level=info msg="Memory available for map entries (0.003% of 67421634560B): 168554086B" subsys=config level=info msg="option bpf-ct-global-tcp-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-ct-global-any-max set by dynamic sizing to 295708" subsys=config level=info msg="option bpf-nat-global-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-neigh-global-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-sock-rev-map-max set by dynamic sizing to 295708" subsys=config level=info msg=" --agent-health-port='9879'" subsys=daemon level=info msg=" --agent-labels=''" subsys=daemon level=info msg=" --agent-liveness-update-interval='1s'" subsys=daemon level=info msg=" --agent-not-ready-taint-key='node.cilium.io/agent-not-ready'" subsys=daemon level=info msg=" --allocator-list-timeout='3m0s'" subsys=daemon level=info msg=" --allow-icmp-frag-needed='true'" subsys=daemon level=info msg=" --allow-localhost='auto'" subsys=daemon level=info msg=" --annotate-k8s-node='false'" subsys=daemon level=info msg=" --api-rate-limit=''" subsys=daemon level=info msg=" --arping-refresh-period='30s'" subsys=daemon level=info msg=" --auto-create-cilium-node-resource='true'" subsys=daemon level=info msg=" --auto-direct-node-routes='false'" subsys=daemon level=info msg=" --bgp-announce-lb-ip='false'" subsys=daemon level=info msg=" --bgp-announce-pod-cidr='false'" subsys=daemon level=info msg=" --bgp-config-path='/var/lib/cilium/bgp/config.yaml'" subsys=daemon level=info msg=" --bpf-auth-map-max='524288'" subsys=daemon level=info msg=" --bpf-ct-global-any-max='262144'" subsys=daemon level=info msg=" --bpf-ct-global-tcp-max='524288'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-any='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp='6h0m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp-fin='10s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp-syn='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-any='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-tcp='6h0m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-tcp-grace='1m0s'" subsys=daemon level=info msg=" --bpf-filter-priority='1'" subsys=daemon level=info msg=" --bpf-fragments-map-max='8192'" subsys=daemon level=info msg=" --bpf-lb-acceleration='disabled'" subsys=daemon level=info msg=" --bpf-lb-affinity-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-algorithm='random'" subsys=daemon level=info msg=" --bpf-lb-dev-ip-addr-inherit=''" subsys=daemon level=info msg=" --bpf-lb-dsr-dispatch='opt'" subsys=daemon level=info msg=" --bpf-lb-dsr-l4-xlate='frontend'" subsys=daemon level=info msg=" --bpf-lb-external-clusterip='false'" subsys=daemon level=info msg=" --bpf-lb-maglev-hash-seed='JLfvgnHc2kaSUFaI'" subsys=daemon level=info msg=" --bpf-lb-maglev-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-maglev-table-size='16381'" subsys=daemon level=info msg=" --bpf-lb-map-max='65536'" subsys=daemon level=info msg=" --bpf-lb-mode='snat'" subsys=daemon level=info msg=" --bpf-lb-rev-nat-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-rss-ipv4-src-cidr=''" subsys=daemon level=info msg=" --bpf-lb-rss-ipv6-src-cidr=''" subsys=daemon level=info msg=" --bpf-lb-service-backend-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-service-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-sock='false'" subsys=daemon level=info msg=" --bpf-lb-sock-hostns-only='false'" subsys=daemon level=info msg=" --bpf-lb-source-range-map-max='0'" subsys=daemon level=info msg=" --bpf-map-dynamic-size-ratio='0.0025'" subsys=daemon level=info msg=" --bpf-map-event-buffers=''" subsys=daemon level=info msg=" --bpf-nat-global-max='524288'" subsys=daemon level=info msg=" --bpf-neigh-global-max='524288'" subsys=daemon level=info msg=" --bpf-policy-map-full-reconciliation-interval='15m0s'" subsys=daemon level=info msg=" --bpf-policy-map-max='16384'" subsys=daemon level=info msg=" --bpf-root='/sys/fs/bpf'" subsys=daemon level=info msg=" --bpf-sock-rev-map-max='262144'" subsys=daemon level=info msg=" --bypass-ip-availability-upon-restore='false'" subsys=daemon level=info msg=" --certificates-directory='/var/run/cilium/certs'" subsys=daemon level=info msg=" --cflags=''" subsys=daemon level=info msg=" --cgroup-root='/run/cilium/cgroupv2'" subsys=daemon level=info msg=" --cilium-endpoint-gc-interval='5m0s'" subsys=daemon level=info msg=" --cluster-health-port='4240'" subsys=daemon level=info msg=" --cluster-id='0'" subsys=daemon level=info msg=" --cluster-name='default'" subsys=daemon level=info msg=" --cluster-pool-ipv4-cidr='10.0.0.0/8'" subsys=daemon level=info msg=" --cluster-pool-ipv4-mask-size='24'" subsys=daemon level=info msg=" --clustermesh-config='/var/lib/cilium/clustermesh/'" subsys=daemon level=info msg=" --clustermesh-ip-identities-sync-timeout='1m0s'" subsys=daemon level=info msg=" --cmdref=''" subsys=daemon level=info msg=" --cni-chaining-mode='none'" subsys=daemon level=info msg=" --cni-chaining-target=''" subsys=daemon level=info msg=" --cni-exclusive='true'" subsys=daemon level=info msg=" --cni-external-routing='false'" subsys=daemon level=info msg=" --cni-log-file='/var/run/cilium/cilium-cni.log'" subsys=daemon level=info msg=" --cnp-node-status-gc-interval='0s'" subsys=daemon level=info msg=" --config=''" subsys=daemon level=info msg=" --config-dir='/tmp/cilium/config-map'" subsys=daemon level=info msg=" --config-sources='config-map:kube-system/cilium-config'" subsys=daemon level=info msg=" --conntrack-gc-interval='0s'" subsys=daemon level=info msg=" --conntrack-gc-max-interval='0s'" subsys=daemon level=info msg=" --crd-wait-timeout='5m0s'" subsys=daemon level=info msg=" --custom-cni-conf='false'" subsys=daemon level=info msg=" --datapath-mode='veth'" subsys=daemon level=info msg=" --debug='false'" subsys=daemon level=info msg=" --debug-verbose=''" subsys=daemon level=info msg=" --derive-masquerade-ip-addr-from-device=''" subsys=daemon level=info msg=" --devices=''" subsys=daemon level=info msg=" --direct-routing-device=''" subsys=daemon level=info msg=" --disable-cnp-status-updates='true'" subsys=daemon level=info msg=" --disable-endpoint-crd='false'" subsys=daemon level=info msg=" --disable-envoy-version-check='false'" subsys=daemon level=info msg=" --disable-iptables-feeder-rules=''" subsys=daemon level=info msg=" --dns-max-ips-per-restored-rule='1000'" subsys=daemon level=info msg=" --dns-policy-unload-on-shutdown='false'" subsys=daemon level=info msg=" --dnsproxy-concurrency-limit='0'" subsys=daemon level=info msg=" --dnsproxy-concurrency-processing-grace-period='0s'" subsys=daemon level=info msg=" --dnsproxy-enable-transparent-mode='true'" subsys=daemon level=info msg=" --dnsproxy-lock-count='128'" subsys=daemon level=info msg=" --dnsproxy-lock-timeout='500ms'" subsys=daemon level=info msg=" --egress-gateway-policy-map-max='16384'" subsys=daemon level=info msg=" --egress-gateway-reconciliation-trigger-interval='1s'" subsys=daemon level=info msg=" --egress-masquerade-interfaces=''" subsys=daemon level=info msg=" --egress-multi-home-ip-rule-compat='false'" subsys=daemon level=info msg=" --enable-auto-protect-node-port-range='true'" subsys=daemon level=info msg=" --enable-bandwidth-manager='false'" subsys=daemon level=info msg=" --enable-bbr='false'" subsys=daemon level=info msg=" --enable-bgp-control-plane='false'" subsys=daemon level=info msg=" --enable-bpf-clock-probe='false'" subsys=daemon level=info msg=" --enable-bpf-masquerade='false'" subsys=daemon level=info msg=" --enable-bpf-tproxy='false'" subsys=daemon level=info msg=" --enable-cilium-api-server-access='*'" subsys=daemon level=info msg=" --enable-cilium-endpoint-slice='false'" subsys=daemon level=info msg=" --enable-cilium-health-api-server-access='*'" subsys=daemon level=info msg=" --enable-custom-calls='false'" subsys=daemon level=info msg=" --enable-endpoint-health-checking='true'" subsys=daemon level=info msg=" --enable-endpoint-routes='false'" subsys=daemon level=info msg=" --enable-envoy-config='false'" subsys=daemon level=info msg=" --enable-external-ips='false'" subsys=daemon level=info msg=" --enable-health-check-nodeport='true'" subsys=daemon level=info msg=" --enable-health-checking='true'" subsys=daemon level=info msg=" --enable-high-scale-ipcache='false'" subsys=daemon level=info msg=" --enable-host-firewall='false'" subsys=daemon level=info msg=" --enable-host-legacy-routing='false'" subsys=daemon level=info msg=" --enable-host-port='false'" subsys=daemon level=info msg=" --enable-hubble='false'" subsys=daemon level=info msg=" --enable-hubble-recorder-api='true'" subsys=daemon level=info msg=" --enable-icmp-rules='true'" subsys=daemon level=info msg=" --enable-identity-mark='true'" subsys=daemon level=info msg=" --enable-ip-masq-agent='false'" subsys=daemon level=info msg=" --enable-ipsec='false'" subsys=daemon level=info msg=" --enable-ipsec-key-watcher='true'" subsys=daemon level=info msg=" --enable-ipv4='true'" subsys=daemon level=info msg=" --enable-ipv4-big-tcp='false'" subsys=daemon level=info msg=" --enable-ipv4-egress-gateway='false'" subsys=daemon level=info msg=" --enable-ipv4-fragment-tracking='true'" subsys=daemon level=info msg=" --enable-ipv4-masquerade='true'" subsys=daemon level=info msg=" --enable-ipv6='false'" subsys=daemon level=info msg=" --enable-ipv6-big-tcp='false'" subsys=daemon level=info msg=" --enable-ipv6-masquerade='true'" subsys=daemon level=info msg=" --enable-ipv6-ndp='false'" subsys=daemon level=info msg=" --enable-k8s='true'" subsys=daemon level=info msg=" --enable-k8s-api-discovery='false'" subsys=daemon level=info msg=" --enable-k8s-endpoint-slice='true'" subsys=daemon level=info msg=" --enable-k8s-event-handover='false'" subsys=daemon level=info msg=" --enable-k8s-networkpolicy='true'" subsys=daemon level=info msg=" --enable-k8s-terminating-endpoint='true'" subsys=daemon level=info msg=" --enable-l2-announcements='false'" subsys=daemon level=info msg=" --enable-l2-neigh-discovery='true'" subsys=daemon level=info msg=" --enable-l2-pod-announcements='false'" subsys=daemon level=info msg=" --enable-l7-proxy='true'" subsys=daemon level=info msg=" --enable-local-node-route='true'" subsys=daemon level=info msg=" --enable-local-redirect-policy='false'" subsys=daemon level=info msg=" --enable-mke='false'" subsys=daemon level=info msg=" --enable-monitor='true'" subsys=daemon level=info msg=" --enable-nat46x64-gateway='false'" subsys=daemon level=info msg=" --enable-node-port='false'" subsys=daemon level=info msg=" --enable-pmtu-discovery='false'" subsys=daemon level=info msg=" --enable-policy='default'" subsys=daemon level=info msg=" --enable-recorder='false'" subsys=daemon level=info msg=" --enable-remote-node-identity='true'" subsys=daemon level=info msg=" --enable-runtime-device-detection='false'" subsys=daemon level=info msg=" --enable-sctp='false'" subsys=daemon level=info msg=" --enable-service-topology='false'" subsys=daemon level=info msg=" --enable-session-affinity='false'" subsys=daemon level=info msg=" --enable-srv6='false'" subsys=daemon level=info msg=" --enable-stale-cilium-endpoint-cleanup='true'" subsys=daemon level=info msg=" --enable-svc-source-range-check='true'" subsys=daemon level=info msg=" --enable-tracing='false'" subsys=daemon level=info msg=" --enable-unreachable-routes='false'" subsys=daemon level=info msg=" --enable-vtep='false'" subsys=daemon level=info msg=" --enable-well-known-identities='false'" subsys=daemon level=info msg=" --enable-wireguard='false'" subsys=daemon level=info msg=" --enable-wireguard-userspace-fallback='false'" subsys=daemon level=info msg=" --enable-xdp-prefilter='false'" subsys=daemon level=info msg=" --enable-xt-socket-fallback='true'" subsys=daemon level=info msg=" --encrypt-interface=''" subsys=daemon level=info msg=" --encrypt-node='false'" subsys=daemon level=info msg=" --endpoint-gc-interval='5m0s'" subsys=daemon level=info msg=" --endpoint-queue-size='25'" subsys=daemon level=info msg=" --endpoint-status=''" subsys=daemon level=info msg=" --envoy-config-timeout='2m0s'" subsys=daemon level=info msg=" --envoy-log=''" subsys=daemon level=info msg=" --exclude-local-address=''" subsys=daemon level=info msg=" --external-envoy-proxy='false'" subsys=daemon level=info msg=" --fixed-identity-mapping=''" subsys=daemon level=info msg=" --fqdn-regex-compile-lru-size='1024'" subsys=daemon level=info msg=" --gops-port='9890'" subsys=daemon level=info msg=" --http-403-msg=''" subsys=daemon level=info msg=" --http-idle-timeout='0'" subsys=daemon level=info msg=" --http-max-grpc-timeout='0'" subsys=daemon level=info msg=" --http-normalize-path='true'" subsys=daemon level=info msg=" --http-request-timeout='3600'" subsys=daemon level=info msg=" --http-retry-count='3'" subsys=daemon level=info msg=" --http-retry-timeout='0'" subsys=daemon level=info msg=" --hubble-disable-tls='false'" subsys=daemon level=info msg=" --hubble-event-buffer-capacity='4095'" subsys=daemon level=info msg=" --hubble-event-queue-size='0'" subsys=daemon level=info msg=" --hubble-export-file-compress='false'" subsys=daemon level=info msg=" --hubble-export-file-max-backups='5'" subsys=daemon level=info msg=" --hubble-export-file-max-size-mb='10'" subsys=daemon level=info msg=" --hubble-export-file-path=''" subsys=daemon level=info msg=" --hubble-listen-address=''" subsys=daemon level=info msg=" --hubble-metrics=''" subsys=daemon level=info msg=" --hubble-metrics-server=''" subsys=daemon level=info msg=" --hubble-monitor-events=''" subsys=daemon level=info msg=" --hubble-prefer-ipv6='false'" subsys=daemon level=info msg=" --hubble-recorder-sink-queue-size='1024'" subsys=daemon level=info msg=" --hubble-recorder-storage-path='/var/run/cilium/pcaps'" subsys=daemon level=info msg=" --hubble-skip-unknown-cgroup-ids='true'" subsys=daemon level=info msg=" --hubble-socket-path='/var/run/cilium/hubble.sock'" subsys=daemon level=info msg=" --hubble-tls-cert-file=''" subsys=daemon level=info msg=" --hubble-tls-client-ca-files=''" subsys=daemon level=info msg=" --hubble-tls-key-file=''" subsys=daemon level=info msg=" --identity-allocation-mode='crd'" subsys=daemon level=info msg=" --identity-change-grace-period='5s'" subsys=daemon level=info msg=" --identity-gc-interval='15m0s'" subsys=daemon level=info msg=" --identity-heartbeat-timeout='30m0s'" subsys=daemon level=info msg=" --identity-restore-grace-period='10m0s'" subsys=daemon level=info msg=" --install-egress-gateway-routes='false'" subsys=daemon level=info msg=" --install-iptables-rules='true'" subsys=daemon level=info msg=" --install-no-conntrack-iptables-rules='false'" subsys=daemon level=info msg=" --ip-allocation-timeout='2m0s'" subsys=daemon level=info msg=" --ip-masq-agent-config-path='/etc/config/ip-masq-agent'" subsys=daemon level=info msg=" --ipam='cluster-pool'" subsys=daemon level=info msg=" --ipam-cilium-node-update-rate='15s'" subsys=daemon level=info msg=" --ipam-multi-pool-pre-allocation='default=8'" subsys=daemon level=info msg=" --ipsec-key-file=''" subsys=daemon level=info msg=" --ipsec-key-rotation-duration='5m0s'" subsys=daemon level=info msg=" --iptables-lock-timeout='5s'" subsys=daemon level=info msg=" --iptables-random-fully='false'" subsys=daemon level=info msg=" --ipv4-native-routing-cidr=''" subsys=daemon level=info msg=" --ipv4-node='auto'" subsys=daemon level=info msg=" --ipv4-pod-subnets=''" subsys=daemon level=info msg=" --ipv4-range='auto'" subsys=daemon level=info msg=" --ipv4-service-loopback-address='169.254.42.1'" subsys=daemon level=info msg=" --ipv4-service-range='auto'" subsys=daemon level=info msg=" --ipv6-cluster-alloc-cidr='f00d::/64'" subsys=daemon level=info msg=" --ipv6-mcast-device=''" subsys=daemon level=info msg=" --ipv6-native-routing-cidr=''" subsys=daemon level=info msg=" --ipv6-node='auto'" subsys=daemon level=info msg=" --ipv6-pod-subnets=''" subsys=daemon level=info msg=" --ipv6-range='auto'" subsys=daemon level=info msg=" --ipv6-service-range='auto'" subsys=daemon level=info msg=" --join-cluster='false'" subsys=daemon level=info msg=" --k8s-api-server=''" subsys=daemon level=info msg=" --k8s-client-burst='10'" subsys=daemon level=info msg=" --k8s-client-qps='5'" subsys=daemon level=info msg=" --k8s-heartbeat-timeout='30s'" subsys=daemon level=info msg=" --k8s-kubeconfig-path=''" subsys=daemon level=info msg=" --k8s-namespace='kube-system'" subsys=daemon level=info msg=" --k8s-require-ipv4-pod-cidr='false'" subsys=daemon level=info msg=" --k8s-require-ipv6-pod-cidr='false'" subsys=daemon level=info msg=" --k8s-service-cache-size='128'" subsys=daemon level=info msg=" --k8s-service-proxy-name=''" subsys=daemon level=info msg=" --k8s-sync-timeout='3m0s'" subsys=daemon level=info msg=" --k8s-watcher-endpoint-selector='metadata.name!=kube-scheduler,metadata.name!=kube-controller-manager,metadata.name!=etcd-operator,metadata.name!=gcp-controller-manager'" subsys=daemon level=info msg=" --keep-config='false'" subsys=daemon level=info msg=" --kube-proxy-replacement='disabled'" subsys=daemon level=info msg=" --kube-proxy-replacement-healthz-bind-address=''" subsys=daemon level=info msg=" --kvstore=''" subsys=daemon level=info msg=" --kvstore-connectivity-timeout='2m0s'" subsys=daemon level=info msg=" --kvstore-lease-ttl='15m0s'" subsys=daemon level=info msg=" --kvstore-max-consecutive-quorum-errors='2'" subsys=daemon level=info msg=" --kvstore-opt=''" subsys=daemon level=info msg=" --kvstore-periodic-sync='5m0s'" subsys=daemon level=info msg=" --l2-announcements-lease-duration='15s'" subsys=daemon level=info msg=" --l2-announcements-renew-deadline='5s'" subsys=daemon level=info msg=" --l2-announcements-retry-period='2s'" subsys=daemon level=info msg=" --l2-pod-announcements-interface=''" subsys=daemon level=info msg=" --label-prefix-file=''" subsys=daemon level=info msg=" --labels=''" subsys=daemon level=info msg=" --lib-dir='/var/lib/cilium'" subsys=daemon level=info msg=" --local-max-addr-scope='252'" subsys=daemon level=info msg=" --local-router-ipv4=''" subsys=daemon level=info msg=" --local-router-ipv6=''" subsys=daemon level=info msg=" --log-driver=''" subsys=daemon level=info msg=" --log-opt=''" subsys=daemon level=info msg=" --log-system-load='false'" subsys=daemon level=info msg=" --max-controller-interval='0'" subsys=daemon level=info msg=" --mesh-auth-enabled='true'" subsys=daemon level=info msg=" --mesh-auth-gc-interval='5m0s'" subsys=daemon level=info msg=" --mesh-auth-mutual-listener-port='0'" subsys=daemon level=info msg=" --mesh-auth-queue-size='1024'" subsys=daemon level=info msg=" --mesh-auth-rotated-identities-queue-size='1024'" subsys=daemon level=info msg=" --mesh-auth-signal-backoff-duration='1s'" subsys=daemon level=info msg=" --mesh-auth-spiffe-trust-domain='spiffe.cilium'" subsys=daemon level=info msg=" --mesh-auth-spire-admin-socket=''" subsys=daemon level=info msg=" --metrics=''" subsys=daemon level=info msg=" --mke-cgroup-mount=''" subsys=daemon level=info msg=" --monitor-aggregation='medium'" subsys=daemon level=info msg=" --monitor-aggregation-flags='all'" subsys=daemon level=info msg=" --monitor-aggregation-interval='5s'" subsys=daemon level=info msg=" --monitor-queue-size='0'" subsys=daemon level=info msg=" --mtu='0'" subsys=daemon level=info msg=" --node-encryption-opt-out-labels='node-role.kubernetes.io/control-plane'" subsys=daemon level=info msg=" --node-port-acceleration='disabled'" subsys=daemon level=info msg=" --node-port-algorithm='random'" subsys=daemon level=info msg=" --node-port-bind-protection='true'" subsys=daemon level=info msg=" --node-port-mode='snat'" subsys=daemon level=info msg=" --node-port-range='30000,32767'" subsys=daemon level=info msg=" --nodes-gc-interval='5m0s'" subsys=daemon level=info msg=" --operator-api-serve-addr='127.0.0.1:9234'" subsys=daemon level=info msg=" --policy-audit-mode='false'" subsys=daemon level=info msg=" --policy-queue-size='100'" subsys=daemon level=info msg=" --policy-trigger-interval='1s'" subsys=daemon level=info msg=" --pprof='false'" subsys=daemon level=info msg=" --pprof-address='localhost'" subsys=daemon level=info msg=" --pprof-port='6060'" subsys=daemon level=info msg=" --preallocate-bpf-maps='false'" subsys=daemon level=info msg=" --prepend-iptables-chains='true'" subsys=daemon level=info msg=" --procfs='/host/proc'" subsys=daemon level=info msg=" --prometheus-serve-addr=':9962'" subsys=daemon level=info msg=" --proxy-connect-timeout='2'" subsys=daemon level=info msg=" --proxy-gid='1337'" subsys=daemon level=info msg=" --proxy-idle-timeout-seconds='60'" subsys=daemon level=info msg=" --proxy-max-connection-duration-seconds='0'" subsys=daemon level=info msg=" --proxy-max-requests-per-connection='0'" subsys=daemon level=info msg=" --proxy-prometheus-port='9964'" subsys=daemon level=info msg=" --read-cni-conf=''" subsys=daemon level=info msg=" --remove-cilium-node-taints='true'" subsys=daemon level=info msg=" --restore='true'" subsys=daemon level=info msg=" --route-metric='0'" subsys=daemon level=info msg=" --routing-mode='tunnel'" subsys=daemon level=info msg=" --set-cilium-is-up-condition='true'" subsys=daemon level=info msg=" --set-cilium-node-taints='true'" subsys=daemon level=info msg=" --sidecar-istio-proxy-image='cilium/istio_proxy'" subsys=daemon level=info msg=" --single-cluster-route='false'" subsys=daemon level=info msg=" --skip-cnp-status-startup-clean='false'" subsys=daemon level=info msg=" --socket-path='/var/run/cilium/cilium.sock'" subsys=daemon level=info msg=" --srv6-encap-mode='reduced'" subsys=daemon level=info msg=" --state-dir='/var/run/cilium'" subsys=daemon level=info msg=" --synchronize-k8s-nodes='true'" subsys=daemon level=info msg=" --tofqdns-dns-reject-response-code='refused'" subsys=daemon level=info msg=" --tofqdns-enable-dns-compression='true'" subsys=daemon level=info msg=" --tofqdns-endpoint-max-ip-per-hostname='50'" subsys=daemon level=info msg=" --tofqdns-idle-connection-grace-period='0s'" subsys=daemon level=info msg=" --tofqdns-max-deferred-connection-deletes='10000'" subsys=daemon level=info msg=" --tofqdns-min-ttl='0'" subsys=daemon level=info msg=" --tofqdns-pre-cache=''" subsys=daemon level=info msg=" --tofqdns-proxy-port='0'" subsys=daemon level=info msg=" --tofqdns-proxy-response-max-delay='100ms'" subsys=daemon level=info msg=" --trace-payloadlen='128'" subsys=daemon level=info msg=" --trace-sock='true'" subsys=daemon level=info msg=" --tunnel=''" subsys=daemon level=info msg=" --tunnel-port='6082'" subsys=daemon level=info msg=" --tunnel-protocol='geneve'" subsys=daemon level=info msg=" --unmanaged-pod-watcher-interval='15'" subsys=daemon level=info msg=" --use-cilium-internal-ip-for-ipsec='false'" subsys=daemon level=info msg=" --version='false'" subsys=daemon level=info msg=" --vlan-bpf-bypass=''" subsys=daemon level=info msg=" --vtep-cidr=''" subsys=daemon level=info msg=" --vtep-endpoint=''" subsys=daemon level=info msg=" --vtep-mac=''" subsys=daemon level=info msg=" --vtep-mask=''" subsys=daemon level=info msg=" --wireguard-encapsulate='false'" subsys=daemon level=info msg=" --write-cni-conf-when-ready='/host/etc/cni/net.d/05-cilium.conflist'" subsys=daemon level=info msg=" _ _ _" subsys=daemon level=info msg=" ___|_| |_|_ _ _____" subsys=daemon level=info msg="| _| | | | | | |" subsys=daemon level=info msg="|___|_|_|_|___|_|_|_|" subsys=daemon level=info msg="Cilium 1.14.8 cf6e022e 2024-03-13T12:23:35-04:00 go version go1.21.8 linux/amd64" subsys=daemon level=info msg="clang (10.0.0) and kernel (5.15.0) versions: OK!" subsys=linux-datapath level=info msg="linking environment: OK!" subsys=linux-datapath level=info msg="Kernel config file not found: if the agent fails to start, check the system requirements at https://docs.cilium.io/en/stable/operations/system_requirements" subsys=probes level=info msg="Detected mounted BPF filesystem at /sys/fs/bpf" subsys=bpf level=info msg="Mounted cgroupv2 filesystem at /run/cilium/cgroupv2" subsys=cgroups level=info msg="Parsing base label prefixes from default label list" subsys=labels-filter level=info msg="Parsing additional label prefixes from user inputs: []" subsys=labels-filter level=info msg="Final label prefixes to be used for identity evaluation:" subsys=labels-filter level=info msg=" - reserved:.*" subsys=labels-filter level=info msg=" - :io\\.kubernetes\\.pod\\.namespace" subsys=labels-filter level=info msg=" - :io\\.cilium\\.k8s\\.namespace\\.labels" subsys=labels-filter level=info msg=" - :app\\.kubernetes\\.io" subsys=labels-filter level=info msg=" - !:io\\.kubernetes" subsys=labels-filter level=info msg=" - !:kubernetes\\.io" subsys=labels-filter level=info msg=" - !:.*beta\\.kubernetes\\.io" subsys=labels-filter level=info msg=" - !:k8s\\.io" subsys=labels-filter level=info msg=" - !:pod-template-generation" subsys=labels-filter level=info msg=" - !:pod-template-hash" subsys=labels-filter level=info msg=" - !:controller-revision-hash" subsys=labels-filter level=info msg=" - !:annotation.*" subsys=labels-filter level=info msg=" - !:etcd_node" subsys=labels-filter level=info msg=Invoked duration=1.058899ms function="pprof.glob..func1 (cell.go:50)" subsys=hive level=info msg=Invoked duration="54.411µs" function="gops.registerGopsHooks (cell.go:38)" subsys=hive level=info msg=Invoked duration=1.166781ms function="metrics.NewRegistry (registry.go:65)" subsys=hive level=info msg=Invoked duration="10.99µs" function="metrics.glob..func1 (cell.go:12)" subsys=hive level=info msg="Spire Delegate API Client is disabled as no socket path is configured" subsys=spire-delegate level=info msg="Mutual authentication handler is disabled as no port is configured" subsys=auth level=info msg=Invoked duration=104.651703ms function="cmd.glob..func4 (daemon_main.go:1607)" subsys=hive level=info msg=Invoked duration="36.131µs" function="gc.registerSignalHandler (cell.go:47)" subsys=hive level=info msg=Invoked duration="64.341µs" function="utime.initUtimeSync (cell.go:29)" subsys=hive level=info msg=Invoked duration="154.182µs" function="agentliveness.newAgentLivenessUpdater (agent_liveness.go:43)" subsys=hive level=info msg=Invoked duration="101.641µs" function="l2responder.NewL2ResponderReconciler (l2responder.go:63)" subsys=hive level=info msg=Invoked duration="119.842µs" function="garp.newGARPProcessor (processor.go:27)" subsys=hive level=info msg=Starting subsys=hive level=info msg="Started gops server" address="127.0.0.1:9890" subsys=gops level=info msg="Start hook executed" duration="714.913µs" function="gops.registerGopsHooks.func1 (cell.go:43)" subsys=hive level=info msg="Start hook executed" duration="2.361µs" function="metrics.NewRegistry.func1 (registry.go:86)" subsys=hive level=info msg="Establishing connection to apiserver" host="https://10.96.0.1:443" subsys=k8s-client level=info msg="Serving prometheus metrics on :9962" subsys=metrics level=info msg="Connected to apiserver" subsys=k8s-client level=info msg="Start hook executed" duration=7.950107ms function="client.(*compositeClientset).onStart" subsys=hive level=info msg="Start hook executed" duration=5.199209ms function="authmap.newAuthMap.func1 (cell.go:27)" subsys=hive level=info msg="Start hook executed" duration="47.432µs" function="configmap.newMap.func1 (cell.go:23)" subsys=hive level=info msg="Start hook executed" duration="92.382µs" function="signalmap.newMap.func1 (cell.go:44)" subsys=hive level=info msg="Start hook executed" duration="285.905µs" function="nodemap.newNodeMap.func1 (cell.go:23)" subsys=hive level=info msg="Start hook executed" duration="161.463µs" function="eventsmap.newEventsMap.func1 (cell.go:35)" subsys=hive level=info msg="Start hook executed" duration="135.632µs" function="*cni.cniConfigManager.Start" subsys=hive level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Wrote CNI configuration file to /host/etc/cni/net.d/05-cilium.conflist" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Start hook executed" duration=52.82284ms function="datapath.newDatapath.func1 (cells.go:113)" subsys=hive level=info msg="Restored 0 node IDs from the BPF map" subsys=linux-datapath level=info msg="Start hook executed" duration="169.882µs" function="datapath.newDatapath.func2 (cells.go:126)" subsys=hive level=info msg="Start hook executed" duration="15.121µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Node].Start" subsys=hive level=info msg="Start hook executed" duration="5.29µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumNode].Start" subsys=hive level=info msg="Using autogenerated IPv4 allocation range" subsys=node v4Prefix=10.70.0.0/16 level=info msg="no local ciliumnode found, will not restore cilium internal ips from k8s" subsys=daemon level=info msg="Start hook executed" duration=104.334028ms function="node.NewLocalNodeStore.func1 (local_node_store.go:76)" subsys=hive level=info msg="Start hook executed" duration="15.861µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Start" subsys=hive level=info msg="Start hook executed" duration=100.494202ms function="*manager.diffStore[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Start" subsys=hive level=info msg="Start hook executed" duration="4.941µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s.Endpoints].Start" subsys=hive level=info msg="Using discoveryv1.EndpointSlice" subsys=k8s level=info msg="Start hook executed" duration=201.046323ms function="*manager.diffStore[*github.com/cilium/cilium/pkg/k8s.Endpoints].Start" subsys=hive level=info msg="Start hook executed" duration="6.61µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Pod].Start" subsys=hive level=info msg="Start hook executed" duration="4.42µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Namespace].Start" subsys=hive level=info msg="Start hook executed" duration="5.61µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumNetworkPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="15.64µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumClusterwideNetworkPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="3.33µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumCIDRGroup].Start" subsys=hive level=info msg="Start hook executed" duration="50.211µs" function="endpointmanager.newDefaultEndpointManager.func1 (cell.go:203)" subsys=hive level=info msg="Start hook executed" duration="22.64µs" function="cmd.newPolicyTrifecta.func1 (policy.go:135)" subsys=hive level=info msg="Start hook executed" duration="91.621µs" function="*manager.manager.Start" subsys=hive level=info msg="Serving cilium node monitor v1.2 API at unix:///var/run/cilium/monitor1_2.sock" subsys=monitor-agent level=info msg="Start hook executed" duration="373.316µs" function="agent.newMonitorAgent.func1 (cell.go:61)" subsys=hive level=info msg="Start hook executed" duration="3.25µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumL2AnnouncementPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="11.75µs" function="*job.group.Start" subsys=hive level=info msg="Envoy: Starting xDS gRPC server listening on /var/run/cilium/envoy/sockets/xds.sock" subsys=envoy-manager level=info msg="Start hook executed" duration="344.236µs" function="proxy.newProxy.func1 (cell.go:55)" subsys=hive level=info msg="Start hook executed" duration=1.035937ms function="signal.provideSignalManager.func1 (cell.go:25)" subsys=hive level=info msg="Datapath signal listener running" subsys=signal level=info msg="Start hook executed" duration=1.752011ms function="auth.registerAuthManager.func1 (cell.go:109)" subsys=hive level=info msg="Start hook executed" duration="8.37µs" function="auth.registerGCJobs.func1 (cell.go:158)" subsys=hive level=info msg="Start hook executed" duration="36.651µs" function="*job.group.Start" subsys=hive level=warning msg="Deprecated value for --kube-proxy-replacement: disabled (use either \"true\", or \"false\")" subsys=daemon level=info msg="Auto-disabling \"enable-node-port\", \"enable-external-ips\", \"bpf-lb-sock\", \"enable-host-port\" features and falling back to \"enable-host-legacy-routing\"" subsys=daemon level=info msg="Inheriting MTU from external network interface" device=ens3 ipAddr=199.204.45.70 mtu=1500 subsys=mtu level=info msg="Removed map pin at /sys/fs/bpf/tc/globals/cilium_ipcache, recreating and re-pinning map cilium_ipcache" file-path=/sys/fs/bpf/tc/globals/cilium_ipcache name=cilium_ipcache subsys=bpf level=info msg="Removed map pin at /sys/fs/bpf/tc/globals/cilium_tunnel_map, recreating and re-pinning map cilium_tunnel_map" file-path=/sys/fs/bpf/tc/globals/cilium_tunnel_map name=cilium_tunnel_map subsys=bpf level=info msg="Restored services from maps" failedServices=0 restoredServices=0 subsys=service level=info msg="Restored backends from maps" failedBackends=0 restoredBackends=0 skippedBackends=0 subsys=service level=info msg="Reading old endpoints..." subsys=daemon level=info msg="No old endpoints found." subsys=daemon level=info msg="Waiting until all Cilium CRDs are available" subsys=k8s level=info msg="All Cilium CRDs have been found and are available" subsys=k8s level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=warning msg="Unable to get node resource" error="ciliumnodes.cilium.io \"instance\" not found" subsys=nodediscovery level=warning msg="Unable to get node resource" error="ciliumnodes.cilium.io \"instance\" not found" subsys=nodediscovery level=info msg="Successfully created CiliumNode resource" subsys=nodediscovery level=warning msg="Unable to create CiliumNode resource, will retry" error="ciliumnodes.cilium.io \"instance\" already exists" subsys=nodediscovery level=info msg="Retrieved node information from cilium node" nodeName=instance subsys=k8s level=warning msg="Waiting for k8s node information" error="required IPv4 PodCIDR not available" subsys=k8s level=info msg="Retrieved node information from cilium node" nodeName=instance subsys=k8s level=info msg="Received own node information from API server" ipAddr.ipv4=199.204.45.70 ipAddr.ipv6="" k8sNodeIP=199.204.45.70 labels="map[beta.kubernetes.io/arch:amd64 beta.kubernetes.io/os:linux kubernetes.io/arch:amd64 kubernetes.io/hostname:instance kubernetes.io/os:linux node-role.kubernetes.io/control-plane: node.kubernetes.io/exclude-from-external-load-balancers:]" nodeName=instance subsys=k8s v4Prefix=10.0.0.0/24 v6Prefix="" level=info msg="k8s mode: Allowing localhost to reach local endpoints" subsys=daemon level=info msg="Detected devices" devices="[]" subsys=linux-datapath level=info msg="Enabling k8s event listener" subsys=k8s-watcher level=info msg="Removing stale endpoint interfaces" subsys=daemon level=info msg="Waiting until local node addressing before starting watchers depending on it" subsys=k8s-watcher level=info msg="Skipping kvstore configuration" subsys=daemon level=info msg="Initializing node addressing" subsys=daemon level=info msg="Initializing cluster-pool IPAM" subsys=ipam v4Prefix=10.0.0.0/24 v6Prefix="" level=info msg="Restoring endpoints..." subsys=daemon level=info msg="Endpoints restored" failed=0 restored=0 subsys=daemon level=info msg="Addressing information:" subsys=daemon level=info msg=" Cluster-Name: default" subsys=daemon level=info msg=" Cluster-ID: 0" subsys=daemon level=info msg=" Local node-name: instance" subsys=daemon level=info msg=" Node-IPv6: " subsys=daemon level=info msg=" External-Node IPv4: 199.204.45.70" subsys=daemon level=info msg=" Internal-Node IPv4: 10.0.0.252" subsys=daemon level=info msg=" IPv4 allocation prefix: 10.0.0.0/24" subsys=daemon level=info msg=" Loopback IPv4: 169.254.42.1" subsys=daemon level=info msg=" Local IPv4 addresses:" subsys=daemon level=info msg=" - 199.204.45.70" subsys=daemon level=info msg=" - 172.17.0.100" subsys=daemon level=info msg=" - 10.96.240.200" subsys=daemon level=info msg="Node updated" clusterName=default nodeName=instance subsys=nodemanager level=info msg="Adding local node to cluster" node="{instance default [{InternalIP 199.204.45.70} {CiliumInternalIP 10.0.0.252}] 10.0.0.0/24 [] [] 10.0.0.158 0 local 0 map[beta.kubernetes.io/arch:amd64 beta.kubernetes.io/os:linux kubernetes.io/arch:amd64 kubernetes.io/hostname:instance kubernetes.io/os:linux node-role.kubernetes.io/control-plane: node.kubernetes.io/exclude-from-external-load-balancers:] map[] 1 }" subsys=nodediscovery level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Waiting until all pre-existing resources have been received" subsys=k8s-watcher level=info msg="Initializing identity allocator" subsys=identity-cache level=info msg="Allocating identities between range" cluster-id=0 max=65535 min=256 subsys=identity-cache level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.forwarding sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.accept_local sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.send_redirects sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.forwarding sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.accept_local sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.send_redirects sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.core.bpf_jit_enable sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.all.