e0-2c518176010e,k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck,k8s:controller-uid=5034e8a8-1b5c-42c0-b4e0-2c518176010e,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck,k8s:io.kubernetes.pod.namespace=cert-manager,k8s:job-name=cert-manager-startupapicheck" ipv4=10.0.0.242 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-wzmqj subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=startupapicheck;k8s:app.kubernetes.io/component=startupapicheck;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=startupapicheck;k8s:app.kubernetes.io/version=v1.11.5;k8s:batch.kubernetes.io/controller-uid=5034e8a8-1b5c-42c0-b4e0-2c518176010e;k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck;k8s:controller-uid=5034e8a8-1b5c-42c0-b4e0-2c518176010e;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck;k8s:io.kubernetes.pod.namespace=cert-manager;k8s:job-name=cert-manager-startupapicheck;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ad43cd4c0d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2896 identity=57971 identityLabels="k8s:app.kubernetes.io/component=startupapicheck,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=startupapicheck,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=startupapicheck,k8s:batch.kubernetes.io/controller-uid=5034e8a8-1b5c-42c0-b4e0-2c518176010e,k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck,k8s:controller-uid=5034e8a8-1b5c-42c0-b4e0-2c518176010e,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck,k8s:io.kubernetes.pod.namespace=cert-manager,k8s:job-name=cert-manager-startupapicheck" ipv4=10.0.0.242 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-wzmqj oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ad43cd4c0d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2896 identity=57971 ipv4=10.0.0.242 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-wzmqj subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ad43cd4c0d datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2896 identity=57971 ipv4=10.0.0.242 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-wzmqj subsys=endpoint level=info msg="Successful endpoint creation" containerID=ad43cd4c0d datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2896 identity=57971 ipv4=10.0.0.242 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-wzmqj subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=ad43cd4c0d endpointID=2896 k8sNamespace=cert-manager k8sPodName=cert-manager-startupapicheck-wzmqj subsys=daemon level=info msg="Releasing key" key="[k8s:app=startupapicheck k8s:app.kubernetes.io/component=startupapicheck k8s:app.kubernetes.io/instance=cert-manager k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=startupapicheck k8s:app.kubernetes.io/version=v1.11.5 k8s:batch.kubernetes.io/controller-uid=5034e8a8-1b5c-42c0-b4e0-2c518176010e k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck k8s:controller-uid=5034e8a8-1b5c-42c0-b4e0-2c518176010e k8s:helm.sh/chart=cert-manager-v1.11.5 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager k8s:io.cilium.k8s.namespace.labels.name=cert-manager k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck k8s:io.kubernetes.pod.namespace=cert-manager k8s:job-name=cert-manager-startupapicheck]" subsys=allocator level=info msg="Removed endpoint" containerID=ad43cd4c0d datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2896 identity=57971 ipv4=10.0.0.242 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-wzmqj subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.229 3cd17d0e-4e8a-4194-8798-1c10f8712984 default }" containerID=c028b12418f5753bc4a6a9603db7d21c98b8224266e2b20adf8d22148d42c224 datapathConfiguration="&{false false false false false }" interface=lxc599df0b7bfde k8sPodName=ingress-nginx/ingress-nginx-admission-create-7h2cf labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c028b12418 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2031 ipv4=10.0.0.229 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-7h2cf subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c028b12418 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2031 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=b13c681e-58e8-4939-bce0-e8df9c72b71a,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create,k8s:controller-uid=b13c681e-58e8-4939-bce0-e8df9c72b71a,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-create" ipv4=10.0.0.229 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-7h2cf subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=admission-webhook;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:batch.kubernetes.io/controller-uid=b13c681e-58e8-4939-bce0-e8df9c72b71a;k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create;k8s:controller-uid=b13c681e-58e8-4939-bce0-e8df9c72b71a;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission;k8s:io.kubernetes.pod.namespace=ingress-nginx;k8s:job-name=ingress-nginx-admission-create;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c028b12418 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2031 identity=8121 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=b13c681e-58e8-4939-bce0-e8df9c72b71a,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create,k8s:controller-uid=b13c681e-58e8-4939-bce0-e8df9c72b71a,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-create" ipv4=10.0.0.229 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-7h2cf oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=c028b12418 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2031 identity=8121 ipv4=10.0.0.229 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-7h2cf subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c028b12418 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2031 identity=8121 ipv4=10.0.0.229 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-7h2cf subsys=endpoint level=info msg="Successful endpoint creation" containerID=c028b12418 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2031 identity=8121 ipv4=10.0.0.229 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-7h2cf subsys=daemon level=info msg="Delete endpoint request" containerID=c028b12418 endpointID=2031 k8sNamespace=ingress-nginx k8sPodName=ingress-nginx-admission-create-7h2cf subsys=daemon level=info msg="Releasing key" key="[k8s:app.kubernetes.io/component=admission-webhook k8s:app.kubernetes.io/instance=ingress-nginx k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=ingress-nginx k8s:app.kubernetes.io/part-of=ingress-nginx k8s:app.kubernetes.io/version=1.12.1 k8s:batch.kubernetes.io/controller-uid=b13c681e-58e8-4939-bce0-e8df9c72b71a k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create k8s:controller-uid=b13c681e-58e8-4939-bce0-e8df9c72b71a k8s:helm.sh/chart=ingress-nginx-4.12.1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission k8s:io.kubernetes.pod.namespace=ingress-nginx k8s:job-name=ingress-nginx-admission-create]" subsys=allocator level=info msg="Removed endpoint" containerID=c028b12418 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2031 identity=8121 ipv4=10.0.0.229 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-7h2cf subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.152 3b85816a-3a15-4e58-8bc2-0bdef38381e4 default }" containerID=21b58e92076d59cd3224d774e67508cfa5af6583a6b69bdabc3ee89659673e7e datapathConfiguration="&{false false false false false }" interface=lxcf01cdb96500f k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-d6zr5 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=21b58e9207 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=534 ipv4=10.0.0.152 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-d6zr5 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=21b58e9207 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=534 identityLabels="k8s:app.kubernetes.io/component=default-backend,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend,k8s:io.kubernetes.pod.namespace=ingress-nginx" ipv4=10.0.0.152 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-d6zr5 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=default-backend;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend;k8s:io.kubernetes.pod.namespace=ingress-nginx;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=21b58e9207 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=534 identity=5858 identityLabels="k8s:app.kubernetes.io/component=default-backend,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend,k8s:io.kubernetes.pod.namespace=ingress-nginx" ipv4=10.0.0.152 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-d6zr5 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=21b58e9207 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=534 identity=5858 ipv4=10.0.0.152 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-d6zr5 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=21b58e9207 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=534 identity=5858 ipv4=10.0.0.152 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-d6zr5 subsys=endpoint level=info msg="Successful endpoint creation" containerID=21b58e9207 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=534 identity=5858 ipv4=10.0.0.152 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-d6zr5 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.6 c264d291-9f04-42ce-8206-49a1ca822731 default }" containerID=265c51b4103ed7762a2da1d71f04e1e383034cad35862bfb00c73493fca2217a datapathConfiguration="&{false false false false false }" interface=lxccb6ea7e52e86 k8sPodName=ingress-nginx/ingress-nginx-admission-patch-qxp7l labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=265c51b410 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3771 ipv4=10.0.0.6 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-qxp7l subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=265c51b410 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3771 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=dfcd1e90-b96b-4c45-b78a-64b6eed587ca,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch,k8s:controller-uid=dfcd1e90-b96b-4c45-b78a-64b6eed587ca,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-patch" ipv4=10.0.0.6 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-qxp7l subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=admission-webhook;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:batch.kubernetes.io/controller-uid=dfcd1e90-b96b-4c45-b78a-64b6eed587ca;k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch;k8s:controller-uid=dfcd1e90-b96b-4c45-b78a-64b6eed587ca;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission;k8s:io.kubernetes.pod.namespace=ingress-nginx;k8s:job-name=ingress-nginx-admission-patch;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=265c51b410 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3771 identity=12966 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=dfcd1e90-b96b-4c45-b78a-64b6eed587ca,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch,k8s:controller-uid=dfcd1e90-b96b-4c45-b78a-64b6eed587ca,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-patch" ipv4=10.0.0.6 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-qxp7l oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=265c51b410 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3771 identity=12966 ipv4=10.0.0.6 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-qxp7l subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=265c51b410 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3771 identity=12966 ipv4=10.0.0.6 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-qxp7l subsys=endpoint level=info msg="Successful endpoint creation" containerID=265c51b410 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3771 identity=12966 ipv4=10.0.0.6 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-qxp7l subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=265c51b410 endpointID=3771 k8sNamespace=ingress-nginx k8sPodName=ingress-nginx-admission-patch-qxp7l subsys=daemon level=info msg="Releasing key" key="[k8s:app.kubernetes.io/component=admission-webhook k8s:app.kubernetes.io/instance=ingress-nginx k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=ingress-nginx k8s:app.kubernetes.io/part-of=ingress-nginx k8s:app.kubernetes.io/version=1.12.1 k8s:batch.kubernetes.io/controller-uid=dfcd1e90-b96b-4c45-b78a-64b6eed587ca k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch k8s:controller-uid=dfcd1e90-b96b-4c45-b78a-64b6eed587ca k8s:helm.sh/chart=ingress-nginx-4.12.1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission k8s:io.kubernetes.pod.namespace=ingress-nginx k8s:job-name=ingress-nginx-admission-patch]" subsys=allocator level=info msg="Removed endpoint" containerID=265c51b410 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3771 identity=12966 ipv4=10.0.0.6 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-qxp7l subsys=endpoint level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"rabbitmq-operator\",\"k8s:app.kubernetes.io/instance\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/name\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/part-of\":\"rabbitmq\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=rabbitmq-cluster-operator k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=f1be31d7-adbe-447a-a3c4-1fcb176025ad] Description:}]" policyAddRequest=974b139b-9412-469a-a486-bfcd85f71c4f subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=974b139b-9412-469a-a486-bfcd85f71c4f policyRevision=2 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=rabbitmq-cluster-operator subsys=k8s-watcher level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"messaging-topology-operator\",\"k8s:app.kubernetes.io/instance\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/name\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/part-of\":\"rabbitmq\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:9443 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=rabbitmq-messaging-topology-operator k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=c6bc89e8-273e-4ac4-a1a1-ee5c35d29374] Description:}]" policyAddRequest=acc4ff5b-d6e7-4474-9b4b-b895ac85119a subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=acc4ff5b-d6e7-4474-9b4b-b895ac85119a policyRevision=3 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=rabbitmq-messaging-topology-operator subsys=k8s-watcher level=info msg="Create endpoint request" addressing="&{10.0.0.112 a36fd5fd-0d01-42f3-8c4a-feb2b3e94c62 default }" containerID=242def556563c03ec7d3b538caacdd80b42a5b710219859eee2b18456a140cc0 datapathConfiguration="&{false false false false false }" interface=lxc3bda857441cd k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-92nsz labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=242def5565 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1312 ipv4=10.0.0.112 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-92nsz subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=242def5565 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1312 identityLabels="k8s:app.kubernetes.io/component=rabbitmq-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=2.16.1,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.112 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-92nsz subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=242def5565 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1312 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.112 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-92nsz line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq-operator;k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=rabbitmq-cluster-operator;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:app.kubernetes.io/version=2.16.1;k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=242def5565 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1312 identity=1805 identityLabels="k8s:app.kubernetes.io/component=rabbitmq-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=2.16.1,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.112 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-92nsz oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=242def5565 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1312 identity=1805 ipv4=10.0.0.112 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-92nsz subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=242def5565 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=1312 identity=1805 ipv4=10.0.0.112 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-92nsz subsys=endpoint level=info msg="Successful endpoint creation" containerID=242def5565 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=1312 identity=1805 ipv4=10.0.0.112 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-92nsz subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.139 4eb209bd-8a69-408e-b031-edb1d6836665 default }" containerID=00a1b8fc333436b056bba1c89e5f231902c83a22d4b44ad8a067568182a6f064 datapathConfiguration="&{false false false false false }" interface=lxc22d24509114f k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-9cvmp labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=00a1b8fc33 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=317 ipv4=10.0.0.139 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-9cvmp subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=00a1b8fc33 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=317 identityLabels="k8s:app.kubernetes.io/component=messaging-topology-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=1.17.4,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.139 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-9cvmp subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=messaging-topology-operator;k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=rabbitmq-cluster-operator;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:app.kubernetes.io/version=1.17.4;k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=00a1b8fc33 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=317 identity=61157 identityLabels="k8s:app.kubernetes.io/component=messaging-topology-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=1.17.4,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.139 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-9cvmp oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=00a1b8fc33 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=317 identity=61157 ipv4=10.0.0.139 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-9cvmp subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=00a1b8fc33 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=317 identity=61157 ipv4=10.0.0.139 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-9cvmp subsys=endpoint level=info msg="Successful endpoint creation" containerID=00a1b8fc33 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=317 identity=61157 ipv4=10.0.0.139 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-9cvmp subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.251 8687341d-590b-443a-b871-a18eb12d3b6a default }" containerID=ca06986250a1dba5007a9955b7562fdbd57ea05176da790a0534837e28b7c93d datapathConfiguration="&{false false false false false }" interface=lxc6e558719571b k8sPodName=openstack/pxc-operator-69cb5bbdb9-fl97t labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ca06986250 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=488 ipv4=10.0.0.251 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-fl97t subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ca06986250 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=488 identityLabels="k8s:app.kubernetes.io/component=operator,k8s:app.kubernetes.io/instance=pxc-operator,k8s:app.kubernetes.io/name=pxc-operator,k8s:app.kubernetes.io/part-of=pxc-operator,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.251 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-fl97t subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=operator;k8s:app.kubernetes.io/instance=pxc-operator;k8s:app.kubernetes.io/name=pxc-operator;k8s:app.kubernetes.io/part-of=pxc-operator;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ca06986250 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=488 identity=30037 identityLabels="k8s:app.kubernetes.io/component=operator,k8s:app.kubernetes.io/instance=pxc-operator,k8s:app.kubernetes.io/name=pxc-operator,k8s:app.kubernetes.io/part-of=pxc-operator,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.251 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-fl97t oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ca06986250 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=488 identity=30037 ipv4=10.0.0.251 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-fl97t subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=ca06986250 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=488 identity=30037 ipv4=10.0.0.251 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-fl97t subsys=endpoint level=info msg="Successful endpoint creation" containerID=ca06986250 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=488 identity=30037 ipv4=10.0.0.251 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-fl97t subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.144 c29134b9-57ef-463e-a079-6407ad2bd38e default }" containerID=cde019b9fce96c4dcbe34164b2c1fd51b9e6e13a4b12ff965cb78a1e41c3385d datapathConfiguration="&{false false false false false }" interface=lxc9d0759553f00 k8sPodName=openstack/percona-xtradb-haproxy-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=cde019b9fc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3778 ipv4=10.0.0.144 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=cde019b9fc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3778 identityLabels="k8s:app.kubernetes.io/component=haproxy,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0" ipv4=10.0.0.144 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=cde019b9fc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3778 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.144 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=haproxy;k8s:app.kubernetes.io/instance=percona-xtradb;k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator;k8s:app.kubernetes.io/name=percona-xtradb-cluster;k8s:app.kubernetes.io/part-of=percona-xtradb-cluster;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=cde019b9fc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3778 identity=38262 identityLabels="k8s:app.kubernetes.io/component=haproxy,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0" ipv4=10.0.0.144 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=cde019b9fc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3778 identity=38262 ipv4=10.0.0.144 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=cde019b9fc datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=3778 identity=38262 ipv4=10.0.0.144 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=cde019b9fc datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=3778 identity=38262 ipv4=10.0.0.144 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.121 6fab8651-6287-4c57-8a74-43d11a6c477d default }" containerID=685afaa7d60d0565116b2de64fac51ec3c09770a2781bc490b0d34b7b895808f datapathConfiguration="&{false false false false false }" interface=lxc52983b2b241f k8sPodName=local-path-storage/helper-pod-create-pvc-2e1f1937-b747-42ec-bbac-2a53d86a6eb2 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=685afaa7d6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=74 ipv4=10.0.0.121 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-2e1f1937-b747-42ec-bbac-2a53d86a6eb2 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=685afaa7d6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=74 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.121 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-2e1f1937-b747-42ec-bbac-2a53d86a6eb2 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:local-path-storage k8s:io.cilium.k8s.namespace.labels.name:local-path-storage]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=685afaa7d6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=74 identity=33972 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.121 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-2e1f1937-b747-42ec-bbac-2a53d86a6eb2 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=685afaa7d6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=74 identity=33972 ipv4=10.0.0.121 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-2e1f1937-b747-42ec-bbac-2a53d86a6eb2 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=685afaa7d6 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=74 identity=33972 ipv4=10.0.0.121 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-2e1f1937-b747-42ec-bbac-2a53d86a6eb2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=685afaa7d6 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=74 identity=33972 ipv4=10.0.0.121 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-2e1f1937-b747-42ec-bbac-2a53d86a6eb2 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=685afaa7d6 endpointID=74 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-2e1f1937-b747-42ec-bbac-2a53d86a6eb2 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=685afaa7d6 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=74 identity=33972 ipv4=10.0.0.121 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-2e1f1937-b747-42ec-bbac-2a53d86a6eb2 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.28 50f58c10-bbce-423b-97a7-5877e87bbe9e default }" containerID=933c494fbe894379163112a23c62be79f087db5d36512e88d20efc2b9aae3b5e datapathConfiguration="&{false false false false false }" interface=lxca39117bacd00 k8sPodName=openstack/percona-xtradb-pxc-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=933c494fbe datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2183 ipv4=10.0.0.28 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=933c494fbe datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2183 identityLabels="k8s:app.kubernetes.io/component=pxc,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0" ipv4=10.0.0.28 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=pxc;k8s:app.kubernetes.io/instance=percona-xtradb;k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator;k8s:app.kubernetes.io/name=percona-xtradb-cluster;k8s:app.kubernetes.io/part-of=percona-xtradb-cluster;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=933c494fbe datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2183 identity=4355 identityLabels="k8s:app.kubernetes.io/component=pxc,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0" ipv4=10.0.0.28 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=933c494fbe datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2183 identity=4355 ipv4=10.0.0.28 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=933c494fbe datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=2183 identity=4355 ipv4=10.0.0.28 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=933c494fbe datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=2183 identity=4355 ipv4=10.0.0.28 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=warning msg="Network status error received, restarting client connections" error="an error on the server (\"[+]ping ok\\n[+]log ok\\n[-]etcd failed: reason withheld\\n[+]poststarthook/start-kube-apiserver-admission-initializer ok\\n[+]poststarthook/generic-apiserver-start-informers ok\\n[+]poststarthook/priority-and-fairness-config-consumer ok\\n[+]poststarthook/priority-and-fairness-filter ok\\n[+]poststarthook/storage-object-count-tracker-hook ok\\n[+]poststarthook/start-apiextensions-informers ok\\n[+]poststarthook/start-apiextensions-controllers ok\\n[+]poststarthook/crd-informer-synced ok\\n[+]poststarthook/start-service-ip-repair-controllers ok\\n[+]poststarthook/rbac/bootstrap-roles ok\\n[+]poststarthook/scheduling/bootstrap-system-priority-classes ok\\n[+]poststarthook/priority-and-fairness-config-producer ok\\n[+]poststarthook/start-system-namespaces-controller ok\\n[+]poststarthook/bootstrap-controller ok\\n[+]poststarthook/start-cluster-authentication-info-controller ok\\n[+]poststarthook/start-kube-apiserver-identity-lease-controller ok\\n[+]poststarthook/start-deprecated-kube-apiserver-identity-lease-garbage-collector ok\\n[+]poststarthook/start-kube-apiserver-identity-lease-garbage-collector ok\\n[+]poststarthook/start-legacy-token-tracking-controller ok\\n[+]poststarthook/aggregator-reload-proxy-client-cert ok\\n[+]poststarthook/start-kube-aggregator-informers ok\\n[+]poststarthook/apiservice-registration-controller ok\\n[+]poststarthook/apiservice-status-available-controller ok\\n[+]poststarthook/kube-apiserver-autoregistration ok\\n[+]autoregister-completion ok\\n[+]poststarthook/apiservice-openapi-controller ok\\n[+]poststarthook/apiservice-openapiv3-controller ok\\n[+]poststarthook/apiservice-discovery-controller ok\\nhealthz check failed\") has prevented the request from succeeding (get healthz.meta.k8s.io)" subsys=k8s-client level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/instance\":\"valkey\",\"k8s:app.kubernetes.io/name\":\"valkey\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:6379 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:} {Ports:[{Port:26379 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:} {IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:9121 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=valkey k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=94cf7a8e-0d51-4875-a64d-2d566d129620] Description:}]" policyAddRequest=2fc27f4d-677a-4d34-9c82-140ded23d21c subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=valkey subsys=k8s-watcher level=info msg="Policy imported via API, recalculating..." policyAddRequest=2fc27f4d-677a-4d34-9c82-140ded23d21c policyRevision=4 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.199 9241aa53-aa04-4a85-baac-56c836b74e7f default }" containerID=0cf66d74f8d21c3a7c29951d9c02b2b654c0aba264c5b8aa66319e803555f2fa datapathConfiguration="&{false false false false false }" interface=lxcabdbdfdee6db k8sPodName=local-path-storage/helper-pod-create-pvc-7fe3871c-4d7f-4115-8960-bfcb8bd4e9dd labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0cf66d74f8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=44 ipv4=10.0.0.199 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-7fe3871c-4d7f-4115-8960-bfcb8bd4e9dd subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0cf66d74f8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=44 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.199 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-7fe3871c-4d7f-4115-8960-bfcb8bd4e9dd subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0cf66d74f8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=44 identity=33972 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.199 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-7fe3871c-4d7f-4115-8960-bfcb8bd4e9dd oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0cf66d74f8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=44 identity=33972 ipv4=10.0.0.199 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-7fe3871c-4d7f-4115-8960-bfcb8bd4e9dd subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=0cf66d74f8 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=44 identity=33972 ipv4=10.0.0.199 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-7fe3871c-4d7f-4115-8960-bfcb8bd4e9dd subsys=endpoint level=info msg="Successful endpoint creation" containerID=0cf66d74f8 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=44 identity=33972 ipv4=10.0.0.199 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-7fe3871c-4d7f-4115-8960-bfcb8bd4e9dd subsys=daemon level=info msg="Delete endpoint request" containerID=0cf66d74f8 endpointID=44 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-7fe3871c-4d7f-4115-8960-bfcb8bd4e9dd subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=0cf66d74f8 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=44 identity=33972 ipv4=10.0.0.199 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-7fe3871c-4d7f-4115-8960-bfcb8bd4e9dd subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.45 2bbfa6f1-fffd-4f2d-a640-6154903d2f24 default }" containerID=194267ba48a6af9d983a404a43cf1683d69de6002392f25742766eb4b1849334 datapathConfiguration="&{false false false false false }" interface=lxc1e336eaa1be7 k8sPodName=openstack/valkey-node-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=194267ba48 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=37 ipv4=10.0.0.45 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=194267ba48 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=37 identityLabels="k8s:app.kubernetes.io/component=node,k8s:app.kubernetes.io/instance=valkey,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=valkey,k8s:app.kubernetes.io/version=8.0.2,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=valkey-2.4.