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.fib_multipath_use_neigh sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=kernel.unprivileged_bpf_disabled sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=kernel.timer_migration sysParamValue=0 level=info msg="Setting up BPF datapath" bpfClockSource=ktime bpfInsnSet="" subsys=datapath-loader level=info msg="Iptables rules installed" subsys=iptables level=info msg="Adding new proxy port rules for cilium-dns-egress:34503" id=cilium-dns-egress subsys=proxy level=info msg="Iptables proxy rules installed" subsys=iptables level=info msg="Start hook executed" duration=2.419636452s function="cmd.newDaemonPromise.func1 (daemon_main.go:1663)" subsys=hive level=info msg="Starting IP identity watcher" subsys=ipcache level=info msg="Initializing daemon" subsys=daemon level=info msg="Validating configured node address ranges" subsys=daemon level=info msg="Starting connection tracking garbage collector" subsys=daemon level=info msg="Start hook executed" duration=1.293002ms function="utime.initUtimeSync.func1 (cell.go:33)" subsys=hive level=info msg="Start hook executed" duration="19.23µs" function="*job.group.Start" subsys=hive level=info msg="Start hook executed" duration="128.082µs" function="l2respondermap.newMap.func1 (l2_responder_map4.go:44)" subsys=hive level=info msg="Start hook executed" duration="14.86µs" function="*job.group.Start" subsys=hive level=info msg="Initial scan of connection tracking completed" subsys=ct-gc level=info msg="Regenerating restored endpoints" numRestored=0 subsys=daemon level=info msg="Creating host endpoint" subsys=daemon level=info msg="Finished regenerating restored endpoints" regenerated=0 subsys=daemon total=0 level=info msg="Deleted orphan backends" orphanBackends=0 subsys=service level=info msg="New endpoint" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=838 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=838 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Identity of endpoint changed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=838 identity=1 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,reserved:host" ipv4= ipv6= k8sPodName=/ oldIdentity="no identity" subsys=endpoint level=info msg="Launching Cilium health daemon" subsys=daemon level=info msg="Launching Cilium health endpoint" subsys=daemon level=info msg="Started healthz status API server" address="127.0.0.1:9879" subsys=daemon level=info msg="Processing queued endpoint deletion requests from /var/run/cilium/deleteQueue" subsys=daemon level=info msg="processing 0 queued deletion requests" subsys=daemon level=info msg="Initializing Cilium API" subsys=daemon level=info msg="Daemon initialization completed" bootstrapTime=3.467770738s subsys=daemon level=info msg="Hubble server is disabled" subsys=hubble level=info msg="Serving cilium API at unix:///var/run/cilium/cilium.sock" subsys=daemon level=info msg="Compiled new BPF template" BPFCompilationTime=305.017993ms file-path=/var/run/cilium/state/templates/f0b926ad379354aefef493729d933bf3413189ad3863c50f49bd15515be2c211/bpf_host.o subsys=datapath-loader level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=838 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.57 124a4061-6203-4f89-9070-e76177fbbec3 default }" containerID=39f32d189e8fbe6c79c004f4b4ed26801a25f9689a8ac32414cf183feed670b8 datapathConfiguration="&{false false false false false }" interface=lxcb1b511b23364 k8sPodName=kube-system/coredns-7c96b6546b-d4qkz labels="[]" subsys=daemon sync-build=true level=info msg="Create endpoint request" addressing="&{10.0.0.238 159eaf7c-8691-40d4-977c-7f53b935f382 default }" containerID=447cbae68eb017afc43978afbd36a62ca39dda469f362b6a16dfc15db01404d5 datapathConfiguration="&{false false false false false }" interface=lxcbd6c6a948801 k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-qjdx8 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=39f32d189e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1166 ipv4=10.0.0.57 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-d4qkz subsys=endpoint level=info msg="New endpoint" containerID=447cbae68e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1357 ipv4=10.0.0.238 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-qjdx8 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=39f32d189e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1166 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.57 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-d4qkz subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:kube-system]" subsys=crd-allocator level=info msg="Resolving identity labels (blocking)" containerID=447cbae68e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1357 identityLabels="k8s:app=certgen,k8s:batch.kubernetes.io/controller-uid=fff7ac6d-59df-4a2b-a969-74abc88eafc9,k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen,k8s:controller-uid=fff7ac6d-59df-4a2b-a969-74abc88eafc9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen,k8s:io.kubernetes.pod.namespace=envoy-gateway-system,k8s:job-name=envoy-gateway-gateway-helm-certgen" ipv4=10.0.0.238 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-qjdx8 subsys=endpoint level=info msg="Allocated new global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=coredns;k8s:io.kubernetes.pod.namespace=kube-system;k8s:k8s-app=kube-dns;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=39f32d189e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1166 identity=10778 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.57 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-d4qkz oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=39f32d189e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1166 identity=10778 ipv4=10.0.0.57 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-d4qkz subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name:envoy-gateway-system]" subsys=crd-allocator level=info msg="Invalid state transition skipped" containerID=447cbae68e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1357 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.238 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-qjdx8 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=certgen;k8s:batch.kubernetes.io/controller-uid=fff7ac6d-59df-4a2b-a969-74abc88eafc9;k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen;k8s:controller-uid=fff7ac6d-59df-4a2b-a969-74abc88eafc9;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system;k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen;k8s:io.kubernetes.pod.namespace=envoy-gateway-system;k8s:job-name=envoy-gateway-gateway-helm-certgen;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=447cbae68e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1357 identity=13532 identityLabels="k8s:app=certgen,k8s:batch.kubernetes.io/controller-uid=fff7ac6d-59df-4a2b-a969-74abc88eafc9,k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen,k8s:controller-uid=fff7ac6d-59df-4a2b-a969-74abc88eafc9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen,k8s:io.kubernetes.pod.namespace=envoy-gateway-system,k8s:job-name=envoy-gateway-gateway-helm-certgen" ipv4=10.0.0.238 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-qjdx8 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=447cbae68e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1357 identity=13532 ipv4=10.0.0.238 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-qjdx8 subsys=endpoint level=info msg="New endpoint" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2973 ipv4=10.0.0.158 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2973 identityLabels="reserved:health" ipv4=10.0.0.158 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Identity of endpoint changed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2973 identity=4 identityLabels="reserved:health" ipv4=10.0.0.158 ipv6= k8sPodName=/ oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Compiled new BPF template" BPFCompilationTime=1.04893932s file-path=/var/run/cilium/state/templates/909c761a8554f6f86dcc53186c82c3d159479aa25f9d06e4624e3914f87cd08e/bpf_lxc.o subsys=datapath-loader level=info msg="Serving cilium health API at unix:///var/run/cilium/health.sock" subsys=health-server level=info msg="Rewrote endpoint BPF program" containerID=39f32d189e datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1166 identity=10778 ipv4=10.0.0.57 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-d4qkz subsys=endpoint level=info msg="Successful endpoint creation" containerID=39f32d189e datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1166 identity=10778 ipv4=10.0.0.57 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-d4qkz subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=447cbae68e datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1357 identity=13532 ipv4=10.0.0.238 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-qjdx8 subsys=endpoint level=info msg="Successful endpoint creation" containerID=447cbae68e datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1357 identity=13532 ipv4=10.0.0.238 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-qjdx8 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2973 identity=4 ipv4=10.0.0.158 ipv6= k8sPodName=/ subsys=endpoint level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=447cbae68e endpointID=1357 k8sNamespace=envoy-gateway-system k8sPodName=envoy-gateway-gateway-helm-certgen-qjdx8 subsys=daemon level=info msg="Releasing key" key="[k8s:app=certgen k8s:batch.kubernetes.io/controller-uid=fff7ac6d-59df-4a2b-a969-74abc88eafc9 k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen k8s:controller-uid=fff7ac6d-59df-4a2b-a969-74abc88eafc9 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen k8s:io.kubernetes.pod.namespace=envoy-gateway-system k8s:job-name=envoy-gateway-gateway-helm-certgen]" subsys=allocator level=info msg="Removed endpoint" containerID=447cbae68e datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1357 identity=13532 ipv4=10.0.0.238 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-qjdx8 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.122 61731612-c849-4897-80f9-2c746e9d1be5 default }" containerID=8067d1a238cb9e37056437cb196efaa75b709ba102d6fe89660a95651c071145 datapathConfiguration="&{false false false false false }" interface=lxcaebeb85be81d k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-ktg2l labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8067d1a238 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=560 ipv4=10.0.0.122 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-ktg2l subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8067d1a238 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=560 identityLabels="k8s:app.kubernetes.io/instance=envoy-gateway,k8s:app.kubernetes.io/name=gateway-helm,k8s:control-plane=envoy-gateway,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway,k8s:io.kubernetes.pod.namespace=envoy-gateway-system" ipv4=10.0.0.122 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-ktg2l subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name:envoy-gateway-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=envoy-gateway;k8s:app.kubernetes.io/name=gateway-helm;k8s:control-plane=envoy-gateway;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system;k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway;k8s:io.kubernetes.pod.namespace=envoy-gateway-system;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8067d1a238 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=560 identity=62005 identityLabels="k8s:app.kubernetes.io/instance=envoy-gateway,k8s:app.kubernetes.io/name=gateway-helm,k8s:control-plane=envoy-gateway,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway,k8s:io.kubernetes.pod.namespace=envoy-gateway-system" ipv4=10.0.0.122 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-ktg2l oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8067d1a238 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=560 identity=62005 ipv4=10.0.0.122 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-ktg2l subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=8067d1a238 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=560 identity=62005 ipv4=10.0.0.122 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-ktg2l subsys=endpoint level=info msg="Successful endpoint creation" containerID=8067d1a238 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=560 identity=62005 ipv4=10.0.0.122 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-ktg2l subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=838 identity=1 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,k8s:openstack-compute-node=enabled,k8s:openstack-control-plane=enabled,k8s:openvswitch=enabled,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_hostns_00838 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_hostns_00838 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_hostns_00838 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_hostns_00838:pending" subsys=bpf level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_netdev_00005 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_netdev_00005 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005:pending" subsys=bpf level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=838 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.253 5abf0519-48e8-4578-b10a-45de745710e1 default }" containerID=0bef63215d1c973d533f9361c84b24feff7c427c8f097d7cdbd848f79edfebe7 datapathConfiguration="&{false false false false false }" interface=lxcc70ce9f7e068 k8sPodName=kube-system/coredns-67659f764b-npjgp labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0bef63215d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1818 ipv4=10.0.0.253 ipv6= k8sPodName=kube-system/coredns-67659f764b-npjgp subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0bef63215d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1818 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.253 ipv6= k8sPodName=kube-system/coredns-67659f764b-npjgp subsys=endpoint level=info msg="Identity of endpoint changed" containerID=0bef63215d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1818 identity=10778 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.253 ipv6= k8sPodName=kube-system/coredns-67659f764b-npjgp oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0bef63215d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1818 identity=10778 ipv4=10.0.0.253 ipv6= k8sPodName=kube-system/coredns-67659f764b-npjgp subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=0bef63215d datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1818 identity=10778 ipv4=10.0.0.253 ipv6= k8sPodName=kube-system/coredns-67659f764b-npjgp subsys=endpoint level=info msg="Successful endpoint creation" containerID=0bef63215d datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1818 identity=10778 ipv4=10.0.0.253 ipv6= k8sPodName=kube-system/coredns-67659f764b-npjgp subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.175 3ac99fb3-478d-47c3-838e-53dc9a71033a default }" containerID=ec7446823d089806cc43d4ad338f372916c6b68d01f1fa477fde9b636678667f datapathConfiguration="&{false false false false false }" interface=lxcf2b7fcc0b0b7 k8sPodName=kube-system/coredns-67659f764b-fqths labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ec7446823d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3414 ipv4=10.0.0.175 ipv6= k8sPodName=kube-system/coredns-67659f764b-fqths subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ec7446823d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3414 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.175 ipv6= k8sPodName=kube-system/coredns-67659f764b-fqths subsys=endpoint level=info msg="Identity of endpoint changed" containerID=ec7446823d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3414 identity=10778 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.175 ipv6= k8sPodName=kube-system/coredns-67659f764b-fqths oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ec7446823d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3414 identity=10778 ipv4=10.0.0.175 ipv6= k8sPodName=kube-system/coredns-67659f764b-fqths subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ec7446823d datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3414 identity=10778 ipv4=10.0.0.175 ipv6= k8sPodName=kube-system/coredns-67659f764b-fqths subsys=endpoint level=info msg="Successful endpoint creation" containerID=ec7446823d datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3414 identity=10778 ipv4=10.0.0.175 ipv6= k8sPodName=kube-system/coredns-67659f764b-fqths subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.148 2b0c06d9-1628-415c-9184-ae8d52a7de8c default }" containerID=4e2ac7d4ebf2500e403a004043f4690293d4df57ff8625a50951fcf3b9fd6571 datapathConfiguration="&{false false false false false }" interface=lxc935b0c1a3658 k8sPodName=local-path-storage/local-path-provisioner-679c578f5-nnmdx labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4e2ac7d4eb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=60 ipv4=10.0.0.148 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-nnmdx subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4e2ac7d4eb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=60 identityLabels="k8s:app.kubernetes.io/instance=local-path-provisioner,k8s:app.kubernetes.io/name=local-path-provisioner,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.148 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-nnmdx subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:local-path-storage k8s:io.cilium.k8s.namespace.labels.name:local-path-storage]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=4e2ac7d4eb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=60 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.148 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-nnmdx line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=local-path-provisioner;k8s:app.kubernetes.io/name=local-path-provisioner;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4e2ac7d4eb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=60 identity=2327 identityLabels="k8s:app.kubernetes.io/instance=local-path-provisioner,k8s:app.kubernetes.io/name=local-path-provisioner,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.148 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-nnmdx oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4e2ac7d4eb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=60 identity=2327 ipv4=10.0.0.148 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-nnmdx subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=4e2ac7d4eb datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=60 identity=2327 ipv4=10.0.0.148 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-nnmdx subsys=endpoint level=info msg="Successful endpoint creation" containerID=4e2ac7d4eb datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=60 identity=2327 ipv4=10.0.0.148 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-nnmdx subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=39f32d189e endpointID=1166 k8sNamespace=kube-system k8sPodName=coredns-7c96b6546b-d4qkz subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=coredns k8s:io.kubernetes.pod.namespace=kube-system k8s:k8s-app=kube-dns]" subsys=allocator level=info msg="Removed endpoint" containerID=39f32d189e datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1166 identity=10778 ipv4=10.0.0.57 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-d4qkz subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.93 46d0b3df-ecf2-4579-ac79-6fe859612daa default }" containerID=07718f34754c5f40fccac351bed794699a33fc398bd31b576c7f1bafcbd6c239 datapathConfiguration="&{false false false false false }" interface=lxc2e3f801f6579 k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-8rbzb labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=07718f3475 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1685 ipv4=10.0.0.93 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-8rbzb subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=07718f3475 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1685 identityLabels="k8s:app.kubernetes.io/component=cainjector,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cainjector,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cainjector,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.93 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-8rbzb subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=07718f3475 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1685 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.93 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-8rbzb line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=cainjector;k8s:app.kubernetes.io/component=cainjector;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=cainjector;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=07718f3475 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1685 identity=33093 identityLabels="k8s:app.kubernetes.io/component=cainjector,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cainjector,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cainjector,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.93 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-8rbzb oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=07718f3475 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1685 identity=33093 ipv4=10.0.0.93 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-8rbzb subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=07718f3475 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1685 identity=33093 ipv4=10.0.0.93 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-8rbzb subsys=endpoint level=info msg="Successful endpoint creation" containerID=07718f3475 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1685 identity=33093 ipv4=10.0.0.93 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-8rbzb subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.103 6bafd7f0-b9cd-406d-b054-48b263906644 default }" containerID=3c06b7371e53a77c1aeffaea612cb0c1777dae8169dad240e4abd7a07988b880 datapathConfiguration="&{false false false false false }" interface=lxc530505b11e02 k8sPodName=cert-manager/cert-manager-webhook-548949fc64-42q8t labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3c06b7371e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4076 ipv4=10.0.0.103 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-42q8t subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3c06b7371e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4076 identityLabels="k8s:app.kubernetes.io/component=webhook,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=webhook,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=webhook,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.103 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-42q8t subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.156 61af03d9-84b3-48c7-bf33-69657f73bf0e default }" containerID=7557fb5900fe6b08b304e995328d4e1602c318c162c4c7ffe3fee76234fddea8 datapathConfiguration="&{false false false false false }" interface=lxcdacf699bc315 k8sPodName=cert-manager/cert-manager-75c4c745bc-5mjst labels="[]" subsys=daemon sync-build=true level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="New endpoint" containerID=7557fb5900 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=45 ipv4=10.0.0.156 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-5mjst subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7557fb5900 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=45 identityLabels="k8s:app.kubernetes.io/component=controller,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cert-manager,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cert-manager,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.156 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-5mjst subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=webhook;k8s:app.kubernetes.io/component=webhook;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=webhook;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3c06b7371e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4076 identity=31010 identityLabels="k8s:app.kubernetes.io/component=webhook,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=webhook,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=webhook,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.103 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-42q8t oldIdentity="no identity" subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Waiting for endpoint to be generated" containerID=3c06b7371e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4076 identity=31010 ipv4=10.0.0.103 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-42q8t subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=cert-manager;k8s:app.kubernetes.io/component=controller;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=cert-manager;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7557fb5900 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=45 identity=48096 identityLabels="k8s:app.kubernetes.io/component=controller,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cert-manager,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cert-manager,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.156 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-5mjst oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7557fb5900 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=45 identity=48096 ipv4=10.0.0.156 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-5mjst subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=3c06b7371e datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=4076 identity=31010 ipv4=10.0.0.103 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-42q8t subsys=endpoint level=info msg="Successful endpoint creation" containerID=3c06b7371e datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=4076 identity=31010 ipv4=10.0.0.103 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-42q8t subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=7557fb5900 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=45 identity=48096 ipv4=10.0.0.156 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-5mjst subsys=endpoint level=info msg="Successful endpoint creation" containerID=7557fb5900 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=45 identity=48096 ipv4=10.0.0.156 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-5mjst subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.199 640a696c-6671-46f6-80d3-8f1913872aa2 default }" containerID=68af2253a8873e9fd55d48c14daca63b2a698d292e3e69717fd9a19bfb6e97eb datapathConfiguration="&{false false false false false }" interface=lxc07aa477f5a75 k8sPodName=cert-manager/cert-manager-startupapicheck-cjcrh labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=68af2253a8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1352 ipv4=10.0.0.199 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-cjcrh subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=68af2253a8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1352 identityLabels="k8s:app.kubernetes.io/component=startupapicheck,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=startupapicheck,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=startupapicheck,k8s:batch.kubernetes.io/controller-uid=e39ded9f-e67d-45ad-a703-1c598c8c5891,k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck,k8s:controller-uid=e39ded9f-e67d-45ad-a703-1c598c8c5891,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck,k8s:io.kubernetes.pod.namespace=cert-manager,k8s:job-name=cert-manager-startupapicheck" ipv4=10.0.0.199 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-cjcrh subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=startupapicheck;k8s:app.kubernetes.io/component=startupapicheck;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=startupapicheck;k8s:app.kubernetes.io/version=v1.11.5;k8s:batch.kubernetes.io/controller-uid=e39ded9f-e67d-45ad-a703-1c598c8c5891;k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck;k8s:controller-uid=e39ded9f-e67d-45ad-a703-1c598c8c5891;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck;k8s:io.kubernetes.pod.namespace=cert-manager;k8s:job-name=cert-manager-startupapicheck;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=68af2253a8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1352 identity=3542 identityLabels="k8s:app.kubernetes.io/component=startupapicheck,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=startupapicheck,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=startupapicheck,k8s:batch.kubernetes.io/controller-uid=e39ded9f-e67d-45ad-a703-1c598c8c5891,k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck,k8s:controller-uid=e39ded9f-e67d-45ad-a703-1c598c8c5891,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck,k8s:io.kubernetes.pod.namespace=cert-manager,k8s:job-name=cert-manager-startupapicheck" ipv4=10.0.0.199 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-cjcrh oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=68af2253a8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1352 identity=3542 ipv4=10.0.0.199 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-cjcrh subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=68af2253a8 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1352 identity=3542 ipv4=10.0.0.199 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-cjcrh subsys=endpoint level=info msg="Successful endpoint creation" containerID=68af2253a8 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1352 identity=3542 ipv4=10.0.0.199 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-cjcrh subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=68af2253a8 endpointID=1352 k8sNamespace=cert-manager k8sPodName=cert-manager-startupapicheck-cjcrh subsys=daemon level=info msg="Releasing key" key="[k8s:app=startupapicheck k8s:app.kubernetes.io/component=startupapicheck k8s:app.kubernetes.io/instance=cert-manager k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=startupapicheck k8s:app.kubernetes.io/version=v1.11.5 k8s:batch.kubernetes.io/controller-uid=e39ded9f-e67d-45ad-a703-1c598c8c5891 k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck k8s:controller-uid=e39ded9f-e67d-45ad-a703-1c598c8c5891 k8s:helm.sh/chart=cert-manager-v1.11.5 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager k8s:io.cilium.k8s.namespace.labels.name=cert-manager k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck k8s:io.kubernetes.pod.namespace=cert-manager k8s:job-name=cert-manager-startupapicheck]" subsys=allocator level=info msg="Removed endpoint" containerID=68af2253a8 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1352 identity=3542 ipv4=10.0.0.199 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-cjcrh subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.55 225df9d6-0a66-4420-9c2d-dc4e7052f8ab default }" containerID=a274108362d17a2bcb7361f9fbe1cf15127be9def34b476ce5cef92d1f113fb7 datapathConfiguration="&{false false false false false }" interface=lxc4523542d6fbf k8sPodName=ingress-nginx/ingress-nginx-admission-create-lljtr labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a274108362 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=892 ipv4=10.0.0.55 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-lljtr subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a274108362 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=892 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=277fa758-e9a2-426e-9b70-392bd2996899,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create,k8s:controller-uid=277fa758-e9a2-426e-9b70-392bd2996899,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-create" ipv4=10.0.0.55 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-lljtr subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=admission-webhook;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:batch.kubernetes.io/controller-uid=277fa758-e9a2-426e-9b70-392bd2996899;k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create;k8s:controller-uid=277fa758-e9a2-426e-9b70-392bd2996899;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission;k8s:io.kubernetes.pod.namespace=ingress-nginx;k8s:job-name=ingress-nginx-admission-create;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a274108362 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=892 identity=9159 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=277fa758-e9a2-426e-9b70-392bd2996899,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create,k8s:controller-uid=277fa758-e9a2-426e-9b70-392bd2996899,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-create" ipv4=10.0.0.55 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-lljtr oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a274108362 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=892 identity=9159 ipv4=10.0.0.55 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-lljtr subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=a274108362 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=892 identity=9159 ipv4=10.0.0.55 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-lljtr subsys=endpoint level=info msg="Successful endpoint creation" containerID=a274108362 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=892 identity=9159 ipv4=10.0.0.55 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-lljtr subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=a274108362 endpointID=892 k8sNamespace=ingress-nginx k8sPodName=ingress-nginx-admission-create-lljtr subsys=daemon level=info msg="Releasing key" key="[k8s:app.kubernetes.io/component=admission-webhook k8s:app.kubernetes.io/instance=ingress-nginx k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=ingress-nginx k8s:app.kubernetes.io/part-of=ingress-nginx k8s:app.kubernetes.io/version=1.12.1 k8s:batch.kubernetes.io/controller-uid=277fa758-e9a2-426e-9b70-392bd2996899 k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create k8s:controller-uid=277fa758-e9a2-426e-9b70-392bd2996899 k8s:helm.sh/chart=ingress-nginx-4.12.1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission k8s:io.kubernetes.pod.namespace=ingress-nginx k8s:job-name=ingress-nginx-admission-create]" subsys=allocator level=info msg="Removed endpoint" containerID=a274108362 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=892 identity=9159 ipv4=10.0.0.55 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-lljtr subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.206 4f39107f-135f-4352-9992-074c83020406 default }" containerID=0f518fdddeadd277445aadff41d4fbf332f02d3ace1f78711d7b2e31e0e753b5 datapathConfiguration="&{false false false false false }" interface=lxc6cdf04d8cdc5 k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-mxwrm labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0f518fddde datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1077 ipv4=10.0.0.206 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-mxwrm subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0f518fddde datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1077 identityLabels="k8s:app.kubernetes.io/component=default-backend,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend,k8s:io.kubernetes.pod.namespace=ingress-nginx" ipv4=10.0.0.206 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-mxwrm subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=default-backend;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend;k8s:io.kubernetes.pod.namespace=ingress-nginx;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0f518fddde datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1077 identity=37319 identityLabels="k8s:app.kubernetes.io/component=default-backend,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend,k8s:io.kubernetes.pod.namespace=ingress-nginx" ipv4=10.0.0.206 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-mxwrm oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0f518fddde datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1077 identity=37319 ipv4=10.0.0.206 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-mxwrm subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=0f518fddde datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1077 identity=37319 ipv4=10.0.0.206 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-mxwrm subsys=endpoint level=info msg="Successful endpoint creation" containerID=0f518fddde datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1077 identity=37319 ipv4=10.0.0.206 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-mxwrm subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.192 c3b62ec6-2174-4c8a-852d-236eb19f3a30 default }" containerID=9f45a0ec0c20609c7f1be249e146895c0946265e8796907e08c4c48d9374d0ad datapathConfiguration="&{false false false false false }" interface=lxce6d9d619008d k8sPodName=ingress-nginx/ingress-nginx-admission-patch-cjb45 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9f45a0ec0c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=405 ipv4=10.0.0.192 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-cjb45 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9f45a0ec0c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=405 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=4fa5d5b9-aa91-437e-a1e9-73f051e9aadd,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch,k8s:controller-uid=4fa5d5b9-aa91-437e-a1e9-73f051e9aadd,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-patch" ipv4=10.0.0.192 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-cjb45 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=admission-webhook;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:batch.kubernetes.io/controller-uid=4fa5d5b9-aa91-437e-a1e9-73f051e9aadd;k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch;k8s:controller-uid=4fa5d5b9-aa91-437e-a1e9-73f051e9aadd;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission;k8s:io.kubernetes.pod.namespace=ingress-nginx;k8s:job-name=ingress-nginx-admission-patch;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9f45a0ec0c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=405 identity=13334 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=4fa5d5b9-aa91-437e-a1e9-73f051e9aadd,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch,k8s:controller-uid=4fa5d5b9-aa91-437e-a1e9-73f051e9aadd,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-patch" ipv4=10.0.0.192 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-cjb45 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9f45a0ec0c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=405 identity=13334 ipv4=10.0.0.192 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-cjb45 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=9f45a0ec0c datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=405 identity=13334 ipv4=10.0.0.192 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-cjb45 subsys=endpoint level=info msg="Successful endpoint creation" containerID=9f45a0ec0c datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=405 identity=13334 ipv4=10.0.0.192 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-cjb45 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=9f45a0ec0c endpointID=405 k8sNamespace=ingress-nginx k8sPodName=ingress-nginx-admission-patch-cjb45 subsys=daemon level=info msg="Releasing key" key="[k8s:app.kubernetes.io/component=admission-webhook k8s:app.kubernetes.io/instance=ingress-nginx k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=ingress-nginx k8s:app.kubernetes.io/part-of=ingress-nginx k8s:app.kubernetes.io/version=1.12.1 k8s:batch.kubernetes.io/controller-uid=4fa5d5b9-aa91-437e-a1e9-73f051e9aadd k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch k8s:controller-uid=4fa5d5b9-aa91-437e-a1e9-73f051e9aadd k8s:helm.sh/chart=ingress-nginx-4.12.1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission k8s:io.kubernetes.pod.namespace=ingress-nginx k8s:job-name=ingress-nginx-admission-patch]" subsys=allocator level=info msg="Removed endpoint" containerID=9f45a0ec0c datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=405 identity=13334 ipv4=10.0.0.192 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-cjb45 subsys=endpoint level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"rabbitmq-operator\",\"k8s:app.kubernetes.io/instance\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/name\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/part-of\":\"rabbitmq\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=rabbitmq-cluster-operator k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=550d80ff-24f8-4494-96a2-c358d498d2cb] Description:}]" policyAddRequest=41685e74-d301-4db6-b2b6-925b678d720e subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=41685e74-d301-4db6-b2b6-925b678d720e policyRevision=2 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=rabbitmq-cluster-operator subsys=k8s-watcher level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"messaging-topology-operator\",\"k8s:app.kubernetes.io/instance\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/name\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/part-of\":\"rabbitmq\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:9443 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=rabbitmq-messaging-topology-operator k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=ddd1254f-6949-497a-8dac-e4148bcea739] Description:}]" policyAddRequest=48852619-90bc-4d12-be49-bc2a5084b102 subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=48852619-90bc-4d12-be49-bc2a5084b102 policyRevision=3 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=rabbitmq-messaging-topology-operator subsys=k8s-watcher level=info msg="Create endpoint request" addressing="&{10.0.0.9 b385a045-c50a-4e51-9c4f-b4cc566396cc default }" containerID=975a82f3acdf2b53ff81d314e0b6196b48ba7d73ed0c21c01c24dd1107dd246e datapathConfiguration="&{false false false false false }" interface=lxce5779d08052e k8sPodName=openstack/rabbitmq-cluster-operator-7fcdcd478-zt8gt labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=975a82f3ac datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=73 ipv4=10.0.0.9 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-7fcdcd478-zt8gt subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=975a82f3ac datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=73 identityLabels="k8s:app.kubernetes.io/component=rabbitmq-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=2.9.0,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.3.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.9 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-7fcdcd478-zt8gt subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq-operator;k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=rabbitmq-cluster-operator;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:app.kubernetes.io/version=2.9.0;k8s:helm.sh/chart=rabbitmq-cluster-operator-4.3.6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=975a82f3ac datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=73 identity=38582 identityLabels="k8s:app.kubernetes.io/component=rabbitmq-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=2.9.0,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.3.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.9 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-7fcdcd478-zt8gt oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=975a82f3ac datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=73 identity=38582 ipv4=10.0.0.9 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-7fcdcd478-zt8gt subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=975a82f3ac datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=73 identity=38582 ipv4=10.0.0.9 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-7fcdcd478-zt8gt subsys=endpoint level=info msg="Successful endpoint creation" containerID=975a82f3ac datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=73 identity=38582 ipv4=10.0.0.9 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-7fcdcd478-zt8gt subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.143 de9876f8-3dda-4b68-bba7-5579f7874464 default }" containerID=d36accc3d435c02cf721627d69595b326a537753936a5573e0bc0490ece76aa7 datapathConfiguration="&{false false false false false }" interface=lxcf9c1b08ace23 k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-9974z labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d36accc3d4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1927 ipv4=10.0.0.143 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-9974z subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d36accc3d4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1927 identityLabels="k8s:app.kubernetes.io/component=messaging-topology-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=1.14.1,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.3.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.143 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-9974z subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=messaging-topology-operator;k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=rabbitmq-cluster-operator;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:app.kubernetes.io/version=1.14.1;k8s:helm.sh/chart=rabbitmq-cluster-operator-4.3.6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d36accc3d4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1927 identity=2760 identityLabels="k8s:app.kubernetes.io/component=messaging-topology-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=1.14.1,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.3.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.143 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-9974z oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d36accc3d4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1927 identity=2760 ipv4=10.0.0.143 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-9974z subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d36accc3d4 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=1927 identity=2760 ipv4=10.0.0.143 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-9974z subsys=endpoint level=info msg="Successful endpoint creation" containerID=d36accc3d4 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=1927 identity=2760 ipv4=10.0.0.143 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-9974z subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.118 716b5fe8-4e1f-4bcf-807e-258ae11b127a default }" containerID=3cd62f75b557d99e3bc7107fec78523a5324c8d65a47bf053f2660ad25179fa9 datapathConfiguration="&{false false false false false }" interface=lxc2c1f92523dbd k8sPodName=openstack/pxc-operator-7cff949c8b-mrz7h labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3cd62f75b5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=713 ipv4=10.0.0.118 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-mrz7h subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3cd62f75b5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=713 identityLabels="k8s:app.kubernetes.io/component=operator,k8s:app.kubernetes.io/instance=pxc-operator,k8s:app.kubernetes.io/name=pxc-operator,k8s:app.kubernetes.io/part-of=pxc-operator,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.118 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-mrz7h subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=operator;k8s:app.kubernetes.io/instance=pxc-operator;k8s:app.kubernetes.io/name=pxc-operator;k8s:app.kubernetes.io/part-of=pxc-operator;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3cd62f75b5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=713 identity=47167 identityLabels="k8s:app.kubernetes.io/component=operator,k8s:app.kubernetes.io/instance=pxc-operator,k8s:app.kubernetes.io/name=pxc-operator,k8s:app.kubernetes.io/part-of=pxc-operator,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.118 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-mrz7h oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3cd62f75b5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=713 identity=47167 ipv4=10.0.0.118 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-mrz7h subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=3cd62f75b5 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=713 identity=47167 ipv4=10.0.0.118 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-mrz7h subsys=endpoint level=info msg="Successful endpoint creation" containerID=3cd62f75b5 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=713 identity=47167 ipv4=10.0.0.118 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-mrz7h subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.159 ef474319-34c7-4c88-9ec7-2bc0841b8ace default }" containerID=d8e1023d8e74d3bb1efaf5be83b039d421256aead0e054633f39faaa0c6225a7 datapathConfiguration="&{false false false false false }" interface=lxc2b4d3f2277e2 k8sPodName=local-path-storage/helper-pod-create-pvc-dbd61bf5-442b-43e8-bf7f-3f8ee71fb98f labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d8e1023d8e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=439 ipv4=10.0.0.159 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-dbd61bf5-442b-43e8-bf7f-3f8ee71fb98f subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d8e1023d8e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=439 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.159 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-dbd61bf5-442b-43e8-bf7f-3f8ee71fb98f subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:local-path-storage k8s:io.cilium.k8s.namespace.labels.name:local-path-storage]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d8e1023d8e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=439 identity=62495 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.159 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-dbd61bf5-442b-43e8-bf7f-3f8ee71fb98f oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=d8e1023d8e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=439 identity=62495 ipv4=10.0.0.159 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-dbd61bf5-442b-43e8-bf7f-3f8ee71fb98f subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d8e1023d8e datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=439 identity=62495 ipv4=10.0.0.159 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-dbd61bf5-442b-43e8-bf7f-3f8ee71fb98f subsys=endpoint level=info msg="Successful endpoint creation" containerID=d8e1023d8e datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=439 identity=62495 ipv4=10.0.0.159 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-dbd61bf5-442b-43e8-bf7f-3f8ee71fb98f subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.125 799d1a3d-06ef-4625-8068-c90e90a801c4 default }" containerID=10bdca4f0fb1c789ed11d39bbc102ea7cf65e14c2ed8cec4ab8a37818c0762e1 datapathConfiguration="&{false false false false false }" interface=lxc553b6282d6e4 k8sPodName=openstack/percona-xtradb-haproxy-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=10bdca4f0f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2742 ipv4=10.0.0.125 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=10bdca4f0f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2742 identityLabels="k8s:app.kubernetes.io/component=haproxy,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0" ipv4=10.0.0.125 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=haproxy;k8s:app.kubernetes.io/instance=percona-xtradb;k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator;k8s:app.kubernetes.io/name=percona-xtradb-cluster;k8s:app.kubernetes.io/part-of=percona-xtradb-cluster;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=10bdca4f0f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2742 identity=35925 identityLabels="k8s:app.kubernetes.io/component=haproxy,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0" ipv4=10.0.0.125 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=10bdca4f0f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2742 identity=35925 ipv4=10.0.0.125 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=10bdca4f0f datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=2742 identity=35925 ipv4=10.0.0.125 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=10bdca4f0f datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=2742 identity=35925 ipv4=10.0.0.125 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=d8e1023d8e endpointID=439 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-dbd61bf5-442b-43e8-bf7f-3f8ee71fb98f subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=d8e1023d8e datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=439 identity=62495 ipv4=10.0.0.159 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-dbd61bf5-442b-43e8-bf7f-3f8ee71fb98f subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.32 1d833cd2-63ef-4fa1-ac16-766fe786bd4a default }" containerID=9aee1b56fc908a5ca0a4dc4a8c3847859594f66e6e478c1de8788de405a7e06a datapathConfiguration="&{false false false false false }" interface=lxc676da4e2d5c1 k8sPodName=openstack/percona-xtradb-pxc-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9aee1b56fc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=882 ipv4=10.0.0.32 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9aee1b56fc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=882 identityLabels="k8s:app.kubernetes.io/component=pxc,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0" ipv4=10.0.0.32 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=pxc;k8s:app.kubernetes.io/instance=percona-xtradb;k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator;k8s:app.kubernetes.io/name=percona-xtradb-cluster;k8s:app.kubernetes.io/part-of=percona-xtradb-cluster;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9aee1b56fc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=882 identity=57659 identityLabels="k8s:app.kubernetes.io/component=pxc,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0" ipv4=10.0.0.32 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=9aee1b56fc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=882 identity=57659 ipv4=10.0.0.32 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=9aee1b56fc datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=882 identity=57659 ipv4=10.0.0.32 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=9aee1b56fc datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=882 identity=57659 ipv4=10.0.0.32 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=daemon level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/instance\":\"valkey\",\"k8s:app.kubernetes.io/name\":\"valkey\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:6379 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:} {Ports:[{Port:26379 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:} {IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:9121 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=valkey k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=9b455c60-fc70-4b7f-96e9-5e8cc92e1be5] Description:}]" policyAddRequest=f24cd488-640e-4909-b574-ddfb80ba938b subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=f24cd488-640e-4909-b574-ddfb80ba938b policyRevision=4 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=valkey subsys=k8s-watcher level=info msg="Create endpoint request" addressing="&{10.0.0.208 69601767-a429-49f8-a2e7-7420eaab7cc8 default }" containerID=17d4d380727541480a8a65b5f1d778b495160f52647637bceb57135b2782ecb5 datapathConfiguration="&{false false false false false }" interface=lxccc60be128017 k8sPodName=local-path-storage/helper-pod-create-pvc-bd767677-8185-4b2a-ba97-cf1a8debcf34 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=17d4d38072 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2291 ipv4=10.0.0.208 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-bd767677-8185-4b2a-ba97-cf1a8debcf34 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=17d4d38072 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2291 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.208 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-bd767677-8185-4b2a-ba97-cf1a8debcf34 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=17d4d38072 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2291 identity=62495 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.208 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-bd767677-8185-4b2a-ba97-cf1a8debcf34 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=17d4d38072 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2291 identity=62495 ipv4=10.0.0.208 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-bd767677-8185-4b2a-ba97-cf1a8debcf34 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=17d4d38072 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2291 identity=62495 ipv4=10.0.0.208 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-bd767677-8185-4b2a-ba97-cf1a8debcf34 subsys=endpoint level=info msg="Successful endpoint creation" containerID=17d4d38072 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2291 identity=62495 ipv4=10.0.0.208 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-bd767677-8185-4b2a-ba97-cf1a8debcf34 subsys=daemon level=info msg="Delete endpoint request" containerID=17d4d38072 endpointID=2291 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-bd767677-8185-4b2a-ba97-cf1a8debcf34 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=17d4d38072 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2291 identity=62495 ipv4=10.0.0.208 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-bd767677-8185-4b2a-ba97-cf1a8debcf34 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.171 da811865-194e-46ef-864f-1ea0ce75ae73 default }" containerID=de5ff3f7caf93c0b4134b72df0f5cbc9450c9c15f2eddee0f72653494be63ac1 datapathConfiguration="&{false false false false false }" interface=lxc846d81873617 k8sPodName=openstack/valkey-node-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=de5ff3f7ca datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1433 ipv4=10.0.0.171 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=de5ff3f7ca datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1433 identityLabels="k8s:app.kubernetes.io/component=node,k8s:app.kubernetes.io/instance=valkey,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=valkey,k8s:app.kubernetes.io/version=8.0.2,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=valkey-2.4.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=valkey,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=valkey-node-0" ipv4=10.0.0.171 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=node;k8s:app.kubernetes.io/instance=valkey;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=valkey;k8s:app.kubernetes.io/version=8.0.2;k8s:apps.kubernetes.io/pod-index=0;k8s:helm.sh/chart=valkey-2.4.6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=valkey;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=valkey-node-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=de5ff3f7ca datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1433 identity=26191 identityLabels="k8s:app.kubernetes.io/component=node,k8s:app.kubernetes.io/instance=valkey,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=valkey,k8s:app.kubernetes.io/version=8.0.2,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=valkey-2.4.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=valkey,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=valkey-node-0" ipv4=10.0.0.171 ipv6= k8sPodName=openstack/valkey-node-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=de5ff3f7ca datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1433 identity=26191 ipv4=10.0.0.171 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=de5ff3f7ca datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1433 identity=26191 ipv4=10.0.0.171 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=de5ff3f7ca datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1433 identity=26191 ipv4=10.0.0.171 ipv6= k8sPodName=openstack/valkey-node-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"keycloak\",\"k8s:app.kubernetes.io/instance\":\"keycloak\",\"k8s:app.kubernetes.io/name\":\"keycloak\",\"k8s:io.kubernetes.pod.namespace\":\"auth-system\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:7800 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:} {Ports:[{Port:8080 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=keycloak k8s:io.cilium.k8s.policy.namespace=auth-system k8s:io.cilium.k8s.policy.uid=12c7f5ab-800b-4532-83a1-58e115eb63a6] Description:}]" policyAddRequest=9d096749-8b09-46c9-993c-57d8c38699ce subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=9d096749-8b09-46c9-993c-57d8c38699ce policyRevision=5 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=keycloak subsys=k8s-watcher level=info msg="Create endpoint request" addressing="&{10.0.0.150 158be8da-08f6-40cc-8242-ac0cb0aa783e default }" containerID=9cb4de7f8e0a22f745e1ba59454f1e3c5f9a30fe74dc2a40893d5b4d35061e08 datapathConfiguration="&{false false false false false }" interface=lxce4374af11bf2 k8sPodName=auth-system/keycloak-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9cb4de7f8e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3274 ipv4=10.0.0.150 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9cb4de7f8e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3274 identityLabels="k8s:app.kubernetes.io/component=keycloak,k8s:app.kubernetes.io/instance=keycloak,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=keycloak,k8s:app.kubernetes.io/version=24.0.5,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=keycloak-21.4.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system,k8s:io.cilium.k8s.namespace.labels.name=auth-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keycloak,k8s:io.kubernetes.pod.namespace=auth-system,k8s:statefulset.kubernetes.io/pod-name=keycloak-0" ipv4=10.0.0.150 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:auth-system k8s:io.cilium.k8s.namespace.labels.name:auth-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=keycloak;k8s:app.kubernetes.io/instance=keycloak;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=keycloak;k8s:app.kubernetes.io/version=24.0.5;k8s:apps.kubernetes.io/pod-index=0;k8s:helm.sh/chart=keycloak-21.4.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system;k8s:io.cilium.k8s.namespace.labels.name=auth-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keycloak;k8s:io.kubernetes.pod.namespace=auth-system;k8s:statefulset.kubernetes.io/pod-name=keycloak-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9cb4de7f8e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3274 identity=11816 identityLabels="k8s:app.kubernetes.io/component=keycloak,k8s:app.kubernetes.io/instance=keycloak,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=keycloak,k8s:app.kubernetes.io/version=24.0.5,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=keycloak-21.4.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system,k8s:io.cilium.k8s.namespace.labels.name=auth-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keycloak,k8s:io.kubernetes.pod.namespace=auth-system,k8s:statefulset.kubernetes.io/pod-name=keycloak-0" ipv4=10.0.0.150 ipv6= k8sPodName=auth-system/keycloak-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9cb4de7f8e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3274 identity=11816 ipv4=10.0.0.150 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=9cb4de7f8e datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3274 identity=11816 ipv4=10.0.0.150 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=9cb4de7f8e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3274 identity=11816 ipv4=10.0.0.150 ipv6= k8sPodName=auth-system/keycloak-0 subsys=daemon level=info msg="Conntrack garbage collector interval recalculated" deleteRatio=0.009763009455273445 newInterval=7m30s subsys=map-ct level=info msg="Create endpoint request" addressing="&{10.0.0.189 7a0ab90d-4062-4b6e-822c-9f8f785ba510 default }" containerID=a7ca395b218b01ffa63a784bcb2f963cb2322badc770d2c3aa5a6852e269cbcc datapathConfiguration="&{false false false false false }" interface=lxcbf6d2b6b83df k8sPodName=monitoring/node-feature-discovery-worker-b42rn labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a7ca395b21 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=822 ipv4=10.0.0.189 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-b42rn subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a7ca395b21 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=822 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=worker" ipv4=10.0.0.189 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-b42rn subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=a7ca395b21 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=822 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.189 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-b42rn line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=worker;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a7ca395b21 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=822 identity=3876 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=worker" ipv4=10.0.0.189 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-b42rn oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a7ca395b21 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=822 identity=3876 ipv4=10.0.0.189 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-b42rn subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a7ca395b21 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=822 identity=3876 ipv4=10.0.0.189 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-b42rn subsys=endpoint level=info msg="Successful endpoint creation" containerID=a7ca395b21 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=822 identity=3876 ipv4=10.0.0.189 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-b42rn subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.13 9dedc8b3-8b8b-424d-b767-b804e83360aa default }" containerID=748330afb02d9f68c203e214d2ebfcb2bdcd72f634ac6cbd22d646b0de59044d datapathConfiguration="&{false false false false false }" interface=lxce5f318f9b846 k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-nswxv labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=748330afb0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=157 ipv4=10.0.0.13 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-nswxv subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=748330afb0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=157 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=gc" ipv4=10.0.0.13 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-nswxv subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Create endpoint request" addressing="&{10.0.0.81 92a8bd02-005d-4ff0-b926-2051fe0f031e default }" containerID=d9337a1308e9272fc95dc2611bbd4482a383d0e2d5e0d9b1fb8e67dae2ec5038 datapathConfiguration="&{false false false false false }" interface=lxcd48d1dc47fd1 k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-kjxft labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d9337a1308 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=472 ipv4=10.0.0.81 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-kjxft subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d9337a1308 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=472 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=master" ipv4=10.0.0.81 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-kjxft subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=gc;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=748330afb0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=157 identity=19293 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=gc" ipv4=10.0.0.13 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-nswxv oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=748330afb0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=157 identity=19293 ipv4=10.0.0.13 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-nswxv subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=master;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d9337a1308 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=472 identity=24333 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=master" ipv4=10.0.0.81 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-kjxft oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d9337a1308 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=472 identity=24333 ipv4=10.0.0.81 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-kjxft subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=748330afb0 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=157 identity=19293 ipv4=10.0.0.13 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-nswxv subsys=endpoint level=info msg="Successful endpoint creation" containerID=748330afb0 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=157 identity=19293 ipv4=10.0.0.13 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-nswxv subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=d9337a1308 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=472 identity=24333 ipv4=10.0.0.81 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-kjxft subsys=endpoint level=info msg="Successful endpoint creation" containerID=d9337a1308 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=472 identity=24333 ipv4=10.0.0.81 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-kjxft subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.249 14ee0929-594d-4902-807d-d14d44743006 default }" containerID=c9fd5a77278bb9f3cfa237d1cc8fb805cb7c64f291ef77fc654d0dc809f23024 datapathConfiguration="&{false false false false false }" interface=lxc7964b050b5cd k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-mrgqm labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c9fd5a7727 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2471 ipv4=10.0.0.249 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-mrgqm subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c9fd5a7727 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2471 identityLabels="k8s:app=secretgen-controller,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa,k8s:io.kubernetes.pod.namespace=secretgen-controller" ipv4=10.0.0.249 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-mrgqm subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:secretgen-controller]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=secretgen-controller;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa;k8s:io.kubernetes.pod.namespace=secretgen-controller;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c9fd5a7727 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2471 identity=7720 identityLabels="k8s:app=secretgen-controller,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa,k8s:io.kubernetes.pod.namespace=secretgen-controller" ipv4=10.0.0.249 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-mrgqm oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c9fd5a7727 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2471 identity=7720 ipv4=10.0.0.249 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-mrgqm subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c9fd5a7727 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2471 identity=7720 ipv4=10.0.0.249 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-mrgqm subsys=endpoint level=info msg="Successful endpoint creation" containerID=c9fd5a7727 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2471 identity=7720 ipv4=10.0.0.249 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-mrgqm subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=838 identity=1 identityLabels="k8s:feature.node.kubernetes.io/cpu-cpuid.ADX=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AESNI=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AVX2=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AVX=true,k8s:feature.node.kubernetes.io/cpu-cpuid.CLZERO=true,k8s:feature.node.kubernetes.io/cpu-cpuid.CMPXCHG8=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FMA3=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FXSR=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FXSROPT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.HYPERVISOR=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IA32_ARCH_CAP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IBPB=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IBRS=true,k8s:feature.node.kubernetes.io/cpu-cpuid.LAHF=true,k8s:feature.node.kubernetes.io/cpu-cpuid.MOVBE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.NRIPS=true,k8s:feature.node.kubernetes.io/cpu-cpuid.OSXSAVE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SHA=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SPEC_CTRL_SSBD=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SSE4A=true,k8s:feature.node.kubernetes.io/cpu-cpuid.STIBP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SVM=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SVMNP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SYSCALL=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SYSEE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.TOPEXT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.WBNOINVD=true,k8s:feature.node.kubernetes.io/cpu-cpuid.X87=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XGETBV1=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVEC=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVEOPT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVES=true,k8s:feature.node.kubernetes.io/cpu-hardware_multithreading=false,k8s:feature.node.kubernetes.io/cpu-model.family=23,k8s:feature.node.kubernetes.io/cpu-model.id=49,k8s:feature.node.kubernetes.io/cpu-model.vendor_id=AMD,k8s:feature.node.kubernetes.io/kernel-config.NO_HZ=true,k8s:feature.node.kubernetes.io/kernel-config.NO_HZ_IDLE=true,k8s:feature.node.kubernetes.io/kernel-version.full=5.15.0-176-generic,k8s:feature.node.kubernetes.io/kernel-version.major=5,k8s:feature.node.kubernetes.io/kernel-version.minor=15,k8s:feature.node.kubernetes.io/kernel-version.revision=0,k8s:feature.node.kubernetes.io/pci-0300_1af4.present=true,k8s:feature.node.kubernetes.io/system-os_release.ID=ubuntu,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID.major=22,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID.minor=04,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID=22.04,k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,k8s:openstack-compute-node=enabled,k8s:openstack-control-plane=enabled,k8s:openvswitch=enabled,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_hostns_00838 