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=valkey,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=valkey-node-0" ipv4=10.0.0.45 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=node;k8s:app.kubernetes.io/instance=valkey;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=valkey;k8s:app.kubernetes.io/version=8.0.2;k8s:apps.kubernetes.io/pod-index=0;k8s:helm.sh/chart=valkey-2.4.6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=valkey;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=valkey-node-0;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=194267ba48 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=37 identity=59145 identityLabels="k8s:app.kubernetes.io/component=node,k8s:app.kubernetes.io/instance=valkey,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=valkey,k8s:app.kubernetes.io/version=8.0.2,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=valkey-2.4.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=valkey,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=valkey-node-0" ipv4=10.0.0.45 ipv6= k8sPodName=openstack/valkey-node-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=194267ba48 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=37 identity=59145 ipv4=10.0.0.45 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=194267ba48 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=37 identity=59145 ipv4=10.0.0.45 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=194267ba48 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=37 identity=59145 ipv4=10.0.0.45 ipv6= k8sPodName=openstack/valkey-node-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"keycloak\",\"k8s:app.kubernetes.io/instance\":\"keycloak\",\"k8s:app.kubernetes.io/name\":\"keycloak\",\"k8s:io.kubernetes.pod.namespace\":\"auth-system\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:7800 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:} {Ports:[{Port:8080 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=keycloak k8s:io.cilium.k8s.policy.namespace=auth-system k8s:io.cilium.k8s.policy.uid=137b6ebf-2ee5-4c54-9940-838bb8ab4316] Description:}]" policyAddRequest=86338d24-403d-4be1-a078-180fca8cbbba subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=keycloak subsys=k8s-watcher level=info msg="Policy imported via API, recalculating..." policyAddRequest=86338d24-403d-4be1-a078-180fca8cbbba policyRevision=5 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.12 c11fb69d-90c7-4b7d-ba98-42b520bd000a default }" containerID=55ffe06a4548b0cbb519b98dd2830127eff149af219ea351658e5d14c989f945 datapathConfiguration="&{false false false false false }" interface=lxc19cb7bfa4fa7 k8sPodName=auth-system/keycloak-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=55ffe06a45 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=267 ipv4=10.0.0.12 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=55ffe06a45 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=267 identityLabels="k8s:app.kubernetes.io/component=keycloak,k8s:app.kubernetes.io/instance=keycloak,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=keycloak,k8s:app.kubernetes.io/version=24.0.5,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=keycloak-21.4.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system,k8s:io.cilium.k8s.namespace.labels.name=auth-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keycloak,k8s:io.kubernetes.pod.namespace=auth-system,k8s:statefulset.kubernetes.io/pod-name=keycloak-0" ipv4=10.0.0.12 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:auth-system k8s:io.cilium.k8s.namespace.labels.name:auth-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=keycloak;k8s:app.kubernetes.io/instance=keycloak;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=keycloak;k8s:app.kubernetes.io/version=24.0.5;k8s:apps.kubernetes.io/pod-index=0;k8s:helm.sh/chart=keycloak-21.4.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system;k8s:io.cilium.k8s.namespace.labels.name=auth-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keycloak;k8s:io.kubernetes.pod.namespace=auth-system;k8s:statefulset.kubernetes.io/pod-name=keycloak-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=55ffe06a45 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=267 identity=48591 identityLabels="k8s:app.kubernetes.io/component=keycloak,k8s:app.kubernetes.io/instance=keycloak,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=keycloak,k8s:app.kubernetes.io/version=24.0.5,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=keycloak-21.4.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system,k8s:io.cilium.k8s.namespace.labels.name=auth-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keycloak,k8s:io.kubernetes.pod.namespace=auth-system,k8s:statefulset.kubernetes.io/pod-name=keycloak-0" ipv4=10.0.0.12 ipv6= k8sPodName=auth-system/keycloak-0 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=55ffe06a45 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=267 identity=48591 ipv4=10.0.0.12 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=55ffe06a45 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=267 identity=48591 ipv4=10.0.0.12 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=55ffe06a45 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=267 identity=48591 ipv4=10.0.0.12 ipv6= k8sPodName=auth-system/keycloak-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Conntrack garbage collector interval recalculated" deleteRatio=0.00669579449997971 newInterval=7m30s subsys=map-ct level=info msg="Create endpoint request" addressing="&{10.0.0.243 3f6334c2-c060-4253-8b95-31d353daa79a default }" containerID=b8e37a2af134a081c3ad610969bef14b70dab9cef341efa22b70fe921b8da8d2 datapathConfiguration="&{false false false false false }" interface=lxc0ddbaef0f763 k8sPodName=monitoring/node-feature-discovery-worker-57cwb labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b8e37a2af1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1350 ipv4=10.0.0.243 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-57cwb subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b8e37a2af1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1350 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=worker" ipv4=10.0.0.243 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-57cwb subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=worker;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b8e37a2af1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1350 identity=31783 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=worker" ipv4=10.0.0.243 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-57cwb oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b8e37a2af1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1350 identity=31783 ipv4=10.0.0.243 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-57cwb subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.71 a0360013-0c16-4000-8c00-3035133e4dc9 default }" containerID=23b3bc5a6650730467c23fe6b157377ceb8d76c3c501715947ad73d6c4fee93f datapathConfiguration="&{false false false false false }" interface=lxc2bf48330b364 k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-pzsr9 labels="[]" subsys=daemon sync-build=true level=info msg="Create endpoint request" addressing="&{10.0.0.201 e55c48c9-d43b-4fe3-b441-4431351feef3 default }" containerID=12f40eecbaf0ee27814d3fd3e5cd80e8b1fdd41459bf052d4126ee6b0da968fa datapathConfiguration="&{false false false false false }" interface=lxc1cd3135eb1e4 k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-8x4xm labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=23b3bc5a66 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2324 ipv4=10.0.0.71 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-pzsr9 subsys=endpoint level=info msg="New endpoint" containerID=12f40eecba datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=187 ipv4=10.0.0.201 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-8x4xm subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=23b3bc5a66 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2324 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=gc" ipv4=10.0.0.71 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-pzsr9 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Resolving identity labels (blocking)" containerID=12f40eecba datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=187 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=master" ipv4=10.0.0.201 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-8x4xm subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=gc;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=23b3bc5a66 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2324 identity=7876 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=gc" ipv4=10.0.0.71 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-pzsr9 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=23b3bc5a66 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2324 identity=7876 ipv4=10.0.0.71 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-pzsr9 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=master;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=12f40eecba datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=187 identity=6997 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=master" ipv4=10.0.0.201 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-8x4xm oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=12f40eecba datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=187 identity=6997 ipv4=10.0.0.201 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-8x4xm subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b8e37a2af1 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1350 identity=31783 ipv4=10.0.0.243 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-57cwb subsys=endpoint level=info msg="Successful endpoint creation" containerID=b8e37a2af1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1350 identity=31783 ipv4=10.0.0.243 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-57cwb subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=12f40eecba datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=187 identity=6997 ipv4=10.0.0.201 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-8x4xm subsys=endpoint level=info msg="Successful endpoint creation" containerID=12f40eecba datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=187 identity=6997 ipv4=10.0.0.201 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-8x4xm subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=23b3bc5a66 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2324 identity=7876 ipv4=10.0.0.71 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-pzsr9 subsys=endpoint level=info msg="Successful endpoint creation" containerID=23b3bc5a66 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2324 identity=7876 ipv4=10.0.0.71 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-pzsr9 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.252 709abcce-71cf-45b9-973b-e9de9f9f06fe default }" containerID=cce25f9ee3c39abbed13477f2aa8c819e6815f1d957d370c1e7af650cc519af4 datapathConfiguration="&{false false false false false }" interface=lxc99ad35a21384 k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-9fvn5 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=cce25f9ee3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=46 ipv4=10.0.0.252 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-9fvn5 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=cce25f9ee3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=46 identityLabels="k8s:app=secretgen-controller,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa,k8s:io.kubernetes.pod.namespace=secretgen-controller" ipv4=10.0.0.252 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-9fvn5 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:secretgen-controller]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=cce25f9ee3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=46 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.252 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-9fvn5 line=611 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app=secretgen-controller;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa;k8s:io.kubernetes.pod.namespace=secretgen-controller;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=cce25f9ee3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=46 identity=57381 identityLabels="k8s:app=secretgen-controller,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa,k8s:io.kubernetes.pod.namespace=secretgen-controller" ipv4=10.0.0.252 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-9fvn5 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=cce25f9ee3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=46 identity=57381 ipv4=10.0.0.252 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-9fvn5 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=cce25f9ee3 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=46 identity=57381 ipv4=10.0.0.252 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-9fvn5 subsys=endpoint level=info msg="Successful endpoint creation" containerID=cce25f9ee3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=46 identity=57381 ipv4=10.0.0.252 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-9fvn5 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3484 identity=1 identityLabels="k8s:feature.node.kubernetes.io/cpu-cpuid.ADX=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AESNI=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AVX2=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AVX=true,k8s:feature.node.kubernetes.io/cpu-cpuid.CLZERO=true,k8s:feature.node.kubernetes.io/cpu-cpuid.CMPXCHG8=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FMA3=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FXSR=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FXSROPT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.HYPERVISOR=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IA32_ARCH_CAP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IBPB=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IBRS=true,k8s:feature.node.kubernetes.io/cpu-cpuid.LAHF=true,k8s:feature.node.kubernetes.io/cpu-cpuid.MOVBE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.NRIPS=true,k8s:feature.node.kubernetes.io/cpu-cpuid.OSXSAVE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SHA=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SPEC_CTRL_SSBD=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SSE4A=true,k8s:feature.node.kubernetes.io/cpu-cpuid.STIBP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SVM=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SVMNP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SYSCALL=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SYSEE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.TOPEXT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.WBNOINVD=true,k8s:feature.node.kubernetes.io/cpu-cpuid.X87=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XGETBV1=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVEC=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVEOPT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVES=true,k8s:feature.node.kubernetes.io/cpu-hardware_multithreading=false,k8s:feature.node.kubernetes.io/cpu-model.family=23,k8s:feature.node.kubernetes.io/cpu-model.id=49,k8s:feature.node.kubernetes.io/cpu-model.vendor_id=AMD,k8s:feature.node.kubernetes.io/kernel-config.NO_HZ=true,k8s:feature.node.kubernetes.io/kernel-config.NO_HZ_IDLE=true,k8s:feature.node.kubernetes.io/kernel-version.full=5.15.0-176-generic,k8s:feature.node.kubernetes.io/kernel-version.major=5,k8s:feature.node.kubernetes.io/kernel-version.minor=15,k8s:feature.node.kubernetes.io/kernel-version.revision=0,k8s:feature.node.kubernetes.io/pci-0300_1af4.present=true,k8s:feature.node.kubernetes.io/system-os_release.ID=ubuntu,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID.major=22,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID.minor=04,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID=22.04,k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,k8s:openstack-compute-node=enabled,k8s:openstack-control-plane=enabled,k8s:openvswitch=enabled,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_hostns_03484 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_hostns_03484 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_hostns_03484 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_hostns_03484:pending" subsys=bpf level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_netdev_00005 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_netdev_00005 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005:pending" subsys=bpf level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3484 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.9 60af8408-ffb5-4b9a-9904-aa84ef9f397d default }" containerID=57bdc830f4c4072b914cb9e265b237d4bd64c49fa29c6105416da3ccffa8d1f7 datapathConfiguration="&{false false false false false }" interface=lxc1a988140f40a k8sPodName=monitoring/kube-prometheus-stack-admission-create-2fhk6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=57bdc830f4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=894 ipv4=10.0.0.9 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-2fhk6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=57bdc830f4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=894 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-create,k8s:batch.kubernetes.io/controller-uid=0ec15ae2-ad54-487b-a529-60cd37ff50c7,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=0ec15ae2-ad54-487b-a529-60cd37ff50c7,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-create,k8s:release=kube-prometheus-stack" ipv4=10.0.0.9 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-2fhk6 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-admission-create;k8s:app.kubernetes.io/component=prometheus-operator-webhook;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:batch.kubernetes.io/controller-uid=0ec15ae2-ad54-487b-a529-60cd37ff50c7;k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create;k8s:chart=kube-prometheus-stack-60.2.0;k8s:controller-uid=0ec15ae2-ad54-487b-a529-60cd37ff50c7;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission;k8s:io.kubernetes.pod.namespace=monitoring;k8s:job-name=kube-prometheus-stack-admission-create;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=57bdc830f4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=894 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.9 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-2fhk6 line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=57bdc830f4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=894 identity=44283 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-create,k8s:batch.kubernetes.io/controller-uid=0ec15ae2-ad54-487b-a529-60cd37ff50c7,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=0ec15ae2-ad54-487b-a529-60cd37ff50c7,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-create,k8s:release=kube-prometheus-stack" ipv4=10.0.0.9 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-2fhk6 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=57bdc830f4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=894 identity=44283 ipv4=10.0.0.9 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-2fhk6 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=57bdc830f4 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=894 identity=44283 ipv4=10.0.0.9 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-2fhk6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=57bdc830f4 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=894 identity=44283 ipv4=10.0.0.9 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-2fhk6 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=57bdc830f4 endpointID=894 k8sNamespace=monitoring k8sPodName=kube-prometheus-stack-admission-create-2fhk6 subsys=daemon level=info msg="Releasing key" key="[k8s:app=kube-prometheus-stack-admission-create k8s:app.kubernetes.io/component=prometheus-operator-webhook k8s:app.kubernetes.io/instance=kube-prometheus-stack k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator k8s:app.kubernetes.io/part-of=kube-prometheus-stack k8s:app.kubernetes.io/version=60.2.0 k8s:batch.kubernetes.io/controller-uid=0ec15ae2-ad54-487b-a529-60cd37ff50c7 k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create k8s:chart=kube-prometheus-stack-60.2.0 k8s:controller-uid=0ec15ae2-ad54-487b-a529-60cd37ff50c7 k8s:heritage=Helm k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring k8s:io.cilium.k8s.namespace.labels.name=monitoring k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission k8s:io.kubernetes.pod.namespace=monitoring k8s:job-name=kube-prometheus-stack-admission-create k8s:release=kube-prometheus-stack]" subsys=allocator level=info msg="Removed endpoint" containerID=57bdc830f4 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=894 identity=44283 ipv4=10.0.0.9 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-2fhk6 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.145 66625371-6438-4ebe-a36f-6e7abd2cbbaf default }" containerID=ac8b5456d81ddb2a007d7bcf8c110538170bf59ced2bcb99c813bd86763c8cfa datapathConfiguration="&{false false false false false }" interface=lxc6f0dce83fcbc k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-4bmgn labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ac8b5456d8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3979 ipv4=10.0.0.145 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-4bmgn subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ac8b5456d8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3979 identityLabels="k8s:app.kubernetes.io/component=metrics,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-state-metrics,k8s:app.kubernetes.io/part-of=kube-state-metrics,k8s:app.kubernetes.io/version=2.12.0,k8s:helm.sh/chart=kube-state-metrics-5.20.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.145 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-4bmgn subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=metrics;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-state-metrics;k8s:app.kubernetes.io/part-of=kube-state-metrics;k8s:app.kubernetes.io/version=2.12.0;k8s:helm.sh/chart=kube-state-metrics-5.20.0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics;k8s:io.kubernetes.pod.namespace=monitoring;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ac8b5456d8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3979 identity=35335 identityLabels="k8s:app.kubernetes.io/component=metrics,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-state-metrics,k8s:app.kubernetes.io/part-of=kube-state-metrics,k8s:app.kubernetes.io/version=2.12.0,k8s:helm.sh/chart=kube-state-metrics-5.20.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.145 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-4bmgn oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ac8b5456d8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3979 identity=35335 ipv4=10.0.0.145 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-4bmgn subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.59 307bd33e-6547-4b62-97e8-5d7cc8b0c366 default }" containerID=cc1982b06a74087cc6fc5b818a66c8a5a113bfa1b049fc9789d80fda0a7dec9e datapathConfiguration="&{false false false false false }" interface=lxce99a5e6fcbe1 k8sPodName=monitoring/kube-prometheus-stack-grafana-684f94bcdf-xh95w labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=cc1982b06a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=369 ipv4=10.0.0.59 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-684f94bcdf-xh95w subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=cc1982b06a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=369 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/name=grafana,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.59 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-684f94bcdf-xh95w subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/name=grafana;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=cc1982b06a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=369 identity=7339 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/name=grafana,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.59 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-684f94bcdf-xh95w oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=cc1982b06a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=369 identity=7339 ipv4=10.0.0.59 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-684f94bcdf-xh95w subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ac8b5456d8 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3979 identity=35335 ipv4=10.0.0.145 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-4bmgn subsys=endpoint level=info msg="Successful endpoint creation" containerID=ac8b5456d8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3979 identity=35335 ipv4=10.0.0.145 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-4bmgn subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=cc1982b06a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=369 identity=7339 ipv4=10.0.0.59 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-684f94bcdf-xh95w subsys=endpoint level=info msg="Successful endpoint creation" containerID=cc1982b06a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=369 identity=7339 ipv4=10.0.0.59 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-684f94bcdf-xh95w subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.165 5f7b60e8-af16-4f7d-8c10-7a114c682e28 default }" containerID=9b8c6cc17ce6d73c6cded9638ae0c816f5a55dc3dc23ec7c75a33f0041a900a3 datapathConfiguration="&{false false false false false }" interface=lxc051a690e9c37 k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-w8692 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9b8c6cc17c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3166 ipv4=10.0.0.165 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-w8692 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9b8c6cc17c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3166 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-operator,k8s:chart=kube-prometheus-stack-60.2.0,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.165 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-w8692 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-operator;k8s:app.kubernetes.io/component=prometheus-operator;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:chart=kube-prometheus-stack-60.2.0;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator;k8s:io.kubernetes.pod.namespace=monitoring;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9b8c6cc17c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3166 identity=14584 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-operator,k8s:chart=kube-prometheus-stack-60.2.0,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.165 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-w8692 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9b8c6cc17c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3166 identity=14584 ipv4=10.0.0.165 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-w8692 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=9b8c6cc17c datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3166 identity=14584 ipv4=10.0.0.165 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-w8692 subsys=endpoint level=info msg="Successful endpoint creation" containerID=9b8c6cc17c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3166 identity=14584 ipv4=10.0.0.165 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-w8692 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.16 81a3a32f-e255-49bb-a6e5-3d8b0d83e800 default }" containerID=1babac5436f23dc188ac3888e90a5a63a2594d0024038b54996233d94367b364 datapathConfiguration="&{false false false false false }" interface=lxc578fd88994c1 k8sPodName=monitoring/kube-prometheus-stack-admission-patch-f4cpd labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1babac5436 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3528 ipv4=10.0.0.16 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-f4cpd subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1babac5436 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3528 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-patch,k8s:batch.kubernetes.io/controller-uid=e9d9c287-997a-4b2c-a061-e42933acde9f,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=e9d9c287-997a-4b2c-a061-e42933acde9f,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-patch,k8s:release=kube-prometheus-stack" ipv4=10.0.0.16 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-f4cpd subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-admission-patch;k8s:app.kubernetes.io/component=prometheus-operator-webhook;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:batch.kubernetes.io/controller-uid=e9d9c287-997a-4b2c-a061-e42933acde9f;k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch;k8s:chart=kube-prometheus-stack-60.2.0;k8s:controller-uid=e9d9c287-997a-4b2c-a061-e42933acde9f;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission;k8s:io.kubernetes.pod.namespace=monitoring;k8s:job-name=kube-prometheus-stack-admission-patch;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1babac5436 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3528 identity=64652 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-patch,k8s:batch.kubernetes.io/controller-uid=e9d9c287-997a-4b2c-a061-e42933acde9f,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=e9d9c287-997a-4b2c-a061-e42933acde9f,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-patch,k8s:release=kube-prometheus-stack" ipv4=10.0.0.16 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-f4cpd oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1babac5436 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3528 identity=64652 ipv4=10.0.0.16 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-f4cpd subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=1babac5436 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3528 identity=64652 ipv4=10.0.0.16 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-f4cpd subsys=endpoint level=info msg="Successful endpoint creation" containerID=1babac5436 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3528 identity=64652 ipv4=10.0.0.16 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-f4cpd subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=1babac5436 endpointID=3528 k8sNamespace=monitoring k8sPodName=kube-prometheus-stack-admission-patch-f4cpd subsys=daemon level=info msg="Releasing key" key="[k8s:app=kube-prometheus-stack-admission-patch k8s:app.kubernetes.io/component=prometheus-operator-webhook k8s:app.kubernetes.io/instance=kube-prometheus-stack k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator k8s:app.kubernetes.io/part-of=kube-prometheus-stack k8s:app.kubernetes.io/version=60.2.0 k8s:batch.kubernetes.io/controller-uid=e9d9c287-997a-4b2c-a061-e42933acde9f k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch k8s:chart=kube-prometheus-stack-60.2.0 k8s:controller-uid=e9d9c287-997a-4b2c-a061-e42933acde9f k8s:heritage=Helm k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring k8s:io.cilium.k8s.namespace.labels.name=monitoring k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission k8s:io.kubernetes.pod.namespace=monitoring k8s:job-name=kube-prometheus-stack-admission-patch k8s:release=kube-prometheus-stack]" subsys=allocator level=info msg="Removed endpoint" containerID=1babac5436 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3528 identity=64652 ipv4=10.0.0.16 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-f4cpd subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.189 e032bc7e-9b13-4720-b9d4-d4541638eeff default }" containerID=9522fe4e8d4f34fb1bd699d7aeb5d40a7331943859b0a4ca88cd8b96de794871 datapathConfiguration="&{false false false false false }" interface=lxc0ffb2902737d k8sPodName=local-path-storage/helper-pod-create-pvc-fc5dbb00-b3c8-4352-9c08-506d1e8088d2 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9522fe4e8d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2753 ipv4=10.0.0.189 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-fc5dbb00-b3c8-4352-9c08-506d1e8088d2 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9522fe4e8d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2753 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.189 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-fc5dbb00-b3c8-4352-9c08-506d1e8088d2 