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_hostns_00838 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_hostns_00838 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_hostns_00838:pending" subsys=bpf level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_netdev_00005 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_netdev_00005 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005:pending" subsys=bpf level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=838 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.2 c869359d-30d3-48be-9cfa-342352546a48 default }" containerID=edaec27c3491ffd5d950da4b6d54fd597fcb71402feba4b6fd6c23e188d48d0f datapathConfiguration="&{false false false false false }" interface=lxcfe20416cefea k8sPodName=monitoring/kube-prometheus-stack-admission-create-q88bg labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=edaec27c34 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3197 ipv4=10.0.0.2 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-q88bg subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=edaec27c34 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3197 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-create,k8s:batch.kubernetes.io/controller-uid=6d153e14-a99b-49b0-8482-51069cf3d2ae,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=6d153e14-a99b-49b0-8482-51069cf3d2ae,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-create,k8s:release=kube-prometheus-stack" ipv4=10.0.0.2 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-q88bg subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-admission-create;k8s:app.kubernetes.io/component=prometheus-operator-webhook;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:batch.kubernetes.io/controller-uid=6d153e14-a99b-49b0-8482-51069cf3d2ae;k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create;k8s:chart=kube-prometheus-stack-60.2.0;k8s:controller-uid=6d153e14-a99b-49b0-8482-51069cf3d2ae;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission;k8s:io.kubernetes.pod.namespace=monitoring;k8s:job-name=kube-prometheus-stack-admission-create;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=edaec27c34 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3197 identity=24555 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-create,k8s:batch.kubernetes.io/controller-uid=6d153e14-a99b-49b0-8482-51069cf3d2ae,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=6d153e14-a99b-49b0-8482-51069cf3d2ae,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-create,k8s:release=kube-prometheus-stack" ipv4=10.0.0.2 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-q88bg oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=edaec27c34 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3197 identity=24555 ipv4=10.0.0.2 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-q88bg subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=edaec27c34 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3197 identity=24555 ipv4=10.0.0.2 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-q88bg subsys=endpoint level=info msg="Successful endpoint creation" containerID=edaec27c34 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3197 identity=24555 ipv4=10.0.0.2 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-q88bg subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=edaec27c34 endpointID=3197 k8sNamespace=monitoring k8sPodName=kube-prometheus-stack-admission-create-q88bg subsys=daemon level=info msg="Releasing key" key="[k8s:app=kube-prometheus-stack-admission-create k8s:app.kubernetes.io/component=prometheus-operator-webhook k8s:app.kubernetes.io/instance=kube-prometheus-stack k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator k8s:app.kubernetes.io/part-of=kube-prometheus-stack k8s:app.kubernetes.io/version=60.2.0 k8s:batch.kubernetes.io/controller-uid=6d153e14-a99b-49b0-8482-51069cf3d2ae k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create k8s:chart=kube-prometheus-stack-60.2.0 k8s:controller-uid=6d153e14-a99b-49b0-8482-51069cf3d2ae k8s:heritage=Helm k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring k8s:io.cilium.k8s.namespace.labels.name=monitoring k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission k8s:io.kubernetes.pod.namespace=monitoring k8s:job-name=kube-prometheus-stack-admission-create k8s:release=kube-prometheus-stack]" subsys=allocator level=info msg="Removed endpoint" containerID=edaec27c34 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3197 identity=24555 ipv4=10.0.0.2 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-q88bg subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.246 2f4fe219-797a-462e-ad78-450a0305c70e default }" containerID=34f6d949dd13b8a62fa7534f94522da33d828dfa34816d9654251e4143cab30c datapathConfiguration="&{false false false false false }" interface=lxcc6972d66c949 k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-j54hf labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=34f6d949dd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3778 ipv4=10.0.0.246 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-j54hf subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=34f6d949dd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3778 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-operator,k8s:chart=kube-prometheus-stack-60.2.0,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.246 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-j54hf subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-operator;k8s:app.kubernetes.io/component=prometheus-operator;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:chart=kube-prometheus-stack-60.2.0;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator;k8s:io.kubernetes.pod.namespace=monitoring;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=34f6d949dd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3778 identity=4667 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-operator,k8s:chart=kube-prometheus-stack-60.2.0,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.246 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-j54hf oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=34f6d949dd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3778 identity=4667 ipv4=10.0.0.246 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-j54hf subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.238 6c5579db-e74f-494d-b692-49a95093e96b default }" containerID=0365fcfafda8f8530416dc8bb6f6baf6b1e2f5cd150cd871515ccf9b3b83ff56 datapathConfiguration="&{false false false false false }" interface=lxc19575c963b56 k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-mktcn labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0365fcfafd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1296 ipv4=10.0.0.238 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-mktcn subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.88 13dd83a0-0928-4826-8287-cbf8efc2a1a9 default }" containerID=8965fb2c14477ef1b1a08ee6cb7d117a11ca7afa00649c057b72e3db5c1fe200 datapathConfiguration="&{false false false false false }" interface=lxc602852cad689 k8sPodName=monitoring/kube-prometheus-stack-grafana-5c6757c8bc-vz849 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8965fb2c14 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=510 ipv4=10.0.0.88 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-5c6757c8bc-vz849 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0365fcfafd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1296 identityLabels="k8s:app.kubernetes.io/component=metrics,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-state-metrics,k8s:app.kubernetes.io/part-of=kube-state-metrics,k8s:app.kubernetes.io/version=2.12.0,k8s:helm.sh/chart=kube-state-metrics-5.20.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.238 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-mktcn subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8965fb2c14 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=510 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/name=grafana,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.88 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-5c6757c8bc-vz849 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/name=grafana;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8965fb2c14 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=510 identity=4627 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/name=grafana,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.88 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-5c6757c8bc-vz849 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8965fb2c14 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=510 identity=4627 ipv4=10.0.0.88 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-5c6757c8bc-vz849 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=metrics;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-state-metrics;k8s:app.kubernetes.io/part-of=kube-state-metrics;k8s:app.kubernetes.io/version=2.12.0;k8s:helm.sh/chart=kube-state-metrics-5.20.0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics;k8s:io.kubernetes.pod.namespace=monitoring;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0365fcfafd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1296 identity=3246 identityLabels="k8s:app.kubernetes.io/component=metrics,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-state-metrics,k8s:app.kubernetes.io/part-of=kube-state-metrics,k8s:app.kubernetes.io/version=2.12.0,k8s:helm.sh/chart=kube-state-metrics-5.20.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.238 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-mktcn oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0365fcfafd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1296 identity=3246 ipv4=10.0.0.238 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-mktcn subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=34f6d949dd datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3778 identity=4667 ipv4=10.0.0.246 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-j54hf subsys=endpoint level=info msg="Successful endpoint creation" containerID=34f6d949dd datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3778 identity=4667 ipv4=10.0.0.246 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-j54hf subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=0365fcfafd datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1296 identity=3246 ipv4=10.0.0.238 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-mktcn subsys=endpoint level=info msg="Successful endpoint creation" containerID=0365fcfafd datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1296 identity=3246 ipv4=10.0.0.238 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-mktcn subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=8965fb2c14 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=510 identity=4627 ipv4=10.0.0.88 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-5c6757c8bc-vz849 subsys=endpoint level=info msg="Successful endpoint creation" containerID=8965fb2c14 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=510 identity=4627 ipv4=10.0.0.88 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-5c6757c8bc-vz849 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.52 5b4631b9-2ca1-410a-bfa6-db2338478671 default }" containerID=e34cb6878f61a216a0d063b870886ede9e9c6c9375069bbc4cbf6a5c5b7a5211 datapathConfiguration="&{false false false false false }" interface=lxc513889a1a8e0 k8sPodName=monitoring/kube-prometheus-stack-admission-patch-jqz97 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e34cb6878f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=77 ipv4=10.0.0.52 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-jqz97 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e34cb6878f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=77 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-patch,k8s:batch.kubernetes.io/controller-uid=368127f7-570f-403d-b0f5-53b797e62553,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=368127f7-570f-403d-b0f5-53b797e62553,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-patch,k8s:release=kube-prometheus-stack" ipv4=10.0.0.52 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-jqz97 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-admission-patch;k8s:app.kubernetes.io/component=prometheus-operator-webhook;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:batch.kubernetes.io/controller-uid=368127f7-570f-403d-b0f5-53b797e62553;k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch;k8s:chart=kube-prometheus-stack-60.2.0;k8s:controller-uid=368127f7-570f-403d-b0f5-53b797e62553;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission;k8s:io.kubernetes.pod.namespace=monitoring;k8s:job-name=kube-prometheus-stack-admission-patch;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e34cb6878f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=77 identity=29131 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-patch,k8s:batch.kubernetes.io/controller-uid=368127f7-570f-403d-b0f5-53b797e62553,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=368127f7-570f-403d-b0f5-53b797e62553,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-patch,k8s:release=kube-prometheus-stack" ipv4=10.0.0.52 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-jqz97 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e34cb6878f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=77 identity=29131 ipv4=10.0.0.52 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-jqz97 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e34cb6878f datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=77 identity=29131 ipv4=10.0.0.52 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-jqz97 subsys=endpoint level=info msg="Successful endpoint creation" containerID=e34cb6878f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=77 identity=29131 ipv4=10.0.0.52 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-jqz97 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.53 8ba51fbf-36eb-4f9b-a868-8c19c3f66c78 default }" containerID=b1b377fe7486823b49a61903acb324d56fd5dcb7090f0bf53b587235d2121039 datapathConfiguration="&{false false false false false }" interface=lxc691d2f243293 k8sPodName=local-path-storage/helper-pod-create-pvc-ab91769a-8230-48d3-8d58-048219424411 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b1b377fe74 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2301 ipv4=10.0.0.53 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-ab91769a-8230-48d3-8d58-048219424411 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b1b377fe74 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2301 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.53 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-ab91769a-8230-48d3-8d58-048219424411 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b1b377fe74 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2301 identity=62495 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.53 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-ab91769a-8230-48d3-8d58-048219424411 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b1b377fe74 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2301 identity=62495 ipv4=10.0.0.53 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-ab91769a-8230-48d3-8d58-048219424411 subsys=endpoint level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=b1b377fe74 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2301 identity=62495 ipv4=10.0.0.53 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-ab91769a-8230-48d3-8d58-048219424411 subsys=endpoint level=info msg="Successful endpoint creation" containerID=b1b377fe74 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2301 identity=62495 ipv4=10.0.0.53 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-ab91769a-8230-48d3-8d58-048219424411 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.34 d0f79e5b-c28c-4bc5-b64b-d65ccc5aeb7d default }" containerID=96d6ecbc9fa7bf0b36b3f31cd27580ed77c3922a9e8e5ff75af91382ce07709d datapathConfiguration="&{false false false false false }" interface=lxc4cb00beadb34 k8sPodName=local-path-storage/helper-pod-create-pvc-5883daef-25e0-4bd0-91ef-20ed868808d0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=96d6ecbc9f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=702 ipv4=10.0.0.34 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-5883daef-25e0-4bd0-91ef-20ed868808d0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=96d6ecbc9f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=702 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.34 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-5883daef-25e0-4bd0-91ef-20ed868808d0 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=96d6ecbc9f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=702 identity=62495 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.34 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-5883daef-25e0-4bd0-91ef-20ed868808d0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=96d6ecbc9f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=702 identity=62495 ipv4=10.0.0.34 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-5883daef-25e0-4bd0-91ef-20ed868808d0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=96d6ecbc9f datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=702 identity=62495 ipv4=10.0.0.34 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-5883daef-25e0-4bd0-91ef-20ed868808d0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=96d6ecbc9f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=702 identity=62495 ipv4=10.0.0.34 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-5883daef-25e0-4bd0-91ef-20ed868808d0 subsys=daemon level=info msg="Delete endpoint request" containerID=e34cb6878f endpointID=77 k8sNamespace=monitoring k8sPodName=kube-prometheus-stack-admission-patch-jqz97 subsys=daemon level=info msg="Releasing key" key="[k8s:app=kube-prometheus-stack-admission-patch k8s:app.kubernetes.io/component=prometheus-operator-webhook k8s:app.kubernetes.io/instance=kube-prometheus-stack k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator k8s:app.kubernetes.io/part-of=kube-prometheus-stack k8s:app.kubernetes.io/version=60.2.0 k8s:batch.kubernetes.io/controller-uid=368127f7-570f-403d-b0f5-53b797e62553 k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch k8s:chart=kube-prometheus-stack-60.2.0 k8s:controller-uid=368127f7-570f-403d-b0f5-53b797e62553 k8s:heritage=Helm k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring k8s:io.cilium.k8s.namespace.labels.name=monitoring k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission k8s:io.kubernetes.pod.namespace=monitoring k8s:job-name=kube-prometheus-stack-admission-patch k8s:release=kube-prometheus-stack]" subsys=allocator level=info msg="Removed endpoint" containerID=e34cb6878f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=77 identity=29131 ipv4=10.0.0.52 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-jqz97 subsys=endpoint level=info msg="Delete endpoint request" containerID=b1b377fe74 endpointID=2301 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-ab91769a-8230-48d3-8d58-048219424411 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Delete endpoint request" containerID=96d6ecbc9f endpointID=702 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-5883daef-25e0-4bd0-91ef-20ed868808d0 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=b1b377fe74 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2301 identity=62495 ipv4=10.0.0.53 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-ab91769a-8230-48d3-8d58-048219424411 subsys=endpoint level=info msg="Removed endpoint" containerID=96d6ecbc9f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=702 identity=62495 ipv4=10.0.0.34 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-5883daef-25e0-4bd0-91ef-20ed868808d0 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.31 173ac91e-ee03-4a84-9a58-a104df639978 default }" containerID=742bd7adb399672167883f8b3f62c25577d93cda1fff3cce71e4be9341dad8a3 datapathConfiguration="&{false false false false false }" interface=lxc32c43f87f6f7 k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=742bd7adb3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1654 ipv4=10.0.0.31 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=742bd7adb3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1654 identityLabels="k8s:alertmanager=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=alertmanager,k8s:app.kubernetes.io/version=0.27.0,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0" ipv4=10.0.0.31 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:alertmanager=kube-prometheus-stack-alertmanager;k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager;k8s:app.kubernetes.io/managed-by=prometheus-operator;k8s:app.kubernetes.io/name=alertmanager;k8s:app.kubernetes.io/version=0.27.0;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager;k8s:io.kubernetes.pod.namespace=monitoring;k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=742bd7adb3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1654 identity=10049 identityLabels="k8s:alertmanager=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=alertmanager,k8s:app.kubernetes.io/version=0.27.0,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0" ipv4=10.0.0.31 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=742bd7adb3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1654 identity=10049 ipv4=10.0.0.31 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=742bd7adb3 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1654 identity=10049 ipv4=10.0.0.31 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=742bd7adb3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1654 identity=10049 ipv4=10.0.0.31 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.117 41c6d74b-d5e0-45ac-af0f-472ce558ac6c default }" containerID=61944f781d969fcd692b570dc5d9673ca4da12125dbc6a916cb9afd2b9c86a6d datapathConfiguration="&{false false false false false }" interface=lxc75071aa4cde8 k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=61944f781d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1173 ipv4=10.0.0.117 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=61944f781d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1173 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=prometheus,k8s:app.kubernetes.io/version=2.51.2,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus,k8s:io.kubernetes.pod.namespace=monitoring,k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus,k8s:operator.prometheus.io/shard=0,k8s:prometheus=kube-prometheus-stack-prometheus,k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0" ipv4=10.0.0.117 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus;k8s:app.kubernetes.io/managed-by=prometheus-operator;k8s:app.kubernetes.io/name=prometheus;k8s:app.kubernetes.io/version=2.51.2;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus;k8s:io.kubernetes.pod.namespace=monitoring;k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus;k8s:operator.prometheus.io/shard=0;k8s:prometheus=kube-prometheus-stack-prometheus;k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=61944f781d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1173 identity=1382 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=prometheus,k8s:app.kubernetes.io/version=2.51.2,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus,k8s:io.kubernetes.pod.namespace=monitoring,k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus,k8s:operator.prometheus.io/shard=0,k8s:prometheus=kube-prometheus-stack-prometheus,k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0" ipv4=10.0.0.117 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=61944f781d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1173 identity=1382 ipv4=10.0.0.117 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=61944f781d datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1173 identity=1382 ipv4=10.0.0.117 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=61944f781d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1173 identity=1382 ipv4=10.0.0.117 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.119 a2977f2d-1c1a-4673-8ee8-3966c8470cdf default }" containerID=27da8e6f41fec6b1fdada33cffce9c7f7d81c3138c6aa16a4908aca69a4a0a5c datapathConfiguration="&{false false false false false }" interface=lxcda8df80e0f23 k8sPodName=monitoring/loki-gateway-cf54cb88c-kwgmv labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=27da8e6f41 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2533 ipv4=10.0.0.119 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-kwgmv subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=27da8e6f41 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2533 identityLabels="k8s:app.kubernetes.io/component=gateway,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.119 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-kwgmv subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=gateway;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=27da8e6f41 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2533 identity=47030 identityLabels="k8s:app.kubernetes.io/component=gateway,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.119 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-kwgmv oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=27da8e6f41 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2533 identity=47030 ipv4=10.0.0.119 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-kwgmv subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=27da8e6f41 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2533 identity=47030 ipv4=10.0.0.119 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-kwgmv subsys=endpoint level=info msg="Successful endpoint creation" containerID=27da8e6f41 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2533 identity=47030 ipv4=10.0.0.119 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-kwgmv subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.181 005a1cfd-7da6-4361-8c3d-2705aef5eca3 default }" containerID=e43df019afbd9e88ace8c0285b70afddfd22785886a5d0667d3b1535f205a191 datapathConfiguration="&{false false false false false }" interface=lxcf559db017b66 k8sPodName=monitoring/loki-results-cache-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e43df019af datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=314 ipv4=10.0.0.181 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e43df019af datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=314 identityLabels="k8s:app.kubernetes.io/component=memcached-results-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-results-cache,k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0" ipv4=10.0.0.181 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Create endpoint request" addressing="&{10.0.0.34 0b86dcce-2978-4a4b-bbd3-5978e17f05a0 default }" containerID=14a84133509e0baaafb337ee8991357cd91d521998ef3ebc5fef955cbe199099 datapathConfiguration="&{false false false false false }" interface=lxc6ab813287af1 k8sPodName=monitoring/loki-chunks-cache-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=14a8413350 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1094 ipv4=10.0.0.34 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=14a8413350 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1094 identityLabels="k8s:app.kubernetes.io/component=memcached-chunks-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-chunks-cache,k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0" ipv4=10.0.0.34 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=memcached-results-cache;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:name=memcached-results-cache;k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0;" subsys=allocator level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Identity of endpoint changed" containerID=e43df019af datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=314 identity=18296 identityLabels="k8s:app.kubernetes.io/component=memcached-results-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-results-cache,k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0" ipv4=10.0.0.181 ipv6= k8sPodName=monitoring/loki-results-cache-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e43df019af datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=314 identity=18296 ipv4=10.0.0.181 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=memcached-chunks-cache;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:name=memcached-chunks-cache;k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=14a8413350 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1094 identity=44748 identityLabels="k8s:app.kubernetes.io/component=memcached-chunks-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-chunks-cache,k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0" ipv4=10.0.0.34 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=14a8413350 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1094 identity=44748 ipv4=10.0.0.34 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.43 c485cb6e-2d59-4a5d-a37c-1044329f9341 default }" containerID=cc847a1de95cce8a98fdb61ed17a77cbf1973e7e2c9712c0165bcc81644de5dd datapathConfiguration="&{false false false false false }" interface=lxc4af9dccb3fe7 k8sPodName=local-path-storage/helper-pod-create-pvc-1ce065ff-a6d0-4f1b-9554-797a3744f06e labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=cc847a1de9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=258 ipv4=10.0.0.43 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-1ce065ff-a6d0-4f1b-9554-797a3744f06e subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=cc847a1de9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=258 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.43 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-1ce065ff-a6d0-4f1b-9554-797a3744f06e subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=cc847a1de9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=258 identity=62495 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.43 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-1ce065ff-a6d0-4f1b-9554-797a3744f06e oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=cc847a1de9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=258 identity=62495 ipv4=10.0.0.43 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-1ce065ff-a6d0-4f1b-9554-797a3744f06e subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=14a8413350 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1094 identity=44748 ipv4=10.0.0.34 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=14a8413350 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1094 identity=44748 ipv4=10.0.0.34 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=e43df019af datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=314 identity=18296 ipv4=10.0.0.181 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=e43df019af datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=314 identity=18296 ipv4=10.0.0.181 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=cc847a1de9 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=258 identity=62495 ipv4=10.0.0.43 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-1ce065ff-a6d0-4f1b-9554-797a3744f06e subsys=endpoint level=info msg="Successful endpoint creation" containerID=cc847a1de9 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=258 identity=62495 ipv4=10.0.0.43 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-1ce065ff-a6d0-4f1b-9554-797a3744f06e subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.142 b8c87d86-466b-442f-a467-e1d3e46f6b7d default }" containerID=573b14b3f256b6441aaefca79107fefebef553627655d7f8e870a028ac5a3e63 datapathConfiguration="&{false false false false false }" interface=lxc81e8c40032e8 k8sPodName=monitoring/vector-wdzwp labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=573b14b3f2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=794 ipv4=10.0.0.142 ipv6= k8sPodName=monitoring/vector-wdzwp subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=573b14b3f2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=794 identityLabels="k8s:app.kubernetes.io/component=Agent,k8s:app.kubernetes.io/instance=vector,k8s:app.kubernetes.io/name=vector,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=vector,k8s:io.kubernetes.pod.namespace=monitoring,k8s:vector.dev/exclude=true" ipv4=10.0.0.142 ipv6= k8sPodName=monitoring/vector-wdzwp subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=Agent;k8s:app.kubernetes.io/instance=vector;k8s:app.kubernetes.io/name=vector;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=vector;k8s:io.kubernetes.pod.namespace=monitoring;k8s:vector.dev/exclude=true;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=573b14b3f2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=794 identity=51014 identityLabels="k8s:app.kubernetes.io/component=Agent,k8s:app.kubernetes.io/instance=vector,k8s:app.kubernetes.io/name=vector,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=vector,k8s:io.kubernetes.pod.namespace=monitoring,k8s:vector.dev/exclude=true" ipv4=10.0.0.142 ipv6= k8sPodName=monitoring/vector-wdzwp oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=573b14b3f2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=794 identity=51014 ipv4=10.0.0.142 ipv6= k8sPodName=monitoring/vector-wdzwp subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=573b14b3f2 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=794 identity=51014 ipv4=10.0.0.142 ipv6= k8sPodName=monitoring/vector-wdzwp subsys=endpoint level=info msg="Successful endpoint creation" containerID=573b14b3f2 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=794 identity=51014 ipv4=10.0.0.142 ipv6= k8sPodName=monitoring/vector-wdzwp subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=cc847a1de9 endpointID=258 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-1ce065ff-a6d0-4f1b-9554-797a3744f06e subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=cc847a1de9 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=258 identity=62495 ipv4=10.0.0.43 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-1ce065ff-a6d0-4f1b-9554-797a3744f06e subsys=endpoint level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.247 c46778ac-f3a0-4882-9b14-68ffdc594ab5 default }" containerID=211b8f79133c0a73b8adefd15a8c185461ab4364083925f109cbe5bc792b510f datapathConfiguration="&{false false false false false }" interface=lxc4d4a70187898 k8sPodName=monitoring/loki-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=211b8f7913 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=443 ipv4=10.0.0.247 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=211b8f7913 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=443 identityLabels="k8s:app.kubernetes.io/component=single-binary,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:app.kubernetes.io/part-of=memberlist,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=loki-0" ipv4=10.0.0.247 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=single-binary;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:app.kubernetes.io/part-of=memberlist;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:statefulset.kubernetes.io/pod-name=loki-0;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=211b8f7913 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=443 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.247 ipv6= k8sPodName=monitoring/loki-0 line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=211b8f7913 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=443 identity=15707 identityLabels="k8s:app.kubernetes.io/component=single-binary,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:app.kubernetes.io/part-of=memberlist,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=loki-0" ipv4=10.0.0.247 ipv6= k8sPodName=monitoring/loki-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=211b8f7913 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=443 identity=15707 ipv4=10.0.0.247 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=211b8f7913 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=443 identity=15707 ipv4=10.0.0.247 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=211b8f7913 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=443 identity=15707 ipv4=10.0.0.247 ipv6= k8sPodName=monitoring/loki-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.89 44968d04-e7b4-49d0-99d3-b963e9b53b3a default }" containerID=8f564559a87488fd5da6fc389049c825419ddc4c3cd19b3fec41c1067aebdb48 datapathConfiguration="&{false false false false false }" interface=lxc29341d6f7728 k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-k68dp labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8f564559a8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1472 ipv4=10.0.0.89 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-k68dp subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8f564559a8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1472 identityLabels="k8s:app.kubernetes.io/instance=prometheus-pushgateway,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=prometheus-pushgateway,k8s:app.kubernetes.io/version=v1.8.0,k8s:helm.sh/chart=prometheus-pushgateway-2.13.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.89 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-k68dp subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=prometheus-pushgateway;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=prometheus-pushgateway;k8s:app.kubernetes.io/version=v1.8.0;k8s:helm.sh/chart=prometheus-pushgateway-2.13.0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8f564559a8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1472 identity=61983 identityLabels="k8s:app.kubernetes.io/instance=prometheus-pushgateway,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=prometheus-pushgateway,k8s:app.kubernetes.io/version=v1.8.0,k8s:helm.sh/chart=prometheus-pushgateway-2.13.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.89 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-k68dp oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8f564559a8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1472 identity=61983 ipv4=10.0.0.89 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-k68dp subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=8f564559a8 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1472 identity=61983 ipv4=10.0.0.89 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-k68dp subsys=endpoint level=info msg="Successful endpoint creation" containerID=8f564559a8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1472 identity=61983 ipv4=10.0.0.89 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-k68dp subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.228 a6c9950e-78a1-4b0a-98f2-003bd59f1144 default }" containerID=7580ed1ea7ec0ced31d81bd0cbfa67e8759d2b4ddd5d31f15484749d8d460f3c datapathConfiguration="&{false false false false false }" interface=lxc92fa5d5e301d k8sPodName=openstack/memcached-memcached-6479589586-j95bq labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7580ed1ea7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=47 ipv4=10.0.0.228 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-j95bq subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7580ed1ea7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=47 identityLabels="k8s:application=memcached,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=memcached" ipv4=10.0.0.228 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-j95bq subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=memcached;k8s:component=server;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=memcached;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7580ed1ea7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=47 identity=36190 identityLabels="k8s:application=memcached,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=memcached" ipv4=10.0.0.228 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-j95bq oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=7580ed1ea7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=47 identity=36190 ipv4=10.0.0.228 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-j95bq subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=7580ed1ea7 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=47 identity=36190 ipv4=10.0.0.228 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-j95bq subsys=endpoint level=info msg="Successful endpoint creation" containerID=7580ed1ea7 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=47 identity=36190 ipv4=10.0.0.228 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-j95bq subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.115 4b8270b8-8d2a-48fe-a08b-1c6fd0007082 default }" containerID=f25600ec64f96038bf5d2988b208408972b89efa8ca846eb81e2835078890706 datapathConfiguration="&{false false false false false }" interface=lxc29ac14b7d413 k8sPodName=local-path-storage/helper-pod-create-pvc-0c5d4971-c20b-476e-a5db-91cc9996bd44 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f25600ec64 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2860 ipv4=10.0.0.115 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-0c5d4971-c20b-476e-a5db-91cc9996bd44 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f25600ec64 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2860 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.115 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-0c5d4971-c20b-476e-a5db-91cc9996bd44 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f25600ec64 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2860 identity=62495 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.115 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-0c5d4971-c20b-476e-a5db-91cc9996bd44 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f25600ec64 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2860 identity=62495 ipv4=10.0.0.115 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-0c5d4971-c20b-476e-a5db-91cc9996bd44 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f25600ec64 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2860 identity=62495 ipv4=10.0.0.115 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-0c5d4971-c20b-476e-a5db-91cc9996bd44 subsys=endpoint level=info msg="Successful endpoint creation" containerID=f25600ec64 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2860 identity=62495 ipv4=10.0.0.115 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-0c5d4971-c20b-476e-a5db-91cc9996bd44 subsys=daemon level=info msg="Delete endpoint request" containerID=f25600ec64 endpointID=2860 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-0c5d4971-c20b-476e-a5db-91cc9996bd44 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=f25600ec64 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2860 identity=62495 ipv4=10.0.0.115 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-0c5d4971-c20b-476e-a5db-91cc9996bd44 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.45 c760fb4e-8459-4034-abc0-5f8cd050d2a3 default }" containerID=f79a4da43450e3f02beac6e175d466490ff3eef25a61ba0864c4098c4192c10b datapathConfiguration="&{false false false false false }" interface=lxcfb3c06b7d0cd k8sPodName=openstack/rabbitmq-keystone-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f79a4da434 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2809 ipv4=10.0.0.45 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f79a4da434 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2809 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-keystone,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0" ipv4=10.0.0.45 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-keystone;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f79a4da434 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2809 identity=7651 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-keystone,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0" ipv4=10.0.0.45 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f79a4da434 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2809 identity=7651 ipv4=10.0.0.45 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=f79a4da434 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2809 identity=7651 ipv4=10.0.0.45 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=f79a4da434 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2809 identity=7651 ipv4=10.0.0.45 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.225 86d05433-da65-45fa-8c59-aa590c3a815b default }" containerID=870f5bfb84b8ef61b8ddf58111aa94af604ad0448fb38515a3920d04349caa35 datapathConfiguration="&{false false false false false }" interface=lxc7bd9e1867021 k8sPodName=openstack/keystone-api-7db8d7dc7-2d5qp labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=870f5bfb84 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3682 ipv4=10.0.0.225 ipv6= k8sPodName=openstack/keystone-api-7db8d7dc7-2d5qp subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=870f5bfb84 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3682 identityLabels="k8s:application=keystone,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=keystone" ipv4=10.0.0.225 ipv6= k8sPodName=openstack/keystone-api-7db8d7dc7-2d5qp subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=870f5bfb84 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3682 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.225 ipv6= k8sPodName=openstack/keystone-api-7db8d7dc7-2d5qp line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=870f5bfb84 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3682 identity=2965 identityLabels="k8s:application=keystone,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=keystone" ipv4=10.0.0.225 ipv6= k8sPodName=openstack/keystone-api-7db8d7dc7-2d5qp oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=870f5bfb84 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3682 identity=2965 ipv4=10.0.0.225 ipv6= k8sPodName=openstack/keystone-api-7db8d7dc7-2d5qp subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.33 a978c8e4-1781-4c74-8232-4c4def31181d default }" containerID=510556fb995baf0550b611b8a9a8ab5143c7908126e45557951df23cea4b2abd datapathConfiguration="&{false false false false false }" interface=lxc870ddc56223b k8sPodName=openstack/keystone-credential-setup-xlvdl labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=510556fb99 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1565 ipv4=10.0.0.33 ipv6= k8sPodName=openstack/keystone-credential-setup-xlvdl subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=510556fb99 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1565 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=68384742-f066-48d9-931d-e40db4fe22ea,k8s:batch.kubernetes.io/job-name=keystone-credential-setup,k8s:component=credential-setup,k8s:controller-uid=68384742-f066-48d9-931d-e40db4fe22ea,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-credential-setup,k8s:release_group=keystone" ipv4=10.0.0.33 ipv6= k8sPodName=openstack/keystone-credential-setup-xlvdl subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=68384742-f066-48d9-931d-e40db4fe22ea;k8s:batch.kubernetes.io/job-name=keystone-credential-setup;k8s:component=credential-setup;k8s:controller-uid=68384742-f066-48d9-931d-e40db4fe22ea;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-credential-setup;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=510556fb99 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1565 identity=59434 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=68384742-f066-48d9-931d-e40db4fe22ea,k8s:batch.kubernetes.io/job-name=keystone-credential-setup,k8s:component=credential-setup,k8s:controller-uid=68384742-f066-48d9-931d-e40db4fe22ea,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-credential-setup,k8s:release_group=keystone" ipv4=10.0.0.33 ipv6= k8sPodName=openstack/keystone-credential-setup-xlvdl oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=510556fb99 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1565 identity=59434 ipv4=10.0.0.33 ipv6= k8sPodName=openstack/keystone-credential-setup-xlvdl subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=870f5bfb84 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3682 identity=2965 ipv4=10.0.0.225 ipv6= k8sPodName=openstack/keystone-api-7db8d7dc7-2d5qp subsys=endpoint level=info msg="Successful endpoint creation" containerID=870f5bfb84 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3682 identity=2965 ipv4=10.0.0.225 ipv6= k8sPodName=openstack/keystone-api-7db8d7dc7-2d5qp subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=510556fb99 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1565 identity=59434 ipv4=10.0.0.33 ipv6= k8sPodName=openstack/keystone-credential-setup-xlvdl subsys=endpoint level=info msg="Successful endpoint creation" containerID=510556fb99 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1565 identity=59434 ipv4=10.0.0.33 ipv6= k8sPodName=openstack/keystone-credential-setup-xlvdl subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=510556fb99 endpointID=1565 k8sNamespace=openstack k8sPodName=keystone-credential-setup-xlvdl subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=68384742-f066-48d9-931d-e40db4fe22ea k8s:batch.kubernetes.io/job-name=keystone-credential-setup k8s:component=credential-setup k8s:controller-uid=68384742-f066-48d9-931d-e40db4fe22ea k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-credential-setup k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=510556fb99 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1565 identity=59434 ipv4=10.0.0.33 ipv6= k8sPodName=openstack/keystone-credential-setup-xlvdl subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.92 fec96ea2-d25b-4970-a1f3-2a022e496d94 default }" containerID=951c69a1fae2d338c0154b42684563517bebc74803acf7d4b133215eaea92070 datapathConfiguration="&{false false false false false }" interface=lxcbf77cfa9cd9b k8sPodName=openstack/keystone-db-init-c9fjm labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=951c69a1fa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3259 ipv4=10.0.0.92 ipv6= k8sPodName=openstack/keystone-db-init-c9fjm subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=951c69a1fa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3259 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=b1d1846d-1ee9-4332-ba08-ea71cd47a6b5,k8s:batch.kubernetes.io/job-name=keystone-db-init,k8s:component=db-init,k8s:controller-uid=b1d1846d-1ee9-4332-ba08-ea71cd47a6b5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-init,k8s:release_group=keystone" ipv4=10.0.0.92 ipv6= k8sPodName=openstack/keystone-db-init-c9fjm subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=951c69a1fa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3259 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.92 ipv6= k8sPodName=openstack/keystone-db-init-c9fjm line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=b1d1846d-1ee9-4332-ba08-ea71cd47a6b5;k8s:batch.kubernetes.io/job-name=keystone-db-init;k8s:component=db-init;k8s:controller-uid=b1d1846d-1ee9-4332-ba08-ea71cd47a6b5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-db-init;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=951c69a1fa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3259 identity=3983 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=b1d1846d-1ee9-4332-ba08-ea71cd47a6b5,k8s:batch.kubernetes.io/job-name=keystone-db-init,k8s:component=db-init,k8s:controller-uid=b1d1846d-1ee9-4332-ba08-ea71cd47a6b5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-init,k8s:release_group=keystone" ipv4=10.0.0.92 ipv6= k8sPodName=openstack/keystone-db-init-c9fjm oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=951c69a1fa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3259 identity=3983 ipv4=10.0.0.92 ipv6= k8sPodName=openstack/keystone-db-init-c9fjm subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=951c69a1fa datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3259 identity=3983 ipv4=10.0.0.92 ipv6= k8sPodName=openstack/keystone-db-init-c9fjm subsys=endpoint level=info msg="Successful endpoint creation" containerID=951c69a1fa datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3259 identity=3983 ipv4=10.0.0.92 ipv6= k8sPodName=openstack/keystone-db-init-c9fjm subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=951c69a1fa endpointID=3259 k8sNamespace=openstack k8sPodName=keystone-db-init-c9fjm subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=b1d1846d-1ee9-4332-ba08-ea71cd47a6b5 k8s:batch.kubernetes.io/job-name=keystone-db-init k8s:component=db-init k8s:controller-uid=b1d1846d-1ee9-4332-ba08-ea71cd47a6b5 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-db-init k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=951c69a1fa datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3259 identity=3983 ipv4=10.0.0.92 ipv6= k8sPodName=openstack/keystone-db-init-c9fjm subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.145 7e78b2f2-c89a-4389-84c5-b02e8bdc622b default }" containerID=59ce9c1da82d5f18c6e01ef7dd717b93e4ff7cedbcbaea240678b0795784c53e datapathConfiguration="&{false false false false false }" interface=lxca4663c3059b4 k8sPodName=openstack/keystone-fernet-setup-5knsk labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=59ce9c1da8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2646 ipv4=10.0.0.145 ipv6= k8sPodName=openstack/keystone-fernet-setup-5knsk subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=59ce9c1da8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2646 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=2d8b4366-bcff-4b23-b9b3-204ef070693b,k8s:batch.kubernetes.io/job-name=keystone-fernet-setup,k8s:component=fernet-setup,k8s:controller-uid=2d8b4366-bcff-4b23-b9b3-204ef070693b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-setup,k8s:release_group=keystone" ipv4=10.0.0.145 ipv6= k8sPodName=openstack/keystone-fernet-setup-5knsk subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=59ce9c1da8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2646 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.145 ipv6= k8sPodName=openstack/keystone-fernet-setup-5knsk line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=2d8b4366-bcff-4b23-b9b3-204ef070693b;k8s:batch.kubernetes.io/job-name=keystone-fernet-setup;k8s:component=fernet-setup;k8s:controller-uid=2d8b4366-bcff-4b23-b9b3-204ef070693b;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-fernet-setup;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=59ce9c1da8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2646 identity=11913 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=2d8b4366-bcff-4b23-b9b3-204ef070693b,k8s:batch.kubernetes.io/job-name=keystone-fernet-setup,k8s:component=fernet-setup,k8s:controller-uid=2d8b4366-bcff-4b23-b9b3-204ef070693b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-setup,k8s:release_group=keystone" ipv4=10.0.0.145 ipv6= k8sPodName=openstack/keystone-fernet-setup-5knsk oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=59ce9c1da8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2646 identity=11913 ipv4=10.0.0.145 ipv6= k8sPodName=openstack/keystone-fernet-setup-5knsk subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=59ce9c1da8 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2646 identity=11913 ipv4=10.0.0.145 ipv6= k8sPodName=openstack/keystone-fernet-setup-5knsk subsys=endpoint level=info msg="Successful endpoint creation" containerID=59ce9c1da8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2646 identity=11913 ipv4=10.0.0.145 ipv6= k8sPodName=openstack/keystone-fernet-setup-5knsk subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=59ce9c1da8 endpointID=2646 k8sNamespace=openstack k8sPodName=keystone-fernet-setup-5knsk subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=2d8b4366-bcff-4b23-b9b3-204ef070693b k8s:batch.kubernetes.io/job-name=keystone-fernet-setup k8s:component=fernet-setup k8s:controller-uid=2d8b4366-bcff-4b23-b9b3-204ef070693b k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-fernet-setup k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=59ce9c1da8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2646 identity=11913 ipv4=10.0.0.145 ipv6= k8sPodName=openstack/keystone-fernet-setup-5knsk subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.196 3b0bf2bf-f92c-4ee3-ba12-675f39627bd4 default }" containerID=6b28631c1dedab40db0a01d6658c21fcda63898a0f9c9d565cc79f17cf7f6d1a datapathConfiguration="&{false false false false false }" interface=lxc4dcc8a614681 k8sPodName=openstack/keystone-db-sync-tt6vk labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6b28631c1d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2627 ipv4=10.0.0.196 ipv6= k8sPodName=openstack/keystone-db-sync-tt6vk subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6b28631c1d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2627 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=73f601ce-5cbd-4e7a-aed9-6f2bee1579c5,k8s:batch.kubernetes.io/job-name=keystone-db-sync,k8s:component=db-sync,k8s:controller-uid=73f601ce-5cbd-4e7a-aed9-6f2bee1579c5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-sync,k8s:release_group=keystone" ipv4=10.0.0.196 ipv6= k8sPodName=openstack/keystone-db-sync-tt6vk subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=73f601ce-5cbd-4e7a-aed9-6f2bee1579c5;k8s:batch.kubernetes.io/job-name=keystone-db-sync;k8s:component=db-sync;k8s:controller-uid=73f601ce-5cbd-4e7a-aed9-6f2bee1579c5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-db-sync;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6b28631c1d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2627 identity=55090 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=73f601ce-5cbd-4e7a-aed9-6f2bee1579c5,k8s:batch.kubernetes.io/job-name=keystone-db-sync,k8s:component=db-sync,k8s:controller-uid=73f601ce-5cbd-4e7a-aed9-6f2bee1579c5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-sync,k8s:release_group=keystone" ipv4=10.0.0.196 ipv6= k8sPodName=openstack/keystone-db-sync-tt6vk oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=6b28631c1d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2627 identity=55090 ipv4=10.0.0.196 ipv6= k8sPodName=openstack/keystone-db-sync-tt6vk subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=6b28631c1d datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2627 identity=55090 ipv4=10.0.0.196 ipv6= k8sPodName=openstack/keystone-db-sync-tt6vk subsys=endpoint level=info msg="Successful endpoint creation" containerID=6b28631c1d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2627 identity=55090 ipv4=10.0.0.196 ipv6= k8sPodName=openstack/keystone-db-sync-tt6vk subsys=daemon level=info msg="Delete endpoint request" containerID=6b28631c1d endpointID=2627 k8sNamespace=openstack k8sPodName=keystone-db-sync-tt6vk subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=73f601ce-5cbd-4e7a-aed9-6f2bee1579c5 k8s:batch.kubernetes.io/job-name=keystone-db-sync k8s:component=db-sync k8s:controller-uid=73f601ce-5cbd-4e7a-aed9-6f2bee1579c5 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-db-sync k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=6b28631c1d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2627 identity=55090 ipv4=10.0.0.196 ipv6= k8sPodName=openstack/keystone-db-sync-tt6vk subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.124 3481530d-5c1f-44db-b862-eaa4fea06476 default }" containerID=1d2c7527096608c1bf9bc910b2876e701f240bca8ebe8208e2860f36263a8121 datapathConfiguration="&{false false false false false }" interface=lxc6130f72dcfdb k8sPodName=openstack/keystone-rabbit-init-jmp5p labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1d2c752709 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=311 ipv4=10.0.0.124 ipv6= k8sPodName=openstack/keystone-rabbit-init-jmp5p subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1d2c752709 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=311 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=4952f8d7-4e0e-4120-84bd-986488c7259d,k8s:batch.kubernetes.io/job-name=keystone-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=4952f8d7-4e0e-4120-84bd-986488c7259d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-rabbit-init,k8s:release_group=keystone" ipv4=10.0.0.124 ipv6= k8sPodName=openstack/keystone-rabbit-init-jmp5p subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=4952f8d7-4e0e-4120-84bd-986488c7259d;k8s:batch.kubernetes.io/job-name=keystone-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=4952f8d7-4e0e-4120-84bd-986488c7259d;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-rabbit-init;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1d2c752709 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=311 identity=9215 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=4952f8d7-4e0e-4120-84bd-986488c7259d,k8s:batch.kubernetes.io/job-name=keystone-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=4952f8d7-4e0e-4120-84bd-986488c7259d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-rabbit-init,k8s:release_group=keystone" ipv4=10.0.0.124 ipv6= k8sPodName=openstack/keystone-rabbit-init-jmp5p oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1d2c752709 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=311 identity=9215 ipv4=10.0.0.124 ipv6= k8sPodName=openstack/keystone-rabbit-init-jmp5p subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=1d2c752709 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=311 identity=9215 ipv4=10.0.0.124 ipv6= k8sPodName=openstack/keystone-rabbit-init-jmp5p subsys=endpoint level=info msg="Successful endpoint creation" containerID=1d2c752709 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=311 identity=9215 ipv4=10.0.0.124 ipv6= k8sPodName=openstack/keystone-rabbit-init-jmp5p subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=1d2c752709 endpointID=311 k8sNamespace=openstack k8sPodName=keystone-rabbit-init-jmp5p subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=4952f8d7-4e0e-4120-84bd-986488c7259d k8s:batch.kubernetes.io/job-name=keystone-rabbit-init k8s:component=rabbit-init k8s:controller-uid=4952f8d7-4e0e-4120-84bd-986488c7259d k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-rabbit-init k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=1d2c752709 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=311 identity=9215 ipv4=10.0.0.124 ipv6= k8sPodName=openstack/keystone-rabbit-init-jmp5p subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.187 78ec6244-40a8-429d-ac0f-3110ccfb27e0 default }" containerID=c85550c8e286b1bc1f1e52367edc4739b727fd7d2e2029612ee522314d0cd953 datapathConfiguration="&{false false false false false }" interface=lxcd4a9374fb7d5 k8sPodName=openstack/keystone-domain-manage-bpk2t labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c85550c8e2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=800 ipv4=10.0.0.187 ipv6= k8sPodName=openstack/keystone-domain-manage-bpk2t subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c85550c8e2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=800 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=a19c17e9-3150-407c-b641-1622ee3ff0de,k8s:batch.kubernetes.io/job-name=keystone-domain-manage,k8s:component=domain-manage,k8s:controller-uid=a19c17e9-3150-407c-b641-1622ee3ff0de,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-domain-manage,k8s:release_group=keystone" ipv4=10.0.0.187 ipv6= k8sPodName=openstack/keystone-domain-manage-bpk2t subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=a19c17e9-3150-407c-b641-1622ee3ff0de;k8s:batch.kubernetes.io/job-name=keystone-domain-manage;k8s:component=domain-manage;k8s:controller-uid=a19c17e9-3150-407c-b641-1622ee3ff0de;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-domain-manage;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c85550c8e2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=800 identity=22804 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=a19c17e9-3150-407c-b641-1622ee3ff0de,k8s:batch.kubernetes.io/job-name=keystone-domain-manage,k8s:component=domain-manage,k8s:controller-uid=a19c17e9-3150-407c-b641-1622ee3ff0de,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-domain-manage,k8s:release_group=keystone" ipv4=10.0.0.187 ipv6= k8sPodName=openstack/keystone-domain-manage-bpk2t oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c85550c8e2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=800 identity=22804 ipv4=10.0.0.187 ipv6= k8sPodName=openstack/keystone-domain-manage-bpk2t subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c85550c8e2 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=800 identity=22804 ipv4=10.0.0.187 ipv6= k8sPodName=openstack/keystone-domain-manage-bpk2t subsys=endpoint level=info msg="Successful endpoint creation" containerID=c85550c8e2 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=800 identity=22804 ipv4=10.0.0.187 ipv6= k8sPodName=openstack/keystone-domain-manage-bpk2t subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=c85550c8e2 endpointID=800 k8sNamespace=openstack k8sPodName=keystone-domain-manage-bpk2t subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=a19c17e9-3150-407c-b641-1622ee3ff0de k8s:batch.kubernetes.io/job-name=keystone-domain-manage k8s:component=domain-manage k8s:controller-uid=a19c17e9-3150-407c-b641-1622ee3ff0de k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-domain-manage k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=c85550c8e2 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=800 identity=22804 ipv4=10.0.0.187 ipv6= k8sPodName=openstack/keystone-domain-manage-bpk2t subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.19 4db4b7d8-cbbd-4193-b478-8192c2ccb4b9 default }" containerID=638845c94e230cbbfc4538bab9372a861c14e1f70afa2efa26ca7a84d4a13d04 datapathConfiguration="&{false false false false false }" interface=lxc38ecb61b3921 k8sPodName=openstack/keystone-bootstrap-v8h6c labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=638845c94e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=484 ipv4=10.0.0.19 ipv6= k8sPodName=openstack/keystone-bootstrap-v8h6c subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=638845c94e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=484 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=307aecb9-6e14-474e-812d-c3a3e0e56199,k8s:batch.kubernetes.io/job-name=keystone-bootstrap,k8s:component=bootstrap,k8s:controller-uid=307aecb9-6e14-474e-812d-c3a3e0e56199,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-bootstrap,k8s:release_group=keystone" ipv4=10.0.0.19 ipv6= k8sPodName=openstack/keystone-bootstrap-v8h6c subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=638845c94e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=484 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.19 ipv6= k8sPodName=openstack/keystone-bootstrap-v8h6c line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=307aecb9-6e14-474e-812d-c3a3e0e56199;k8s:batch.kubernetes.io/job-name=keystone-bootstrap;k8s:component=bootstrap;k8s:controller-uid=307aecb9-6e14-474e-812d-c3a3e0e56199;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-bootstrap;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=638845c94e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=484 identity=2707 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=307aecb9-6e14-474e-812d-c3a3e0e56199,k8s:batch.kubernetes.io/job-name=keystone-bootstrap,k8s:component=bootstrap,k8s:controller-uid=307aecb9-6e14-474e-812d-c3a3e0e56199,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-bootstrap,k8s:release_group=keystone" ipv4=10.0.0.19 ipv6= k8sPodName=openstack/keystone-bootstrap-v8h6c oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=638845c94e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=484 identity=2707 ipv4=10.0.0.19 ipv6= k8sPodName=openstack/keystone-bootstrap-v8h6c subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=638845c94e datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=484 identity=2707 ipv4=10.0.0.19 ipv6= k8sPodName=openstack/keystone-bootstrap-v8h6c subsys=endpoint level=info msg="Successful endpoint creation" containerID=638845c94e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=484 identity=2707 ipv4=10.0.0.19 ipv6= k8sPodName=openstack/keystone-bootstrap-v8h6c subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=638845c94e endpointID=484 k8sNamespace=openstack k8sPodName=keystone-bootstrap-v8h6c subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=307aecb9-6e14-474e-812d-c3a3e0e56199 k8s:batch.kubernetes.io/job-name=keystone-bootstrap k8s:component=bootstrap k8s:controller-uid=307aecb9-6e14-474e-812d-c3a3e0e56199 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-bootstrap k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=638845c94e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=484 identity=2707 ipv4=10.0.0.19 ipv6= k8sPodName=openstack/keystone-bootstrap-v8h6c subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.129 1770a6f3-8f9a-44da-a3b9-696eb341c051 default }" containerID=bfbb7cad2f91a53e1fe91748a274a86c33f114f47da3d2b8a681f8dd32fca641 datapathConfiguration="&{false false false false false }" interface=lxc7f88b8a94e64 k8sPodName=local-path-storage/helper-pod-create-pvc-0e01ecf0-81bc-4751-8b0a-f8bb0ab58350 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=bfbb7cad2f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3235 ipv4=10.0.0.129 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-0e01ecf0-81bc-4751-8b0a-f8bb0ab58350 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=bfbb7cad2f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3235 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.129 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-0e01ecf0-81bc-4751-8b0a-f8bb0ab58350 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=bfbb7cad2f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3235 identity=62495 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.129 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-0e01ecf0-81bc-4751-8b0a-f8bb0ab58350 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=bfbb7cad2f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3235 identity=62495 ipv4=10.0.0.129 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-0e01ecf0-81bc-4751-8b0a-f8bb0ab58350 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=bfbb7cad2f datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3235 identity=62495 ipv4=10.0.0.129 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-0e01ecf0-81bc-4751-8b0a-f8bb0ab58350 subsys=endpoint level=info msg="Successful endpoint creation" containerID=bfbb7cad2f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3235 identity=62495 ipv4=10.0.0.129 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-0e01ecf0-81bc-4751-8b0a-f8bb0ab58350 subsys=daemon level=info msg="Delete endpoint request" containerID=bfbb7cad2f endpointID=3235 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-0e01ecf0-81bc-4751-8b0a-f8bb0ab58350 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=bfbb7cad2f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3235 identity=62495 ipv4=10.0.0.129 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-0e01ecf0-81bc-4751-8b0a-f8bb0ab58350 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.193 065022c6-34a1-4655-bd7f-2674fa8c97de default }" containerID=d83c4f13c6a257cbcc51246a6d1df3b9219631d2fc4c82e0af4eee4013cd3386 datapathConfiguration="&{false false false false false }" interface=lxcb2458fe0d274 k8sPodName=openstack/rabbitmq-barbican-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d83c4f13c6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4056 ipv4=10.0.0.193 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d83c4f13c6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4056 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-barbican,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0" ipv4=10.0.0.193 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-barbican;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d83c4f13c6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4056 identity=27944 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-barbican,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0" ipv4=10.0.0.193 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d83c4f13c6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4056 identity=27944 ipv4=10.0.0.193 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=d83c4f13c6 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=4056 identity=27944 ipv4=10.0.0.193 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=d83c4f13c6 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=4056 identity=27944 ipv4=10.0.0.193 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.139 3f0be26d-6865-4526-9205-67bc33f2d9ed default }" containerID=3fd95d4fa0e31b848b233331373af2b568a299c16ea36613b4825bcb40f76543 datapathConfiguration="&{false false false false false }" interface=lxc6d8ab51e8a5f k8sPodName=openstack/barbican-api-5758b9df97-mp74q labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3fd95d4fa0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=552 ipv4=10.0.0.139 ipv6= k8sPodName=openstack/barbican-api-5758b9df97-mp74q subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3fd95d4fa0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=552 identityLabels="k8s:application=barbican,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=barbican" ipv4=10.0.0.139 ipv6= k8sPodName=openstack/barbican-api-5758b9df97-mp74q subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3fd95d4fa0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=552 identity=2353 identityLabels="k8s:application=barbican,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=barbican" ipv4=10.0.0.139 ipv6= k8sPodName=openstack/barbican-api-5758b9df97-mp74q oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3fd95d4fa0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=552 identity=2353 ipv4=10.0.0.139 ipv6= k8sPodName=openstack/barbican-api-5758b9df97-mp74q subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.241 ece983bd-a95d-476c-be23-90a0d9365cf8 default }" containerID=502e64f9df78f832b06ec8919b07056da1d81297d1f11ae5f81a75fb0c6e8824 datapathConfiguration="&{false false false false false }" interface=lxc1c331102b69e k8sPodName=openstack/barbican-db-init-n5brd labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=502e64f9df datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=786 ipv4=10.0.0.241 ipv6= k8sPodName=openstack/barbican-db-init-n5brd subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=502e64f9df datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=786 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=315ce211-f269-4ae0-ac06-8fa09ad76c78,k8s:batch.kubernetes.io/job-name=barbican-db-init,k8s:component=db-init,k8s:controller-uid=315ce211-f269-4ae0-ac06-8fa09ad76c78,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-init,k8s:release_group=barbican" ipv4=10.0.0.241 ipv6= k8sPodName=openstack/barbican-db-init-n5brd subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=315ce211-f269-4ae0-ac06-8fa09ad76c78;k8s:batch.kubernetes.io/job-name=barbican-db-init;k8s:component=db-init;k8s:controller-uid=315ce211-f269-4ae0-ac06-8fa09ad76c78;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-db-init;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=502e64f9df datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=786 identity=5386 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=315ce211-f269-4ae0-ac06-8fa09ad76c78,k8s:batch.kubernetes.io/job-name=barbican-db-init,k8s:component=db-init,k8s:controller-uid=315ce211-f269-4ae0-ac06-8fa09ad76c78,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-init,k8s:release_group=barbican" ipv4=10.0.0.241 ipv6= k8sPodName=openstack/barbican-db-init-n5brd oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=502e64f9df datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=786 identity=5386 ipv4=10.0.0.241 ipv6= k8sPodName=openstack/barbican-db-init-n5brd subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=3fd95d4fa0 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=552 identity=2353 ipv4=10.0.0.139 ipv6= k8sPodName=openstack/barbican-api-5758b9df97-mp74q subsys=endpoint level=info msg="Successful endpoint creation" containerID=3fd95d4fa0 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=552 identity=2353 ipv4=10.0.0.139 ipv6= k8sPodName=openstack/barbican-api-5758b9df97-mp74q subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=502e64f9df datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=786 identity=5386 ipv4=10.0.0.241 ipv6= k8sPodName=openstack/barbican-db-init-n5brd subsys=endpoint level=info msg="Successful endpoint creation" containerID=502e64f9df datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=786 identity=5386 ipv4=10.0.0.241 ipv6= k8sPodName=openstack/barbican-db-init-n5brd subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=502e64f9df endpointID=786 k8sNamespace=openstack k8sPodName=barbican-db-init-n5brd subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=315ce211-f269-4ae0-ac06-8fa09ad76c78 k8s:batch.kubernetes.io/job-name=barbican-db-init k8s:component=db-init k8s:controller-uid=315ce211-f269-4ae0-ac06-8fa09ad76c78 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-db-init k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=502e64f9df datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=786 identity=5386 ipv4=10.0.0.241 ipv6= k8sPodName=openstack/barbican-db-init-n5brd subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.61 cbe3daca-a37f-4deb-92ee-3c685b18ed5f default }" containerID=2058d96b668f19bc1b87eaccdffa9e4094688a964c506875c636e3cee07c91a3 datapathConfiguration="&{false false false false false }" interface=lxc6992dda0aa37 k8sPodName=openstack/barbican-db-sync-xrg5r labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2058d96b66 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=111 ipv4=10.0.0.61 ipv6= k8sPodName=openstack/barbican-db-sync-xrg5r subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2058d96b66 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=111 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=8b41fba1-441e-4683-8c62-eee7ff945cc3,k8s:batch.kubernetes.io/job-name=barbican-db-sync,k8s:component=db-sync,k8s:controller-uid=8b41fba1-441e-4683-8c62-eee7ff945cc3,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-sync,k8s:release_group=barbican" ipv4=10.0.0.61 ipv6= k8sPodName=openstack/barbican-db-sync-xrg5r subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=8b41fba1-441e-4683-8c62-eee7ff945cc3;k8s:batch.kubernetes.io/job-name=barbican-db-sync;k8s:component=db-sync;k8s:controller-uid=8b41fba1-441e-4683-8c62-eee7ff945cc3;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-db-sync;k8s:release_group=barbican;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=2058d96b66 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=111 identity=24334 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=8b41fba1-441e-4683-8c62-eee7ff945cc3,k8s:batch.kubernetes.io/job-name=barbican-db-sync,k8s:component=db-sync,k8s:controller-uid=8b41fba1-441e-4683-8c62-eee7ff945cc3,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-sync,k8s:release_group=barbican" ipv4=10.0.0.61 ipv6= k8sPodName=openstack/barbican-db-sync-xrg5r oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2058d96b66 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=111 identity=24334 ipv4=10.0.0.61 ipv6= k8sPodName=openstack/barbican-db-sync-xrg5r subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=2058d96b66 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=111 identity=24334 ipv4=10.0.0.61 ipv6= k8sPodName=openstack/barbican-db-sync-xrg5r subsys=endpoint level=info msg="Successful endpoint creation" containerID=2058d96b66 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=111 identity=24334 ipv4=10.0.0.61 ipv6= k8sPodName=openstack/barbican-db-sync-xrg5r subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Conntrack garbage collector interval recalculated" deleteRatio=0.03574810285822501 newInterval=11m15s subsys=map-ct level=info msg="Delete endpoint request" containerID=2058d96b66 endpointID=111 k8sNamespace=openstack k8sPodName=barbican-db-sync-xrg5r subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=8b41fba1-441e-4683-8c62-eee7ff945cc3 k8s:batch.kubernetes.io/job-name=barbican-db-sync k8s:component=db-sync k8s:controller-uid=8b41fba1-441e-4683-8c62-eee7ff945cc3 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-db-sync k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=2058d96b66 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=111 identity=24334 ipv4=10.0.0.61 ipv6= k8sPodName=openstack/barbican-db-sync-xrg5r subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.222 19e6a16e-4c88-4cc4-9775-fee1de4be7d8 default }" containerID=57c09dbed1c364bb15399d050c43313a4d279da55796ba658247d244999d3f8e datapathConfiguration="&{false false false false false }" interface=lxc083b63c3512b k8sPodName=openstack/barbican-rabbit-init-md7h2 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=57c09dbed1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1546 ipv4=10.0.0.222 ipv6= k8sPodName=openstack/barbican-rabbit-init-md7h2 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=57c09dbed1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1546 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=445b138e-873e-43c3-97ab-4782044980e6,k8s:batch.kubernetes.io/job-name=barbican-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=445b138e-873e-43c3-97ab-4782044980e6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-rabbit-init,k8s:release_group=barbican" ipv4=10.0.0.222 ipv6= k8sPodName=openstack/barbican-rabbit-init-md7h2 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=445b138e-873e-43c3-97ab-4782044980e6;k8s:batch.kubernetes.io/job-name=barbican-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=445b138e-873e-43c3-97ab-4782044980e6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-rabbit-init;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=57c09dbed1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1546 identity=45822 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=445b138e-873e-43c3-97ab-4782044980e6,k8s:batch.kubernetes.io/job-name=barbican-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=445b138e-873e-43c3-97ab-4782044980e6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-rabbit-init,k8s:release_group=barbican" ipv4=10.0.0.222 ipv6= k8sPodName=openstack/barbican-rabbit-init-md7h2 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=57c09dbed1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1546 identity=45822 ipv4=10.0.0.222 ipv6= k8sPodName=openstack/barbican-rabbit-init-md7h2 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=57c09dbed1 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1546 identity=45822 ipv4=10.0.0.222 ipv6= k8sPodName=openstack/barbican-rabbit-init-md7h2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=57c09dbed1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1546 identity=45822 ipv4=10.0.0.222 ipv6= k8sPodName=openstack/barbican-rabbit-init-md7h2 subsys=daemon level=info msg="Delete endpoint request" containerID=57c09dbed1 endpointID=1546 k8sNamespace=openstack k8sPodName=barbican-rabbit-init-md7h2 subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=445b138e-873e-43c3-97ab-4782044980e6 k8s:batch.kubernetes.io/job-name=barbican-rabbit-init k8s:component=rabbit-init k8s:controller-uid=445b138e-873e-43c3-97ab-4782044980e6 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-rabbit-init k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=57c09dbed1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1546 identity=45822 ipv4=10.0.0.222 ipv6= k8sPodName=openstack/barbican-rabbit-init-md7h2 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.157 df7502bf-2f7f-4db9-aac1-2fd1056c9b7b default }" containerID=b7434cef6f54e625f84cb051e5c005a752556df4e7ca3c133312fdbf9f3688d7 datapathConfiguration="&{false false false false false }" interface=lxcf41ac4584ff3 k8sPodName=openstack/barbican-ks-service-6smbs labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b7434cef6f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1274 ipv4=10.0.0.157 ipv6= k8sPodName=openstack/barbican-ks-service-6smbs subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b7434cef6f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1274 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=1d01e560-5ba8-42f8-89c8-b7bac0dfe7cc,k8s:batch.kubernetes.io/job-name=barbican-ks-service,k8s:component=ks-service,k8s:controller-uid=1d01e560-5ba8-42f8-89c8-b7bac0dfe7cc,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-service,k8s:release_group=barbican" ipv4=10.0.0.157 ipv6= k8sPodName=openstack/barbican-ks-service-6smbs subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=1d01e560-5ba8-42f8-89c8-b7bac0dfe7cc;k8s:batch.kubernetes.io/job-name=barbican-ks-service;k8s:component=ks-service;k8s:controller-uid=1d01e560-5ba8-42f8-89c8-b7bac0dfe7cc;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-service;k8s:release_group=barbican;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=b7434cef6f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1274 identity=19193 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=1d01e560-5ba8-42f8-89c8-b7bac0dfe7cc,k8s:batch.kubernetes.io/job-name=barbican-ks-service,k8s:component=ks-service,k8s:controller-uid=1d01e560-5ba8-42f8-89c8-b7bac0dfe7cc,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-service,k8s:release_group=barbican" ipv4=10.0.0.157 ipv6= k8sPodName=openstack/barbican-ks-service-6smbs oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b7434cef6f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1274 identity=19193 ipv4=10.0.0.157 ipv6= k8sPodName=openstack/barbican-ks-service-6smbs subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b7434cef6f datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1274 identity=19193 ipv4=10.0.0.157 ipv6= k8sPodName=openstack/barbican-ks-service-6smbs subsys=endpoint level=info msg="Successful endpoint creation" containerID=b7434cef6f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1274 identity=19193 ipv4=10.0.0.157 ipv6= k8sPodName=openstack/barbican-ks-service-6smbs subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=b7434cef6f endpointID=1274 k8sNamespace=openstack k8sPodName=barbican-ks-service-6smbs subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=1d01e560-5ba8-42f8-89c8-b7bac0dfe7cc k8s:batch.kubernetes.io/job-name=barbican-ks-service k8s:component=ks-service k8s:controller-uid=1d01e560-5ba8-42f8-89c8-b7bac0dfe7cc k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-service k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=b7434cef6f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1274 identity=19193 ipv4=10.0.0.157 ipv6= k8sPodName=openstack/barbican-ks-service-6smbs subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.106 51e00d35-3316-4864-92b9-7c553f0cce1c default }" containerID=20607d56f74953be0cf527fc19ef5652a3afa73274d01a5eb288db329a39cdca datapathConfiguration="&{false false false false false }" interface=lxc8a460b8a9291 k8sPodName=openstack/barbican-ks-endpoints-stscm labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=20607d56f7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1247 ipv4=10.0.0.106 ipv6= k8sPodName=openstack/barbican-ks-endpoints-stscm subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=20607d56f7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1247 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=5c8b699c-85f4-45a5-b219-8ea4d62cd02a,k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=5c8b699c-85f4-45a5-b219-8ea4d62cd02a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-endpoints,k8s:release_group=barbican" ipv4=10.0.0.106 ipv6= k8sPodName=openstack/barbican-ks-endpoints-stscm subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=5c8b699c-85f4-45a5-b219-8ea4d62cd02a;k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=5c8b699c-85f4-45a5-b219-8ea4d62cd02a;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-endpoints;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=20607d56f7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1247 identity=10239 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=5c8b699c-85f4-45a5-b219-8ea4d62cd02a,k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=5c8b699c-85f4-45a5-b219-8ea4d62cd02a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-endpoints,k8s:release_group=barbican" ipv4=10.0.0.106 ipv6= k8sPodName=openstack/barbican-ks-endpoints-stscm oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=20607d56f7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1247 identity=10239 ipv4=10.0.0.106 ipv6= k8sPodName=openstack/barbican-ks-endpoints-stscm subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=20607d56f7 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1247 identity=10239 ipv4=10.0.0.106 ipv6= k8sPodName=openstack/barbican-ks-endpoints-stscm subsys=endpoint level=info msg="Successful endpoint creation" containerID=20607d56f7 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1247 identity=10239 ipv4=10.0.0.106 ipv6= k8sPodName=openstack/barbican-ks-endpoints-stscm subsys=daemon level=info msg="Delete endpoint request" containerID=20607d56f7 endpointID=1247 k8sNamespace=openstack k8sPodName=barbican-ks-endpoints-stscm subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=5c8b699c-85f4-45a5-b219-8ea4d62cd02a k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=5c8b699c-85f4-45a5-b219-8ea4d62cd02a k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-endpoints k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=20607d56f7 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1247 identity=10239 ipv4=10.0.0.106 ipv6= k8sPodName=openstack/barbican-ks-endpoints-stscm subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.169 7295757e-b6ea-4b5e-b269-c93879168bd3 default }" containerID=9a4d378f96440fa30399ffee127bf25d9ba3370261b6b8f2a02945926bf74732 datapathConfiguration="&{false false false false false }" interface=lxc5ca63ca079f7 k8sPodName=openstack/barbican-ks-user-cnhjk labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9a4d378f96 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=53 ipv4=10.0.0.169 ipv6= k8sPodName=openstack/barbican-ks-user-cnhjk subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9a4d378f96 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=53 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=4f01493f-7533-414a-ad8a-12720f644222,k8s:batch.kubernetes.io/job-name=barbican-ks-user,k8s:component=ks-user,k8s:controller-uid=4f01493f-7533-414a-ad8a-12720f644222,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-user,k8s:release_group=barbican" ipv4=10.0.0.169 ipv6= k8sPodName=openstack/barbican-ks-user-cnhjk subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=4f01493f-7533-414a-ad8a-12720f644222;k8s:batch.kubernetes.io/job-name=barbican-ks-user;k8s:component=ks-user;k8s:controller-uid=4f01493f-7533-414a-ad8a-12720f644222;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-user;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9a4d378f96 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=53 identity=16426 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=4f01493f-7533-414a-ad8a-12720f644222,k8s:batch.kubernetes.io/job-name=barbican-ks-user,k8s:component=ks-user,k8s:controller-uid=4f01493f-7533-414a-ad8a-12720f644222,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-user,k8s:release_group=barbican" ipv4=10.0.0.169 ipv6= k8sPodName=openstack/barbican-ks-user-cnhjk oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=9a4d378f96 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=53 identity=16426 ipv4=10.0.0.169 ipv6= k8sPodName=openstack/barbican-ks-user-cnhjk subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=9a4d378f96 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=53 identity=16426 ipv4=10.0.0.169 ipv6= k8sPodName=openstack/barbican-ks-user-cnhjk subsys=endpoint level=info msg="Successful endpoint creation" containerID=9a4d378f96 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=53 identity=16426 ipv4=10.0.0.169 ipv6= k8sPodName=openstack/barbican-ks-user-cnhjk subsys=daemon level=info msg="Delete endpoint request" containerID=9a4d378f96 endpointID=53 k8sNamespace=openstack k8sPodName=barbican-ks-user-cnhjk subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=4f01493f-7533-414a-ad8a-12720f644222 k8s:batch.kubernetes.io/job-name=barbican-ks-user k8s:component=ks-user k8s:controller-uid=4f01493f-7533-414a-ad8a-12720f644222 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-user k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=9a4d378f96 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=53 identity=16426 ipv4=10.0.0.169 ipv6= k8sPodName=openstack/barbican-ks-user-cnhjk subsys=endpoint level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Create endpoint request" addressing="&{10.0.0.244 5d75af7e-c46f-424a-8e2a-cb61391d4d19 default }" containerID=325ee13f4f8f9c591292683aa0e0f37507a022d9967f0ff99ca10fc3bbec174d datapathConfiguration="&{false false false false false }" interface=lxc34f590f09610 k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-wh7wd labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=325ee13f4f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=850 ipv4=10.0.0.244 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-wh7wd subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=325ee13f4f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=850 identityLabels="k8s:app=rook-ceph-operator,k8s:helm.sh/chart=rook-ceph-v1.15.9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph,k8s:io.cilium.k8s.namespace.labels.name=rook-ceph,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system,k8s:io.kubernetes.pod.namespace=rook-ceph" ipv4=10.0.0.244 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-wh7wd subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:rook-ceph k8s:io.cilium.k8s.namespace.labels.name:rook-ceph]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app=rook-ceph-operator;k8s:helm.sh/chart=rook-ceph-v1.15.9;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph;k8s:io.cilium.k8s.namespace.labels.name=rook-ceph;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system;k8s:io.kubernetes.pod.namespace=rook-ceph;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=325ee13f4f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=850 identity=46884 identityLabels="k8s:app=rook-ceph-operator,k8s:helm.sh/chart=rook-ceph-v1.15.9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph,k8s:io.cilium.k8s.namespace.labels.name=rook-ceph,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system,k8s:io.kubernetes.pod.namespace=rook-ceph" ipv4=10.0.0.244 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-wh7wd oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=325ee13f4f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=850 identity=46884 ipv4=10.0.0.244 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-wh7wd subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=325ee13f4f datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=850 identity=46884 ipv4=10.0.0.244 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-wh7wd subsys=endpoint level=info msg="Successful endpoint creation" containerID=325ee13f4f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=850 identity=46884 ipv4=10.0.0.244 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-wh7wd subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.109 be075898-bd03-44ac-88ad-90e80bae23ec default }" containerID=24137ca4b3ed331a786136577720f91b81cdbbb627501fd139eed6be2d677517 datapathConfiguration="&{false false false false false }" interface=lxc6c7f559c485c k8sPodName=openstack/rook-ceph-detect-version-wszwt labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=24137ca4b3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2159 ipv4=10.0.0.109 ipv6= k8sPodName=openstack/rook-ceph-detect-version-wszwt subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=24137ca4b3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2159 identityLabels="k8s:app=rook-ceph-detect-version,k8s:batch.kubernetes.io/controller-uid=6299bd40-49ff-452d-812d-e4f7512b0a92,k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version,k8s:controller-uid=6299bd40-49ff-452d-812d-e4f7512b0a92,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=rook-ceph-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.109 ipv6= k8sPodName=openstack/rook-ceph-detect-version-wszwt subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=24137ca4b3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2159 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.109 ipv6= k8sPodName=openstack/rook-ceph-detect-version-wszwt line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=rook-ceph-detect-version;k8s:batch.kubernetes.io/controller-uid=6299bd40-49ff-452d-812d-e4f7512b0a92;k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version;k8s:controller-uid=6299bd40-49ff-452d-812d-e4f7512b0a92;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=rook-ceph-detect-version;k8s:rook-version=v1.15.9;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=24137ca4b3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2159 identity=18617 identityLabels="k8s:app=rook-ceph-detect-version,k8s:batch.kubernetes.io/controller-uid=6299bd40-49ff-452d-812d-e4f7512b0a92,k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version,k8s:controller-uid=6299bd40-49ff-452d-812d-e4f7512b0a92,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=rook-ceph-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.109 ipv6= k8sPodName=openstack/rook-ceph-detect-version-wszwt oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=24137ca4b3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2159 identity=18617 ipv4=10.0.0.109 ipv6= k8sPodName=openstack/rook-ceph-detect-version-wszwt subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=24137ca4b3 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2159 identity=18617 ipv4=10.0.0.109 ipv6= k8sPodName=openstack/rook-ceph-detect-version-wszwt subsys=endpoint level=info msg="Successful endpoint creation" containerID=24137ca4b3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2159 identity=18617 ipv4=10.0.0.109 ipv6= k8sPodName=openstack/rook-ceph-detect-version-wszwt subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=24137ca4b3 endpointID=2159 k8sNamespace=openstack k8sPodName=rook-ceph-detect-version-wszwt subsys=daemon level=info msg="Releasing key" key="[k8s:app=rook-ceph-detect-version k8s:batch.kubernetes.io/controller-uid=6299bd40-49ff-452d-812d-e4f7512b0a92 k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version k8s:controller-uid=6299bd40-49ff-452d-812d-e4f7512b0a92 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=rook-ceph-detect-version k8s:rook-version=v1.15.9]" subsys=allocator level=info msg="Removed endpoint" containerID=24137ca4b3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2159 identity=18617 ipv4=10.0.0.109 ipv6= k8sPodName=openstack/rook-ceph-detect-version-wszwt subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.149 6d802e02-aae3-45e6-b01b-d740aa103aa8 default }" containerID=cac8224ee4f6a1c0d2a4dd14a9c838f391aa7728dde002a561bcd00355a55803 datapathConfiguration="&{false false false false false }" interface=lxc5b55376aee8a k8sPodName=openstack/ceph-object-controller-detect-version-hkknr labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=cac8224ee4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1255 ipv4=10.0.0.149 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-hkknr subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=cac8224ee4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1255 identityLabels="k8s:app=ceph-object-controller-detect-version,k8s:batch.kubernetes.io/controller-uid=cb211f20-99ff-492a-a2ec-5b0ce15bbde4,k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version,k8s:controller-uid=cb211f20-99ff-492a-a2ec-5b0ce15bbde4,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=ceph-object-controller-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.149 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-hkknr subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=ceph-object-controller-detect-version;k8s:batch.kubernetes.io/controller-uid=cb211f20-99ff-492a-a2ec-5b0ce15bbde4;k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version;k8s:controller-uid=cb211f20-99ff-492a-a2ec-5b0ce15bbde4;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=ceph-object-controller-detect-version;k8s:rook-version=v1.15.9;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=cac8224ee4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1255 identity=767 identityLabels="k8s:app=ceph-object-controller-detect-version,k8s:batch.kubernetes.io/controller-uid=cb211f20-99ff-492a-a2ec-5b0ce15bbde4,k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version,k8s:controller-uid=cb211f20-99ff-492a-a2ec-5b0ce15bbde4,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=ceph-object-controller-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.149 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-hkknr oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=cac8224ee4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1255 identity=767 ipv4=10.0.0.149 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-hkknr subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=cac8224ee4 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1255 identity=767 ipv4=10.0.0.149 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-hkknr subsys=endpoint level=info msg="Successful endpoint creation" containerID=cac8224ee4 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1255 identity=767 ipv4=10.0.0.149 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-hkknr subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.10 ec4c3dbe-2261-4ca8-b48f-ba7dba9eafe0 default }" containerID=4d50011de3c652963c3cd58c327b48caa59cb43c252a5f9a643075147cb9d2e0 datapathConfiguration="&{false false false false false }" interface=lxce2adf2cd15e4 k8sPodName=local-path-storage/helper-pod-create-pvc-787536be-7a2f-4597-8878-5de43907066f labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4d50011de3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1103 ipv4=10.0.0.10 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-787536be-7a2f-4597-8878-5de43907066f subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4d50011de3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1103 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.10 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-787536be-7a2f-4597-8878-5de43907066f subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4d50011de3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1103 identity=62495 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.10 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-787536be-7a2f-4597-8878-5de43907066f oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4d50011de3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1103 identity=62495 ipv4=10.0.0.10 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-787536be-7a2f-4597-8878-5de43907066f subsys=endpoint level=info msg="Delete endpoint request" containerID=cac8224ee4 endpointID=1255 k8sNamespace=openstack k8sPodName=ceph-object-controller-detect-version-hkknr subsys=daemon level=info msg="Releasing key" key="[k8s:app=ceph-object-controller-detect-version k8s:batch.kubernetes.io/controller-uid=cb211f20-99ff-492a-a2ec-5b0ce15bbde4 k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version k8s:controller-uid=cb211f20-99ff-492a-a2ec-5b0ce15bbde4 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=ceph-object-controller-detect-version k8s:rook-version=v1.15.9]" subsys=allocator level=info msg="Removed endpoint" containerID=cac8224ee4 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1255 identity=767 ipv4=10.0.0.149 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-hkknr subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=4d50011de3 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1103 identity=62495 ipv4=10.0.0.10 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-787536be-7a2f-4597-8878-5de43907066f subsys=endpoint level=info msg="Successful endpoint creation" containerID=4d50011de3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1103 identity=62495 ipv4=10.0.0.10 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-787536be-7a2f-4597-8878-5de43907066f subsys=daemon level=info msg="Delete endpoint request" containerID=4d50011de3 endpointID=1103 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-787536be-7a2f-4597-8878-5de43907066f subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=4d50011de3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1103 identity=62495 ipv4=10.0.0.10 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-787536be-7a2f-4597-8878-5de43907066f subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.221 377fca01-2f2e-4963-afdf-537cc4c05809 default }" containerID=62aedf10dbb4027079fee0546cf3d22e156684139d886683af1853729276a7f7 datapathConfiguration="&{false false false false false }" interface=lxceef563e12b04 k8sPodName=openstack/rabbitmq-glance-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=62aedf10db datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=115 ipv4=10.0.0.221 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=62aedf10db datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=115 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-glance,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0" ipv4=10.0.0.221 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=62aedf10db datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=115 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.221 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-glance;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=62aedf10db datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=115 identity=62364 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-glance,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0" ipv4=10.0.0.221 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=62aedf10db datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=115 identity=62364 ipv4=10.0.0.221 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=62aedf10db datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=115 identity=62364 ipv4=10.0.0.221 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=62aedf10db datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=115 identity=62364 ipv4=10.0.0.221 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.78 2d97de61-e462-403b-b6d7-3404b7782a6d default }" containerID=c0c8ddd8ff4b0f80fd0b9da0ff592173fbe1f3afbc169dbfb7934328edf83ccd datapathConfiguration="&{false false false false false }" interface=lxca8b82d070ed8 k8sPodName=openstack/glance-db-init-jjwsv labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c0c8ddd8ff datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1347 ipv4=10.0.0.78 ipv6= k8sPodName=openstack/glance-db-init-jjwsv subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c0c8ddd8ff datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1347 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=921c5a3b-fd81-4f42-9cdd-801ccf8c0359,k8s:batch.kubernetes.io/job-name=glance-db-init,k8s:component=db-init,k8s:controller-uid=921c5a3b-fd81-4f42-9cdd-801ccf8c0359,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-init,k8s:release_group=glance" ipv4=10.0.0.78 ipv6= k8sPodName=openstack/glance-db-init-jjwsv subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=921c5a3b-fd81-4f42-9cdd-801ccf8c0359;k8s:batch.kubernetes.io/job-name=glance-db-init;k8s:component=db-init;k8s:controller-uid=921c5a3b-fd81-4f42-9cdd-801ccf8c0359;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-db-init;k8s:release_group=glance;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=c0c8ddd8ff datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1347 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.78 ipv6= k8sPodName=openstack/glance-db-init-jjwsv line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=c0c8ddd8ff datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1347 identity=12762 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=921c5a3b-fd81-4f42-9cdd-801ccf8c0359,k8s:batch.kubernetes.io/job-name=glance-db-init,k8s:component=db-init,k8s:controller-uid=921c5a3b-fd81-4f42-9cdd-801ccf8c0359,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-init,k8s:release_group=glance" ipv4=10.0.0.78 ipv6= k8sPodName=openstack/glance-db-init-jjwsv oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c0c8ddd8ff datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1347 identity=12762 ipv4=10.0.0.78 ipv6= k8sPodName=openstack/glance-db-init-jjwsv subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c0c8ddd8ff datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1347 identity=12762 ipv4=10.0.0.78 ipv6= k8sPodName=openstack/glance-db-init-jjwsv subsys=endpoint level=info msg="Successful endpoint creation" containerID=c0c8ddd8ff datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1347 identity=12762 ipv4=10.0.0.78 ipv6= k8sPodName=openstack/glance-db-init-jjwsv subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=c0c8ddd8ff endpointID=1347 k8sNamespace=openstack k8sPodName=glance-db-init-jjwsv subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=921c5a3b-fd81-4f42-9cdd-801ccf8c0359 k8s:batch.kubernetes.io/job-name=glance-db-init k8s:component=db-init k8s:controller-uid=921c5a3b-fd81-4f42-9cdd-801ccf8c0359 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-db-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=c0c8ddd8ff datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1347 identity=12762 ipv4=10.0.0.78 ipv6= k8sPodName=openstack/glance-db-init-jjwsv subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.229 4f204e30-2650-469e-a9bd-75a9510a31cf default }" containerID=bb1a7f7d4a9117f1f063c2bbc52c6a415f5c2bd7121613dc4d8a6deabb28bfe5 datapathConfiguration="&{false false false false false }" interface=lxc8eea3497026c k8sPodName=openstack/glance-db-sync-cjzj5 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=bb1a7f7d4a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2281 ipv4=10.0.0.229 ipv6= k8sPodName=openstack/glance-db-sync-cjzj5 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=bb1a7f7d4a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2281 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=a9339521-0140-4cfe-be7c-d5a66d432979,k8s:batch.kubernetes.io/job-name=glance-db-sync,k8s:component=db-sync,k8s:controller-uid=a9339521-0140-4cfe-be7c-d5a66d432979,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-sync,k8s:release_group=glance" ipv4=10.0.0.229 ipv6= k8sPodName=openstack/glance-db-sync-cjzj5 