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9522fe4e8d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2753 identity=33972 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.189 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-fc5dbb00-b3c8-4352-9c08-506d1e8088d2 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9522fe4e8d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2753 identity=33972 ipv4=10.0.0.189 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-fc5dbb00-b3c8-4352-9c08-506d1e8088d2 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=9522fe4e8d datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2753 identity=33972 ipv4=10.0.0.189 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-fc5dbb00-b3c8-4352-9c08-506d1e8088d2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=9522fe4e8d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2753 identity=33972 ipv4=10.0.0.189 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-fc5dbb00-b3c8-4352-9c08-506d1e8088d2 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.13 9fe89ccd-e0c9-4be0-8439-abaf1b2a1957 default }" containerID=c84c260fe3e804049dc28d488c98fe2c1382b57260764059c2c060ed3eeb1ba5 datapathConfiguration="&{false false false false false }" interface=lxcc9ce2d91b8a4 k8sPodName=local-path-storage/helper-pod-create-pvc-28a77296-a679-457d-9770-0062719f0c2b labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c84c260fe3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1870 ipv4=10.0.0.13 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-28a77296-a679-457d-9770-0062719f0c2b subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c84c260fe3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1870 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.13 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-28a77296-a679-457d-9770-0062719f0c2b subsys=endpoint level=info msg="Identity of endpoint changed" containerID=c84c260fe3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1870 identity=33972 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.13 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-28a77296-a679-457d-9770-0062719f0c2b oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c84c260fe3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1870 identity=33972 ipv4=10.0.0.13 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-28a77296-a679-457d-9770-0062719f0c2b subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c84c260fe3 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1870 identity=33972 ipv4=10.0.0.13 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-28a77296-a679-457d-9770-0062719f0c2b subsys=endpoint level=info msg="Successful endpoint creation" containerID=c84c260fe3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1870 identity=33972 ipv4=10.0.0.13 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-28a77296-a679-457d-9770-0062719f0c2b subsys=daemon level=info msg="Delete endpoint request" containerID=9522fe4e8d endpointID=2753 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-fc5dbb00-b3c8-4352-9c08-506d1e8088d2 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=9522fe4e8d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2753 identity=33972 ipv4=10.0.0.189 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-fc5dbb00-b3c8-4352-9c08-506d1e8088d2 subsys=endpoint level=info msg="Delete endpoint request" containerID=c84c260fe3 endpointID=1870 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-28a77296-a679-457d-9770-0062719f0c2b subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=c84c260fe3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1870 identity=33972 ipv4=10.0.0.13 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-28a77296-a679-457d-9770-0062719f0c2b subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.72 32f4ef34-58b1-4dcb-b310-b5faf3befabc default }" containerID=a65cfc36f0fd82ae491e39d1d899bf99e8c22b065f46d4cf7300d184e76c03d3 datapathConfiguration="&{false false false false false }" interface=lxc94fbacc049f6 k8sPodName=monitoring/loki-gateway-cf54cb88c-9wbnc labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a65cfc36f0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2218 ipv4=10.0.0.72 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-9wbnc subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a65cfc36f0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2218 identityLabels="k8s:app.kubernetes.io/component=gateway,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.72 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-9wbnc subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=gateway;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=a65cfc36f0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2218 identity=8674 identityLabels="k8s:app.kubernetes.io/component=gateway,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.72 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-9wbnc oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a65cfc36f0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2218 identity=8674 ipv4=10.0.0.72 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-9wbnc subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.184 5fdf2dea-15a0-42f8-ab9c-6b1537a1a1a7 default }" containerID=8a7865eeaaa059df31264d65ad519ff38d66855da8046493788c9348f16bd040 datapathConfiguration="&{false false false false false }" interface=lxc1c55b67efd29 k8sPodName=monitoring/loki-chunks-cache-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8a7865eeaa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2600 ipv4=10.0.0.184 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.254 1117dc2c-906a-4670-be9c-cfbc46146531 default }" containerID=602e4a10f8c5dfc386e04337ad8685de652f9f953eb3b5f152f385b297a4f5f3 datapathConfiguration="&{false false false false false }" interface=lxc4beb77a8e0b0 k8sPodName=monitoring/loki-results-cache-0 labels="[]" subsys=daemon sync-build=true level=info msg="Resolving identity labels (blocking)" containerID=8a7865eeaa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2600 identityLabels="k8s:app.kubernetes.io/component=memcached-chunks-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-chunks-cache,k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0" ipv4=10.0.0.184 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="New endpoint" containerID=602e4a10f8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1938 ipv4=10.0.0.254 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=602e4a10f8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1938 identityLabels="k8s:app.kubernetes.io/component=memcached-results-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-results-cache,k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0" ipv4=10.0.0.254 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=memcached-chunks-cache;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:name=memcached-chunks-cache;k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8a7865eeaa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2600 identity=43812 identityLabels="k8s:app.kubernetes.io/component=memcached-chunks-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-chunks-cache,k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0" ipv4=10.0.0.184 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8a7865eeaa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2600 identity=43812 ipv4=10.0.0.184 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=memcached-results-cache;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:name=memcached-results-cache;k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=602e4a10f8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1938 identity=6596 identityLabels="k8s:app.kubernetes.io/component=memcached-results-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-results-cache,k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0" ipv4=10.0.0.254 ipv6= k8sPodName=monitoring/loki-results-cache-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=602e4a10f8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1938 identity=6596 ipv4=10.0.0.254 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a65cfc36f0 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2218 identity=8674 ipv4=10.0.0.72 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-9wbnc subsys=endpoint level=info msg="Successful endpoint creation" containerID=a65cfc36f0 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2218 identity=8674 ipv4=10.0.0.72 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-9wbnc subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.209 28d51872-62a6-47a4-9862-3bad6e324eac default }" containerID=3e9ed560aa9f96995df8822006d67cceeb37c886ace1264195de88cb4ab04208 datapathConfiguration="&{false false false false false }" interface=lxcefca1c662628 k8sPodName=local-path-storage/helper-pod-create-pvc-fd5c33fd-0fb3-4cd6-912e-50f6154b334d labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3e9ed560aa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=86 ipv4=10.0.0.209 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-fd5c33fd-0fb3-4cd6-912e-50f6154b334d subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3e9ed560aa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=86 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.209 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-fd5c33fd-0fb3-4cd6-912e-50f6154b334d subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3e9ed560aa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=86 identity=33972 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.209 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-fd5c33fd-0fb3-4cd6-912e-50f6154b334d oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3e9ed560aa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=86 identity=33972 ipv4=10.0.0.209 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-fd5c33fd-0fb3-4cd6-912e-50f6154b334d subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=8a7865eeaa datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2600 identity=43812 ipv4=10.0.0.184 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=8a7865eeaa datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2600 identity=43812 ipv4=10.0.0.184 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=602e4a10f8 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1938 identity=6596 ipv4=10.0.0.254 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=602e4a10f8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1938 identity=6596 ipv4=10.0.0.254 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.46 829c7732-b993-4f7c-9b61-27d247798097 default }" containerID=56b8d289a5695d5a92176454a9c57dfc69a899adb45d3c2de6869342218f0c26 datapathConfiguration="&{false false false false false }" interface=lxc90797eb9026e k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=56b8d289a5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2031 ipv4=10.0.0.46 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=56b8d289a5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2031 identityLabels="k8s:alertmanager=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=alertmanager,k8s:app.kubernetes.io/version=0.27.0,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0" ipv4=10.0.0.46 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:alertmanager=kube-prometheus-stack-alertmanager;k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager;k8s:app.kubernetes.io/managed-by=prometheus-operator;k8s:app.kubernetes.io/name=alertmanager;k8s:app.kubernetes.io/version=0.27.0;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager;k8s:io.kubernetes.pod.namespace=monitoring;k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=56b8d289a5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2031 identity=10325 identityLabels="k8s:alertmanager=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=alertmanager,k8s:app.kubernetes.io/version=0.27.0,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0" ipv4=10.0.0.46 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=56b8d289a5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2031 identity=10325 ipv4=10.0.0.46 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=3e9ed560aa datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=86 identity=33972 ipv4=10.0.0.209 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-fd5c33fd-0fb3-4cd6-912e-50f6154b334d subsys=endpoint level=info msg="Successful endpoint creation" containerID=3e9ed560aa datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=86 identity=33972 ipv4=10.0.0.209 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-fd5c33fd-0fb3-4cd6-912e-50f6154b334d subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=56b8d289a5 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2031 identity=10325 ipv4=10.0.0.46 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=56b8d289a5 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2031 identity=10325 ipv4=10.0.0.46 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.203 8945166a-4daf-4462-85bc-9faf6cc8ba0a default }" containerID=e462aae539ef064639263348d2e9245bb24c1d48eedd84cea7079fb6b92cf82d datapathConfiguration="&{false false false false false }" interface=lxcf5e2b26adbe7 k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e462aae539 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2841 ipv4=10.0.0.203 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e462aae539 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2841 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=prometheus,k8s:app.kubernetes.io/version=2.51.2,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus,k8s:io.kubernetes.pod.namespace=monitoring,k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus,k8s:operator.prometheus.io/shard=0,k8s:prometheus=kube-prometheus-stack-prometheus,k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0" ipv4=10.0.0.203 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=e462aae539 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2841 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.203 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus;k8s:app.kubernetes.io/managed-by=prometheus-operator;k8s:app.kubernetes.io/name=prometheus;k8s:app.kubernetes.io/version=2.51.2;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus;k8s:io.kubernetes.pod.namespace=monitoring;k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus;k8s:operator.prometheus.io/shard=0;k8s:prometheus=kube-prometheus-stack-prometheus;k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e462aae539 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2841 identity=1048 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=prometheus,k8s:app.kubernetes.io/version=2.51.2,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus,k8s:io.kubernetes.pod.namespace=monitoring,k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus,k8s:operator.prometheus.io/shard=0,k8s:prometheus=kube-prometheus-stack-prometheus,k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0" ipv4=10.0.0.203 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e462aae539 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2841 identity=1048 ipv4=10.0.0.203 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e462aae539 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2841 identity=1048 ipv4=10.0.0.203 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=e462aae539 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2841 identity=1048 ipv4=10.0.0.203 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.13 6a3b3a97-95a8-4544-8184-06e40891d71b default }" containerID=e8a8dd4c3bd45640afc56ff7ca5e98180efb2e11ed3fe2667517931fa3bcc649 datapathConfiguration="&{false false false false false }" interface=lxcaf45f24b31c7 k8sPodName=monitoring/vector-wfm7z labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e8a8dd4c3b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2917 ipv4=10.0.0.13 ipv6= k8sPodName=monitoring/vector-wfm7z subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e8a8dd4c3b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2917 identityLabels="k8s:app.kubernetes.io/component=Agent,k8s:app.kubernetes.io/instance=vector,k8s:app.kubernetes.io/name=vector,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=vector,k8s:io.kubernetes.pod.namespace=monitoring,k8s:vector.dev/exclude=true" ipv4=10.0.0.13 ipv6= k8sPodName=monitoring/vector-wfm7z subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=Agent;k8s:app.kubernetes.io/instance=vector;k8s:app.kubernetes.io/name=vector;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=vector;k8s:io.kubernetes.pod.namespace=monitoring;k8s:vector.dev/exclude=true;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e8a8dd4c3b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2917 identity=28807 identityLabels="k8s:app.kubernetes.io/component=Agent,k8s:app.kubernetes.io/instance=vector,k8s:app.kubernetes.io/name=vector,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=vector,k8s:io.kubernetes.pod.namespace=monitoring,k8s:vector.dev/exclude=true" ipv4=10.0.0.13 ipv6= k8sPodName=monitoring/vector-wfm7z oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e8a8dd4c3b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2917 identity=28807 ipv4=10.0.0.13 ipv6= k8sPodName=monitoring/vector-wfm7z subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e8a8dd4c3b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2917 identity=28807 ipv4=10.0.0.13 ipv6= k8sPodName=monitoring/vector-wfm7z subsys=endpoint level=info msg="Successful endpoint creation" containerID=e8a8dd4c3b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2917 identity=28807 ipv4=10.0.0.13 ipv6= k8sPodName=monitoring/vector-wfm7z subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=3e9ed560aa endpointID=86 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-fd5c33fd-0fb3-4cd6-912e-50f6154b334d subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=3e9ed560aa datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=86 identity=33972 ipv4=10.0.0.209 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-fd5c33fd-0fb3-4cd6-912e-50f6154b334d subsys=endpoint level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.190 c118806c-1408-4b01-9fab-4088824a9aa2 default }" containerID=f719fc7d848c3431e47f9887877936592817b316a7733c761f023e8d2fd86938 datapathConfiguration="&{false false false false false }" interface=lxc163bc71a088b k8sPodName=monitoring/loki-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f719fc7d84 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3691 ipv4=10.0.0.190 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f719fc7d84 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3691 identityLabels="k8s:app.kubernetes.io/component=single-binary,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:app.kubernetes.io/part-of=memberlist,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=loki-0" ipv4=10.0.0.190 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=single-binary;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:app.kubernetes.io/part-of=memberlist;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:statefulset.kubernetes.io/pod-name=loki-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f719fc7d84 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3691 identity=33169 identityLabels="k8s:app.kubernetes.io/component=single-binary,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:app.kubernetes.io/part-of=memberlist,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=loki-0" ipv4=10.0.0.190 ipv6= k8sPodName=monitoring/loki-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f719fc7d84 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3691 identity=33169 ipv4=10.0.0.190 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=f719fc7d84 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3691 identity=33169 ipv4=10.0.0.190 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=f719fc7d84 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3691 identity=33169 ipv4=10.0.0.190 ipv6= k8sPodName=monitoring/loki-0 subsys=daemon level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.77 1b0c354f-379f-4025-8b94-5739c66cf6a7 default }" containerID=f3a6ad045884e92829f55872e74216e3133189088f4da92c19def8cc6c843577 datapathConfiguration="&{false false false false false }" interface=lxc83ba2f8dcff1 k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-95hk4 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f3a6ad0458 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3000 ipv4=10.0.0.77 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-95hk4 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f3a6ad0458 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3000 identityLabels="k8s:app.kubernetes.io/instance=prometheus-pushgateway,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=prometheus-pushgateway,k8s:app.kubernetes.io/version=v1.8.0,k8s:helm.sh/chart=prometheus-pushgateway-2.13.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.77 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-95hk4 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=prometheus-pushgateway;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=prometheus-pushgateway;k8s:app.kubernetes.io/version=v1.8.0;k8s:helm.sh/chart=prometheus-pushgateway-2.13.0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f3a6ad0458 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3000 identity=39033 identityLabels="k8s:app.kubernetes.io/instance=prometheus-pushgateway,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=prometheus-pushgateway,k8s:app.kubernetes.io/version=v1.8.0,k8s:helm.sh/chart=prometheus-pushgateway-2.13.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.77 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-95hk4 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f3a6ad0458 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3000 identity=39033 ipv4=10.0.0.77 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-95hk4 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=f3a6ad0458 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3000 identity=39033 ipv4=10.0.0.77 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-95hk4 subsys=endpoint level=info msg="Successful endpoint creation" containerID=f3a6ad0458 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3000 identity=39033 ipv4=10.0.0.77 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-95hk4 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.179 2cc95167-5ae9-4e08-8b3e-56841c425077 default }" containerID=4a707489468a9e77057860f7e355175f4c7b1099ed7a43958d8f4481d8f4158a datapathConfiguration="&{false false false false false }" interface=lxcc1cd56624234 k8sPodName=openstack/memcached-memcached-cf56b6468-59mv5 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4a70748946 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3380 ipv4=10.0.0.179 ipv6= k8sPodName=openstack/memcached-memcached-cf56b6468-59mv5 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4a70748946 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3380 identityLabels="k8s:application=memcached,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=memcached" ipv4=10.0.0.179 ipv6= k8sPodName=openstack/memcached-memcached-cf56b6468-59mv5 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=memcached;k8s:component=server;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=memcached;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4a70748946 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3380 identity=26520 identityLabels="k8s:application=memcached,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=memcached" ipv4=10.0.0.179 ipv6= k8sPodName=openstack/memcached-memcached-cf56b6468-59mv5 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=4a70748946 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3380 identity=26520 ipv4=10.0.0.179 ipv6= k8sPodName=openstack/memcached-memcached-cf56b6468-59mv5 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=4a70748946 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3380 identity=26520 ipv4=10.0.0.179 ipv6= k8sPodName=openstack/memcached-memcached-cf56b6468-59mv5 subsys=endpoint level=info msg="Successful endpoint creation" containerID=4a70748946 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3380 identity=26520 ipv4=10.0.0.179 ipv6= k8sPodName=openstack/memcached-memcached-cf56b6468-59mv5 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.27 b6d8f64b-69f6-4059-9d6d-1fdd6205100c default }" containerID=76b7bcbad75a4b7c10c604394020f874e9dc21bcf03576c321c9666d75cecb09 datapathConfiguration="&{false false false false false }" interface=lxca78556476322 k8sPodName=local-path-storage/helper-pod-create-pvc-d9b2e63a-7b48-4221-bb3e-6eabfa76258b labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=76b7bcbad7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=322 ipv4=10.0.0.27 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-d9b2e63a-7b48-4221-bb3e-6eabfa76258b subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=76b7bcbad7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=322 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.27 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-d9b2e63a-7b48-4221-bb3e-6eabfa76258b subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=76b7bcbad7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=322 identity=33972 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.27 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-d9b2e63a-7b48-4221-bb3e-6eabfa76258b oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=76b7bcbad7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=322 identity=33972 ipv4=10.0.0.27 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-d9b2e63a-7b48-4221-bb3e-6eabfa76258b subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=76b7bcbad7 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=322 identity=33972 ipv4=10.0.0.27 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-d9b2e63a-7b48-4221-bb3e-6eabfa76258b subsys=endpoint level=info msg="Successful endpoint creation" containerID=76b7bcbad7 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=322 identity=33972 ipv4=10.0.0.27 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-d9b2e63a-7b48-4221-bb3e-6eabfa76258b subsys=daemon level=info msg="Delete endpoint request" containerID=76b7bcbad7 endpointID=322 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-d9b2e63a-7b48-4221-bb3e-6eabfa76258b subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=76b7bcbad7 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=322 identity=33972 ipv4=10.0.0.27 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-d9b2e63a-7b48-4221-bb3e-6eabfa76258b subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.18 0a6d903c-5712-4eff-ae9f-e7175f588a32 default }" containerID=0aa970fb3ba7a9ddbfb8fb09f07ba2b27633f45a36a6bd57ba02117b884508dc datapathConfiguration="&{false false false false false }" interface=lxc39ed9b44d4f0 k8sPodName=openstack/rabbitmq-keystone-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0aa970fb3b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1608 ipv4=10.0.0.18 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0aa970fb3b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1608 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-keystone,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0" ipv4=10.0.0.18 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-keystone;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0aa970fb3b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1608 identity=32796 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-keystone,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0" ipv4=10.0.0.18 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0aa970fb3b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1608 identity=32796 ipv4=10.0.0.18 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=0aa970fb3b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1608 identity=32796 ipv4=10.0.0.18 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=0aa970fb3b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1608 identity=32796 ipv4=10.0.0.18 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.164 7cae5a43-17bc-4174-a171-33322c51f869 default }" containerID=416ae2dae1b2269f4544d17a03d34a055020c02d83a29628bf1ba2c503d3adb5 datapathConfiguration="&{false false false false false }" interface=lxc510197144991 k8sPodName=openstack/keystone-credential-setup-dwgct labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=416ae2dae1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1134 ipv4=10.0.0.164 ipv6= k8sPodName=openstack/keystone-credential-setup-dwgct subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=416ae2dae1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1134 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=68bf0b9f-59de-4be6-a3cf-90e065c88bf0,k8s:batch.kubernetes.io/job-name=keystone-credential-setup,k8s:component=credential-setup,k8s:controller-uid=68bf0b9f-59de-4be6-a3cf-90e065c88bf0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-credential-setup,k8s:release_group=keystone" ipv4=10.0.0.164 ipv6= k8sPodName=openstack/keystone-credential-setup-dwgct subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=68bf0b9f-59de-4be6-a3cf-90e065c88bf0;k8s:batch.kubernetes.io/job-name=keystone-credential-setup;k8s:component=credential-setup;k8s:controller-uid=68bf0b9f-59de-4be6-a3cf-90e065c88bf0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-credential-setup;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=416ae2dae1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1134 identity=36865 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=68bf0b9f-59de-4be6-a3cf-90e065c88bf0,k8s:batch.kubernetes.io/job-name=keystone-credential-setup,k8s:component=credential-setup,k8s:controller-uid=68bf0b9f-59de-4be6-a3cf-90e065c88bf0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-credential-setup,k8s:release_group=keystone" ipv4=10.0.0.164 ipv6= k8sPodName=openstack/keystone-credential-setup-dwgct oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=416ae2dae1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1134 identity=36865 ipv4=10.0.0.164 ipv6= k8sPodName=openstack/keystone-credential-setup-dwgct subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=416ae2dae1 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1134 identity=36865 ipv4=10.0.0.164 ipv6= k8sPodName=openstack/keystone-credential-setup-dwgct subsys=endpoint level=info msg="Successful endpoint creation" containerID=416ae2dae1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1134 identity=36865 ipv4=10.0.0.164 ipv6= k8sPodName=openstack/keystone-credential-setup-dwgct subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.141 a9e053ea-a088-4edd-85d1-76f6f4520ee9 default }" containerID=26726e20b7b846b779dddd1e4997bed512fc7aaf01b60d387739581a47f3d44c datapathConfiguration="&{false false false false false }" interface=lxc33a90615fc84 k8sPodName=openstack/keystone-api-746df85c45-mpmrj labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=26726e20b7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1916 ipv4=10.0.0.141 ipv6= k8sPodName=openstack/keystone-api-746df85c45-mpmrj subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=26726e20b7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1916 identityLabels="k8s:application=keystone,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=keystone" ipv4=10.0.0.141 ipv6= k8sPodName=openstack/keystone-api-746df85c45-mpmrj subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=26726e20b7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1916 identity=301 identityLabels="k8s:application=keystone,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=keystone" ipv4=10.0.0.141 ipv6= k8sPodName=openstack/keystone-api-746df85c45-mpmrj oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=26726e20b7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1916 identity=301 ipv4=10.0.0.141 ipv6= k8sPodName=openstack/keystone-api-746df85c45-mpmrj subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=26726e20b7 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1916 identity=301 ipv4=10.0.0.141 ipv6= k8sPodName=openstack/keystone-api-746df85c45-mpmrj subsys=endpoint level=info msg="Successful endpoint creation" containerID=26726e20b7 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1916 identity=301 ipv4=10.0.0.141 ipv6= k8sPodName=openstack/keystone-api-746df85c45-mpmrj subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=416ae2dae1 endpointID=1134 k8sNamespace=openstack k8sPodName=keystone-credential-setup-dwgct subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=68bf0b9f-59de-4be6-a3cf-90e065c88bf0 k8s:batch.kubernetes.io/job-name=keystone-credential-setup k8s:component=credential-setup k8s:controller-uid=68bf0b9f-59de-4be6-a3cf-90e065c88bf0 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-credential-setup k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=416ae2dae1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1134 identity=36865 ipv4=10.0.0.164 ipv6= k8sPodName=openstack/keystone-credential-setup-dwgct subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.164 eb845331-9083-41a6-8969-73584d7f9c78 default }" containerID=5e30db4b2bf1a8da3b712a5d804625f0185a8d313cfcda91b06badb14f085020 datapathConfiguration="&{false false false false false }" interface=lxca285d189cda2 k8sPodName=openstack/keystone-db-init-cnlzx labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5e30db4b2b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=577 ipv4=10.0.0.164 ipv6= k8sPodName=openstack/keystone-db-init-cnlzx subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5e30db4b2b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=577 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=a3a934d4-9101-47fc-ab1e-a7793b816194,k8s:batch.kubernetes.io/job-name=keystone-db-init,k8s:component=db-init,k8s:controller-uid=a3a934d4-9101-47fc-ab1e-a7793b816194,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-init,k8s:release_group=keystone" ipv4=10.0.0.164 ipv6= k8sPodName=openstack/keystone-db-init-cnlzx subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=a3a934d4-9101-47fc-ab1e-a7793b816194;k8s:batch.kubernetes.io/job-name=keystone-db-init;k8s:component=db-init;k8s:controller-uid=a3a934d4-9101-47fc-ab1e-a7793b816194;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-db-init;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5e30db4b2b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=577 identity=18351 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=a3a934d4-9101-47fc-ab1e-a7793b816194,k8s:batch.kubernetes.io/job-name=keystone-db-init,k8s:component=db-init,k8s:controller-uid=a3a934d4-9101-47fc-ab1e-a7793b816194,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-init,k8s:release_group=keystone" ipv4=10.0.0.164 ipv6= k8sPodName=openstack/keystone-db-init-cnlzx oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5e30db4b2b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=577 identity=18351 ipv4=10.0.0.164 ipv6= k8sPodName=openstack/keystone-db-init-cnlzx subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=5e30db4b2b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=577 identity=18351 ipv4=10.0.0.164 ipv6= k8sPodName=openstack/keystone-db-init-cnlzx subsys=endpoint level=info msg="Successful endpoint creation" containerID=5e30db4b2b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=577 identity=18351 ipv4=10.0.0.164 ipv6= k8sPodName=openstack/keystone-db-init-cnlzx subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=5e30db4b2b endpointID=577 k8sNamespace=openstack k8sPodName=keystone-db-init-cnlzx subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=a3a934d4-9101-47fc-ab1e-a7793b816194 k8s:batch.kubernetes.io/job-name=keystone-db-init k8s:component=db-init k8s:controller-uid=a3a934d4-9101-47fc-ab1e-a7793b816194 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-db-init k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=5e30db4b2b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=577 identity=18351 ipv4=10.0.0.164 ipv6= k8sPodName=openstack/keystone-db-init-cnlzx subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.238 b97af525-c5ae-4635-8272-f71c6692de0f default }" containerID=958256466be40504a3379e2fa261057e38260c68916fba0221245df4cfa79150 datapathConfiguration="&{false false false false false }" interface=lxcb64c014e28bc k8sPodName=openstack/keystone-fernet-setup-7kbkh labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=958256466b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=492 ipv4=10.0.0.238 ipv6= k8sPodName=openstack/keystone-fernet-setup-7kbkh subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=958256466b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=492 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=40c0e702-7365-47cd-8930-ccc4d05af894,k8s:batch.kubernetes.io/job-name=keystone-fernet-setup,k8s:component=fernet-setup,k8s:controller-uid=40c0e702-7365-47cd-8930-ccc4d05af894,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-setup,k8s:release_group=keystone" ipv4=10.0.0.238 ipv6= k8sPodName=openstack/keystone-fernet-setup-7kbkh subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=40c0e702-7365-47cd-8930-ccc4d05af894;k8s:batch.kubernetes.io/job-name=keystone-fernet-setup;k8s:component=fernet-setup;k8s:controller-uid=40c0e702-7365-47cd-8930-ccc4d05af894;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-fernet-setup;k8s:release_group=keystone;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=958256466b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=492 identity=16832 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=40c0e702-7365-47cd-8930-ccc4d05af894,k8s:batch.kubernetes.io/job-name=keystone-fernet-setup,k8s:component=fernet-setup,k8s:controller-uid=40c0e702-7365-47cd-8930-ccc4d05af894,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-setup,k8s:release_group=keystone" ipv4=10.0.0.238 ipv6= k8sPodName=openstack/keystone-fernet-setup-7kbkh oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=958256466b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=492 identity=16832 ipv4=10.0.0.238 ipv6= k8sPodName=openstack/keystone-fernet-setup-7kbkh subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=958256466b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=492 identity=16832 ipv4=10.0.0.238 ipv6= k8sPodName=openstack/keystone-fernet-setup-7kbkh subsys=endpoint level=info msg="Successful endpoint creation" containerID=958256466b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=492 identity=16832 ipv4=10.0.0.238 ipv6= k8sPodName=openstack/keystone-fernet-setup-7kbkh subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=958256466b endpointID=492 k8sNamespace=openstack k8sPodName=keystone-fernet-setup-7kbkh subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=40c0e702-7365-47cd-8930-ccc4d05af894 k8s:batch.kubernetes.io/job-name=keystone-fernet-setup k8s:component=fernet-setup k8s:controller-uid=40c0e702-7365-47cd-8930-ccc4d05af894 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-fernet-setup k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=958256466b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=492 identity=16832 ipv4=10.0.0.238 ipv6= k8sPodName=openstack/keystone-fernet-setup-7kbkh subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.122 1200308f-3e44-4368-95ff-696b4f6445f4 default }" containerID=70374b72b34a61570e2b50c3ce9f6abeb9317c8078d204c4e3c7a3746260758f datapathConfiguration="&{false false false false false }" interface=lxcdbdcf7a59456 k8sPodName=openstack/keystone-db-sync-bhkv9 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=70374b72b3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1901 ipv4=10.0.0.122 ipv6= k8sPodName=openstack/keystone-db-sync-bhkv9 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=70374b72b3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1901 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=15003c8d-87c5-476f-abfa-d0acaf4a1e79,k8s:batch.kubernetes.io/job-name=keystone-db-sync,k8s:component=db-sync,k8s:controller-uid=15003c8d-87c5-476f-abfa-d0acaf4a1e79,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-sync,k8s:release_group=keystone" ipv4=10.0.0.122 ipv6= k8sPodName=openstack/keystone-db-sync-bhkv9 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=15003c8d-87c5-476f-abfa-d0acaf4a1e79;k8s:batch.kubernetes.io/job-name=keystone-db-sync;k8s:component=db-sync;k8s:controller-uid=15003c8d-87c5-476f-abfa-d0acaf4a1e79;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-db-sync;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=70374b72b3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1901 identity=52826 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=15003c8d-87c5-476f-abfa-d0acaf4a1e79,k8s:batch.kubernetes.io/job-name=keystone-db-sync,k8s:component=db-sync,k8s:controller-uid=15003c8d-87c5-476f-abfa-d0acaf4a1e79,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-sync,k8s:release_group=keystone" ipv4=10.0.0.122 ipv6= k8sPodName=openstack/keystone-db-sync-bhkv9 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=70374b72b3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1901 identity=52826 ipv4=10.0.0.122 ipv6= k8sPodName=openstack/keystone-db-sync-bhkv9 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=70374b72b3 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1901 identity=52826 ipv4=10.0.0.122 ipv6= k8sPodName=openstack/keystone-db-sync-bhkv9 subsys=endpoint level=info msg="Successful endpoint creation" containerID=70374b72b3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1901 identity=52826 ipv4=10.0.0.122 ipv6= k8sPodName=openstack/keystone-db-sync-bhkv9 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=70374b72b3 endpointID=1901 k8sNamespace=openstack k8sPodName=keystone-db-sync-bhkv9 subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=15003c8d-87c5-476f-abfa-d0acaf4a1e79 k8s:batch.kubernetes.io/job-name=keystone-db-sync k8s:component=db-sync k8s:controller-uid=15003c8d-87c5-476f-abfa-d0acaf4a1e79 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-db-sync k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=70374b72b3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1901 identity=52826 ipv4=10.0.0.122 ipv6= k8sPodName=openstack/keystone-db-sync-bhkv9 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.196 71505e9f-4da5-4c7e-9340-bc25f47bae70 default }" containerID=e6eb3f1df8ff25a47c67aff335391771d54cf6b7c44effa8fa348c2b1d19ca5e datapathConfiguration="&{false false false false false }" interface=lxc56ffd7cdb722 k8sPodName=openstack/keystone-rabbit-init-zkl9m labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e6eb3f1df8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2291 ipv4=10.0.0.196 ipv6= k8sPodName=openstack/keystone-rabbit-init-zkl9m subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e6eb3f1df8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2291 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=0d3eb7ac-312c-444b-bbc7-c3c717c5e52b,k8s:batch.kubernetes.io/job-name=keystone-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=0d3eb7ac-312c-444b-bbc7-c3c717c5e52b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-rabbit-init,k8s:release_group=keystone" ipv4=10.0.0.196 ipv6= k8sPodName=openstack/keystone-rabbit-init-zkl9m subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=0d3eb7ac-312c-444b-bbc7-c3c717c5e52b;k8s:batch.kubernetes.io/job-name=keystone-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=0d3eb7ac-312c-444b-bbc7-c3c717c5e52b;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-rabbit-init;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e6eb3f1df8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2291 identity=34492 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=0d3eb7ac-312c-444b-bbc7-c3c717c5e52b,k8s:batch.kubernetes.io/job-name=keystone-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=0d3eb7ac-312c-444b-bbc7-c3c717c5e52b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-rabbit-init,k8s:release_group=keystone" ipv4=10.0.0.196 ipv6= k8sPodName=openstack/keystone-rabbit-init-zkl9m oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e6eb3f1df8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2291 identity=34492 ipv4=10.0.0.196 ipv6= k8sPodName=openstack/keystone-rabbit-init-zkl9m subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=e6eb3f1df8 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2291 identity=34492 ipv4=10.0.0.196 ipv6= k8sPodName=openstack/keystone-rabbit-init-zkl9m subsys=endpoint level=info msg="Successful endpoint creation" containerID=e6eb3f1df8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2291 identity=34492 ipv4=10.0.0.196 ipv6= k8sPodName=openstack/keystone-rabbit-init-zkl9m subsys=daemon level=info msg="Delete endpoint request" containerID=e6eb3f1df8 endpointID=2291 k8sNamespace=openstack k8sPodName=keystone-rabbit-init-zkl9m subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=0d3eb7ac-312c-444b-bbc7-c3c717c5e52b k8s:batch.kubernetes.io/job-name=keystone-rabbit-init k8s:component=rabbit-init k8s:controller-uid=0d3eb7ac-312c-444b-bbc7-c3c717c5e52b k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-rabbit-init k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=e6eb3f1df8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2291 identity=34492 ipv4=10.0.0.196 ipv6= k8sPodName=openstack/keystone-rabbit-init-zkl9m subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.51 167cc08e-eb18-4850-87d4-2eda08456dfa default }" containerID=07a726b1eee2a6265f4fa5b265a1009f719d6fc7d9f598a6d2b12987b323fafc datapathConfiguration="&{false false false false false }" interface=lxc8aaa47e7abcc k8sPodName=openstack/keystone-domain-manage-th69h labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=07a726b1ee datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=125 ipv4=10.0.0.51 ipv6= k8sPodName=openstack/keystone-domain-manage-th69h subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=07a726b1ee datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=125 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=20120ce2-2bbf-4b6e-81b0-d12a3bb05b63,k8s:batch.kubernetes.io/job-name=keystone-domain-manage,k8s:component=domain-manage,k8s:controller-uid=20120ce2-2bbf-4b6e-81b0-d12a3bb05b63,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-domain-manage,k8s:release_group=keystone" ipv4=10.0.0.51 ipv6= k8sPodName=openstack/keystone-domain-manage-th69h subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=07a726b1ee datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=125 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.51 ipv6= k8sPodName=openstack/keystone-domain-manage-th69h line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=20120ce2-2bbf-4b6e-81b0-d12a3bb05b63;k8s:batch.kubernetes.io/job-name=keystone-domain-manage;k8s:component=domain-manage;k8s:controller-uid=20120ce2-2bbf-4b6e-81b0-d12a3bb05b63;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-domain-manage;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=07a726b1ee datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=125 identity=26093 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=20120ce2-2bbf-4b6e-81b0-d12a3bb05b63,k8s:batch.kubernetes.io/job-name=keystone-domain-manage,k8s:component=domain-manage,k8s:controller-uid=20120ce2-2bbf-4b6e-81b0-d12a3bb05b63,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-domain-manage,k8s:release_group=keystone" ipv4=10.0.0.51 ipv6= k8sPodName=openstack/keystone-domain-manage-th69h oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=07a726b1ee datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=125 identity=26093 ipv4=10.0.0.51 ipv6= k8sPodName=openstack/keystone-domain-manage-th69h subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=07a726b1ee datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=125 identity=26093 ipv4=10.0.0.51 ipv6= k8sPodName=openstack/keystone-domain-manage-th69h subsys=endpoint level=info msg="Successful endpoint creation" containerID=07a726b1ee datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=125 identity=26093 ipv4=10.0.0.51 ipv6= k8sPodName=openstack/keystone-domain-manage-th69h subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Conntrack garbage collector interval recalculated" deleteRatio=0.03266736104535555 newInterval=11m15s subsys=map-ct level=info msg="Delete endpoint request" containerID=07a726b1ee endpointID=125 k8sNamespace=openstack k8sPodName=keystone-domain-manage-th69h subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=20120ce2-2bbf-4b6e-81b0-d12a3bb05b63 k8s:batch.kubernetes.io/job-name=keystone-domain-manage k8s:component=domain-manage k8s:controller-uid=20120ce2-2bbf-4b6e-81b0-d12a3bb05b63 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-domain-manage k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=07a726b1ee datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=125 identity=26093 ipv4=10.0.0.51 ipv6= k8sPodName=openstack/keystone-domain-manage-th69h subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.226 6e6d3af6-d604-4ecb-a88e-3d3505c173f5 default }" containerID=0c5050831ef5f49d126f229ae6d991d9111c64350f9686504e1a7fec6193ebb6 datapathConfiguration="&{false false false false false }" interface=lxcc0d7569dd522 k8sPodName=openstack/keystone-bootstrap-ps5cg labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0c5050831e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=453 ipv4=10.0.0.226 ipv6= k8sPodName=openstack/keystone-bootstrap-ps5cg subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0c5050831e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=453 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=0ea74ca8-ce8b-411b-a6fd-8f6175bf4ad4,k8s:batch.kubernetes.io/job-name=keystone-bootstrap,k8s:component=bootstrap,k8s:controller-uid=0ea74ca8-ce8b-411b-a6fd-8f6175bf4ad4,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-bootstrap,k8s:release_group=keystone" ipv4=10.0.0.226 ipv6= k8sPodName=openstack/keystone-bootstrap-ps5cg subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=0ea74ca8-ce8b-411b-a6fd-8f6175bf4ad4;k8s:batch.kubernetes.io/job-name=keystone-bootstrap;k8s:component=bootstrap;k8s:controller-uid=0ea74ca8-ce8b-411b-a6fd-8f6175bf4ad4;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-bootstrap;k8s:release_group=keystone;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=0c5050831e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=453 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.226 ipv6= k8sPodName=openstack/keystone-bootstrap-ps5cg line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=0c5050831e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=453 identity=12527 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=0ea74ca8-ce8b-411b-a6fd-8f6175bf4ad4,k8s:batch.kubernetes.io/job-name=keystone-bootstrap,k8s:component=bootstrap,k8s:controller-uid=0ea74ca8-ce8b-411b-a6fd-8f6175bf4ad4,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-bootstrap,k8s:release_group=keystone" ipv4=10.0.0.226 ipv6= k8sPodName=openstack/keystone-bootstrap-ps5cg oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0c5050831e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=453 identity=12527 ipv4=10.0.0.226 ipv6= k8sPodName=openstack/keystone-bootstrap-ps5cg subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=0c5050831e datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=453 identity=12527 ipv4=10.0.0.226 ipv6= k8sPodName=openstack/keystone-bootstrap-ps5cg subsys=endpoint level=info msg="Successful endpoint creation" containerID=0c5050831e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=453 identity=12527 ipv4=10.0.0.226 ipv6= k8sPodName=openstack/keystone-bootstrap-ps5cg subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=0c5050831e endpointID=453 k8sNamespace=openstack k8sPodName=keystone-bootstrap-ps5cg subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=0ea74ca8-ce8b-411b-a6fd-8f6175bf4ad4 k8s:batch.kubernetes.io/job-name=keystone-bootstrap k8s:component=bootstrap k8s:controller-uid=0ea74ca8-ce8b-411b-a6fd-8f6175bf4ad4 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-bootstrap k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=0c5050831e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=453 identity=12527 ipv4=10.0.0.226 ipv6= k8sPodName=openstack/keystone-bootstrap-ps5cg subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.70 0f609cbc-6955-4c4d-abce-da6397f4c9f8 default }" containerID=1942c32561b038f2f1c738ff79e909b4cf35695387c1bf84595b9af3682a1604 datapathConfiguration="&{false false false false false }" interface=lxc943daa18786e k8sPodName=local-path-storage/helper-pod-create-pvc-ec44ea6f-4688-435e-89f1-ea0579b3bf45 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1942c32561 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3511 ipv4=10.0.0.70 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-ec44ea6f-4688-435e-89f1-ea0579b3bf45 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1942c32561 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3511 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.70 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-ec44ea6f-4688-435e-89f1-ea0579b3bf45 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1942c32561 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3511 identity=33972 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.70 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-ec44ea6f-4688-435e-89f1-ea0579b3bf45 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1942c32561 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3511 identity=33972 ipv4=10.0.0.70 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-ec44ea6f-4688-435e-89f1-ea0579b3bf45 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=1942c32561 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3511 identity=33972 ipv4=10.0.0.70 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-ec44ea6f-4688-435e-89f1-ea0579b3bf45 subsys=endpoint level=info msg="Successful endpoint creation" containerID=1942c32561 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3511 identity=33972 ipv4=10.0.0.70 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-ec44ea6f-4688-435e-89f1-ea0579b3bf45 subsys=daemon level=info msg="Delete endpoint request" containerID=1942c32561 endpointID=3511 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-ec44ea6f-4688-435e-89f1-ea0579b3bf45 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=1942c32561 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3511 identity=33972 ipv4=10.0.0.70 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-ec44ea6f-4688-435e-89f1-ea0579b3bf45 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.7 35e80029-c845-4e6e-9b33-f1366e05cb8d default }" containerID=abb4bd84f6b99125eb17b7fb56b790228be000b446405301b8f3d5475b05a683 datapathConfiguration="&{false false false false false }" interface=lxc4eeb3978e9f1 k8sPodName=openstack/rabbitmq-barbican-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=abb4bd84f6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1067 ipv4=10.0.0.7 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=abb4bd84f6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1067 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-barbican,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0" ipv4=10.0.0.7 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-barbican;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=abb4bd84f6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1067 identity=59207 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-barbican,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0" ipv4=10.0.0.7 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=abb4bd84f6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1067 identity=59207 ipv4=10.0.0.7 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=abb4bd84f6 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1067 identity=59207 ipv4=10.0.0.7 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=abb4bd84f6 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1067 identity=59207 ipv4=10.0.0.7 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.125 ee2a9359-9cec-4174-bd49-fac53d1ff481 default }" containerID=a4af100e40fb18d0f5e04b643bff20789ff9fd3aea8825a048702eae4c175a1c datapathConfiguration="&{false false false false false }" interface=lxc9b77f30b39d4 k8sPodName=openstack/barbican-api-5c7f8b4d4c-n9phs labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a4af100e40 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3487 ipv4=10.0.0.125 ipv6= k8sPodName=openstack/barbican-api-5c7f8b4d4c-n9phs subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a4af100e40 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3487 identityLabels="k8s:application=barbican,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=barbican" ipv4=10.0.0.125 ipv6= k8sPodName=openstack/barbican-api-5c7f8b4d4c-n9phs subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a4af100e40 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3487 identity=55570 identityLabels="k8s:application=barbican,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=barbican" ipv4=10.0.0.125 ipv6= k8sPodName=openstack/barbican-api-5c7f8b4d4c-n9phs oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a4af100e40 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3487 identity=55570 ipv4=10.0.0.125 ipv6= k8sPodName=openstack/barbican-api-5c7f8b4d4c-n9phs subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.78 1754a6cb-2374-44c2-9469-dcfa4c0814cc default }" containerID=d7e1304342129c099dbaf227f67b95fc9460f48d56258c76ff05263986923cd4 datapathConfiguration="&{false false false false false }" interface=lxc72f88a9c77a1 k8sPodName=openstack/barbican-db-init-l65cf labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d7e1304342 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=312 ipv4=10.0.0.78 ipv6= k8sPodName=openstack/barbican-db-init-l65cf subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d7e1304342 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=312 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=cef84daa-f315-46f2-8825-dfc87e3e80dc,k8s:batch.kubernetes.io/job-name=barbican-db-init,k8s:component=db-init,k8s:controller-uid=cef84daa-f315-46f2-8825-dfc87e3e80dc,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-init,k8s:release_group=barbican" ipv4=10.0.0.78 ipv6= k8sPodName=openstack/barbican-db-init-l65cf subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=cef84daa-f315-46f2-8825-dfc87e3e80dc;k8s:batch.kubernetes.io/job-name=barbican-db-init;k8s:component=db-init;k8s:controller-uid=cef84daa-f315-46f2-8825-dfc87e3e80dc;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-db-init;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d7e1304342 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=312 identity=37392 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=cef84daa-f315-46f2-8825-dfc87e3e80dc,k8s:batch.kubernetes.io/job-name=barbican-db-init,k8s:component=db-init,k8s:controller-uid=cef84daa-f315-46f2-8825-dfc87e3e80dc,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-init,k8s:release_group=barbican" ipv4=10.0.0.78 ipv6= k8sPodName=openstack/barbican-db-init-l65cf oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d7e1304342 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=312 identity=37392 ipv4=10.0.0.78 ipv6= k8sPodName=openstack/barbican-db-init-l65cf subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a4af100e40 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3487 identity=55570 ipv4=10.0.0.125 ipv6= k8sPodName=openstack/barbican-api-5c7f8b4d4c-n9phs subsys=endpoint level=info msg="Successful endpoint creation" containerID=a4af100e40 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3487 identity=55570 ipv4=10.0.0.125 ipv6= k8sPodName=openstack/barbican-api-5c7f8b4d4c-n9phs subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=d7e1304342 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=312 identity=37392 ipv4=10.0.0.78 ipv6= k8sPodName=openstack/barbican-db-init-l65cf subsys=endpoint level=info msg="Successful endpoint creation" containerID=d7e1304342 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=312 identity=37392 ipv4=10.0.0.78 ipv6= k8sPodName=openstack/barbican-db-init-l65cf subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=d7e1304342 endpointID=312 k8sNamespace=openstack k8sPodName=barbican-db-init-l65cf subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=cef84daa-f315-46f2-8825-dfc87e3e80dc k8s:batch.kubernetes.io/job-name=barbican-db-init k8s:component=db-init k8s:controller-uid=cef84daa-f315-46f2-8825-dfc87e3e80dc k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-db-init k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=d7e1304342 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=312 identity=37392 ipv4=10.0.0.78 ipv6= k8sPodName=openstack/barbican-db-init-l65cf subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.153 ff626fb8-1eac-4552-ba89-81e85d1de61f default }" containerID=19d6cc45a3a1041b70ad417caeb91225dcef1944dad60394555de6126433c9cd datapathConfiguration="&{false false false false false }" interface=lxcc68a36eefadd k8sPodName=openstack/barbican-db-sync-d94dv labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=19d6cc45a3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3562 ipv4=10.0.0.153 ipv6= k8sPodName=openstack/barbican-db-sync-d94dv subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=19d6cc45a3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3562 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=9b203d50-7173-4ba3-b71e-42702a6e42d9,k8s:batch.kubernetes.io/job-name=barbican-db-sync,k8s:component=db-sync,k8s:controller-uid=9b203d50-7173-4ba3-b71e-42702a6e42d9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-sync,k8s:release_group=barbican" ipv4=10.0.0.153 ipv6= k8sPodName=openstack/barbican-db-sync-d94dv subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=9b203d50-7173-4ba3-b71e-42702a6e42d9;k8s:batch.kubernetes.io/job-name=barbican-db-sync;k8s:component=db-sync;k8s:controller-uid=9b203d50-7173-4ba3-b71e-42702a6e42d9;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-db-sync;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=19d6cc45a3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3562 identity=23787 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=9b203d50-7173-4ba3-b71e-42702a6e42d9,k8s:batch.kubernetes.io/job-name=barbican-db-sync,k8s:component=db-sync,k8s:controller-uid=9b203d50-7173-4ba3-b71e-42702a6e42d9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-sync,k8s:release_group=barbican" ipv4=10.0.0.153 ipv6= k8sPodName=openstack/barbican-db-sync-d94dv oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=19d6cc45a3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3562 identity=23787 ipv4=10.0.0.153 ipv6= k8sPodName=openstack/barbican-db-sync-d94dv subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=19d6cc45a3 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3562 identity=23787 ipv4=10.0.0.153 ipv6= k8sPodName=openstack/barbican-db-sync-d94dv subsys=endpoint level=info msg="Successful endpoint creation" containerID=19d6cc45a3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3562 identity=23787 ipv4=10.0.0.153 ipv6= k8sPodName=openstack/barbican-db-sync-d94dv subsys=daemon level=info msg="Delete endpoint request" containerID=19d6cc45a3 endpointID=3562 k8sNamespace=openstack k8sPodName=barbican-db-sync-d94dv subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=9b203d50-7173-4ba3-b71e-42702a6e42d9 k8s:batch.kubernetes.io/job-name=barbican-db-sync k8s:component=db-sync k8s:controller-uid=9b203d50-7173-4ba3-b71e-42702a6e42d9 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-db-sync k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=19d6cc45a3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3562 identity=23787 ipv4=10.0.0.153 ipv6= k8sPodName=openstack/barbican-db-sync-d94dv subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.29 2de4c002-7c4f-4a72-898c-cb0931c67be8 default }" containerID=975dd89713633ba7a0f8e7f2e673fc28e280e7183091f460d85e323308c65e6b datapathConfiguration="&{false false false false false }" interface=lxc9243743fe179 k8sPodName=openstack/barbican-rabbit-init-ndctv labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=975dd89713 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2819 ipv4=10.0.0.29 ipv6= k8sPodName=openstack/barbican-rabbit-init-ndctv subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=975dd89713 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2819 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=b68d48de-1c04-40e3-bba1-433c89e803b5,k8s:batch.kubernetes.io/job-name=barbican-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=b68d48de-1c04-40e3-bba1-433c89e803b5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-rabbit-init,k8s:release_group=barbican" ipv4=10.0.0.29 ipv6= k8sPodName=openstack/barbican-rabbit-init-ndctv subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=b68d48de-1c04-40e3-bba1-433c89e803b5;k8s:batch.kubernetes.io/job-name=barbican-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=b68d48de-1c04-40e3-bba1-433c89e803b5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-rabbit-init;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=975dd89713 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2819 