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=a9339521-0140-4cfe-be7c-d5a66d432979;k8s:batch.kubernetes.io/job-name=glance-db-sync;k8s:component=db-sync;k8s:controller-uid=a9339521-0140-4cfe-be7c-d5a66d432979;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-db-sync;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=bb1a7f7d4a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2281 identity=20972 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=a9339521-0140-4cfe-be7c-d5a66d432979,k8s:batch.kubernetes.io/job-name=glance-db-sync,k8s:component=db-sync,k8s:controller-uid=a9339521-0140-4cfe-be7c-d5a66d432979,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-sync,k8s:release_group=glance" ipv4=10.0.0.229 ipv6= k8sPodName=openstack/glance-db-sync-cjzj5 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=bb1a7f7d4a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2281 identity=20972 ipv4=10.0.0.229 ipv6= k8sPodName=openstack/glance-db-sync-cjzj5 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=bb1a7f7d4a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2281 identity=20972 ipv4=10.0.0.229 ipv6= k8sPodName=openstack/glance-db-sync-cjzj5 subsys=endpoint level=info msg="Successful endpoint creation" containerID=bb1a7f7d4a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2281 identity=20972 ipv4=10.0.0.229 ipv6= k8sPodName=openstack/glance-db-sync-cjzj5 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.205 ea9c5aed-854e-40ad-8e7f-c2b4f3181125 default }" containerID=9ed58d7b93b52a0ff3df4a605be500f01658678f976a63d0bae84b3cc922ec91 datapathConfiguration="&{false false false false false }" interface=lxcccf3e5cf74e9 k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-8tsbc labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9ed58d7b93 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=743 ipv4=10.0.0.205 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-8tsbc subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9ed58d7b93 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=743 identityLabels="k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io,k8s:app.kubernetes.io/created-by=rook-ceph-operator,k8s:app.kubernetes.io/instance=ceph,k8s:app.kubernetes.io/managed-by=rook-ceph-operator,k8s:app.kubernetes.io/name=ceph-rgw,k8s:app.kubernetes.io/part-of=ceph,k8s:app=rook-ceph-rgw,k8s:ceph_daemon_id=ceph,k8s:ceph_daemon_type=rgw,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw,k8s:io.kubernetes.pod.namespace=openstack,k8s:rgw=ceph,k8s:rook.io/operator-namespace=rook-ceph,k8s:rook_cluster=openstack,k8s:rook_object_store=ceph" ipv4=10.0.0.205 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-8tsbc subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-rgw;k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io;k8s:app.kubernetes.io/created-by=rook-ceph-operator;k8s:app.kubernetes.io/instance=ceph;k8s:app.kubernetes.io/managed-by=rook-ceph-operator;k8s:app.kubernetes.io/name=ceph-rgw;k8s:app.kubernetes.io/part-of=ceph;k8s:ceph_daemon_id=ceph;k8s:ceph_daemon_type=rgw;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw;k8s:io.kubernetes.pod.namespace=openstack;k8s:rgw=ceph;k8s:rook.io/operator-namespace=rook-ceph;k8s:rook_cluster=openstack;k8s:rook_object_store=ceph;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9ed58d7b93 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=743 identity=26585 identityLabels="k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io,k8s:app.kubernetes.io/created-by=rook-ceph-operator,k8s:app.kubernetes.io/instance=ceph,k8s:app.kubernetes.io/managed-by=rook-ceph-operator,k8s:app.kubernetes.io/name=ceph-rgw,k8s:app.kubernetes.io/part-of=ceph,k8s:app=rook-ceph-rgw,k8s:ceph_daemon_id=ceph,k8s:ceph_daemon_type=rgw,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw,k8s:io.kubernetes.pod.namespace=openstack,k8s:rgw=ceph,k8s:rook.io/operator-namespace=rook-ceph,k8s:rook_cluster=openstack,k8s:rook_object_store=ceph" ipv4=10.0.0.205 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-8tsbc oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9ed58d7b93 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=743 identity=26585 ipv4=10.0.0.205 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-8tsbc subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.182 f679d3ed-1327-4204-b8c3-2da65d6b435e default }" containerID=0eb36dfbade7b2d900de9fd3d834357a9e9ab325e045ee36d4e611832ab115bf datapathConfiguration="&{false false false false false }" interface=lxce4bcdf740890 k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-ffk8w labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0eb36dfbad datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1746 ipv4=10.0.0.182 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-ffk8w subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0eb36dfbad datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1746 identityLabels="k8s:app=rook-ceph-crashcollector,k8s:ceph-version=18.2.7-0,k8s:ceph_daemon_id=crash,k8s:crashcollector=crash,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default,k8s:io.kubernetes.pod.namespace=openstack,k8s:node_name=instance,k8s:rook_cluster=openstack" ipv4=10.0.0.182 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-ffk8w subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-crashcollector;k8s:ceph-version=18.2.7-0;k8s:ceph_daemon_id=crash;k8s:crashcollector=crash;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default;k8s:io.kubernetes.pod.namespace=openstack;k8s:node_name=instance;k8s:rook_cluster=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0eb36dfbad datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1746 identity=30689 identityLabels="k8s:app=rook-ceph-crashcollector,k8s:ceph-version=18.2.7-0,k8s:ceph_daemon_id=crash,k8s:crashcollector=crash,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default,k8s:io.kubernetes.pod.namespace=openstack,k8s:node_name=instance,k8s:rook_cluster=openstack" ipv4=10.0.0.182 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-ffk8w oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0eb36dfbad datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1746 identity=30689 ipv4=10.0.0.182 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-ffk8w subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=9ed58d7b93 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=743 identity=26585 ipv4=10.0.0.205 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-8tsbc subsys=endpoint level=info msg="Successful endpoint creation" containerID=9ed58d7b93 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=743 identity=26585 ipv4=10.0.0.205 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-8tsbc subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=0eb36dfbad datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1746 identity=30689 ipv4=10.0.0.182 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-ffk8w subsys=endpoint level=info msg="Successful endpoint creation" containerID=0eb36dfbad datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1746 identity=30689 ipv4=10.0.0.182 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-ffk8w subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=bb1a7f7d4a endpointID=2281 k8sNamespace=openstack k8sPodName=glance-db-sync-cjzj5 subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=a9339521-0140-4cfe-be7c-d5a66d432979 k8s:batch.kubernetes.io/job-name=glance-db-sync k8s:component=db-sync k8s:controller-uid=a9339521-0140-4cfe-be7c-d5a66d432979 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-db-sync k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=bb1a7f7d4a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2281 identity=20972 ipv4=10.0.0.229 ipv6= k8sPodName=openstack/glance-db-sync-cjzj5 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.173 a2f8d0b5-14cc-4cc2-9401-e4ea90a95a85 default }" containerID=2a4691267a81222585033f6b866a0a034c389e5a0f3163750476215479f39e51 datapathConfiguration="&{false false false false false }" interface=lxc7b6970270717 k8sPodName=openstack/glance-rabbit-init-46llk labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2a4691267a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1475 ipv4=10.0.0.173 ipv6= k8sPodName=openstack/glance-rabbit-init-46llk subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2a4691267a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1475 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=fbebb92b-db24-4417-8d6c-880eed76ee13,k8s:batch.kubernetes.io/job-name=glance-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=fbebb92b-db24-4417-8d6c-880eed76ee13,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-rabbit-init,k8s:release_group=glance" ipv4=10.0.0.173 ipv6= k8sPodName=openstack/glance-rabbit-init-46llk subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=2a4691267a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1475 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.173 ipv6= k8sPodName=openstack/glance-rabbit-init-46llk line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=fbebb92b-db24-4417-8d6c-880eed76ee13;k8s:batch.kubernetes.io/job-name=glance-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=fbebb92b-db24-4417-8d6c-880eed76ee13;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-rabbit-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2a4691267a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1475 identity=8971 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=fbebb92b-db24-4417-8d6c-880eed76ee13,k8s:batch.kubernetes.io/job-name=glance-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=fbebb92b-db24-4417-8d6c-880eed76ee13,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-rabbit-init,k8s:release_group=glance" ipv4=10.0.0.173 ipv6= k8sPodName=openstack/glance-rabbit-init-46llk oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2a4691267a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1475 identity=8971 ipv4=10.0.0.173 ipv6= k8sPodName=openstack/glance-rabbit-init-46llk subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=2a4691267a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1475 identity=8971 ipv4=10.0.0.173 ipv6= k8sPodName=openstack/glance-rabbit-init-46llk subsys=endpoint level=info msg="Successful endpoint creation" containerID=2a4691267a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1475 identity=8971 ipv4=10.0.0.173 ipv6= k8sPodName=openstack/glance-rabbit-init-46llk subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=2a4691267a endpointID=1475 k8sNamespace=openstack k8sPodName=glance-rabbit-init-46llk subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=fbebb92b-db24-4417-8d6c-880eed76ee13 k8s:batch.kubernetes.io/job-name=glance-rabbit-init k8s:component=rabbit-init k8s:controller-uid=fbebb92b-db24-4417-8d6c-880eed76ee13 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-rabbit-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=2a4691267a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1475 identity=8971 ipv4=10.0.0.173 ipv6= k8sPodName=openstack/glance-rabbit-init-46llk subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.66 648b9077-cf2c-413e-a217-580d65772453 default }" containerID=80583603000002e8de899e8a2b4033d013a8bb9b0d136c969a2a7dc4dea233cf datapathConfiguration="&{false false false false false }" interface=lxcfcb71dba5777 k8sPodName=openstack/glance-ks-service-plrlf labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8058360300 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3552 ipv4=10.0.0.66 ipv6= k8sPodName=openstack/glance-ks-service-plrlf subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8058360300 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3552 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=6f3fe18a-11c8-4af3-8a1e-4d75e0c70298,k8s:batch.kubernetes.io/job-name=glance-ks-service,k8s:component=ks-service,k8s:controller-uid=6f3fe18a-11c8-4af3-8a1e-4d75e0c70298,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-service,k8s:release_group=glance" ipv4=10.0.0.66 ipv6= k8sPodName=openstack/glance-ks-service-plrlf subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=6f3fe18a-11c8-4af3-8a1e-4d75e0c70298;k8s:batch.kubernetes.io/job-name=glance-ks-service;k8s:component=ks-service;k8s:controller-uid=6f3fe18a-11c8-4af3-8a1e-4d75e0c70298;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-service;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8058360300 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3552 identity=10748 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=6f3fe18a-11c8-4af3-8a1e-4d75e0c70298,k8s:batch.kubernetes.io/job-name=glance-ks-service,k8s:component=ks-service,k8s:controller-uid=6f3fe18a-11c8-4af3-8a1e-4d75e0c70298,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-service,k8s:release_group=glance" ipv4=10.0.0.66 ipv6= k8sPodName=openstack/glance-ks-service-plrlf oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8058360300 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3552 identity=10748 ipv4=10.0.0.66 ipv6= k8sPodName=openstack/glance-ks-service-plrlf subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=8058360300 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3552 identity=10748 ipv4=10.0.0.66 ipv6= k8sPodName=openstack/glance-ks-service-plrlf subsys=endpoint level=info msg="Successful endpoint creation" containerID=8058360300 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3552 identity=10748 ipv4=10.0.0.66 ipv6= k8sPodName=openstack/glance-ks-service-plrlf subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=8058360300 endpointID=3552 k8sNamespace=openstack k8sPodName=glance-ks-service-plrlf subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=6f3fe18a-11c8-4af3-8a1e-4d75e0c70298 k8s:batch.kubernetes.io/job-name=glance-ks-service k8s:component=ks-service k8s:controller-uid=6f3fe18a-11c8-4af3-8a1e-4d75e0c70298 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-service k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=8058360300 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3552 identity=10748 ipv4=10.0.0.66 ipv6= k8sPodName=openstack/glance-ks-service-plrlf subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.17 fde6f65c-3ac1-4030-a944-387536de7c35 default }" containerID=4596bbf5ff558d92856e7afbe356b70fdd68e85e107c9b42b69487b7f20b4e07 datapathConfiguration="&{false false false false false }" interface=lxcfb0977c0095c k8sPodName=openstack/glance-ks-endpoints-74zhx labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4596bbf5ff datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2899 ipv4=10.0.0.17 ipv6= k8sPodName=openstack/glance-ks-endpoints-74zhx subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4596bbf5ff datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2899 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=86ee110d-653c-4612-8b98-c0dc3b9d4d85,k8s:batch.kubernetes.io/job-name=glance-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=86ee110d-653c-4612-8b98-c0dc3b9d4d85,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-endpoints,k8s:release_group=glance" ipv4=10.0.0.17 ipv6= k8sPodName=openstack/glance-ks-endpoints-74zhx subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=86ee110d-653c-4612-8b98-c0dc3b9d4d85;k8s:batch.kubernetes.io/job-name=glance-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=86ee110d-653c-4612-8b98-c0dc3b9d4d85;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-endpoints;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4596bbf5ff datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2899 identity=14856 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=86ee110d-653c-4612-8b98-c0dc3b9d4d85,k8s:batch.kubernetes.io/job-name=glance-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=86ee110d-653c-4612-8b98-c0dc3b9d4d85,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-endpoints,k8s:release_group=glance" ipv4=10.0.0.17 ipv6= k8sPodName=openstack/glance-ks-endpoints-74zhx oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4596bbf5ff datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2899 identity=14856 ipv4=10.0.0.17 ipv6= k8sPodName=openstack/glance-ks-endpoints-74zhx subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=4596bbf5ff datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2899 identity=14856 ipv4=10.0.0.17 ipv6= k8sPodName=openstack/glance-ks-endpoints-74zhx subsys=endpoint level=info msg="Successful endpoint creation" containerID=4596bbf5ff datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2899 identity=14856 ipv4=10.0.0.17 ipv6= k8sPodName=openstack/glance-ks-endpoints-74zhx subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=4596bbf5ff endpointID=2899 k8sNamespace=openstack k8sPodName=glance-ks-endpoints-74zhx subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=86ee110d-653c-4612-8b98-c0dc3b9d4d85 k8s:batch.kubernetes.io/job-name=glance-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=86ee110d-653c-4612-8b98-c0dc3b9d4d85 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-endpoints k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=4596bbf5ff datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2899 identity=14856 ipv4=10.0.0.17 ipv6= k8sPodName=openstack/glance-ks-endpoints-74zhx subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.184 2d0c92a8-73bf-4e4a-9619-e54b2d7d23b8 default }" containerID=2f4a8f55f0e954c2b5657e60663c1b270703476a88262988c4246aa137163077 datapathConfiguration="&{false false false false false }" interface=lxcedc0f230f009 k8sPodName=openstack/glance-ks-user-7j5gg labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2f4a8f55f0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1162 ipv4=10.0.0.184 ipv6= k8sPodName=openstack/glance-ks-user-7j5gg subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2f4a8f55f0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1162 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=a0444ced-0993-465e-8444-0d3ebf3f2402,k8s:batch.kubernetes.io/job-name=glance-ks-user,k8s:component=ks-user,k8s:controller-uid=a0444ced-0993-465e-8444-0d3ebf3f2402,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-user,k8s:release_group=glance" ipv4=10.0.0.184 ipv6= k8sPodName=openstack/glance-ks-user-7j5gg subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=a0444ced-0993-465e-8444-0d3ebf3f2402;k8s:batch.kubernetes.io/job-name=glance-ks-user;k8s:component=ks-user;k8s:controller-uid=a0444ced-0993-465e-8444-0d3ebf3f2402;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-user;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2f4a8f55f0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1162 identity=24165 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=a0444ced-0993-465e-8444-0d3ebf3f2402,k8s:batch.kubernetes.io/job-name=glance-ks-user,k8s:component=ks-user,k8s:controller-uid=a0444ced-0993-465e-8444-0d3ebf3f2402,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-user,k8s:release_group=glance" ipv4=10.0.0.184 ipv6= k8sPodName=openstack/glance-ks-user-7j5gg oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2f4a8f55f0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1162 identity=24165 ipv4=10.0.0.184 ipv6= k8sPodName=openstack/glance-ks-user-7j5gg subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=2f4a8f55f0 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1162 identity=24165 ipv4=10.0.0.184 ipv6= k8sPodName=openstack/glance-ks-user-7j5gg subsys=endpoint level=info msg="Successful endpoint creation" containerID=2f4a8f55f0 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1162 identity=24165 ipv4=10.0.0.184 ipv6= k8sPodName=openstack/glance-ks-user-7j5gg subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=2f4a8f55f0 endpointID=1162 k8sNamespace=openstack k8sPodName=glance-ks-user-7j5gg subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=a0444ced-0993-465e-8444-0d3ebf3f2402 k8s:batch.kubernetes.io/job-name=glance-ks-user k8s:component=ks-user k8s:controller-uid=a0444ced-0993-465e-8444-0d3ebf3f2402 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-user k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=2f4a8f55f0 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1162 identity=24165 ipv4=10.0.0.184 ipv6= k8sPodName=openstack/glance-ks-user-7j5gg subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.226 343f3547-7e05-411c-acdc-f4d8b8348828 default }" containerID=8e269285f3acce1ef840a9da8819494c27c6bb57885aa221ac196baaeed2dd1a datapathConfiguration="&{false false false false false }" interface=lxc8f676ca97138 k8sPodName=openstack/glance-metadefs-load-x6qrc labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8e269285f3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=124 ipv4=10.0.0.226 ipv6= k8sPodName=openstack/glance-metadefs-load-x6qrc subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8e269285f3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=124 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=c335edb6-aa03-45e5-8d7d-d46676ba4315,k8s:batch.kubernetes.io/job-name=glance-metadefs-load,k8s:component=metadefs_load,k8s:controller-uid=c335edb6-aa03-45e5-8d7d-d46676ba4315,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-metadefs-load,k8s:release_group=glance" ipv4=10.0.0.226 ipv6= k8sPodName=openstack/glance-metadefs-load-x6qrc subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=c335edb6-aa03-45e5-8d7d-d46676ba4315;k8s:batch.kubernetes.io/job-name=glance-metadefs-load;k8s:component=metadefs_load;k8s:controller-uid=c335edb6-aa03-45e5-8d7d-d46676ba4315;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-metadefs-load;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8e269285f3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=124 identity=9216 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=c335edb6-aa03-45e5-8d7d-d46676ba4315,k8s:batch.kubernetes.io/job-name=glance-metadefs-load,k8s:component=metadefs_load,k8s:controller-uid=c335edb6-aa03-45e5-8d7d-d46676ba4315,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-metadefs-load,k8s:release_group=glance" ipv4=10.0.0.226 ipv6= k8sPodName=openstack/glance-metadefs-load-x6qrc oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=8e269285f3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=124 identity=9216 ipv4=10.0.0.226 ipv6= k8sPodName=openstack/glance-metadefs-load-x6qrc subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=8e269285f3 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=124 identity=9216 ipv4=10.0.0.226 ipv6= k8sPodName=openstack/glance-metadefs-load-x6qrc subsys=endpoint level=info msg="Successful endpoint creation" containerID=8e269285f3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=124 identity=9216 ipv4=10.0.0.226 ipv6= k8sPodName=openstack/glance-metadefs-load-x6qrc subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=8e269285f3 endpointID=124 k8sNamespace=openstack k8sPodName=glance-metadefs-load-x6qrc subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=c335edb6-aa03-45e5-8d7d-d46676ba4315 k8s:batch.kubernetes.io/job-name=glance-metadefs-load k8s:component=metadefs_load k8s:controller-uid=c335edb6-aa03-45e5-8d7d-d46676ba4315 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-metadefs-load k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=8e269285f3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=124 identity=9216 ipv4=10.0.0.226 ipv6= k8sPodName=openstack/glance-metadefs-load-x6qrc subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.42 fbcb55a2-b8d3-4c5a-a6b6-b33ee1af9349 default }" containerID=878d54dcef23c75a2f14e5975ffff7274ca2ccbf815fd9c2b9a961344c1e4f46 datapathConfiguration="&{false false false false false }" interface=lxc9507e8451342 k8sPodName=openstack/glance-storage-init-xd2dp labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=878d54dcef datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=471 ipv4=10.0.0.42 ipv6= k8sPodName=openstack/glance-storage-init-xd2dp subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=878d54dcef datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=471 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=50e49603-52fe-44ae-939d-e3ef0ca50c30,k8s:batch.kubernetes.io/job-name=glance-storage-init,k8s:component=storage-init,k8s:controller-uid=50e49603-52fe-44ae-939d-e3ef0ca50c30,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-storage-init,k8s:release_group=glance" ipv4=10.0.0.42 ipv6= k8sPodName=openstack/glance-storage-init-xd2dp subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=878d54dcef datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=471 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.42 ipv6= k8sPodName=openstack/glance-storage-init-xd2dp line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=50e49603-52fe-44ae-939d-e3ef0ca50c30;k8s:batch.kubernetes.io/job-name=glance-storage-init;k8s:component=storage-init;k8s:controller-uid=50e49603-52fe-44ae-939d-e3ef0ca50c30;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-storage-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=878d54dcef datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=471 identity=22062 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=50e49603-52fe-44ae-939d-e3ef0ca50c30,k8s:batch.kubernetes.io/job-name=glance-storage-init,k8s:component=storage-init,k8s:controller-uid=50e49603-52fe-44ae-939d-e3ef0ca50c30,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-storage-init,k8s:release_group=glance" ipv4=10.0.0.42 ipv6= k8sPodName=openstack/glance-storage-init-xd2dp oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=878d54dcef datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=471 identity=22062 ipv4=10.0.0.42 ipv6= k8sPodName=openstack/glance-storage-init-xd2dp subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=878d54dcef datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=471 identity=22062 ipv4=10.0.0.42 ipv6= k8sPodName=openstack/glance-storage-init-xd2dp subsys=endpoint level=info msg="Successful endpoint creation" containerID=878d54dcef datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=471 identity=22062 ipv4=10.0.0.42 ipv6= k8sPodName=openstack/glance-storage-init-xd2dp subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=878d54dcef endpointID=471 k8sNamespace=openstack k8sPodName=glance-storage-init-xd2dp subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=50e49603-52fe-44ae-939d-e3ef0ca50c30 k8s:batch.kubernetes.io/job-name=glance-storage-init k8s:component=storage-init k8s:controller-uid=50e49603-52fe-44ae-939d-e3ef0ca50c30 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-storage-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=878d54dcef datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=471 identity=22062 ipv4=10.0.0.42 ipv6= k8sPodName=openstack/glance-storage-init-xd2dp subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.185 8569cdfe-e110-4200-bfe9-428b98131b5b default }" containerID=9302ec135ccd6cb8ce068e9c0358f04e7a34185cd2629644adfb26d40029d2bd datapathConfiguration="&{false false false false false }" interface=lxc7ca10319f48a k8sPodName=openstack/glance-api-659d7f76-fhjww labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9302ec135c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=7 ipv4=10.0.0.185 ipv6= k8sPodName=openstack/glance-api-659d7f76-fhjww subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9302ec135c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=7 identityLabels="k8s:application=glance,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=glance" ipv4=10.0.0.185 ipv6= k8sPodName=openstack/glance-api-659d7f76-fhjww subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9302ec135c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=7 identity=5770 identityLabels="k8s:application=glance,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=glance" ipv4=10.0.0.185 ipv6= k8sPodName=openstack/glance-api-659d7f76-fhjww oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9302ec135c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=7 identity=5770 ipv4=10.0.0.185 ipv6= k8sPodName=openstack/glance-api-659d7f76-fhjww subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=9302ec135c datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=7 identity=5770 ipv4=10.0.0.185 ipv6= k8sPodName=openstack/glance-api-659d7f76-fhjww subsys=endpoint level=info msg="Successful endpoint creation" containerID=9302ec135c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=7 identity=5770 ipv4=10.0.0.185 ipv6= k8sPodName=openstack/glance-api-659d7f76-fhjww subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.126 3796d45e-97da-4f90-bc5a-292e62c1945d default }" containerID=5dc8aef956e8817748350343ff1a14cce71ca54a6a03e4e120986e2438e5081a datapathConfiguration="&{false false false false false }" interface=lxcfb0110d3a6fd k8sPodName=openstack/staffeln-api-8557479fb5-rfp7t labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5dc8aef956 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=587 ipv4=10.0.0.126 ipv6= k8sPodName=openstack/staffeln-api-8557479fb5-rfp7t subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.72 eb5e1444-e2f9-437a-b5cf-8cc85a29b671 default }" containerID=5bfcd3f46a51f1fe008f1798a4814b6c5346179ef9b0757562aed866f5e35afe datapathConfiguration="&{false false false false false }" interface=lxc4be93f067ebb k8sPodName=openstack/staffeln-conductor-69c55f599d-mvhtb labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5bfcd3f46a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2083 ipv4=10.0.0.72 ipv6= k8sPodName=openstack/staffeln-conductor-69c55f599d-mvhtb subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5bfcd3f46a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2083 identityLabels="k8s:application=staffeln,k8s:component=conductor,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.72 ipv6= k8sPodName=openstack/staffeln-conductor-69c55f599d-mvhtb subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5dc8aef956 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=587 identityLabels="k8s:application=staffeln,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.126 ipv6= k8sPodName=openstack/staffeln-api-8557479fb5-rfp7t subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:component=conductor;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=staffeln;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=5bfcd3f46a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2083 identity=21517 identityLabels="k8s:application=staffeln,k8s:component=conductor,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.72 ipv6= k8sPodName=openstack/staffeln-conductor-69c55f599d-mvhtb oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5bfcd3f46a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2083 identity=21517 ipv4=10.0.0.72 ipv6= k8sPodName=openstack/staffeln-conductor-69c55f599d-mvhtb subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Invalid state transition skipped" containerID=5dc8aef956 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=587 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.126 ipv6= k8sPodName=openstack/staffeln-api-8557479fb5-rfp7t line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5dc8aef956 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=587 identity=35802 identityLabels="k8s:application=staffeln,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.126 ipv6= k8sPodName=openstack/staffeln-api-8557479fb5-rfp7t oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5dc8aef956 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=587 identity=35802 ipv4=10.0.0.126 ipv6= k8sPodName=openstack/staffeln-api-8557479fb5-rfp7t subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.106 698b1ba2-2069-4bc0-9ace-ac3d6c99b3d4 default }" containerID=af7056da867e2f5875366c23289f2a403e991497f5471ea75c06addf69cc222b datapathConfiguration="&{false false false false false }" interface=lxc854b4a742886 k8sPodName=openstack/staffeln-db-init-gtflh labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=af7056da86 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=304 ipv4=10.0.0.106 ipv6= k8sPodName=openstack/staffeln-db-init-gtflh subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=af7056da86 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=304 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=d95d8f2d-237c-4994-97b2-1694bddfe8b8,k8s:batch.kubernetes.io/job-name=staffeln-db-init,k8s:component=db-init,k8s:controller-uid=d95d8f2d-237c-4994-97b2-1694bddfe8b8,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-init,k8s:release_group=staffeln" ipv4=10.0.0.106 ipv6= k8sPodName=openstack/staffeln-db-init-gtflh subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:batch.kubernetes.io/controller-uid=d95d8f2d-237c-4994-97b2-1694bddfe8b8;k8s:batch.kubernetes.io/job-name=staffeln-db-init;k8s:component=db-init;k8s:controller-uid=d95d8f2d-237c-4994-97b2-1694bddfe8b8;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=staffeln-db-init;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=af7056da86 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=304 identity=54488 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=d95d8f2d-237c-4994-97b2-1694bddfe8b8,k8s:batch.kubernetes.io/job-name=staffeln-db-init,k8s:component=db-init,k8s:controller-uid=d95d8f2d-237c-4994-97b2-1694bddfe8b8,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-init,k8s:release_group=staffeln" ipv4=10.0.0.106 ipv6= k8sPodName=openstack/staffeln-db-init-gtflh oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=af7056da86 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=304 identity=54488 ipv4=10.0.0.106 ipv6= k8sPodName=openstack/staffeln-db-init-gtflh subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=5bfcd3f46a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2083 identity=21517 ipv4=10.0.0.72 ipv6= k8sPodName=openstack/staffeln-conductor-69c55f599d-mvhtb subsys=endpoint level=info msg="Successful endpoint creation" containerID=5bfcd3f46a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2083 identity=21517 ipv4=10.0.0.72 ipv6= k8sPodName=openstack/staffeln-conductor-69c55f599d-mvhtb subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=5dc8aef956 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=587 identity=35802 ipv4=10.0.0.126 ipv6= k8sPodName=openstack/staffeln-api-8557479fb5-rfp7t subsys=endpoint level=info msg="Successful endpoint creation" containerID=5dc8aef956 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=587 identity=35802 ipv4=10.0.0.126 ipv6= k8sPodName=openstack/staffeln-api-8557479fb5-rfp7t subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=af7056da86 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=304 identity=54488 ipv4=10.0.0.106 ipv6= k8sPodName=openstack/staffeln-db-init-gtflh subsys=endpoint level=info msg="Successful endpoint creation" containerID=af7056da86 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=304 identity=54488 ipv4=10.0.0.106 ipv6= k8sPodName=openstack/staffeln-db-init-gtflh subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=af7056da86 endpointID=304 k8sNamespace=openstack k8sPodName=staffeln-db-init-gtflh subsys=daemon level=info msg="Releasing key" key="[k8s:application=staffeln k8s:batch.kubernetes.io/controller-uid=d95d8f2d-237c-4994-97b2-1694bddfe8b8 k8s:batch.kubernetes.io/job-name=staffeln-db-init k8s:component=db-init k8s:controller-uid=d95d8f2d-237c-4994-97b2-1694bddfe8b8 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=staffeln-db-init k8s:release_group=staffeln]" subsys=allocator level=info msg="Removed endpoint" containerID=af7056da86 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=304 identity=54488 ipv4=10.0.0.106 ipv6= k8sPodName=openstack/staffeln-db-init-gtflh subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.229 4de2787c-f7b8-41d4-8ea4-407714706d38 default }" containerID=0ed08b233947fcbacc6cd2f87ab9959e6fba70c8a37b969da8e04e510d988c0a datapathConfiguration="&{false false false false false }" interface=lxcbeddbb0b2ba5 k8sPodName=openstack/staffeln-db-sync-4lmxr labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0ed08b2339 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=356 ipv4=10.0.0.229 ipv6= k8sPodName=openstack/staffeln-db-sync-4lmxr subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0ed08b2339 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=356 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=1d07d2be-e215-46c9-a304-629e08db4785,k8s:batch.kubernetes.io/job-name=staffeln-db-sync,k8s:component=db-sync,k8s:controller-uid=1d07d2be-e215-46c9-a304-629e08db4785,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-sync,k8s:release_group=staffeln" ipv4=10.0.0.229 ipv6= k8sPodName=openstack/staffeln-db-sync-4lmxr subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:batch.kubernetes.io/controller-uid=1d07d2be-e215-46c9-a304-629e08db4785;k8s:batch.kubernetes.io/job-name=staffeln-db-sync;k8s:component=db-sync;k8s:controller-uid=1d07d2be-e215-46c9-a304-629e08db4785;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=staffeln-db-sync;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0ed08b2339 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=356 identity=31533 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=1d07d2be-e215-46c9-a304-629e08db4785,k8s:batch.kubernetes.io/job-name=staffeln-db-sync,k8s:component=db-sync,k8s:controller-uid=1d07d2be-e215-46c9-a304-629e08db4785,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-sync,k8s:release_group=staffeln" ipv4=10.0.0.229 