identity=19692 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=b68d48de-1c04-40e3-bba1-433c89e803b5,k8s:batch.kubernetes.io/job-name=barbican-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=b68d48de-1c04-40e3-bba1-433c89e803b5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-rabbit-init,k8s:release_group=barbican" ipv4=10.0.0.29 ipv6= k8sPodName=openstack/barbican-rabbit-init-ndctv oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=975dd89713 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2819 identity=19692 ipv4=10.0.0.29 ipv6= k8sPodName=openstack/barbican-rabbit-init-ndctv subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=975dd89713 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2819 identity=19692 ipv4=10.0.0.29 ipv6= k8sPodName=openstack/barbican-rabbit-init-ndctv subsys=endpoint level=info msg="Successful endpoint creation" containerID=975dd89713 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2819 identity=19692 ipv4=10.0.0.29 ipv6= k8sPodName=openstack/barbican-rabbit-init-ndctv subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=975dd89713 endpointID=2819 k8sNamespace=openstack k8sPodName=barbican-rabbit-init-ndctv subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=b68d48de-1c04-40e3-bba1-433c89e803b5 k8s:batch.kubernetes.io/job-name=barbican-rabbit-init k8s:component=rabbit-init k8s:controller-uid=b68d48de-1c04-40e3-bba1-433c89e803b5 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-rabbit-init k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=975dd89713 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2819 identity=19692 ipv4=10.0.0.29 ipv6= k8sPodName=openstack/barbican-rabbit-init-ndctv subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.41 3683235b-2700-4a19-8743-632846eda5af default }" containerID=98d3cf70e9eb079c16127525145489c457d3e6f2955d604b9b08dba757f0bba5 datapathConfiguration="&{false false false false false }" interface=lxc5a10ab0b1a3b k8sPodName=openstack/barbican-ks-service-2tq77 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=98d3cf70e9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=21 ipv4=10.0.0.41 ipv6= k8sPodName=openstack/barbican-ks-service-2tq77 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=98d3cf70e9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=21 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=5c64c2ee-7a66-4852-b704-4df3f0b630d9,k8s:batch.kubernetes.io/job-name=barbican-ks-service,k8s:component=ks-service,k8s:controller-uid=5c64c2ee-7a66-4852-b704-4df3f0b630d9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-service,k8s:release_group=barbican" ipv4=10.0.0.41 ipv6= k8sPodName=openstack/barbican-ks-service-2tq77 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=5c64c2ee-7a66-4852-b704-4df3f0b630d9;k8s:batch.kubernetes.io/job-name=barbican-ks-service;k8s:component=ks-service;k8s:controller-uid=5c64c2ee-7a66-4852-b704-4df3f0b630d9;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-service;k8s:release_group=barbican;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=98d3cf70e9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=21 identity=11407 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=5c64c2ee-7a66-4852-b704-4df3f0b630d9,k8s:batch.kubernetes.io/job-name=barbican-ks-service,k8s:component=ks-service,k8s:controller-uid=5c64c2ee-7a66-4852-b704-4df3f0b630d9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-service,k8s:release_group=barbican" ipv4=10.0.0.41 ipv6= k8sPodName=openstack/barbican-ks-service-2tq77 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=98d3cf70e9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=21 identity=11407 ipv4=10.0.0.41 ipv6= k8sPodName=openstack/barbican-ks-service-2tq77 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=98d3cf70e9 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=21 identity=11407 ipv4=10.0.0.41 ipv6= k8sPodName=openstack/barbican-ks-service-2tq77 subsys=endpoint level=info msg="Successful endpoint creation" containerID=98d3cf70e9 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=21 identity=11407 ipv4=10.0.0.41 ipv6= k8sPodName=openstack/barbican-ks-service-2tq77 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=98d3cf70e9 endpointID=21 k8sNamespace=openstack k8sPodName=barbican-ks-service-2tq77 subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=5c64c2ee-7a66-4852-b704-4df3f0b630d9 k8s:batch.kubernetes.io/job-name=barbican-ks-service k8s:component=ks-service k8s:controller-uid=5c64c2ee-7a66-4852-b704-4df3f0b630d9 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-service k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=98d3cf70e9 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=21 identity=11407 ipv4=10.0.0.41 ipv6= k8sPodName=openstack/barbican-ks-service-2tq77 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.253 8e22e0c1-a09b-4b7a-87ed-3b19ca97cedc default }" containerID=df32bb67e7d6df04c6305fbfc3e01b473f3c6d889cd812b5f982711d9345eff2 datapathConfiguration="&{false false false false false }" interface=lxc2ac2ba27af6e k8sPodName=openstack/barbican-ks-endpoints-m85mr labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=df32bb67e7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=155 ipv4=10.0.0.253 ipv6= k8sPodName=openstack/barbican-ks-endpoints-m85mr subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=df32bb67e7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=155 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=d6b2e290-bce5-4958-9f39-0d95255786d9,k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=d6b2e290-bce5-4958-9f39-0d95255786d9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-endpoints,k8s:release_group=barbican" ipv4=10.0.0.253 ipv6= k8sPodName=openstack/barbican-ks-endpoints-m85mr subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=d6b2e290-bce5-4958-9f39-0d95255786d9;k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=d6b2e290-bce5-4958-9f39-0d95255786d9;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-endpoints;k8s:release_group=barbican;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=df32bb67e7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=155 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.253 ipv6= k8sPodName=openstack/barbican-ks-endpoints-m85mr line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=df32bb67e7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=155 identity=25683 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=d6b2e290-bce5-4958-9f39-0d95255786d9,k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=d6b2e290-bce5-4958-9f39-0d95255786d9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-endpoints,k8s:release_group=barbican" ipv4=10.0.0.253 ipv6= k8sPodName=openstack/barbican-ks-endpoints-m85mr oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=df32bb67e7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=155 identity=25683 ipv4=10.0.0.253 ipv6= k8sPodName=openstack/barbican-ks-endpoints-m85mr subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=df32bb67e7 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=155 identity=25683 ipv4=10.0.0.253 ipv6= k8sPodName=openstack/barbican-ks-endpoints-m85mr subsys=endpoint level=info msg="Successful endpoint creation" containerID=df32bb67e7 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=155 identity=25683 ipv4=10.0.0.253 ipv6= k8sPodName=openstack/barbican-ks-endpoints-m85mr subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=df32bb67e7 endpointID=155 k8sNamespace=openstack k8sPodName=barbican-ks-endpoints-m85mr subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=d6b2e290-bce5-4958-9f39-0d95255786d9 k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=d6b2e290-bce5-4958-9f39-0d95255786d9 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-endpoints k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=df32bb67e7 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=155 identity=25683 ipv4=10.0.0.253 ipv6= k8sPodName=openstack/barbican-ks-endpoints-m85mr subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.69 6d77e4fb-2afc-4e4e-9b1d-4b841c283379 default }" containerID=d3f2da2ebcd6d92e7b5a59cde4b8c679877937a9b9650c17d9fb499dea4b4d02 datapathConfiguration="&{false false false false false }" interface=lxc6f532b4b31bb k8sPodName=openstack/barbican-ks-user-kb8xv labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d3f2da2ebc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2777 ipv4=10.0.0.69 ipv6= k8sPodName=openstack/barbican-ks-user-kb8xv subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d3f2da2ebc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2777 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=2ce271ae-6aa9-4d13-a0f3-9c80f79e4c39,k8s:batch.kubernetes.io/job-name=barbican-ks-user,k8s:component=ks-user,k8s:controller-uid=2ce271ae-6aa9-4d13-a0f3-9c80f79e4c39,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-user,k8s:release_group=barbican" ipv4=10.0.0.69 ipv6= k8sPodName=openstack/barbican-ks-user-kb8xv subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=2ce271ae-6aa9-4d13-a0f3-9c80f79e4c39;k8s:batch.kubernetes.io/job-name=barbican-ks-user;k8s:component=ks-user;k8s:controller-uid=2ce271ae-6aa9-4d13-a0f3-9c80f79e4c39;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-user;k8s:release_group=barbican;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=d3f2da2ebc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2777 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.69 ipv6= k8sPodName=openstack/barbican-ks-user-kb8xv line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=d3f2da2ebc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2777 identity=34850 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=2ce271ae-6aa9-4d13-a0f3-9c80f79e4c39,k8s:batch.kubernetes.io/job-name=barbican-ks-user,k8s:component=ks-user,k8s:controller-uid=2ce271ae-6aa9-4d13-a0f3-9c80f79e4c39,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-user,k8s:release_group=barbican" ipv4=10.0.0.69 ipv6= k8sPodName=openstack/barbican-ks-user-kb8xv oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d3f2da2ebc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2777 identity=34850 ipv4=10.0.0.69 ipv6= k8sPodName=openstack/barbican-ks-user-kb8xv subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d3f2da2ebc datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2777 identity=34850 ipv4=10.0.0.69 ipv6= k8sPodName=openstack/barbican-ks-user-kb8xv subsys=endpoint level=info msg="Successful endpoint creation" containerID=d3f2da2ebc datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2777 identity=34850 ipv4=10.0.0.69 ipv6= k8sPodName=openstack/barbican-ks-user-kb8xv subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=d3f2da2ebc endpointID=2777 k8sNamespace=openstack k8sPodName=barbican-ks-user-kb8xv subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=2ce271ae-6aa9-4d13-a0f3-9c80f79e4c39 k8s:batch.kubernetes.io/job-name=barbican-ks-user k8s:component=ks-user k8s:controller-uid=2ce271ae-6aa9-4d13-a0f3-9c80f79e4c39 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-user k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=d3f2da2ebc datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2777 identity=34850 ipv4=10.0.0.69 ipv6= k8sPodName=openstack/barbican-ks-user-kb8xv subsys=endpoint level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Create endpoint request" addressing="&{10.0.0.195 4790940c-9676-448b-a78c-f42469bb26e2 default }" containerID=83ae3d20454043bfa343e6c8463fdd4c23f528590922c39817127031318c4bd0 datapathConfiguration="&{false false false false false }" interface=lxcc463748809ae k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-kqrdr labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=83ae3d2045 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=798 ipv4=10.0.0.195 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-kqrdr subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=83ae3d2045 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=798 identityLabels="k8s:app=rook-ceph-operator,k8s:helm.sh/chart=rook-ceph-v1.15.9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph,k8s:io.cilium.k8s.namespace.labels.name=rook-ceph,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system,k8s:io.kubernetes.pod.namespace=rook-ceph" ipv4=10.0.0.195 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-kqrdr subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:rook-ceph k8s:io.cilium.k8s.namespace.labels.name:rook-ceph]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=83ae3d2045 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=798 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.195 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-kqrdr line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=rook-ceph-operator;k8s:helm.sh/chart=rook-ceph-v1.15.9;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph;k8s:io.cilium.k8s.namespace.labels.name=rook-ceph;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system;k8s:io.kubernetes.pod.namespace=rook-ceph;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=83ae3d2045 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=798 identity=14949 identityLabels="k8s:app=rook-ceph-operator,k8s:helm.sh/chart=rook-ceph-v1.15.9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph,k8s:io.cilium.k8s.namespace.labels.name=rook-ceph,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system,k8s:io.kubernetes.pod.namespace=rook-ceph" ipv4=10.0.0.195 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-kqrdr oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=83ae3d2045 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=798 identity=14949 ipv4=10.0.0.195 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-kqrdr subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=83ae3d2045 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=798 identity=14949 ipv4=10.0.0.195 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-kqrdr subsys=endpoint level=info msg="Successful endpoint creation" containerID=83ae3d2045 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=798 identity=14949 ipv4=10.0.0.195 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-kqrdr subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.32 4c06ae29-9ade-40f1-a76d-3e6537348a6a default }" containerID=7466b6086c2040f64b1361f184b2c3a2dab0f96692a1367059e5a8fe400731da datapathConfiguration="&{false false false false false }" interface=lxc240f225f1e16 k8sPodName=openstack/rook-ceph-detect-version-zlbff labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7466b6086c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3577 ipv4=10.0.0.32 ipv6= k8sPodName=openstack/rook-ceph-detect-version-zlbff subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7466b6086c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3577 identityLabels="k8s:app=rook-ceph-detect-version,k8s:batch.kubernetes.io/controller-uid=36ff4d3e-48ce-4516-b0d2-59aa4350607f,k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version,k8s:controller-uid=36ff4d3e-48ce-4516-b0d2-59aa4350607f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=rook-ceph-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.32 ipv6= k8sPodName=openstack/rook-ceph-detect-version-zlbff subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-detect-version;k8s:batch.kubernetes.io/controller-uid=36ff4d3e-48ce-4516-b0d2-59aa4350607f;k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version;k8s:controller-uid=36ff4d3e-48ce-4516-b0d2-59aa4350607f;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=rook-ceph-detect-version;k8s:rook-version=v1.15.9;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7466b6086c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3577 identity=3955 identityLabels="k8s:app=rook-ceph-detect-version,k8s:batch.kubernetes.io/controller-uid=36ff4d3e-48ce-4516-b0d2-59aa4350607f,k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version,k8s:controller-uid=36ff4d3e-48ce-4516-b0d2-59aa4350607f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=rook-ceph-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.32 ipv6= k8sPodName=openstack/rook-ceph-detect-version-zlbff oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7466b6086c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3577 identity=3955 ipv4=10.0.0.32 ipv6= k8sPodName=openstack/rook-ceph-detect-version-zlbff subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=7466b6086c datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3577 identity=3955 ipv4=10.0.0.32 ipv6= k8sPodName=openstack/rook-ceph-detect-version-zlbff subsys=endpoint level=info msg="Successful endpoint creation" containerID=7466b6086c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3577 identity=3955 ipv4=10.0.0.32 ipv6= k8sPodName=openstack/rook-ceph-detect-version-zlbff subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=7466b6086c endpointID=3577 k8sNamespace=openstack k8sPodName=rook-ceph-detect-version-zlbff subsys=daemon level=info msg="Releasing key" key="[k8s:app=rook-ceph-detect-version k8s:batch.kubernetes.io/controller-uid=36ff4d3e-48ce-4516-b0d2-59aa4350607f k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version k8s:controller-uid=36ff4d3e-48ce-4516-b0d2-59aa4350607f k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=rook-ceph-detect-version k8s:rook-version=v1.15.9]" subsys=allocator level=info msg="Removed endpoint" containerID=7466b6086c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3577 identity=3955 ipv4=10.0.0.32 ipv6= k8sPodName=openstack/rook-ceph-detect-version-zlbff subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.231 64e3a95b-9a14-4009-ad7a-a4828f7d3c4d default }" containerID=2dcf7ca5df918a1c09156f48b74c68a766fc97b6b0711db3b5ace8ea1aafe1b5 datapathConfiguration="&{false false false false false }" interface=lxceda3d50d4ccb k8sPodName=openstack/ceph-object-controller-detect-version-c4gch labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2dcf7ca5df datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1324 ipv4=10.0.0.231 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-c4gch subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2dcf7ca5df datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1324 identityLabels="k8s:app=ceph-object-controller-detect-version,k8s:batch.kubernetes.io/controller-uid=44902bbc-ea17-4d9b-ae35-a6cbfc0fa16a,k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version,k8s:controller-uid=44902bbc-ea17-4d9b-ae35-a6cbfc0fa16a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=ceph-object-controller-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.231 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-c4gch subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app=ceph-object-controller-detect-version;k8s:batch.kubernetes.io/controller-uid=44902bbc-ea17-4d9b-ae35-a6cbfc0fa16a;k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version;k8s:controller-uid=44902bbc-ea17-4d9b-ae35-a6cbfc0fa16a;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=ceph-object-controller-detect-version;k8s:rook-version=v1.15.9;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2dcf7ca5df datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1324 identity=6615 identityLabels="k8s:app=ceph-object-controller-detect-version,k8s:batch.kubernetes.io/controller-uid=44902bbc-ea17-4d9b-ae35-a6cbfc0fa16a,k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version,k8s:controller-uid=44902bbc-ea17-4d9b-ae35-a6cbfc0fa16a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=ceph-object-controller-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.231 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-c4gch oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2dcf7ca5df datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1324 identity=6615 ipv4=10.0.0.231 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-c4gch subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=2dcf7ca5df datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1324 identity=6615 ipv4=10.0.0.231 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-c4gch subsys=endpoint level=info msg="Successful endpoint creation" containerID=2dcf7ca5df datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1324 identity=6615 ipv4=10.0.0.231 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-c4gch subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=2dcf7ca5df endpointID=1324 k8sNamespace=openstack k8sPodName=ceph-object-controller-detect-version-c4gch subsys=daemon level=info msg="Releasing key" key="[k8s:app=ceph-object-controller-detect-version k8s:batch.kubernetes.io/controller-uid=44902bbc-ea17-4d9b-ae35-a6cbfc0fa16a k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version k8s:controller-uid=44902bbc-ea17-4d9b-ae35-a6cbfc0fa16a k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=ceph-object-controller-detect-version k8s:rook-version=v1.15.9]" subsys=allocator level=info msg="Removed endpoint" containerID=2dcf7ca5df datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1324 identity=6615 ipv4=10.0.0.231 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-c4gch subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.154 8c8c632f-0c5f-45ce-87df-79858685d34d default }" containerID=5a24c5bb873a6758897d17f23f46349006764ae741a7b78c7a66a4f8d3c39611 datapathConfiguration="&{false false false false false }" interface=lxcd96277d297b6 k8sPodName=local-path-storage/helper-pod-create-pvc-efe006c8-4271-4835-9b2e-6b653bc9f074 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5a24c5bb87 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1713 ipv4=10.0.0.154 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-efe006c8-4271-4835-9b2e-6b653bc9f074 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5a24c5bb87 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1713 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.154 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-efe006c8-4271-4835-9b2e-6b653bc9f074 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5a24c5bb87 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1713 identity=33972 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.154 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-efe006c8-4271-4835-9b2e-6b653bc9f074 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5a24c5bb87 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1713 identity=33972 ipv4=10.0.0.154 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-efe006c8-4271-4835-9b2e-6b653bc9f074 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=5a24c5bb87 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1713 identity=33972 ipv4=10.0.0.154 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-efe006c8-4271-4835-9b2e-6b653bc9f074 subsys=endpoint level=info msg="Successful endpoint creation" containerID=5a24c5bb87 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1713 identity=33972 ipv4=10.0.0.154 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-efe006c8-4271-4835-9b2e-6b653bc9f074 subsys=daemon level=info msg="Delete endpoint request" containerID=5a24c5bb87 endpointID=1713 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-efe006c8-4271-4835-9b2e-6b653bc9f074 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=5a24c5bb87 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1713 identity=33972 ipv4=10.0.0.154 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-efe006c8-4271-4835-9b2e-6b653bc9f074 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.180 631ed9ad-0923-4640-a415-3bc157faa69c default }" containerID=f29d400c7da05c4685c0075fbd7b9d8b71faf9a2c8e63c55b6d11a953e1042de datapathConfiguration="&{false false false false false }" interface=lxc113778b9c542 k8sPodName=openstack/rabbitmq-glance-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f29d400c7d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2352 ipv4=10.0.0.180 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f29d400c7d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2352 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-glance,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0" ipv4=10.0.0.180 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-glance;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f29d400c7d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2352 identity=33728 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-glance,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0" ipv4=10.0.0.180 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f29d400c7d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2352 identity=33728 ipv4=10.0.0.180 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=f29d400c7d datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2352 identity=33728 ipv4=10.0.0.180 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=f29d400c7d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2352 identity=33728 ipv4=10.0.0.180 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.230 1a6c57b3-8e80-462f-bce2-569d7294380c default }" containerID=f8ae180fdfb58bf8d27c0c44622145013b903b113a12f2509ebd1e708e005e68 datapathConfiguration="&{false false false false false }" interface=lxc908a0d2edf51 k8sPodName=openstack/glance-db-init-9bmqb labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f8ae180fdf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3340 ipv4=10.0.0.230 ipv6= k8sPodName=openstack/glance-db-init-9bmqb subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f8ae180fdf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3340 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=6ab88be5-5d75-4cff-89df-f8153f8ebba5,k8s:batch.kubernetes.io/job-name=glance-db-init,k8s:component=db-init,k8s:controller-uid=6ab88be5-5d75-4cff-89df-f8153f8ebba5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-init,k8s:release_group=glance" ipv4=10.0.0.230 ipv6= k8sPodName=openstack/glance-db-init-9bmqb subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=6ab88be5-5d75-4cff-89df-f8153f8ebba5;k8s:batch.kubernetes.io/job-name=glance-db-init;k8s:component=db-init;k8s:controller-uid=6ab88be5-5d75-4cff-89df-f8153f8ebba5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-db-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f8ae180fdf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3340 identity=9269 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=6ab88be5-5d75-4cff-89df-f8153f8ebba5,k8s:batch.kubernetes.io/job-name=glance-db-init,k8s:component=db-init,k8s:controller-uid=6ab88be5-5d75-4cff-89df-f8153f8ebba5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-init,k8s:release_group=glance" ipv4=10.0.0.230 ipv6= k8sPodName=openstack/glance-db-init-9bmqb oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=f8ae180fdf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3340 identity=9269 ipv4=10.0.0.230 ipv6= k8sPodName=openstack/glance-db-init-9bmqb subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f8ae180fdf datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3340 identity=9269 ipv4=10.0.0.230 ipv6= k8sPodName=openstack/glance-db-init-9bmqb subsys=endpoint level=info msg="Successful endpoint creation" containerID=f8ae180fdf datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3340 identity=9269 ipv4=10.0.0.230 ipv6= k8sPodName=openstack/glance-db-init-9bmqb subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.116 661b3245-8255-416f-81a3-01c29d2204f8 default }" containerID=08be69b575d4cc45120e70e93703ca78e867e256243f8726fb8d66cf8f32d3c7 datapathConfiguration="&{false false false false false }" interface=lxc9a901b61b93d k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-rh668 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=08be69b575 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1111 ipv4=10.0.0.116 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-rh668 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=08be69b575 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1111 identityLabels="k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io,k8s:app.kubernetes.io/created-by=rook-ceph-operator,k8s:app.kubernetes.io/instance=ceph,k8s:app.kubernetes.io/managed-by=rook-ceph-operator,k8s:app.kubernetes.io/name=ceph-rgw,k8s:app.kubernetes.io/part-of=ceph,k8s:app=rook-ceph-rgw,k8s:ceph_daemon_id=ceph,k8s:ceph_daemon_type=rgw,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw,k8s:io.kubernetes.pod.namespace=openstack,k8s:rgw=ceph,k8s:rook.io/operator-namespace=rook-ceph,k8s:rook_cluster=openstack,k8s:rook_object_store=ceph" ipv4=10.0.0.116 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-rh668 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app=rook-ceph-rgw;k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io;k8s:app.kubernetes.io/created-by=rook-ceph-operator;k8s:app.kubernetes.io/instance=ceph;k8s:app.kubernetes.io/managed-by=rook-ceph-operator;k8s:app.kubernetes.io/name=ceph-rgw;k8s:app.kubernetes.io/part-of=ceph;k8s:ceph_daemon_id=ceph;k8s:ceph_daemon_type=rgw;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw;k8s:io.kubernetes.pod.namespace=openstack;k8s:rgw=ceph;k8s:rook.io/operator-namespace=rook-ceph;k8s:rook_cluster=openstack;k8s:rook_object_store=ceph;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=08be69b575 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1111 identity=45948 identityLabels="k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io,k8s:app.kubernetes.io/created-by=rook-ceph-operator,k8s:app.kubernetes.io/instance=ceph,k8s:app.kubernetes.io/managed-by=rook-ceph-operator,k8s:app.kubernetes.io/name=ceph-rgw,k8s:app.kubernetes.io/part-of=ceph,k8s:app=rook-ceph-rgw,k8s:ceph_daemon_id=ceph,k8s:ceph_daemon_type=rgw,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw,k8s:io.kubernetes.pod.namespace=openstack,k8s:rgw=ceph,k8s:rook.io/operator-namespace=rook-ceph,k8s:rook_cluster=openstack,k8s:rook_object_store=ceph" ipv4=10.0.0.116 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-rh668 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=08be69b575 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1111 identity=45948 ipv4=10.0.0.116 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-rh668 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.82 39cf3559-9610-465d-88e8-8cc594ea2c2a default }" containerID=4c14f0100d37dacbb9460f6e29228e2d43dd507ad1b36ddc376019dcd9cee4f1 datapathConfiguration="&{false false false false false }" interface=lxca16ddff9eccb k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-874c4 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4c14f0100d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1830 ipv4=10.0.0.82 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-874c4 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4c14f0100d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1830 identityLabels="k8s:app=rook-ceph-crashcollector,k8s:ceph-version=18.2.7-0,k8s:ceph_daemon_id=crash,k8s:crashcollector=crash,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default,k8s:io.kubernetes.pod.namespace=openstack,k8s:node_name=instance,k8s:rook_cluster=openstack" ipv4=10.0.0.82 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-874c4 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-crashcollector;k8s:ceph-version=18.2.7-0;k8s:ceph_daemon_id=crash;k8s:crashcollector=crash;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default;k8s:io.kubernetes.pod.namespace=openstack;k8s:node_name=instance;k8s:rook_cluster=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4c14f0100d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1830 identity=24593 identityLabels="k8s:app=rook-ceph-crashcollector,k8s:ceph-version=18.2.7-0,k8s:ceph_daemon_id=crash,k8s:crashcollector=crash,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default,k8s:io.kubernetes.pod.namespace=openstack,k8s:node_name=instance,k8s:rook_cluster=openstack" ipv4=10.0.0.82 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-874c4 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4c14f0100d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1830 identity=24593 ipv4=10.0.0.82 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-874c4 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=08be69b575 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1111 identity=45948 ipv4=10.0.0.116 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-rh668 subsys=endpoint level=info msg="Successful endpoint creation" containerID=08be69b575 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1111 identity=45948 ipv4=10.0.0.116 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-rh668 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=4c14f0100d datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1830 identity=24593 ipv4=10.0.0.82 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-874c4 subsys=endpoint level=info msg="Successful endpoint creation" containerID=4c14f0100d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1830 identity=24593 ipv4=10.0.0.82 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-874c4 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=f8ae180fdf endpointID=3340 k8sNamespace=openstack k8sPodName=glance-db-init-9bmqb subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=6ab88be5-5d75-4cff-89df-f8153f8ebba5 k8s:batch.kubernetes.io/job-name=glance-db-init k8s:component=db-init k8s:controller-uid=6ab88be5-5d75-4cff-89df-f8153f8ebba5 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-db-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=f8ae180fdf datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3340 identity=9269 ipv4=10.0.0.230 ipv6= k8sPodName=openstack/glance-db-init-9bmqb subsys=endpoint level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.10 7d9617b6-f497-4a6b-b125-1d2c98720faa default }" containerID=cfcde69fab139df630b2d689e2f59ab29efde35c250d351d9e0bc98f8dc82e66 datapathConfiguration="&{false false false false false }" interface=lxc8b9635ddd9ce k8sPodName=openstack/glance-db-sync-r4qmb labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=cfcde69fab datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=134 ipv4=10.0.0.10 ipv6= k8sPodName=openstack/glance-db-sync-r4qmb subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=cfcde69fab datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=134 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=0b61d750-def0-402c-b172-51ed2daaa888,k8s:batch.kubernetes.io/job-name=glance-db-sync,k8s:component=db-sync,k8s:controller-uid=0b61d750-def0-402c-b172-51ed2daaa888,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-sync,k8s:release_group=glance" ipv4=10.0.0.10 ipv6= k8sPodName=openstack/glance-db-sync-r4qmb subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=0b61d750-def0-402c-b172-51ed2daaa888;k8s:batch.kubernetes.io/job-name=glance-db-sync;k8s:component=db-sync;k8s:controller-uid=0b61d750-def0-402c-b172-51ed2daaa888;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-db-sync;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=cfcde69fab datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=134 identity=14013 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=0b61d750-def0-402c-b172-51ed2daaa888,k8s:batch.kubernetes.io/job-name=glance-db-sync,k8s:component=db-sync,k8s:controller-uid=0b61d750-def0-402c-b172-51ed2daaa888,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-sync,k8s:release_group=glance" ipv4=10.0.0.10 ipv6= k8sPodName=openstack/glance-db-sync-r4qmb oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=cfcde69fab datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=134 identity=14013 ipv4=10.0.0.10 ipv6= k8sPodName=openstack/glance-db-sync-r4qmb subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=cfcde69fab datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=134 identity=14013 ipv4=10.0.0.10 ipv6= k8sPodName=openstack/glance-db-sync-r4qmb subsys=endpoint level=info msg="Successful endpoint creation" containerID=cfcde69fab datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=134 identity=14013 ipv4=10.0.0.10 ipv6= k8sPodName=openstack/glance-db-sync-r4qmb subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=cfcde69fab endpointID=134 k8sNamespace=openstack k8sPodName=glance-db-sync-r4qmb subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=0b61d750-def0-402c-b172-51ed2daaa888 k8s:batch.kubernetes.io/job-name=glance-db-sync k8s:component=db-sync k8s:controller-uid=0b61d750-def0-402c-b172-51ed2daaa888 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-db-sync k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=cfcde69fab datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=134 identity=14013 ipv4=10.0.0.10 ipv6= k8sPodName=openstack/glance-db-sync-r4qmb subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.146 f6733d6b-9929-49f5-964a-39a2630f697b default }" containerID=ac626095a197cced6d94b72734c4e7d3198b1c2c99be6093f929de0894e106aa datapathConfiguration="&{false false false false false }" interface=lxcd60e31807247 k8sPodName=openstack/glance-rabbit-init-c2r7d labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ac626095a1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1203 ipv4=10.0.0.146 ipv6= k8sPodName=openstack/glance-rabbit-init-c2r7d subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ac626095a1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1203 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=54d9e650-fa73-45c3-8e21-fe5489ef9654,k8s:batch.kubernetes.io/job-name=glance-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=54d9e650-fa73-45c3-8e21-fe5489ef9654,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-rabbit-init,k8s:release_group=glance" ipv4=10.0.0.146 ipv6= k8sPodName=openstack/glance-rabbit-init-c2r7d subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=54d9e650-fa73-45c3-8e21-fe5489ef9654;k8s:batch.kubernetes.io/job-name=glance-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=54d9e650-fa73-45c3-8e21-fe5489ef9654;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-rabbit-init;k8s:release_group=glance;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=ac626095a1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1203 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.146 ipv6= k8sPodName=openstack/glance-rabbit-init-c2r7d line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=ac626095a1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1203 identity=47669 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=54d9e650-fa73-45c3-8e21-fe5489ef9654,k8s:batch.kubernetes.io/job-name=glance-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=54d9e650-fa73-45c3-8e21-fe5489ef9654,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-rabbit-init,k8s:release_group=glance" ipv4=10.0.0.146 ipv6= k8sPodName=openstack/glance-rabbit-init-c2r7d oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ac626095a1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1203 identity=47669 ipv4=10.0.0.146 ipv6= k8sPodName=openstack/glance-rabbit-init-c2r7d subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ac626095a1 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1203 identity=47669 ipv4=10.0.0.146 ipv6= k8sPodName=openstack/glance-rabbit-init-c2r7d subsys=endpoint level=info msg="Successful endpoint creation" containerID=ac626095a1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1203 identity=47669 ipv4=10.0.0.146 ipv6= k8sPodName=openstack/glance-rabbit-init-c2r7d subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=ac626095a1 endpointID=1203 k8sNamespace=openstack k8sPodName=glance-rabbit-init-c2r7d subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=54d9e650-fa73-45c3-8e21-fe5489ef9654 k8s:batch.kubernetes.io/job-name=glance-rabbit-init k8s:component=rabbit-init k8s:controller-uid=54d9e650-fa73-45c3-8e21-fe5489ef9654 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-rabbit-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=ac626095a1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1203 identity=47669 ipv4=10.0.0.146 ipv6= k8sPodName=openstack/glance-rabbit-init-c2r7d subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.156 e570726f-6891-4189-97d8-0b92bd9f7db3 default }" containerID=bbf31b966d126007312fe8ed337668a16ef045cd21bb433ff1eb98e5a289d899 datapathConfiguration="&{false false false false false }" interface=lxc8b2435d0b066 k8sPodName=openstack/glance-ks-service-c99gn labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=bbf31b966d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=32 ipv4=10.0.0.156 ipv6= k8sPodName=openstack/glance-ks-service-c99gn subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=bbf31b966d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=32 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=c53fd118-deec-4aea-9c1b-e344d46f2663,k8s:batch.kubernetes.io/job-name=glance-ks-service,k8s:component=ks-service,k8s:controller-uid=c53fd118-deec-4aea-9c1b-e344d46f2663,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-service,k8s:release_group=glance" ipv4=10.0.0.156 ipv6= k8sPodName=openstack/glance-ks-service-c99gn subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=c53fd118-deec-4aea-9c1b-e344d46f2663;k8s:batch.kubernetes.io/job-name=glance-ks-service;k8s:component=ks-service;k8s:controller-uid=c53fd118-deec-4aea-9c1b-e344d46f2663;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-service;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=bbf31b966d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=32 identity=43834 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=c53fd118-deec-4aea-9c1b-e344d46f2663,k8s:batch.kubernetes.io/job-name=glance-ks-service,k8s:component=ks-service,k8s:controller-uid=c53fd118-deec-4aea-9c1b-e344d46f2663,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-service,k8s:release_group=glance" ipv4=10.0.0.156 ipv6= k8sPodName=openstack/glance-ks-service-c99gn oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=bbf31b966d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=32 identity=43834 ipv4=10.0.0.156 ipv6= k8sPodName=openstack/glance-ks-service-c99gn subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=bbf31b966d datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=32 identity=43834 ipv4=10.0.0.156 ipv6= k8sPodName=openstack/glance-ks-service-c99gn subsys=endpoint level=info msg="Successful endpoint creation" containerID=bbf31b966d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=32 identity=43834 ipv4=10.0.0.156 ipv6= k8sPodName=openstack/glance-ks-service-c99gn subsys=daemon level=info msg="Delete endpoint request" containerID=bbf31b966d endpointID=32 k8sNamespace=openstack k8sPodName=glance-ks-service-c99gn subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=c53fd118-deec-4aea-9c1b-e344d46f2663 k8s:batch.kubernetes.io/job-name=glance-ks-service k8s:component=ks-service k8s:controller-uid=c53fd118-deec-4aea-9c1b-e344d46f2663 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-service k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=bbf31b966d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=32 identity=43834 ipv4=10.0.0.156 ipv6= k8sPodName=openstack/glance-ks-service-c99gn subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.83 63a06ced-810e-4491-b30e-dd2c966933b3 default }" containerID=08c142a32a041f722b742b5360329dd403d5dd393d839ae214fb0526a5d869ae datapathConfiguration="&{false false false false false }" interface=lxc7491c36cdcef k8sPodName=openstack/glance-ks-endpoints-rvmxv labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=08c142a32a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2190 ipv4=10.0.0.83 ipv6= k8sPodName=openstack/glance-ks-endpoints-rvmxv subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=08c142a32a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2190 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=5a3737f9-c3e7-41a1-a8ea-1f7e7b2f8ed8,k8s:batch.kubernetes.io/job-name=glance-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=5a3737f9-c3e7-41a1-a8ea-1f7e7b2f8ed8,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-endpoints,k8s:release_group=glance" ipv4=10.0.0.83 ipv6= k8sPodName=openstack/glance-ks-endpoints-rvmxv subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=5a3737f9-c3e7-41a1-a8ea-1f7e7b2f8ed8;k8s:batch.kubernetes.io/job-name=glance-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=5a3737f9-c3e7-41a1-a8ea-1f7e7b2f8ed8;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-endpoints;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=08c142a32a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2190 identity=13981 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=5a3737f9-c3e7-41a1-a8ea-1f7e7b2f8ed8,k8s:batch.kubernetes.io/job-name=glance-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=5a3737f9-c3e7-41a1-a8ea-1f7e7b2f8ed8,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-endpoints,k8s:release_group=glance" ipv4=10.0.0.83 ipv6= k8sPodName=openstack/glance-ks-endpoints-rvmxv oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=08c142a32a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2190 identity=13981 ipv4=10.0.0.83 ipv6= k8sPodName=openstack/glance-ks-endpoints-rvmxv subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=08c142a32a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2190 identity=13981 ipv4=10.0.0.83 ipv6= k8sPodName=openstack/glance-ks-endpoints-rvmxv subsys=endpoint level=info msg="Successful endpoint creation" containerID=08c142a32a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2190 identity=13981 ipv4=10.0.0.83 ipv6= k8sPodName=openstack/glance-ks-endpoints-rvmxv subsys=daemon level=info msg="Delete endpoint request" containerID=08c142a32a endpointID=2190 k8sNamespace=openstack k8sPodName=glance-ks-endpoints-rvmxv subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=5a3737f9-c3e7-41a1-a8ea-1f7e7b2f8ed8 k8s:batch.kubernetes.io/job-name=glance-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=5a3737f9-c3e7-41a1-a8ea-1f7e7b2f8ed8 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-endpoints k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=08c142a32a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2190 identity=13981 ipv4=10.0.0.83 ipv6= k8sPodName=openstack/glance-ks-endpoints-rvmxv subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.83 95926497-874f-453c-b142-0b986663f342 default }" containerID=9fb8a6ef7fa7b2db71bf20d606e0866ffb2e81c7e6151af13ff337e9c9b02ca3 datapathConfiguration="&{false false false false false }" interface=lxcfc9bdcfca867 k8sPodName=openstack/glance-ks-user-phv6m labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9fb8a6ef7f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=161 ipv4=10.0.0.83 ipv6= k8sPodName=openstack/glance-ks-user-phv6m subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9fb8a6ef7f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=161 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=5c6c76ac-92e5-4778-a040-d7903fad5edf,k8s:batch.kubernetes.io/job-name=glance-ks-user,k8s:component=ks-user,k8s:controller-uid=5c6c76ac-92e5-4778-a040-d7903fad5edf,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-user,k8s:release_group=glance" ipv4=10.0.0.83 ipv6= k8sPodName=openstack/glance-ks-user-phv6m subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=5c6c76ac-92e5-4778-a040-d7903fad5edf;k8s:batch.kubernetes.io/job-name=glance-ks-user;k8s:component=ks-user;k8s:controller-uid=5c6c76ac-92e5-4778-a040-d7903fad5edf;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-user;k8s:release_group=glance;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=9fb8a6ef7f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=161 identity=46230 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=5c6c76ac-92e5-4778-a040-d7903fad5edf,k8s:batch.kubernetes.io/job-name=glance-ks-user,k8s:component=ks-user,k8s:controller-uid=5c6c76ac-92e5-4778-a040-d7903fad5edf,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-user,k8s:release_group=glance" ipv4=10.0.0.83 ipv6= k8sPodName=openstack/glance-ks-user-phv6m oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9fb8a6ef7f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=161 identity=46230 ipv4=10.0.0.83 ipv6= k8sPodName=openstack/glance-ks-user-phv6m subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=9fb8a6ef7f datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=161 identity=46230 ipv4=10.0.0.83 ipv6= k8sPodName=openstack/glance-ks-user-phv6m subsys=endpoint level=info msg="Successful endpoint creation" containerID=9fb8a6ef7f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=161 identity=46230 ipv4=10.0.0.83 ipv6= k8sPodName=openstack/glance-ks-user-phv6m subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=9fb8a6ef7f endpointID=161 k8sNamespace=openstack k8sPodName=glance-ks-user-phv6m subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=5c6c76ac-92e5-4778-a040-d7903fad5edf k8s:batch.kubernetes.io/job-name=glance-ks-user k8s:component=ks-user k8s:controller-uid=5c6c76ac-92e5-4778-a040-d7903fad5edf k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-user k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=9fb8a6ef7f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=161 identity=46230 ipv4=10.0.0.83 ipv6= k8sPodName=openstack/glance-ks-user-phv6m subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.3 8a5bd5ff-6c9c-4d16-a9c9-ec7d68200da8 default }" containerID=d44f03aa4b3b26f0ba8335580b39ff0d0f94f29b19ba02f2396d16cf482315fa datapathConfiguration="&{false false false false false }" interface=lxcb1fb3d450b78 k8sPodName=openstack/glance-metadefs-load-7m522 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d44f03aa4b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=896 ipv4=10.0.0.3 ipv6= k8sPodName=openstack/glance-metadefs-load-7m522 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d44f03aa4b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=896 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=59e95006-47ae-426f-a2a3-70ce87f46b92,k8s:batch.kubernetes.io/job-name=glance-metadefs-load,k8s:component=metadefs_load,k8s:controller-uid=59e95006-47ae-426f-a2a3-70ce87f46b92,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-metadefs-load,k8s:release_group=glance" ipv4=10.0.0.3 ipv6= k8sPodName=openstack/glance-metadefs-load-7m522 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=d44f03aa4b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=896 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.3 ipv6= k8sPodName=openstack/glance-metadefs-load-7m522 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=59e95006-47ae-426f-a2a3-70ce87f46b92;k8s:batch.kubernetes.io/job-name=glance-metadefs-load;k8s:component=metadefs_load;k8s:controller-uid=59e95006-47ae-426f-a2a3-70ce87f46b92;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-metadefs-load;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d44f03aa4b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=896 identity=14317 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=59e95006-47ae-426f-a2a3-70ce87f46b92,k8s:batch.kubernetes.io/job-name=glance-metadefs-load,k8s:component=metadefs_load,k8s:controller-uid=59e95006-47ae-426f-a2a3-70ce87f46b92,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-metadefs-load,k8s:release_group=glance" ipv4=10.0.0.3 ipv6= k8sPodName=openstack/glance-metadefs-load-7m522 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d44f03aa4b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=896 identity=14317 ipv4=10.0.0.3 ipv6= k8sPodName=openstack/glance-metadefs-load-7m522 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d44f03aa4b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=896 identity=14317 ipv4=10.0.0.3 ipv6= k8sPodName=openstack/glance-metadefs-load-7m522 subsys=endpoint level=info msg="Successful endpoint creation" containerID=d44f03aa4b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=896 identity=14317 ipv4=10.0.0.3 ipv6= k8sPodName=openstack/glance-metadefs-load-7m522 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=d44f03aa4b endpointID=896 k8sNamespace=openstack k8sPodName=glance-metadefs-load-7m522 subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=59e95006-47ae-426f-a2a3-70ce87f46b92 k8s:batch.kubernetes.io/job-name=glance-metadefs-load k8s:component=metadefs_load k8s:controller-uid=59e95006-47ae-426f-a2a3-70ce87f46b92 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-metadefs-load k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=d44f03aa4b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=896 identity=14317 ipv4=10.0.0.3 ipv6= k8sPodName=openstack/glance-metadefs-load-7m522 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.205 1a389304-120b-45ea-a425-e0d674ed5b54 default }" containerID=652622c51b0b95edb47deba6b80bd9779627ca60e92b32ab9a7b531d10e85167 datapathConfiguration="&{false false false false false }" interface=lxccb96472495e0 k8sPodName=openstack/glance-storage-init-6nvlm labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=652622c51b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3861 ipv4=10.0.0.205 ipv6= k8sPodName=openstack/glance-storage-init-6nvlm subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=652622c51b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3861 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=2352d4df-43f0-4190-b8bb-9adfbe237f37,k8s:batch.kubernetes.io/job-name=glance-storage-init,k8s:component=storage-init,k8s:controller-uid=2352d4df-43f0-4190-b8bb-9adfbe237f37,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-storage-init,k8s:release_group=glance" ipv4=10.0.0.205 ipv6= k8sPodName=openstack/glance-storage-init-6nvlm subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=2352d4df-43f0-4190-b8bb-9adfbe237f37;k8s:batch.kubernetes.io/job-name=glance-storage-init;k8s:component=storage-init;k8s:controller-uid=2352d4df-43f0-4190-b8bb-9adfbe237f37;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-storage-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=652622c51b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3861 identity=11313 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=2352d4df-43f0-4190-b8bb-9adfbe237f37,k8s:batch.kubernetes.io/job-name=glance-storage-init,k8s:component=storage-init,k8s:controller-uid=2352d4df-43f0-4190-b8bb-9adfbe237f37,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-storage-init,k8s:release_group=glance" ipv4=10.0.0.205 ipv6= k8sPodName=openstack/glance-storage-init-6nvlm oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=652622c51b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3861 identity=11313 ipv4=10.0.0.205 ipv6= k8sPodName=openstack/glance-storage-init-6nvlm subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=652622c51b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3861 identity=11313 ipv4=10.0.0.205 ipv6= k8sPodName=openstack/glance-storage-init-6nvlm subsys=endpoint level=info msg="Successful endpoint creation" containerID=652622c51b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3861 identity=11313 ipv4=10.0.0.205 ipv6= k8sPodName=openstack/glance-storage-init-6nvlm subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=652622c51b endpointID=3861 k8sNamespace=openstack k8sPodName=glance-storage-init-6nvlm subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=2352d4df-43f0-4190-b8bb-9adfbe237f37 k8s:batch.kubernetes.io/job-name=glance-storage-init k8s:component=storage-init k8s:controller-uid=2352d4df-43f0-4190-b8bb-9adfbe237f37 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-storage-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=652622c51b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3861 identity=11313 ipv4=10.0.0.205 ipv6= k8sPodName=openstack/glance-storage-init-6nvlm subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.210 12dc88cf-1964-4bd6-a35c-50ca48b0bb46 default }" containerID=edbcc26dc3c8baf51ad92f5aa92436cbd0a4755d5c3f4b414d217a17b49ca220 datapathConfiguration="&{false false false false false }" interface=lxcab3d67bb08d9 k8sPodName=openstack/glance-api-76dc86678d-d8gtl labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=edbcc26dc3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=270 ipv4=10.0.0.210 ipv6= k8sPodName=openstack/glance-api-76dc86678d-d8gtl subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=edbcc26dc3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=270 identityLabels="k8s:application=glance,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=glance" ipv4=10.0.0.210 ipv6= k8sPodName=openstack/glance-api-76dc86678d-d8gtl subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=edbcc26dc3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=270 identity=22788 identityLabels="k8s:application=glance,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=glance" ipv4=10.0.0.210 ipv6= k8sPodName=openstack/glance-api-76dc86678d-d8gtl oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=edbcc26dc3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=270 identity=22788 ipv4=10.0.0.210 ipv6= k8sPodName=openstack/glance-api-76dc86678d-d8gtl subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=edbcc26dc3 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=270 identity=22788 ipv4=10.0.0.210 ipv6= k8sPodName=openstack/glance-api-76dc86678d-d8gtl subsys=endpoint level=info msg="Successful endpoint creation" containerID=edbcc26dc3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=270 identity=22788 ipv4=10.0.0.210 ipv6= k8sPodName=openstack/glance-api-76dc86678d-d8gtl subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.10 4538a9bc-0b56-4dab-bbc4-1fd35feff879 default }" containerID=d5f335fc6316305b28fe55e87ad17287e308eaadde1b632583bbc108e133f919 datapathConfiguration="&{false false false false false }" interface=lxcab4c7384de95 k8sPodName=openstack/staffeln-conductor-57f8455c46-9mgkf labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d5f335fc63 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3700 ipv4=10.0.0.10 ipv6= k8sPodName=openstack/staffeln-conductor-57f8455c46-9mgkf subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d5f335fc63 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3700 identityLabels="k8s:application=staffeln,k8s:component=conductor,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.10 ipv6= k8sPodName=openstack/staffeln-conductor-57f8455c46-9mgkf subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=d5f335fc63 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3700 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.10 ipv6= k8sPodName=openstack/staffeln-conductor-57f8455c46-9mgkf line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:component=conductor;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d5f335fc63 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3700 identity=16590 identityLabels="k8s:application=staffeln,k8s:component=conductor,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.10 ipv6= k8sPodName=openstack/staffeln-conductor-57f8455c46-9mgkf oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d5f335fc63 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3700 identity=16590 ipv4=10.0.0.10 ipv6= k8sPodName=openstack/staffeln-conductor-57f8455c46-9mgkf subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.134 c2b93ce4-de67-4f4a-956e-054df1365b1d default }" containerID=c04f544b6628501147425faecbe9ec614cbd45e1036c0b27937516c9b6cf9100 datapathConfiguration="&{false false false false false }" interface=lxcbf8785c336b5 k8sPodName=openstack/staffeln-api-549797594c-4tgdv labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c04f544b66 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3826 ipv4=10.0.0.134 ipv6= k8sPodName=openstack/staffeln-api-549797594c-4tgdv subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.166 0b9b206f-5335-4adc-a344-25c73cc5067a default }" containerID=842917b419a425401fcfe863958acd7f9693053c3fd70fa347858eee627cc9dd datapathConfiguration="&{false false false false false }" interface=lxc0cc71b2458d5 k8sPodName=openstack/staffeln-db-init-fqnd4 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=842917b419 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2300 ipv4=10.0.0.166 ipv6= k8sPodName=openstack/staffeln-db-init-fqnd4 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c04f544b66 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3826 identityLabels="k8s:application=staffeln,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.134 ipv6= k8sPodName=openstack/staffeln-api-549797594c-4tgdv subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Resolving identity labels (blocking)" containerID=842917b419 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2300 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=8ac9e31e-1c33-4840-88bf-0a4acc710c4f,k8s:batch.kubernetes.io/job-name=staffeln-db-init,k8s:component=db-init,k8s:controller-uid=8ac9e31e-1c33-4840-88bf-0a4acc710c4f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-init,k8s:release_group=staffeln" ipv4=10.0.0.166 ipv6= k8sPodName=openstack/staffeln-db-init-fqnd4 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c04f544b66 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3826 identity=34616 identityLabels="k8s:application=staffeln,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.134 ipv6= k8sPodName=openstack/staffeln-api-549797594c-4tgdv oldIdentity="no identity" subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Waiting for endpoint to be generated" containerID=c04f544b66 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3826 identity=34616 ipv4=10.0.0.134 ipv6= k8sPodName=openstack/staffeln-api-549797594c-4tgdv subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:batch.kubernetes.io/controller-uid=8ac9e31e-1c33-4840-88bf-0a4acc710c4f;k8s:batch.kubernetes.io/job-name=staffeln-db-init;k8s:component=db-init;k8s:controller-uid=8ac9e31e-1c33-4840-88bf-0a4acc710c4f;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=staffeln-db-init;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=842917b419 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2300 identity=63458 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=8ac9e31e-1c33-4840-88bf-0a4acc710c4f,k8s:batch.kubernetes.io/job-name=staffeln-db-init,k8s:component=db-init,k8s:controller-uid=8ac9e31e-1c33-4840-88bf-0a4acc710c4f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-init,k8s:release_group=staffeln" ipv4=10.0.0.166 ipv6= k8sPodName=openstack/staffeln-db-init-fqnd4 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=842917b419 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2300 identity=63458 ipv4=10.0.0.166 ipv6= k8sPodName=openstack/staffeln-db-init-fqnd4 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d5f335fc63 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3700 identity=16590 ipv4=10.0.0.10 ipv6= k8sPodName=openstack/staffeln-conductor-57f8455c46-9mgkf subsys=endpoint level=info msg="Successful endpoint creation" containerID=d5f335fc63 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3700 identity=16590 ipv4=10.0.0.10 ipv6= k8sPodName=openstack/staffeln-conductor-57f8455c46-9mgkf subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=842917b419 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2300 identity=63458 ipv4=10.0.0.166 ipv6= k8sPodName=openstack/staffeln-db-init-fqnd4 subsys=endpoint level=info msg="Successful endpoint creation" containerID=842917b419 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2300 identity=63458 ipv4=10.0.0.166 ipv6= k8sPodName=openstack/staffeln-db-init-fqnd4 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=c04f544b66 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3826 identity=34616 ipv4=10.0.0.134 ipv6= k8sPodName=openstack/staffeln-api-549797594c-4tgdv subsys=endpoint level=info msg="Successful endpoint creation" containerID=c04f544b66 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3826 identity=34616 ipv4=10.0.0.134 ipv6= k8sPodName=openstack/staffeln-api-549797594c-4tgdv subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=842917b419 endpointID=2300 k8sNamespace=openstack k8sPodName=staffeln-db-init-fqnd4 subsys=daemon level=info msg="Releasing key" key="[k8s:application=staffeln k8s:batch.kubernetes.io/controller-uid=8ac9e31e-1c33-4840-88bf-0a4acc710c4f k8s:batch.kubernetes.io/job-name=staffeln-db-init k8s:component=db-init k8s:controller-uid=8ac9e31e-1c33-4840-88bf-0a4acc710c4f k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=staffeln-db-init k8s:release_group=staffeln]" subsys=allocator level=info msg="Removed endpoint" containerID=842917b419 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2300 identity=63458 ipv4=10.0.0.166 ipv6= k8sPodName=openstack/staffeln-db-init-fqnd4 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.85 c6d25c3a-ba26-419b-b220-6e901f404c26 default }" containerID=7621fc532f225586b9082f8cff3492bf4e185d5e6e75dd20aea576b8c72dc55d datapathConfiguration="&{false false false false false }" interface=lxcfe7bc044a52c k8sPodName=openstack/staffeln-db-sync-fvx99 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7621fc532f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2500 ipv4=10.0.0.85 ipv6= k8sPodName=openstack/staffeln-db-sync-fvx99 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7621fc532f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2500 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=004273ca-9a19-4d00-a994-5a8e0d0406e5,k8s:batch.kubernetes.io/job-name=staffeln-db-sync,k8s:component=db-sync,k8s:controller-uid=004273ca-9a19-4d00-a994-5a8e0d0406e5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-sync,k8s:release_group=staffeln" ipv4=10.0.0.85 ipv6= k8sPodName=openstack/staffeln-db-sync-fvx99 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:batch.kubernetes.io/controller-uid=004273ca-9a19-4d00-a994-5a8e0d0406e5;k8s:batch.kubernetes.io/job-name=staffeln-db-sync;k8s:component=db-sync;k8s:controller-uid=004273ca-9a19-4d00-a994-5a8e0d0406e5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=staffeln-db-sync;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7621fc532f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2500 identity=6555 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=004273ca-9a19-4d00-a994-5a8e0d0406e5,k8s:batch.kubernetes.io/job-name=staffeln-db-sync,k8s:component=db-sync,k8s:controller-uid=004273ca-9a19-4d00-a994-5a8e0d0406e5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-sync,k8s:release_group=staffeln" ipv4=10.0.0.85 ipv6= k8sPodName=openstack/staffeln-db-sync-fvx99 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7621fc532f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2500 identity=6555 ipv4=10.0.0.85 ipv6= k8sPodName=openstack/staffeln-db-sync-fvx99 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=7621fc532f datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2500 identity=6555 ipv4=10.0.0.85 ipv6= k8sPodName=openstack/staffeln-db-sync-fvx99 subsys=endpoint level=info msg="Successful endpoint creation" containerID=7621fc532f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2500 identity=6555 ipv4=10.0.0.85 ipv6= k8sPodName=openstack/staffeln-db-sync-fvx99 subsys=daemon level=info msg="Delete endpoint request" containerID=7621fc532f endpointID=2500 k8sNamespace=openstack k8sPodName=staffeln-db-sync-fvx99 subsys=daemon level=info msg="Releasing key" key="[k8s:application=staffeln k8s:batch.kubernetes.io/controller-uid=004273ca-9a19-4d00-a994-5a8e0d0406e5 k8s:batch.kubernetes.io/job-name=staffeln-db-sync k8s:component=db-sync k8s:controller-uid=004273ca-9a19-4d00-a994-5a8e0d0406e5 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=staffeln-db-sync k8s:release_group=staffeln]" subsys=allocator level=info msg="Removed endpoint" containerID=7621fc532f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2500 identity=6555 ipv4=10.0.0.85 ipv6= k8sPodName=openstack/staffeln-db-sync-fvx99 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.92 fd99d8ee-edb9-460e-8663-80b067c2bcd9 default }" containerID=26ef5488fa1d033e5ca229afed2d46b24528c6cefea9766293e6f2fef61f9435 datapathConfiguration="&{false false false false false }" interface=lxc4c960d212892 k8sPodName=local-path-storage/helper-pod-create-pvc-b1932328-3229-4828-b0cb-a9d4dc8b8350 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=26ef5488fa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=773 ipv4=10.0.0.92 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b1932328-3229-4828-b0cb-a9d4dc8b8350 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=26ef5488fa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=773 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.92 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b1932328-3229-4828-b0cb-a9d4dc8b8350 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=26ef5488fa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=773 identity=33972 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.92 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b1932328-3229-4828-b0cb-a9d4dc8b8350 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=26ef5488fa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=773 identity=33972 ipv4=10.0.0.92 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b1932328-3229-4828-b0cb-a9d4dc8b8350 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=26ef5488fa datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=773 identity=33972 ipv4=10.0.0.92 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b1932328-3229-4828-b0cb-a9d4dc8b8350 subsys=endpoint level=info msg="Successful endpoint creation" containerID=26ef5488fa datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=773 identity=33972 ipv4=10.0.0.92 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b1932328-3229-4828-b0cb-a9d4dc8b8350 subsys=daemon level=info msg="Delete endpoint request" containerID=26ef5488fa endpointID=773 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-b1932328-3229-4828-b0cb-a9d4dc8b8350 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=26ef5488fa datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=773 identity=33972 ipv4=10.0.0.92 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b1932328-3229-4828-b0cb-a9d4dc8b8350 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.48 608a14bc-4721-4f1b-a8d1-6a0aa31a9b3b default }" containerID=4bab93afd53b92d7d3ce88c55b3cab78fcfa133d23ac0d0c11b6c6bf16043920 datapathConfiguration="&{false false false false false }" interface=lxc24995d8ae7ef k8sPodName=openstack/rabbitmq-cinder-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4bab93afd5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=336 ipv4=10.0.0.48 ipv6= k8sPodName=openstack/rabbitmq-cinder-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4bab93afd5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=336 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-cinder,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cinder-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-cinder-server-0" ipv4=10.0.0.48 ipv6= k8sPodName=openstack/rabbitmq-cinder-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-cinder;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cinder-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-cinder-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4bab93afd5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=336 identity=1115 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-cinder,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cinder-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-cinder-server-0" ipv4=10.0.0.48 ipv6= k8sPodName=openstack/rabbitmq-cinder-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4bab93afd5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=336 identity=1115 ipv4=10.0.0.48 ipv6= k8sPodName=openstack/rabbitmq-cinder-server-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=4bab93afd5 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=336 identity=1115 ipv4=10.0.0.48 ipv6= k8sPodName=openstack/rabbitmq-cinder-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=4bab93afd5 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=336 identity=1115 ipv4=10.0.0.48 ipv6= k8sPodName=openstack/rabbitmq-cinder-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.23 192511fd-c143-4f46-bcef-d93a51c8941a default }" containerID=82bca74e16f58800bb0590b1f6d5bdc4a902e80503a9f10f806c6106698d86a5 datapathConfiguration="&{false false false false false }" interface=lxc970aaed883bc k8sPodName=openstack/cinder-scheduler-8579ffbc87-6zfgc labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=82bca74e16 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1428 ipv4=10.0.0.23 ipv6= k8sPodName=openstack/cinder-scheduler-8579ffbc87-6zfgc subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=82bca74e16 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1428 identityLabels="k8s:application=cinder,k8s:component=scheduler,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-scheduler,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=cinder" ipv4=10.0.0.23 ipv6= k8sPodName=openstack/cinder-scheduler-8579ffbc87-6zfgc subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:component=scheduler;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-scheduler;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=82bca74e16 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1428 identity=14388 identityLabels="k8s:application=cinder,k8s:component=scheduler,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-scheduler,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=cinder" ipv4=10.0.0.23 ipv6= k8sPodName=openstack/cinder-scheduler-8579ffbc87-6zfgc oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=82bca74e16 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1428 identity=14388 ipv4=10.0.0.23 ipv6= k8sPodName=openstack/cinder-scheduler-8579ffbc87-6zfgc subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.228 6cb51c20-8d89-4c1a-bb47-cc9a4f625504 default }" containerID=4ec1e8a1d247f878b8f4552d9efa7dee4c27bc1dbb8f27985a4d6f425e19d5c7 datapathConfiguration="&{false false false false false }" interface=lxcab9025dc2f2d k8sPodName=openstack/cinder-db-init-8q2qg labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4ec1e8a1d2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=506 ipv4=10.0.0.228 ipv6= k8sPodName=openstack/cinder-db-init-8q2qg subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4ec1e8a1d2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=506 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=ef00d694-aa07-407e-a8a5-61a1ad09f7b6,k8s:batch.kubernetes.io/job-name=cinder-db-init,k8s:component=db-init,k8s:controller-uid=ef00d694-aa07-407e-a8a5-61a1ad09f7b6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-db-init,k8s:release_group=cinder" ipv4=10.0.0.228 ipv6= k8sPodName=openstack/cinder-db-init-8q2qg subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=ef00d694-aa07-407e-a8a5-61a1ad09f7b6;k8s:batch.kubernetes.io/job-name=cinder-db-init;k8s:component=db-init;k8s:controller-uid=ef00d694-aa07-407e-a8a5-61a1ad09f7b6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-db-init;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4ec1e8a1d2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=506 identity=17268 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=ef00d694-aa07-407e-a8a5-61a1ad09f7b6,k8s:batch.kubernetes.io/job-name=cinder-db-init,k8s:component=db-init,k8s:controller-uid=ef00d694-aa07-407e-a8a5-61a1ad09f7b6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-db-init,k8s:release_group=cinder" ipv4=10.0.0.228 ipv6= k8sPodName=openstack/cinder-db-init-8q2qg oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4ec1e8a1d2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=506 identity=17268 ipv4=10.0.0.228 ipv6= k8sPodName=openstack/cinder-db-init-8q2qg subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=82bca74e16 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1428 identity=14388 ipv4=10.0.0.23 ipv6= k8sPodName=openstack/cinder-scheduler-8579ffbc87-6zfgc subsys=endpoint level=info msg="Successful endpoint creation" containerID=82bca74e16 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1428 identity=14388 ipv4=10.0.0.23 ipv6= k8sPodName=openstack/cinder-scheduler-8579ffbc87-6zfgc subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=4ec1e8a1d2 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=506 identity=17268 ipv4=10.0.0.228 ipv6= k8sPodName=openstack/cinder-db-init-8q2qg subsys=endpoint level=info msg="Successful endpoint creation" containerID=4ec1e8a1d2 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=506 identity=17268 ipv4=10.0.0.228 ipv6= k8sPodName=openstack/cinder-db-init-8q2qg subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.244 a5554382-60dd-4f34-aab7-3a83b7fe9303 default }" containerID=e7a4b8bfba422e85f1f5c62794c9326d42f577edf2e3d400bdda957d149fb080 datapathConfiguration="&{false false false false false }" interface=lxce1a4ae0e7e9f k8sPodName=openstack/cinder-api-6697d6d65c-c4x64 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e7a4b8bfba datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=218 ipv4=10.0.0.244 ipv6= k8sPodName=openstack/cinder-api-6697d6d65c-c4x64 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e7a4b8bfba datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=218 identityLabels="k8s:application=cinder,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=cinder" ipv4=10.0.0.244 ipv6= k8sPodName=openstack/cinder-api-6697d6d65c-c4x64 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e7a4b8bfba datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=218 identity=16649 identityLabels="k8s:application=cinder,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=cinder" ipv4=10.0.0.244 ipv6= k8sPodName=openstack/cinder-api-6697d6d65c-c4x64 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e7a4b8bfba datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=218 identity=16649 ipv4=10.0.0.244 ipv6= k8sPodName=openstack/cinder-api-6697d6d65c-c4x64 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e7a4b8bfba datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=218 identity=16649 ipv4=10.0.0.244 ipv6= k8sPodName=openstack/cinder-api-6697d6d65c-c4x64 subsys=endpoint level=info msg="Successful endpoint creation" containerID=e7a4b8bfba datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=218 identity=16649 ipv4=10.0.0.244 ipv6= k8sPodName=openstack/cinder-api-6697d6d65c-c4x64 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=4ec1e8a1d2 endpointID=506 k8sNamespace=openstack k8sPodName=cinder-db-init-8q2qg subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=ef00d694-aa07-407e-a8a5-61a1ad09f7b6 k8s:batch.kubernetes.io/job-name=cinder-db-init k8s:component=db-init k8s:controller-uid=ef00d694-aa07-407e-a8a5-61a1ad09f7b6 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-db-init k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=4ec1e8a1d2 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=506 identity=17268 ipv4=10.0.0.228 ipv6= k8sPodName=openstack/cinder-db-init-8q2qg subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.94 323ee0f1-0124-4d4a-8647-3e328bd1f9ef default }" containerID=e4491177f36e5e85cacc140df379e609de63eb740d60bd72718f1d9576b103f7 datapathConfiguration="&{false false false false false }" interface=lxcf3bbc24701b4 k8sPodName=openstack/cinder-db-sync-7n4ll labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e4491177f3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3550 ipv4=10.0.0.94 ipv6= k8sPodName=openstack/cinder-db-sync-7n4ll subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e4491177f3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3550 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=209200a8-0e54-48f5-9dfb-bd11314195d9,k8s:batch.kubernetes.io/job-name=cinder-db-sync,k8s:component=db-sync,k8s:controller-uid=209200a8-0e54-48f5-9dfb-bd11314195d9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-db-sync,k8s:release_group=cinder" ipv4=10.0.0.94 ipv6= k8sPodName=openstack/cinder-db-sync-7n4ll subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=e4491177f3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3550 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.94 ipv6= k8sPodName=openstack/cinder-db-sync-7n4ll line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=209200a8-0e54-48f5-9dfb-bd11314195d9;k8s:batch.kubernetes.io/job-name=cinder-db-sync;k8s:component=db-sync;k8s:controller-uid=209200a8-0e54-48f5-9dfb-bd11314195d9;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-db-sync;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e4491177f3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3550 identity=17542 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=209200a8-0e54-48f5-9dfb-bd11314195d9,k8s:batch.kubernetes.io/job-name=cinder-db-sync,k8s:component=db-sync,k8s:controller-uid=209200a8-0e54-48f5-9dfb-bd11314195d9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-db-sync,k8s:release_group=cinder" ipv4=10.0.0.94 ipv6= k8sPodName=openstack/cinder-db-sync-7n4ll oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e4491177f3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3550 identity=17542 ipv4=10.0.0.94 ipv6= k8sPodName=openstack/cinder-db-sync-7n4ll subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e4491177f3 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3550 identity=17542 ipv4=10.0.0.94 ipv6= k8sPodName=openstack/cinder-db-sync-7n4ll subsys=endpoint level=info msg="Successful endpoint creation" containerID=e4491177f3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3550 identity=17542 ipv4=10.0.0.94 ipv6= k8sPodName=openstack/cinder-db-sync-7n4ll subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=e4491177f3 endpointID=3550 k8sNamespace=openstack k8sPodName=cinder-db-sync-7n4ll subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=209200a8-0e54-48f5-9dfb-bd11314195d9 k8s:batch.kubernetes.io/job-name=cinder-db-sync k8s:component=db-sync k8s:controller-uid=209200a8-0e54-48f5-9dfb-bd11314195d9 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-db-sync k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=e4491177f3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3550 identity=17542 ipv4=10.0.0.94 ipv6= k8sPodName=openstack/cinder-db-sync-7n4ll subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.253 51ff0af8-5daa-4847-bb8c-7940168aab6d default }" containerID=38840d2b43419249fcb7d975769de011778665c5118842b91b9d69571902ec8e datapathConfiguration="&{false false false false false }" interface=lxc6a3140717d1b k8sPodName=openstack/cinder-rabbit-init-r96wj labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=38840d2b43 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3160 ipv4=10.0.0.253 ipv6= k8sPodName=openstack/cinder-rabbit-init-r96wj subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=38840d2b43 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3160 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=95c14574-5f26-41e7-b24c-496638ea6e31,k8s:batch.kubernetes.io/job-name=cinder-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=95c14574-5f26-41e7-b24c-496638ea6e31,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-rabbit-init,k8s:release_group=cinder" ipv4=10.0.0.253 ipv6= k8sPodName=openstack/cinder-rabbit-init-r96wj subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=95c14574-5f26-41e7-b24c-496638ea6e31;k8s:batch.kubernetes.io/job-name=cinder-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=95c14574-5f26-41e7-b24c-496638ea6e31;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-rabbit-init;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=38840d2b43 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3160 identity=9884 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=95c14574-5f26-41e7-b24c-496638ea6e31,k8s:batch.kubernetes.io/job-name=cinder-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=95c14574-5f26-41e7-b24c-496638ea6e31,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-rabbit-init,k8s:release_group=cinder" ipv4=10.0.0.253 ipv6= k8sPodName=openstack/cinder-rabbit-init-r96wj oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=38840d2b43 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3160 identity=9884 ipv4=10.0.0.253 ipv6= k8sPodName=openstack/cinder-rabbit-init-r96wj subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=38840d2b43 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3160 identity=9884 ipv4=10.0.0.253 ipv6= k8sPodName=openstack/cinder-rabbit-init-r96wj subsys=endpoint level=info msg="Successful endpoint creation" containerID=38840d2b43 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3160 identity=9884 ipv4=10.0.0.253 ipv6= k8sPodName=openstack/cinder-rabbit-init-r96wj subsys=daemon level=info msg="Delete endpoint request" containerID=38840d2b43 endpointID=3160 k8sNamespace=openstack k8sPodName=cinder-rabbit-init-r96wj subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=95c14574-5f26-41e7-b24c-496638ea6e31 k8s:batch.kubernetes.io/job-name=cinder-rabbit-init k8s:component=rabbit-init k8s:controller-uid=95c14574-5f26-41e7-b24c-496638ea6e31 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-rabbit-init k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=38840d2b43 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3160 identity=9884 ipv4=10.0.0.253 ipv6= k8sPodName=openstack/cinder-rabbit-init-r96wj subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.211 0923229a-a97f-4409-81b6-0406e83835fd default }" containerID=9b278774d903a437583c43159a53d3f4e681bcff718ce908bdb783c180402f9b datapathConfiguration="&{false false false false false }" interface=lxc987f7d37c94c k8sPodName=openstack/cinder-ks-service-jjnxl labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9b278774d9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2286 ipv4=10.0.0.211 ipv6= k8sPodName=openstack/cinder-ks-service-jjnxl subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9b278774d9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2286 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=5f122447-638e-4478-8c40-cba46330eb3b,k8s:batch.kubernetes.io/job-name=cinder-ks-service,k8s:component=ks-service,k8s:controller-uid=5f122447-638e-4478-8c40-cba46330eb3b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-ks-service,k8s:release_group=cinder" ipv4=10.0.0.211 ipv6= k8sPodName=openstack/cinder-ks-service-jjnxl subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=5f122447-638e-4478-8c40-cba46330eb3b;k8s:batch.kubernetes.io/job-name=cinder-ks-service;k8s:component=ks-service;k8s:controller-uid=5f122447-638e-4478-8c40-cba46330eb3b;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-ks-service;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9b278774d9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2286 identity=27400 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=5f122447-638e-4478-8c40-cba46330eb3b,k8s:batch.kubernetes.io/job-name=cinder-ks-service,k8s:component=ks-service,k8s:controller-uid=5f122447-638e-4478-8c40-cba46330eb3b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-ks-service,k8s:release_group=cinder" ipv4=10.0.0.211 ipv6= k8sPodName=openstack/cinder-ks-service-jjnxl oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9b278774d9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2286 identity=27400 ipv4=10.0.0.211 ipv6= k8sPodName=openstack/cinder-ks-service-jjnxl subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=9b278774d9 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2286 identity=27400 ipv4=10.0.0.211 ipv6= k8sPodName=openstack/cinder-ks-service-jjnxl subsys=endpoint level=info msg="Successful endpoint creation" containerID=9b278774d9 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2286 identity=27400 ipv4=10.0.0.211 ipv6= k8sPodName=openstack/cinder-ks-service-jjnxl subsys=daemon level=info msg="Delete endpoint request" containerID=9b278774d9 endpointID=2286 k8sNamespace=openstack k8sPodName=cinder-ks-service-jjnxl subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=5f122447-638e-4478-8c40-cba46330eb3b k8s:batch.kubernetes.io/job-name=cinder-ks-service k8s:component=ks-service k8s:controller-uid=5f122447-638e-4478-8c40-cba46330eb3b k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-ks-service k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=9b278774d9 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2286 identity=27400 ipv4=10.0.0.211 ipv6= k8sPodName=openstack/cinder-ks-service-jjnxl subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.205 554d24d2-2c25-4e7d-9200-3281d791c092 default }" containerID=c093fc86036abd03c619f048d113864163198c42d25437a1803a2a25f3faca0d datapathConfiguration="&{false false false false false }" interface=lxc7f232938c51f k8sPodName=openstack/cinder-ks-endpoints-l252n labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c093fc8603 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=678 ipv4=10.0.0.205 ipv6= k8sPodName=openstack/cinder-ks-endpoints-l252n subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c093fc8603 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=678 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=c2bbd12b-fb98-4bc1-b8e1-27ebd0d88599,k8s:batch.kubernetes.io/job-name=cinder-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=c2bbd12b-fb98-4bc1-b8e1-27ebd0d88599,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-ks-endpoints,k8s:release_group=cinder" ipv4=10.0.0.205 ipv6= k8sPodName=openstack/cinder-ks-endpoints-l252n subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=c2bbd12b-fb98-4bc1-b8e1-27ebd0d88599;k8s:batch.kubernetes.io/job-name=cinder-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=c2bbd12b-fb98-4bc1-b8e1-27ebd0d88599;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-ks-endpoints;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c093fc8603 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=678 identity=3761 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=c2bbd12b-fb98-4bc1-b8e1-27ebd0d88599,k8s:batch.kubernetes.io/job-name=cinder-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=c2bbd12b-fb98-4bc1-b8e1-27ebd0d88599,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-ks-endpoints,k8s:release_group=cinder" ipv4=10.0.0.205 ipv6= k8sPodName=openstack/cinder-ks-endpoints-l252n oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c093fc8603 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=678 identity=3761 ipv4=10.0.0.205 ipv6= k8sPodName=openstack/cinder-ks-endpoints-l252n subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c093fc8603 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=678 identity=3761 ipv4=10.0.0.205 ipv6= k8sPodName=openstack/cinder-ks-endpoints-l252n subsys=endpoint level=info msg="Successful endpoint creation" containerID=c093fc8603 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=678 identity=3761 ipv4=10.0.0.205 ipv6= k8sPodName=openstack/cinder-ks-endpoints-l252n subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=c093fc8603 endpointID=678 k8sNamespace=openstack k8sPodName=cinder-ks-endpoints-l252n subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=c2bbd12b-fb98-4bc1-b8e1-27ebd0d88599 k8s:batch.kubernetes.io/job-name=cinder-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=c2bbd12b-fb98-4bc1-b8e1-27ebd0d88599 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-ks-endpoints k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=c093fc8603 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=678 identity=3761 ipv4=10.0.0.205 ipv6= k8sPodName=openstack/cinder-ks-endpoints-l252n subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.185 876d897f-68d5-4b39-bbbd-62910e3887d3 default }" containerID=cf8e974a16a99d63ea224e2340b67d054a58a211d23a323baa0225995cd3e424 datapathConfiguration="&{false false false false false }" interface=lxc2b0aad8d769f k8sPodName=openstack/cinder-ks-user-54r65 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=cf8e974a16 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2373 ipv4=10.0.0.185 ipv6= k8sPodName=openstack/cinder-ks-user-54r65 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=cf8e974a16 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2373 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=a45ee7e5-1fe5-4f47-ad19-0b629ee69083,k8s:batch.kubernetes.io/job-name=cinder-ks-user,k8s:component=ks-user,k8s:controller-uid=a45ee7e5-1fe5-4f47-ad19-0b629ee69083,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-ks-user,k8s:release_group=cinder" ipv4=10.0.0.185 ipv6= k8sPodName=openstack/cinder-ks-user-54r65 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=a45ee7e5-1fe5-4f47-ad19-0b629ee69083;k8s:batch.kubernetes.io/job-name=cinder-ks-user;k8s:component=ks-user;k8s:controller-uid=a45ee7e5-1fe5-4f47-ad19-0b629ee69083;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-ks-user;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=cf8e974a16 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2373 identity=46633 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=a45ee7e5-1fe5-4f47-ad19-0b629ee69083,k8s:batch.kubernetes.io/job-name=cinder-ks-user,k8s:component=ks-user,k8s:controller-uid=a45ee7e5-1fe5-4f47-ad19-0b629ee69083,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-ks-user,k8s:release_group=cinder" ipv4=10.0.0.185 ipv6= k8sPodName=openstack/cinder-ks-user-54r65 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=cf8e974a16 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2373 identity=46633 ipv4=10.0.0.185 ipv6= k8sPodName=openstack/cinder-ks-user-54r65 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=cf8e974a16 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2373 identity=46633 ipv4=10.0.0.185 ipv6= k8sPodName=openstack/cinder-ks-user-54r65 subsys=endpoint level=info msg="Successful endpoint creation" containerID=cf8e974a16 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2373 identity=46633 ipv4=10.0.0.185 ipv6= k8sPodName=openstack/cinder-ks-user-54r65 subsys=daemon level=info msg="Delete endpoint request" containerID=cf8e974a16 endpointID=2373 k8sNamespace=openstack k8sPodName=cinder-ks-user-54r65 subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=a45ee7e5-1fe5-4f47-ad19-0b629ee69083 k8s:batch.kubernetes.io/job-name=cinder-ks-user k8s:component=ks-user k8s:controller-uid=a45ee7e5-1fe5-4f47-ad19-0b629ee69083 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-ks-user k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=cf8e974a16 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2373 identity=46633 ipv4=10.0.0.185 ipv6= k8sPodName=openstack/cinder-ks-user-54r65 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.196 90b0da17-0103-45fb-8d18-0d1a8c470391 default }" containerID=19d7d34d8e8adf713e8e57e315193609cf7f32a5a7d5cb1a3c84b3b1edbb75e8 datapathConfiguration="&{false false false false false }" interface=lxcf1756a5c9c4d k8sPodName=openstack/cinder-backup-storage-init-h5srm labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=19d7d34d8e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3256 ipv4=10.0.0.196 ipv6= k8sPodName=openstack/cinder-backup-storage-init-h5srm subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=19d7d34d8e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3256 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=05a1d046-c2b6-4cff-a47f-159396533978,k8s:batch.kubernetes.io/job-name=cinder-backup-storage-init,k8s:component=storage-init,k8s:controller-uid=05a1d046-c2b6-4cff-a47f-159396533978,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-backup-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-backup-storage-init,k8s:release_group=cinder" ipv4=10.0.0.196 ipv6= k8sPodName=openstack/cinder-backup-storage-init-h5srm subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=05a1d046-c2b6-4cff-a47f-159396533978;k8s:batch.kubernetes.io/job-name=cinder-backup-storage-init;k8s:component=storage-init;k8s:controller-uid=05a1d046-c2b6-4cff-a47f-159396533978;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-backup-storage-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-backup-storage-init;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=19d7d34d8e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3256 identity=60313 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=05a1d046-c2b6-4cff-a47f-159396533978,k8s:batch.kubernetes.io/job-name=cinder-backup-storage-init,k8s:component=storage-init,k8s:controller-uid=05a1d046-c2b6-4cff-a47f-159396533978,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-backup-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-backup-storage-init,k8s:release_group=cinder" ipv4=10.0.0.196 ipv6= k8sPodName=openstack/cinder-backup-storage-init-h5srm oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=19d7d34d8e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3256 identity=60313 ipv4=10.0.0.196 ipv6= k8sPodName=openstack/cinder-backup-storage-init-h5srm subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=19d7d34d8e datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3256 identity=60313 ipv4=10.0.0.196 ipv6= k8sPodName=openstack/cinder-backup-storage-init-h5srm subsys=endpoint level=info msg="Successful endpoint creation" containerID=19d7d34d8e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3256 identity=60313 ipv4=10.0.0.196 ipv6= k8sPodName=openstack/cinder-backup-storage-init-h5srm subsys=daemon level=info msg="Delete endpoint request" containerID=19d7d34d8e endpointID=3256 k8sNamespace=openstack k8sPodName=cinder-backup-storage-init-h5srm subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=05a1d046-c2b6-4cff-a47f-159396533978 k8s:batch.kubernetes.io/job-name=cinder-backup-storage-init k8s:component=storage-init k8s:controller-uid=05a1d046-c2b6-4cff-a47f-159396533978 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-backup-storage-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-backup-storage-init k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=19d7d34d8e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3256 identity=60313 ipv4=10.0.0.196 ipv6= k8sPodName=openstack/cinder-backup-storage-init-h5srm subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.113 b5208949-5774-4a5d-b5c5-de3ca4967bb8 default }" containerID=8843f4a335361e91d5254628a8bebb6cbec49178a732935be47a891e3e50d2d0 datapathConfiguration="&{false false false false false }" interface=lxc4b62445c8b40 k8sPodName=openstack/cinder-create-internal-tenant-s7fgl labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8843f4a335 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=875 ipv4=10.0.0.113 ipv6= k8sPodName=openstack/cinder-create-internal-tenant-s7fgl subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8843f4a335 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=875 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=11a2debd-28e3-40ee-9fb0-26b7f51b317d,k8s:batch.kubernetes.io/job-name=cinder-create-internal-tenant,k8s:component=create-internal-tenant,k8s:controller-uid=11a2debd-28e3-40ee-9fb0-26b7f51b317d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-create-internal-tenant,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-create-internal-tenant,k8s:release_group=cinder" ipv4=10.0.0.113 ipv6= k8sPodName=openstack/cinder-create-internal-tenant-s7fgl subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=8843f4a335 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=875 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.113 ipv6= k8sPodName=openstack/cinder-create-internal-tenant-s7fgl line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=11a2debd-28e3-40ee-9fb0-26b7f51b317d;k8s:batch.kubernetes.io/job-name=cinder-create-internal-tenant;k8s:component=create-internal-tenant;k8s:controller-uid=11a2debd-28e3-40ee-9fb0-26b7f51b317d;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-create-internal-tenant;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-create-internal-tenant;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8843f4a335 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=875 identity=33712 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=11a2debd-28e3-40ee-9fb0-26b7f51b317d,k8s:batch.kubernetes.io/job-name=cinder-create-internal-tenant,k8s:component=create-internal-tenant,k8s:controller-uid=11a2debd-28e3-40ee-9fb0-26b7f51b317d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-create-internal-tenant,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-create-internal-tenant,k8s:release_group=cinder" ipv4=10.0.0.113 ipv6= k8sPodName=openstack/cinder-create-internal-tenant-s7fgl oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8843f4a335 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=875 identity=33712 ipv4=10.0.0.113 ipv6= k8sPodName=openstack/cinder-create-internal-tenant-s7fgl subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=8843f4a335 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=875 identity=33712 ipv4=10.0.0.113 ipv6= k8sPodName=openstack/cinder-create-internal-tenant-s7fgl subsys=endpoint level=info msg="Successful endpoint creation" containerID=8843f4a335 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=875 identity=33712 ipv4=10.0.0.113 ipv6= k8sPodName=openstack/cinder-create-internal-tenant-s7fgl subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=8843f4a335 endpointID=875 k8sNamespace=openstack k8sPodName=cinder-create-internal-tenant-s7fgl subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=11a2debd-28e3-40ee-9fb0-26b7f51b317d k8s:batch.kubernetes.io/job-name=cinder-create-internal-tenant k8s:component=create-internal-tenant k8s:controller-uid=11a2debd-28e3-40ee-9fb0-26b7f51b317d k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-create-internal-tenant k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-create-internal-tenant k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=8843f4a335 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=875 identity=33712 ipv4=10.0.0.113 ipv6= k8sPodName=openstack/cinder-create-internal-tenant-s7fgl subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.127 ff2276c4-42f1-4e9a-9847-4faafd5cd068 default }" containerID=bdb5c1bea06e65975dbf5b56e5ed50920694aba45bf67b25addb94d500364233 datapathConfiguration="&{false false false false false }" interface=lxccd2d1bd5ea39 k8sPodName=openstack/cinder-storage-init-v72ws labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=bdb5c1bea0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=406 ipv4=10.0.0.127 ipv6= k8sPodName=openstack/cinder-storage-init-v72ws subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=bdb5c1bea0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=406 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=6ad5ad8a-6a22-4a10-8b9e-258dc3c4f26e,k8s:batch.kubernetes.io/job-name=cinder-storage-init,k8s:component=storage-init,k8s:controller-uid=6ad5ad8a-6a22-4a10-8b9e-258dc3c4f26e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-storage-init,k8s:release_group=cinder" ipv4=10.0.0.127 ipv6= k8sPodName=openstack/cinder-storage-init-v72ws subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=bdb5c1bea0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=406 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.127 ipv6= k8sPodName=openstack/cinder-storage-init-v72ws line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=6ad5ad8a-6a22-4a10-8b9e-258dc3c4f26e;k8s:batch.kubernetes.io/job-name=cinder-storage-init;k8s:component=storage-init;k8s:controller-uid=6ad5ad8a-6a22-4a10-8b9e-258dc3c4f26e;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-storage-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-storage-init;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=bdb5c1bea0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=406 identity=38202 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=6ad5ad8a-6a22-4a10-8b9e-258dc3c4f26e,k8s:batch.kubernetes.io/job-name=cinder-storage-init,k8s:component=storage-init,k8s:controller-uid=6ad5ad8a-6a22-4a10-8b9e-258dc3c4f26e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-storage-init,k8s:release_group=cinder" ipv4=10.0.0.127 ipv6= k8sPodName=openstack/cinder-storage-init-v72ws oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=bdb5c1bea0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=406 identity=38202 ipv4=10.0.0.127 ipv6= k8sPodName=openstack/cinder-storage-init-v72ws subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=bdb5c1bea0 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=406 identity=38202 ipv4=10.0.0.127 ipv6= k8sPodName=openstack/cinder-storage-init-v72ws subsys=endpoint level=info msg="Successful endpoint creation" containerID=bdb5c1bea0 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=406 identity=38202 ipv4=10.0.0.127 ipv6= k8sPodName=openstack/cinder-storage-init-v72ws subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=bdb5c1bea0 endpointID=406 k8sNamespace=openstack k8sPodName=cinder-storage-init-v72ws subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=6ad5ad8a-6a22-4a10-8b9e-258dc3c4f26e k8s:batch.kubernetes.io/job-name=cinder-storage-init k8s:component=storage-init k8s:controller-uid=6ad5ad8a-6a22-4a10-8b9e-258dc3c4f26e k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-storage-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-storage-init k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=bdb5c1bea0 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=406 identity=38202 ipv4=10.0.0.127 ipv6= k8sPodName=openstack/cinder-storage-init-v72ws subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.27 482872b7-19e9-46a1-b586-29dcc30aa608 default }" containerID=be7c06eecf2111ad966f9cb64d951ab7eda47f9f9f3c3839cb25136e7ceb3a0d datapathConfiguration="&{false false false false false }" interface=lxc3264ea1036b2 k8sPodName=openstack/cinder-bootstrap-hh495 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=be7c06eecf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2395 ipv4=10.0.0.27 ipv6= k8sPodName=openstack/cinder-bootstrap-hh495 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=be7c06eecf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2395 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=e5f71ed7-331d-4b47-b199-b710caa67d14,k8s:batch.kubernetes.io/job-name=cinder-bootstrap,k8s:component=bootstrap,k8s:controller-uid=e5f71ed7-331d-4b47-b199-b710caa67d14,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-bootstrap,k8s:release_group=cinder" ipv4=10.0.0.27 ipv6= k8sPodName=openstack/cinder-bootstrap-hh495 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=e5f71ed7-331d-4b47-b199-b710caa67d14;k8s:batch.kubernetes.io/job-name=cinder-bootstrap;k8s:component=bootstrap;k8s:controller-uid=e5f71ed7-331d-4b47-b199-b710caa67d14;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-bootstrap;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-bootstrap;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=be7c06eecf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2395 identity=44489 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=e5f71ed7-331d-4b47-b199-b710caa67d14,k8s:batch.kubernetes.io/job-name=cinder-bootstrap,k8s:component=bootstrap,k8s:controller-uid=e5f71ed7-331d-4b47-b199-b710caa67d14,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-bootstrap,k8s:release_group=cinder" ipv4=10.0.0.27 ipv6= k8sPodName=openstack/cinder-bootstrap-hh495 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=be7c06eecf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2395 identity=44489 ipv4=10.0.0.27 ipv6= k8sPodName=openstack/cinder-bootstrap-hh495 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=be7c06eecf datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2395 identity=44489 ipv4=10.0.0.27 ipv6= k8sPodName=openstack/cinder-bootstrap-hh495 subsys=endpoint level=info msg="Successful endpoint creation" containerID=be7c06eecf datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2395 identity=44489 ipv4=10.0.0.27 ipv6= k8sPodName=openstack/cinder-bootstrap-hh495 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.126 05b97264-e121-4020-be5a-c0cbe334593b default }" containerID=e1f90898d5d327f29605d544643026bb15abe259edcdbb36d47cfc4e908949d4 datapathConfiguration="&{false false false false false }" interface=lxc9f5e80f4a6c9 k8sPodName=openstack/cinder-volume-6445cb69bf-zbc89 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e1f90898d5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=683 ipv4=10.0.0.126 ipv6= k8sPodName=openstack/cinder-volume-6445cb69bf-zbc89 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e1f90898d5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=683 identityLabels="k8s:application=cinder,k8s:component=volume,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-volume,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=cinder" ipv4=10.0.0.126 ipv6= k8sPodName=openstack/cinder-volume-6445cb69bf-zbc89 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:component=volume;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-volume;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e1f90898d5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=683 identity=5277 identityLabels="k8s:application=cinder,k8s:component=volume,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-volume,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=cinder" ipv4=10.0.0.126 ipv6= k8sPodName=openstack/cinder-volume-6445cb69bf-zbc89 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e1f90898d5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=683 identity=5277 ipv4=10.0.0.126 ipv6= k8sPodName=openstack/cinder-volume-6445cb69bf-zbc89 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.56 24d60e78-46d8-4e55-8178-f5f55e0604f0 default }" containerID=b63aeef8862a7980bdc73693a37c26956818d5399fbceca74a4bdb78743a5318 datapathConfiguration="&{false false false false false }" interface=lxc820add3109fc k8sPodName=openstack/cinder-backup-6bcd478f47-vjkqw labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b63aeef886 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1406 ipv4=10.0.0.56 ipv6= k8sPodName=openstack/cinder-backup-6bcd478f47-vjkqw subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b63aeef886 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1406 identityLabels="k8s:application=cinder,k8s:component=backup,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-backup,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=cinder" ipv4=10.0.0.56 ipv6= k8sPodName=openstack/cinder-backup-6bcd478f47-vjkqw subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:component=backup;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-backup;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b63aeef886 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1406 identity=30003 identityLabels="k8s:application=cinder,k8s:component=backup,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-backup,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=cinder" ipv4=10.0.0.56 ipv6= k8sPodName=openstack/cinder-backup-6bcd478f47-vjkqw oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b63aeef886 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1406 identity=30003 ipv4=10.0.0.56 ipv6= k8sPodName=openstack/cinder-backup-6bcd478f47-vjkqw subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e1f90898d5 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=683 identity=5277 ipv4=10.0.0.126 ipv6= k8sPodName=openstack/cinder-volume-6445cb69bf-zbc89 subsys=endpoint level=info msg="Successful endpoint creation" containerID=e1f90898d5 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=683 identity=5277 ipv4=10.0.0.126 ipv6= k8sPodName=openstack/cinder-volume-6445cb69bf-zbc89 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=b63aeef886 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1406 identity=30003 ipv4=10.0.0.56 ipv6= k8sPodName=openstack/cinder-backup-6bcd478f47-vjkqw subsys=endpoint level=info msg="Successful endpoint creation" containerID=b63aeef886 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1406 identity=30003 ipv4=10.0.0.56 ipv6= k8sPodName=openstack/cinder-backup-6bcd478f47-vjkqw subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=be7c06eecf endpointID=2395 k8sNamespace=openstack k8sPodName=cinder-bootstrap-hh495 subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=e5f71ed7-331d-4b47-b199-b710caa67d14 k8s:batch.kubernetes.io/job-name=cinder-bootstrap k8s:component=bootstrap k8s:controller-uid=e5f71ed7-331d-4b47-b199-b710caa67d14 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-bootstrap k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-bootstrap k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=be7c06eecf datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2395 identity=44489 ipv4=10.0.0.27 ipv6= k8sPodName=openstack/cinder-bootstrap-hh495 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.35 8f7e82d9-e355-4a2b-b4ee-142c69ef1d8a default }" containerID=7f1ee6f31f77ab00f5f52e1a081cdb51f5a6b85045a087ef50a67c1dac986ace datapathConfiguration="&{false false false false false }" interface=lxc4a7a343af154 k8sPodName=openstack/placement-api-6d89fcc6f9-wcccf labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7f1ee6f31f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=804 ipv4=10.0.0.35 ipv6= k8sPodName=openstack/placement-api-6d89fcc6f9-wcccf subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7f1ee6f31f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=804 identityLabels="k8s:application=placement,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=placement" ipv4=10.0.0.35 ipv6= k8sPodName=openstack/placement-api-6d89fcc6f9-wcccf subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=placement;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=placement-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=placement;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7f1ee6f31f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=804 identity=16507 identityLabels="k8s:application=placement,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=placement" ipv4=10.0.0.35 ipv6= k8sPodName=openstack/placement-api-6d89fcc6f9-wcccf oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7f1ee6f31f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=804 identity=16507 ipv4=10.0.0.35 ipv6= k8sPodName=openstack/placement-api-6d89fcc6f9-wcccf subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.157 ff56ab1f-e0bd-4ded-aec4-712b15f7e0b9 default }" containerID=06a0b9245e861a674d68f4d879da136f6e0c73877ff5e25f49c777f11826b9e8 datapathConfiguration="&{false false false false false }" interface=lxc39dd04625d9e k8sPodName=openstack/placement-db-init-5pxjm labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=06a0b9245e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2794 ipv4=10.0.0.157 ipv6= k8sPodName=openstack/placement-db-init-5pxjm subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=06a0b9245e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2794 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=2c45f111-25e4-4de6-b8c5-4c36f88dd8ea,k8s:batch.kubernetes.io/job-name=placement-db-init,k8s:component=db-init,k8s:controller-uid=2c45f111-25e4-4de6-b8c5-4c36f88dd8ea,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-db-init,k8s:release_group=placement" ipv4=10.0.0.157 ipv6= k8sPodName=openstack/placement-db-init-5pxjm subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=placement;k8s:batch.kubernetes.io/controller-uid=2c45f111-25e4-4de6-b8c5-4c36f88dd8ea;k8s:batch.kubernetes.io/job-name=placement-db-init;k8s:component=db-init;k8s:controller-uid=2c45f111-25e4-4de6-b8c5-4c36f88dd8ea;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=placement-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=placement-db-init;k8s:release_group=placement;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=06a0b9245e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2794 identity=43727 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=2c45f111-25e4-4de6-b8c5-4c36f88dd8ea,k8s:batch.kubernetes.io/job-name=placement-db-init,k8s:component=db-init,k8s:controller-uid=2c45f111-25e4-4de6-b8c5-4c36f88dd8ea,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-db-init,k8s:release_group=placement" ipv4=10.0.0.157 ipv6= k8sPodName=openstack/placement-db-init-5pxjm oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=06a0b9245e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2794 identity=43727 ipv4=10.0.0.157 ipv6= k8sPodName=openstack/placement-db-init-5pxjm subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=7f1ee6f31f datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=804 identity=16507 ipv4=10.0.0.35 ipv6= k8sPodName=openstack/placement-api-6d89fcc6f9-wcccf subsys=endpoint level=info msg="Successful endpoint creation" containerID=7f1ee6f31f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=804 identity=16507 ipv4=10.0.0.35 ipv6= k8sPodName=openstack/placement-api-6d89fcc6f9-wcccf subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=06a0b9245e datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2794 identity=43727 ipv4=10.0.0.157 ipv6= k8sPodName=openstack/placement-db-init-5pxjm subsys=endpoint level=info msg="Successful endpoint creation" containerID=06a0b9245e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2794 identity=43727 ipv4=10.0.0.157 ipv6= k8sPodName=openstack/placement-db-init-5pxjm subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=06a0b9245e endpointID=2794 k8sNamespace=openstack k8sPodName=placement-db-init-5pxjm subsys=daemon level=info msg="Releasing key" key="[k8s:application=placement k8s:batch.kubernetes.io/controller-uid=2c45f111-25e4-4de6-b8c5-4c36f88dd8ea k8s:batch.kubernetes.io/job-name=placement-db-init k8s:component=db-init k8s:controller-uid=2c45f111-25e4-4de6-b8c5-4c36f88dd8ea k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=placement-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=placement-db-init k8s:release_group=placement]" subsys=allocator level=info msg="Removed endpoint" containerID=06a0b9245e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2794 identity=43727 ipv4=10.0.0.157 ipv6= k8sPodName=openstack/placement-db-init-5pxjm subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.154 80110af5-4ceb-458a-8b29-62ac599b1c87 default }" containerID=af832179bbde65b274df9ee9627cfea5d44f710b2f4f186e5204b147a0480bd7 datapathConfiguration="&{false false false false false }" interface=lxcdb9fe3f5319d k8sPodName=openstack/placement-db-sync-4xmsl labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=af832179bb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=812 ipv4=10.0.0.154 ipv6= k8sPodName=openstack/placement-db-sync-4xmsl subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=af832179bb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=812 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=c064c989-9f49-43ae-acff-12a4ff043123,k8s:batch.kubernetes.io/job-name=placement-db-sync,k8s:component=db-sync,k8s:controller-uid=c064c989-9f49-43ae-acff-12a4ff043123,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-db-sync,k8s:release_group=placement" ipv4=10.0.0.154 ipv6= k8sPodName=openstack/placement-db-sync-4xmsl subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=placement;k8s:batch.kubernetes.io/controller-uid=c064c989-9f49-43ae-acff-12a4ff043123;k8s:batch.kubernetes.io/job-name=placement-db-sync;k8s:component=db-sync;k8s:controller-uid=c064c989-9f49-43ae-acff-12a4ff043123;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=placement-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=placement-db-sync;k8s:release_group=placement;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=af832179bb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=812 identity=57084 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=c064c989-9f49-43ae-acff-12a4ff043123,k8s:batch.kubernetes.io/job-name=placement-db-sync,k8s:component=db-sync,k8s:controller-uid=c064c989-9f49-43ae-acff-12a4ff043123,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-db-sync,k8s:release_group=placement" ipv4=10.0.0.154 ipv6= k8sPodName=openstack/placement-db-sync-4xmsl oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=af832179bb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=812 identity=57084 ipv4=10.0.0.154 ipv6= k8sPodName=openstack/placement-db-sync-4xmsl subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=af832179bb datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=812 identity=57084 ipv4=10.0.0.154 ipv6= k8sPodName=openstack/placement-db-sync-4xmsl subsys=endpoint level=info msg="Successful endpoint creation" containerID=af832179bb datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=812 identity=57084 ipv4=10.0.0.154 ipv6= k8sPodName=openstack/placement-db-sync-4xmsl subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=af832179bb endpointID=812 k8sNamespace=openstack k8sPodName=placement-db-sync-4xmsl subsys=daemon level=info msg="Releasing key" key="[k8s:application=placement k8s:batch.kubernetes.io/controller-uid=c064c989-9f49-43ae-acff-12a4ff043123 k8s:batch.kubernetes.io/job-name=placement-db-sync k8s:component=db-sync k8s:controller-uid=c064c989-9f49-43ae-acff-12a4ff043123 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=placement-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=placement-db-sync k8s:release_group=placement]" subsys=allocator level=info msg="Removed endpoint" containerID=af832179bb datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=812 identity=57084 ipv4=10.0.0.154 ipv6= k8sPodName=openstack/placement-db-sync-4xmsl subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.101 b973baa3-9d66-47cf-a37b-cdc07db55af8 default }" containerID=735463a3ee46ebe8a9063f1e0419e558b090da351c2772b028875e745c77542c datapathConfiguration="&{false false false false false }" interface=lxc9f326af9f3aa k8sPodName=openstack/placement-ks-service-nj8cq labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=735463a3ee datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4063 ipv4=10.0.0.101 ipv6= k8sPodName=openstack/placement-ks-service-nj8cq subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=735463a3ee datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4063 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=f19a5f23-7097-4dc3-a080-0f3f18213b85,k8s:batch.kubernetes.io/job-name=placement-ks-service,k8s:component=ks-service,k8s:controller-uid=f19a5f23-7097-4dc3-a080-0f3f18213b85,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-ks-service,k8s:release_group=placement" ipv4=10.0.0.101 ipv6= k8sPodName=openstack/placement-ks-service-nj8cq subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=placement;k8s:batch.kubernetes.io/controller-uid=f19a5f23-7097-4dc3-a080-0f3f18213b85;k8s:batch.kubernetes.io/job-name=placement-ks-service;k8s:component=ks-service;k8s:controller-uid=f19a5f23-7097-4dc3-a080-0f3f18213b85;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=placement-ks-service;k8s:release_group=placement;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=735463a3ee datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4063 identity=3884 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=f19a5f23-7097-4dc3-a080-0f3f18213b85,k8s:batch.kubernetes.io/job-name=placement-ks-service,k8s:component=ks-service,k8s:controller-uid=f19a5f23-7097-4dc3-a080-0f3f18213b85,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-ks-service,k8s:release_group=placement" ipv4=10.0.0.101 ipv6= k8sPodName=openstack/placement-ks-service-nj8cq oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=735463a3ee datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4063 identity=3884 ipv4=10.0.0.101 ipv6= k8sPodName=openstack/placement-ks-service-nj8cq subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=735463a3ee datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=4063 identity=3884 ipv4=10.0.0.101 ipv6= k8sPodName=openstack/placement-ks-service-nj8cq subsys=endpoint level=info msg="Successful endpoint creation" containerID=735463a3ee datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=4063 identity=3884 ipv4=10.0.0.101 ipv6= k8sPodName=openstack/placement-ks-service-nj8cq subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=735463a3ee endpointID=4063 k8sNamespace=openstack k8sPodName=placement-ks-service-nj8cq subsys=daemon level=info msg="Releasing key" key="[k8s:application=placement k8s:batch.kubernetes.io/controller-uid=f19a5f23-7097-4dc3-a080-0f3f18213b85 k8s:batch.kubernetes.io/job-name=placement-ks-service k8s:component=ks-service k8s:controller-uid=f19a5f23-7097-4dc3-a080-0f3f18213b85 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=placement-ks-service k8s:release_group=placement]" subsys=allocator level=info msg="Removed endpoint" containerID=735463a3ee datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=4063 identity=3884 ipv4=10.0.0.101 ipv6= k8sPodName=openstack/placement-ks-service-nj8cq subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.142 a6cfe6d7-5255-4e41-acb1-bdb03a27e5a9 default }" containerID=f9cee06431aa7c6c9630250a76a1a5382aca080a46fa90baea2b015d43571e7d datapathConfiguration="&{false false false false false }" interface=lxcc077f29e3673 k8sPodName=openstack/placement-ks-user-9cfxd labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f9cee06431 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3981 ipv4=10.0.0.142 ipv6= k8sPodName=openstack/placement-ks-user-9cfxd subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f9cee06431 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3981 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=61faac64-fb25-4a2e-8191-8e763721d069,k8s:batch.kubernetes.io/job-name=placement-ks-user,k8s:component=ks-user,k8s:controller-uid=61faac64-fb25-4a2e-8191-8e763721d069,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-ks-user,k8s:release_group=placement" ipv4=10.0.0.142 ipv6= k8sPodName=openstack/placement-ks-user-9cfxd subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=placement;k8s:batch.kubernetes.io/controller-uid=61faac64-fb25-4a2e-8191-8e763721d069;k8s:batch.kubernetes.io/job-name=placement-ks-user;k8s:component=ks-user;k8s:controller-uid=61faac64-fb25-4a2e-8191-8e763721d069;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=placement-ks-user;k8s:release_group=placement;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f9cee06431 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3981 identity=10272 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=61faac64-fb25-4a2e-8191-8e763721d069,k8s:batch.kubernetes.io/job-name=placement-ks-user,k8s:component=ks-user,k8s:controller-uid=61faac64-fb25-4a2e-8191-8e763721d069,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-ks-user,k8s:release_group=placement" ipv4=10.0.0.142 ipv6= k8sPodName=openstack/placement-ks-user-9cfxd oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f9cee06431 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3981 identity=10272 ipv4=10.0.0.142 ipv6= k8sPodName=openstack/placement-ks-user-9cfxd subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=f9cee06431 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3981 identity=10272 ipv4=10.0.0.142 ipv6= k8sPodName=openstack/placement-ks-user-9cfxd subsys=endpoint level=info msg="Successful endpoint creation" containerID=f9cee06431 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3981 identity=10272 ipv4=10.0.0.142 ipv6= k8sPodName=openstack/placement-ks-user-9cfxd subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=f9cee06431 endpointID=3981 k8sNamespace=openstack k8sPodName=placement-ks-user-9cfxd subsys=daemon level=info msg="Releasing key" key="[k8s:application=placement k8s:batch.kubernetes.io/controller-uid=61faac64-fb25-4a2e-8191-8e763721d069 k8s:batch.kubernetes.io/job-name=placement-ks-user k8s:component=ks-user k8s:controller-uid=61faac64-fb25-4a2e-8191-8e763721d069 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=placement-ks-user k8s:release_group=placement]" subsys=allocator level=info msg="Removed endpoint" containerID=f9cee06431 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3981 identity=10272 ipv4=10.0.0.142 ipv6= k8sPodName=openstack/placement-ks-user-9cfxd subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.170 39332209-89ca-4da4-bbe2-5fc9b44a177f default }" containerID=4cbcf55d71b7833fc7b5d815be1060754879d3d070648008976877025ccbac85 datapathConfiguration="&{false false false false false }" interface=lxccc6bc55b82ba k8sPodName=openstack/placement-ks-endpoints-h5c5j labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4cbcf55d71 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3942 ipv4=10.0.0.170 ipv6= k8sPodName=openstack/placement-ks-endpoints-h5c5j subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4cbcf55d71 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3942 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=e92d8a6d-2c0a-4cd1-b9cb-6a104cfd25b4,k8s:batch.kubernetes.io/job-name=placement-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=e92d8a6d-2c0a-4cd1-b9cb-6a104cfd25b4,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-ks-endpoints,k8s:release_group=placement" ipv4=10.0.0.170 ipv6= k8sPodName=openstack/placement-ks-endpoints-h5c5j subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=placement;k8s:batch.kubernetes.io/controller-uid=e92d8a6d-2c0a-4cd1-b9cb-6a104cfd25b4;k8s:batch.kubernetes.io/job-name=placement-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=e92d8a6d-2c0a-4cd1-b9cb-6a104cfd25b4;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=placement-ks-endpoints;k8s:release_group=placement;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=4cbcf55d71 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3942 identity=4617 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=e92d8a6d-2c0a-4cd1-b9cb-6a104cfd25b4,k8s:batch.kubernetes.io/job-name=placement-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=e92d8a6d-2c0a-4cd1-b9cb-6a104cfd25b4,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-ks-endpoints,k8s:release_group=placement" ipv4=10.0.0.170 ipv6= k8sPodName=openstack/placement-ks-endpoints-h5c5j oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4cbcf55d71 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3942 identity=4617 ipv4=10.0.0.170 ipv6= k8sPodName=openstack/placement-ks-endpoints-h5c5j subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=4cbcf55d71 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3942 identity=4617 ipv4=10.0.0.170 ipv6= k8sPodName=openstack/placement-ks-endpoints-h5c5j subsys=endpoint level=info msg="Successful endpoint creation" containerID=4cbcf55d71 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3942 identity=4617 ipv4=10.0.0.170 ipv6= k8sPodName=openstack/placement-ks-endpoints-h5c5j subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=4cbcf55d71 endpointID=3942 k8sNamespace=openstack k8sPodName=placement-ks-endpoints-h5c5j subsys=daemon level=info msg="Releasing key" key="[k8s:application=placement k8s:batch.kubernetes.io/controller-uid=e92d8a6d-2c0a-4cd1-b9cb-6a104cfd25b4 k8s:batch.kubernetes.io/job-name=placement-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=e92d8a6d-2c0a-4cd1-b9cb-6a104cfd25b4 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=placement-ks-endpoints k8s:release_group=placement]" subsys=allocator level=info msg="Removed endpoint" containerID=4cbcf55d71 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3942 identity=4617 ipv4=10.0.0.170 ipv6= k8sPodName=openstack/placement-ks-endpoints-h5c5j subsys=endpoint