ipv6= k8sPodName=openstack/staffeln-db-sync-4lmxr oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0ed08b2339 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=356 identity=31533 ipv4=10.0.0.229 ipv6= k8sPodName=openstack/staffeln-db-sync-4lmxr subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=0ed08b2339 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=356 identity=31533 ipv4=10.0.0.229 ipv6= k8sPodName=openstack/staffeln-db-sync-4lmxr subsys=endpoint level=info msg="Successful endpoint creation" containerID=0ed08b2339 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=356 identity=31533 ipv4=10.0.0.229 ipv6= k8sPodName=openstack/staffeln-db-sync-4lmxr subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=0ed08b2339 endpointID=356 k8sNamespace=openstack k8sPodName=staffeln-db-sync-4lmxr subsys=daemon level=info msg="Releasing key" key="[k8s:application=staffeln k8s:batch.kubernetes.io/controller-uid=1d07d2be-e215-46c9-a304-629e08db4785 k8s:batch.kubernetes.io/job-name=staffeln-db-sync k8s:component=db-sync k8s:controller-uid=1d07d2be-e215-46c9-a304-629e08db4785 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=staffeln-db-sync k8s:release_group=staffeln]" subsys=allocator level=info msg="Removed endpoint" containerID=0ed08b2339 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=356 identity=31533 ipv4=10.0.0.229 ipv6= k8sPodName=openstack/staffeln-db-sync-4lmxr subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.114 637200b2-e8ba-4632-ae93-fc86527feb8c default }" containerID=7e2888c762a96a90d70e92c0395a2ac9cada7f0e4815eb84d2de5a9e47222f60 datapathConfiguration="&{false false false false false }" interface=lxc1dbca5c6acf5 k8sPodName=local-path-storage/helper-pod-create-pvc-db5d17c1-338c-4091-9856-436338cc256e labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7e2888c762 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3069 ipv4=10.0.0.114 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-db5d17c1-338c-4091-9856-436338cc256e subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7e2888c762 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3069 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.114 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-db5d17c1-338c-4091-9856-436338cc256e subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7e2888c762 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3069 identity=62495 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.114 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-db5d17c1-338c-4091-9856-436338cc256e oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7e2888c762 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3069 identity=62495 ipv4=10.0.0.114 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-db5d17c1-338c-4091-9856-436338cc256e subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=7e2888c762 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3069 identity=62495 ipv4=10.0.0.114 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-db5d17c1-338c-4091-9856-436338cc256e subsys=endpoint level=info msg="Successful endpoint creation" containerID=7e2888c762 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3069 identity=62495 ipv4=10.0.0.114 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-db5d17c1-338c-4091-9856-436338cc256e subsys=daemon level=info msg="Delete endpoint request" containerID=7e2888c762 endpointID=3069 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-db5d17c1-338c-4091-9856-436338cc256e subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=7e2888c762 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3069 identity=62495 ipv4=10.0.0.114 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-db5d17c1-338c-4091-9856-436338cc256e subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.109 1bdabf9d-8350-4819-ae7a-437b83487260 default }" containerID=350d984f4087ea84a50bd92cf0414581f189410fb8341420a9947f825c5b1cd5 datapathConfiguration="&{false false false false false }" interface=lxc6f486a1d146c k8sPodName=openstack/rabbitmq-cinder-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=350d984f40 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=430 ipv4=10.0.0.109 ipv6= k8sPodName=openstack/rabbitmq-cinder-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=350d984f40 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=430 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-cinder,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cinder-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-cinder-server-0" ipv4=10.0.0.109 ipv6= k8sPodName=openstack/rabbitmq-cinder-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-cinder;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cinder-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-cinder-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=350d984f40 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=430 identity=22385 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-cinder,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cinder-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-cinder-server-0" ipv4=10.0.0.109 ipv6= k8sPodName=openstack/rabbitmq-cinder-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=350d984f40 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=430 identity=22385 ipv4=10.0.0.109 ipv6= k8sPodName=openstack/rabbitmq-cinder-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=350d984f40 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=430 identity=22385 ipv4=10.0.0.109 ipv6= k8sPodName=openstack/rabbitmq-cinder-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=350d984f40 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=430 identity=22385 ipv4=10.0.0.109 ipv6= k8sPodName=openstack/rabbitmq-cinder-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.3 9926080e-1074-4055-8827-99d737e8adba default }" containerID=5f831c144cb98cda9288007ec65cb791b54d058522fce197db3300a2307e5415 datapathConfiguration="&{false false false false false }" interface=lxca2d6fad9ff86 k8sPodName=openstack/cinder-api-675cd755b5-9vjfq labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5f831c144c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1575 ipv4=10.0.0.3 ipv6= k8sPodName=openstack/cinder-api-675cd755b5-9vjfq subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5f831c144c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1575 identityLabels="k8s:application=cinder,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=cinder" ipv4=10.0.0.3 ipv6= k8sPodName=openstack/cinder-api-675cd755b5-9vjfq subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.112 04a9ca64-ae9b-43d6-92ae-327bee44fa3c default }" containerID=0f5c4c27bf759cf3963549fdb10ec2dcaeead4a2ef59fdb112df4a2f822a2f0c datapathConfiguration="&{false false false false false }" interface=lxc625d44eb00a7 k8sPodName=openstack/cinder-scheduler-6d57999dc-fpp8v labels="[]" subsys=daemon sync-build=true level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="New endpoint" containerID=0f5c4c27bf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2005 ipv4=10.0.0.112 ipv6= k8sPodName=openstack/cinder-scheduler-6d57999dc-fpp8v subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0f5c4c27bf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2005 identityLabels="k8s:application=cinder,k8s:component=scheduler,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-scheduler,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=cinder" ipv4=10.0.0.112 ipv6= k8sPodName=openstack/cinder-scheduler-6d57999dc-fpp8v subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=0f5c4c27bf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2005 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.112 ipv6= k8sPodName=openstack/cinder-scheduler-6d57999dc-fpp8v line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=cinder;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=5f831c144c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1575 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.3 ipv6= k8sPodName=openstack/cinder-api-675cd755b5-9vjfq line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=5f831c144c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1575 identity=55215 identityLabels="k8s:application=cinder,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=cinder" ipv4=10.0.0.3 ipv6= k8sPodName=openstack/cinder-api-675cd755b5-9vjfq oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5f831c144c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1575 identity=55215 ipv4=10.0.0.3 ipv6= k8sPodName=openstack/cinder-api-675cd755b5-9vjfq subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:component=scheduler;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-scheduler;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0f5c4c27bf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2005 identity=1304 identityLabels="k8s:application=cinder,k8s:component=scheduler,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-scheduler,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=cinder" ipv4=10.0.0.112 ipv6= k8sPodName=openstack/cinder-scheduler-6d57999dc-fpp8v oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0f5c4c27bf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2005 identity=1304 ipv4=10.0.0.112 ipv6= k8sPodName=openstack/cinder-scheduler-6d57999dc-fpp8v subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.123 f697a337-f219-4aeb-9f38-77a51f1ac9f6 default }" containerID=0e1be1e54004f7df27f477f3559ad8196579d18714b1cc557d16a82f34316e04 datapathConfiguration="&{false false false false false }" interface=lxc37f93823ef80 k8sPodName=openstack/cinder-db-init-72bs9 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0e1be1e540 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1609 ipv4=10.0.0.123 ipv6= k8sPodName=openstack/cinder-db-init-72bs9 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0e1be1e540 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1609 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=722f82e8-32aa-4da5-9dc9-6ac177a2496c,k8s:batch.kubernetes.io/job-name=cinder-db-init,k8s:component=db-init,k8s:controller-uid=722f82e8-32aa-4da5-9dc9-6ac177a2496c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-db-init,k8s:release_group=cinder" ipv4=10.0.0.123 ipv6= k8sPodName=openstack/cinder-db-init-72bs9 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=722f82e8-32aa-4da5-9dc9-6ac177a2496c;k8s:batch.kubernetes.io/job-name=cinder-db-init;k8s:component=db-init;k8s:controller-uid=722f82e8-32aa-4da5-9dc9-6ac177a2496c;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-db-init;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0e1be1e540 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1609 identity=60345 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=722f82e8-32aa-4da5-9dc9-6ac177a2496c,k8s:batch.kubernetes.io/job-name=cinder-db-init,k8s:component=db-init,k8s:controller-uid=722f82e8-32aa-4da5-9dc9-6ac177a2496c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-db-init,k8s:release_group=cinder" ipv4=10.0.0.123 ipv6= k8sPodName=openstack/cinder-db-init-72bs9 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0e1be1e540 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1609 identity=60345 ipv4=10.0.0.123 ipv6= k8sPodName=openstack/cinder-db-init-72bs9 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=5f831c144c datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1575 identity=55215 ipv4=10.0.0.3 ipv6= k8sPodName=openstack/cinder-api-675cd755b5-9vjfq subsys=endpoint level=info msg="Successful endpoint creation" containerID=5f831c144c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1575 identity=55215 ipv4=10.0.0.3 ipv6= k8sPodName=openstack/cinder-api-675cd755b5-9vjfq subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=0f5c4c27bf datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2005 identity=1304 ipv4=10.0.0.112 ipv6= k8sPodName=openstack/cinder-scheduler-6d57999dc-fpp8v subsys=endpoint level=info msg="Successful endpoint creation" containerID=0f5c4c27bf datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2005 identity=1304 ipv4=10.0.0.112 ipv6= k8sPodName=openstack/cinder-scheduler-6d57999dc-fpp8v subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=0e1be1e540 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1609 identity=60345 ipv4=10.0.0.123 ipv6= k8sPodName=openstack/cinder-db-init-72bs9 subsys=endpoint level=info msg="Successful endpoint creation" containerID=0e1be1e540 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1609 identity=60345 ipv4=10.0.0.123 ipv6= k8sPodName=openstack/cinder-db-init-72bs9 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=0e1be1e540 endpointID=1609 k8sNamespace=openstack k8sPodName=cinder-db-init-72bs9 subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=722f82e8-32aa-4da5-9dc9-6ac177a2496c k8s:batch.kubernetes.io/job-name=cinder-db-init k8s:component=db-init k8s:controller-uid=722f82e8-32aa-4da5-9dc9-6ac177a2496c k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-db-init k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=0e1be1e540 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1609 identity=60345 ipv4=10.0.0.123 ipv6= k8sPodName=openstack/cinder-db-init-72bs9 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.177 883cc82b-fc71-4f6e-889c-8ba2dae1c347 default }" containerID=7ce641e20fc3b3f1a5b6e2c6ca0818c7166be0d8fcc4fa601098b5f48a123c69 datapathConfiguration="&{false false false false false }" interface=lxcd709f98e7e9b k8sPodName=openstack/cinder-db-sync-6nsnw labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7ce641e20f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2711 ipv4=10.0.0.177 ipv6= k8sPodName=openstack/cinder-db-sync-6nsnw subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7ce641e20f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2711 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=c162bf66-6acf-4e03-bb86-cbb09c9b4f0a,k8s:batch.kubernetes.io/job-name=cinder-db-sync,k8s:component=db-sync,k8s:controller-uid=c162bf66-6acf-4e03-bb86-cbb09c9b4f0a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-db-sync,k8s:release_group=cinder" ipv4=10.0.0.177 ipv6= k8sPodName=openstack/cinder-db-sync-6nsnw subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=c162bf66-6acf-4e03-bb86-cbb09c9b4f0a;k8s:batch.kubernetes.io/job-name=cinder-db-sync;k8s:component=db-sync;k8s:controller-uid=c162bf66-6acf-4e03-bb86-cbb09c9b4f0a;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-db-sync;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7ce641e20f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2711 identity=2995 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=c162bf66-6acf-4e03-bb86-cbb09c9b4f0a,k8s:batch.kubernetes.io/job-name=cinder-db-sync,k8s:component=db-sync,k8s:controller-uid=c162bf66-6acf-4e03-bb86-cbb09c9b4f0a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-db-sync,k8s:release_group=cinder" ipv4=10.0.0.177 ipv6= k8sPodName=openstack/cinder-db-sync-6nsnw oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7ce641e20f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2711 identity=2995 ipv4=10.0.0.177 ipv6= k8sPodName=openstack/cinder-db-sync-6nsnw subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=7ce641e20f datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2711 identity=2995 ipv4=10.0.0.177 ipv6= k8sPodName=openstack/cinder-db-sync-6nsnw subsys=endpoint level=info msg="Successful endpoint creation" containerID=7ce641e20f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2711 identity=2995 ipv4=10.0.0.177 ipv6= k8sPodName=openstack/cinder-db-sync-6nsnw subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=7ce641e20f endpointID=2711 k8sNamespace=openstack k8sPodName=cinder-db-sync-6nsnw subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=c162bf66-6acf-4e03-bb86-cbb09c9b4f0a k8s:batch.kubernetes.io/job-name=cinder-db-sync k8s:component=db-sync k8s:controller-uid=c162bf66-6acf-4e03-bb86-cbb09c9b4f0a k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-db-sync k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=7ce641e20f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2711 identity=2995 ipv4=10.0.0.177 ipv6= k8sPodName=openstack/cinder-db-sync-6nsnw subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.16 1d0fb753-8a22-4f56-bd45-9335d2232f1e default }" containerID=8915efa6e0aed7180abffc8bbf1adc15f088041b5350e5d87fbcf8f1f96d23b0 datapathConfiguration="&{false false false false false }" interface=lxcdcaed5f0e3c3 k8sPodName=openstack/cinder-rabbit-init-vn7gm labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8915efa6e0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=304 ipv4=10.0.0.16 ipv6= k8sPodName=openstack/cinder-rabbit-init-vn7gm subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8915efa6e0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=304 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=2b1977e5-1eec-4e7a-b9e0-e07dfbc62d7b,k8s:batch.kubernetes.io/job-name=cinder-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=2b1977e5-1eec-4e7a-b9e0-e07dfbc62d7b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-rabbit-init,k8s:release_group=cinder" ipv4=10.0.0.16 ipv6= k8sPodName=openstack/cinder-rabbit-init-vn7gm subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=8915efa6e0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=304 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.16 ipv6= k8sPodName=openstack/cinder-rabbit-init-vn7gm line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=2b1977e5-1eec-4e7a-b9e0-e07dfbc62d7b;k8s:batch.kubernetes.io/job-name=cinder-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=2b1977e5-1eec-4e7a-b9e0-e07dfbc62d7b;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-rabbit-init;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8915efa6e0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=304 identity=938 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=2b1977e5-1eec-4e7a-b9e0-e07dfbc62d7b,k8s:batch.kubernetes.io/job-name=cinder-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=2b1977e5-1eec-4e7a-b9e0-e07dfbc62d7b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-rabbit-init,k8s:release_group=cinder" ipv4=10.0.0.16 ipv6= k8sPodName=openstack/cinder-rabbit-init-vn7gm oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8915efa6e0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=304 identity=938 ipv4=10.0.0.16 ipv6= k8sPodName=openstack/cinder-rabbit-init-vn7gm subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=8915efa6e0 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=304 identity=938 ipv4=10.0.0.16 ipv6= k8sPodName=openstack/cinder-rabbit-init-vn7gm subsys=endpoint level=info msg="Successful endpoint creation" containerID=8915efa6e0 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=304 identity=938 ipv4=10.0.0.16 ipv6= k8sPodName=openstack/cinder-rabbit-init-vn7gm subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=8915efa6e0 endpointID=304 k8sNamespace=openstack k8sPodName=cinder-rabbit-init-vn7gm subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=2b1977e5-1eec-4e7a-b9e0-e07dfbc62d7b k8s:batch.kubernetes.io/job-name=cinder-rabbit-init k8s:component=rabbit-init k8s:controller-uid=2b1977e5-1eec-4e7a-b9e0-e07dfbc62d7b k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-rabbit-init k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=8915efa6e0 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=304 identity=938 ipv4=10.0.0.16 ipv6= k8sPodName=openstack/cinder-rabbit-init-vn7gm subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.82 3cad345a-c28a-4482-b1c5-544895e56021 default }" containerID=2701545bc7b388a08818c9673be426f813acb0737b2b7453cdcd4b1be53041b7 datapathConfiguration="&{false false false false false }" interface=lxcf0e2c661b050 k8sPodName=openstack/cinder-ks-service-p252k labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2701545bc7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=848 ipv4=10.0.0.82 ipv6= k8sPodName=openstack/cinder-ks-service-p252k subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2701545bc7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=848 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=65078a53-09cb-4035-94b7-25dd5a21b6d1,k8s:batch.kubernetes.io/job-name=cinder-ks-service,k8s:component=ks-service,k8s:controller-uid=65078a53-09cb-4035-94b7-25dd5a21b6d1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-ks-service,k8s:release_group=cinder" ipv4=10.0.0.82 ipv6= k8sPodName=openstack/cinder-ks-service-p252k subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=65078a53-09cb-4035-94b7-25dd5a21b6d1;k8s:batch.kubernetes.io/job-name=cinder-ks-service;k8s:component=ks-service;k8s:controller-uid=65078a53-09cb-4035-94b7-25dd5a21b6d1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-ks-service;k8s:release_group=cinder;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=2701545bc7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=848 identity=31228 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=65078a53-09cb-4035-94b7-25dd5a21b6d1,k8s:batch.kubernetes.io/job-name=cinder-ks-service,k8s:component=ks-service,k8s:controller-uid=65078a53-09cb-4035-94b7-25dd5a21b6d1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-ks-service,k8s:release_group=cinder" ipv4=10.0.0.82 ipv6= k8sPodName=openstack/cinder-ks-service-p252k oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2701545bc7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=848 identity=31228 ipv4=10.0.0.82 ipv6= k8sPodName=openstack/cinder-ks-service-p252k subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=2701545bc7 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=848 identity=31228 ipv4=10.0.0.82 ipv6= k8sPodName=openstack/cinder-ks-service-p252k subsys=endpoint level=info msg="Successful endpoint creation" containerID=2701545bc7 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=848 identity=31228 ipv4=10.0.0.82 ipv6= k8sPodName=openstack/cinder-ks-service-p252k subsys=daemon level=info msg="Delete endpoint request" containerID=2701545bc7 endpointID=848 k8sNamespace=openstack k8sPodName=cinder-ks-service-p252k subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=65078a53-09cb-4035-94b7-25dd5a21b6d1 k8s:batch.kubernetes.io/job-name=cinder-ks-service k8s:component=ks-service k8s:controller-uid=65078a53-09cb-4035-94b7-25dd5a21b6d1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-ks-service k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=2701545bc7 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=848 identity=31228 ipv4=10.0.0.82 ipv6= k8sPodName=openstack/cinder-ks-service-p252k subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.10 250655e1-e525-4563-b993-33c5cdcca17d default }" containerID=801d5693740974e729aed87f351b5ee0060fb224b5a12bdd1f7339c764155afe datapathConfiguration="&{false false false false false }" interface=lxc998d1f13a2a5 k8sPodName=openstack/cinder-ks-endpoints-vgdwk labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=801d569374 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1734 ipv4=10.0.0.10 ipv6= k8sPodName=openstack/cinder-ks-endpoints-vgdwk subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=801d569374 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1734 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=39909bca-3213-43e0-a65e-6882426e7024,k8s:batch.kubernetes.io/job-name=cinder-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=39909bca-3213-43e0-a65e-6882426e7024,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-ks-endpoints,k8s:release_group=cinder" ipv4=10.0.0.10 ipv6= k8sPodName=openstack/cinder-ks-endpoints-vgdwk subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=39909bca-3213-43e0-a65e-6882426e7024;k8s:batch.kubernetes.io/job-name=cinder-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=39909bca-3213-43e0-a65e-6882426e7024;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-ks-endpoints;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=801d569374 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1734 identity=20415 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=39909bca-3213-43e0-a65e-6882426e7024,k8s:batch.kubernetes.io/job-name=cinder-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=39909bca-3213-43e0-a65e-6882426e7024,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-ks-endpoints,k8s:release_group=cinder" ipv4=10.0.0.10 ipv6= k8sPodName=openstack/cinder-ks-endpoints-vgdwk oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=801d569374 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1734 identity=20415 ipv4=10.0.0.10 ipv6= k8sPodName=openstack/cinder-ks-endpoints-vgdwk subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=801d569374 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1734 identity=20415 ipv4=10.0.0.10 ipv6= k8sPodName=openstack/cinder-ks-endpoints-vgdwk subsys=endpoint level=info msg="Successful endpoint creation" containerID=801d569374 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1734 identity=20415 ipv4=10.0.0.10 ipv6= k8sPodName=openstack/cinder-ks-endpoints-vgdwk subsys=daemon level=info msg="Delete endpoint request" containerID=801d569374 endpointID=1734 k8sNamespace=openstack k8sPodName=cinder-ks-endpoints-vgdwk subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=39909bca-3213-43e0-a65e-6882426e7024 k8s:batch.kubernetes.io/job-name=cinder-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=39909bca-3213-43e0-a65e-6882426e7024 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-ks-endpoints k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=801d569374 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1734 identity=20415 ipv4=10.0.0.10 ipv6= k8sPodName=openstack/cinder-ks-endpoints-vgdwk subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.53 832b93b7-5e10-4f1c-b409-62cd0005cb52 default }" containerID=5af66bd4f38bbefbb8c1d032be2751b8fec48ade70d409bf8afb57ea72ddf6ff datapathConfiguration="&{false false false false false }" interface=lxcac64a682e10f k8sPodName=openstack/cinder-ks-user-jqt6t labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5af66bd4f3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=363 ipv4=10.0.0.53 ipv6= k8sPodName=openstack/cinder-ks-user-jqt6t subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5af66bd4f3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=363 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=c8081dc2-3b4e-40cb-886a-130a8cb71eda,k8s:batch.kubernetes.io/job-name=cinder-ks-user,k8s:component=ks-user,k8s:controller-uid=c8081dc2-3b4e-40cb-886a-130a8cb71eda,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-ks-user,k8s:release_group=cinder" ipv4=10.0.0.53 ipv6= k8sPodName=openstack/cinder-ks-user-jqt6t subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=5af66bd4f3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=363 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.53 ipv6= k8sPodName=openstack/cinder-ks-user-jqt6t line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=c8081dc2-3b4e-40cb-886a-130a8cb71eda;k8s:batch.kubernetes.io/job-name=cinder-ks-user;k8s:component=ks-user;k8s:controller-uid=c8081dc2-3b4e-40cb-886a-130a8cb71eda;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-ks-user;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5af66bd4f3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=363 identity=21461 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=c8081dc2-3b4e-40cb-886a-130a8cb71eda,k8s:batch.kubernetes.io/job-name=cinder-ks-user,k8s:component=ks-user,k8s:controller-uid=c8081dc2-3b4e-40cb-886a-130a8cb71eda,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-ks-user,k8s:release_group=cinder" ipv4=10.0.0.53 ipv6= k8sPodName=openstack/cinder-ks-user-jqt6t oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5af66bd4f3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=363 identity=21461 ipv4=10.0.0.53 ipv6= k8sPodName=openstack/cinder-ks-user-jqt6t subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=5af66bd4f3 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=363 identity=21461 ipv4=10.0.0.53 ipv6= k8sPodName=openstack/cinder-ks-user-jqt6t subsys=endpoint level=info msg="Successful endpoint creation" containerID=5af66bd4f3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=363 identity=21461 ipv4=10.0.0.53 ipv6= k8sPodName=openstack/cinder-ks-user-jqt6t subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=5af66bd4f3 endpointID=363 k8sNamespace=openstack k8sPodName=cinder-ks-user-jqt6t subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=c8081dc2-3b4e-40cb-886a-130a8cb71eda k8s:batch.kubernetes.io/job-name=cinder-ks-user k8s:component=ks-user k8s:controller-uid=c8081dc2-3b4e-40cb-886a-130a8cb71eda k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-ks-user k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=5af66bd4f3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=363 identity=21461 ipv4=10.0.0.53 ipv6= k8sPodName=openstack/cinder-ks-user-jqt6t subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.73 a7bfd2c3-bb78-4ce7-ae26-f01040517428 default }" containerID=d780d3c03389148efb0e6d5aef0ae77839ed0178e90d20a9fac22d391d07624f datapathConfiguration="&{false false false false false }" interface=lxc3ffaf9db4961 k8sPodName=openstack/cinder-backup-storage-init-ct9rk labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d780d3c033 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3903 ipv4=10.0.0.73 ipv6= k8sPodName=openstack/cinder-backup-storage-init-ct9rk subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d780d3c033 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3903 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=0a3904b4-7441-40bc-99dd-5ee8f4fa0120,k8s:batch.kubernetes.io/job-name=cinder-backup-storage-init,k8s:component=storage-init,k8s:controller-uid=0a3904b4-7441-40bc-99dd-5ee8f4fa0120,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-backup-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-backup-storage-init,k8s:release_group=cinder" ipv4=10.0.0.73 ipv6= k8sPodName=openstack/cinder-backup-storage-init-ct9rk subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=0a3904b4-7441-40bc-99dd-5ee8f4fa0120;k8s:batch.kubernetes.io/job-name=cinder-backup-storage-init;k8s:component=storage-init;k8s:controller-uid=0a3904b4-7441-40bc-99dd-5ee8f4fa0120;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-backup-storage-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-backup-storage-init;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d780d3c033 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3903 identity=25919 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=0a3904b4-7441-40bc-99dd-5ee8f4fa0120,k8s:batch.kubernetes.io/job-name=cinder-backup-storage-init,k8s:component=storage-init,k8s:controller-uid=0a3904b4-7441-40bc-99dd-5ee8f4fa0120,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-backup-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-backup-storage-init,k8s:release_group=cinder" ipv4=10.0.0.73 ipv6= k8sPodName=openstack/cinder-backup-storage-init-ct9rk oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d780d3c033 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3903 identity=25919 ipv4=10.0.0.73 ipv6= k8sPodName=openstack/cinder-backup-storage-init-ct9rk subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=d780d3c033 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3903 identity=25919 ipv4=10.0.0.73 ipv6= k8sPodName=openstack/cinder-backup-storage-init-ct9rk subsys=endpoint level=info msg="Successful endpoint creation" containerID=d780d3c033 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3903 identity=25919 ipv4=10.0.0.73 ipv6= k8sPodName=openstack/cinder-backup-storage-init-ct9rk subsys=daemon level=info msg="Delete endpoint request" containerID=d780d3c033 endpointID=3903 k8sNamespace=openstack k8sPodName=cinder-backup-storage-init-ct9rk subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=0a3904b4-7441-40bc-99dd-5ee8f4fa0120 k8s:batch.kubernetes.io/job-name=cinder-backup-storage-init k8s:component=storage-init k8s:controller-uid=0a3904b4-7441-40bc-99dd-5ee8f4fa0120 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-backup-storage-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-backup-storage-init k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=d780d3c033 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3903 identity=25919 ipv4=10.0.0.73 ipv6= k8sPodName=openstack/cinder-backup-storage-init-ct9rk subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.250 0dc7af1d-ac0f-4e65-9995-e59c574a5b03 default }" containerID=15a95d37cc3e36950db3ef29748727ccc35e60335a686f016f6521ff0d89e7ac datapathConfiguration="&{false false false false false }" interface=lxcbaf7cebadca3 k8sPodName=openstack/cinder-create-internal-tenant-v8c44 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=15a95d37cc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1515 ipv4=10.0.0.250 ipv6= k8sPodName=openstack/cinder-create-internal-tenant-v8c44 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=15a95d37cc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1515 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=b6a5450e-86fa-4287-a8f8-9c37fe58bcb2,k8s:batch.kubernetes.io/job-name=cinder-create-internal-tenant,k8s:component=create-internal-tenant,k8s:controller-uid=b6a5450e-86fa-4287-a8f8-9c37fe58bcb2,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-create-internal-tenant,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-create-internal-tenant,k8s:release_group=cinder" ipv4=10.0.0.250 ipv6= k8sPodName=openstack/cinder-create-internal-tenant-v8c44 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=b6a5450e-86fa-4287-a8f8-9c37fe58bcb2;k8s:batch.kubernetes.io/job-name=cinder-create-internal-tenant;k8s:component=create-internal-tenant;k8s:controller-uid=b6a5450e-86fa-4287-a8f8-9c37fe58bcb2;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-create-internal-tenant;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-create-internal-tenant;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=15a95d37cc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1515 identity=17008 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=b6a5450e-86fa-4287-a8f8-9c37fe58bcb2,k8s:batch.kubernetes.io/job-name=cinder-create-internal-tenant,k8s:component=create-internal-tenant,k8s:controller-uid=b6a5450e-86fa-4287-a8f8-9c37fe58bcb2,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-create-internal-tenant,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-create-internal-tenant,k8s:release_group=cinder" ipv4=10.0.0.250 ipv6= k8sPodName=openstack/cinder-create-internal-tenant-v8c44 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=15a95d37cc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1515 identity=17008 ipv4=10.0.0.250 ipv6= k8sPodName=openstack/cinder-create-internal-tenant-v8c44 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=15a95d37cc datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1515 identity=17008 ipv4=10.0.0.250 ipv6= k8sPodName=openstack/cinder-create-internal-tenant-v8c44 subsys=endpoint level=info msg="Successful endpoint creation" containerID=15a95d37cc datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1515 identity=17008 ipv4=10.0.0.250 ipv6= k8sPodName=openstack/cinder-create-internal-tenant-v8c44 subsys=daemon level=info msg="Delete endpoint request" containerID=15a95d37cc endpointID=1515 k8sNamespace=openstack k8sPodName=cinder-create-internal-tenant-v8c44 subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=b6a5450e-86fa-4287-a8f8-9c37fe58bcb2 k8s:batch.kubernetes.io/job-name=cinder-create-internal-tenant k8s:component=create-internal-tenant k8s:controller-uid=b6a5450e-86fa-4287-a8f8-9c37fe58bcb2 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-create-internal-tenant k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-create-internal-tenant k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=15a95d37cc datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1515 identity=17008 ipv4=10.0.0.250 ipv6= k8sPodName=openstack/cinder-create-internal-tenant-v8c44 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.207 d9c5c72e-5fd3-4e5e-8f43-84ff51d43149 default }" containerID=bb6282352123e40a9747d2686b4083affa4cf0b9f1ab9ca4ae85c2ee4022c251 datapathConfiguration="&{false false false false false }" interface=lxc14614717d94d k8sPodName=openstack/cinder-storage-init-qp2sm labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=bb62823521 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1329 ipv4=10.0.0.207 ipv6= k8sPodName=openstack/cinder-storage-init-qp2sm subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=bb62823521 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1329 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=fff969b1-47d7-45f2-a7ec-2cf3481f001d,k8s:batch.kubernetes.io/job-name=cinder-storage-init,k8s:component=storage-init,k8s:controller-uid=fff969b1-47d7-45f2-a7ec-2cf3481f001d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-storage-init,k8s:release_group=cinder" ipv4=10.0.0.207 ipv6= k8sPodName=openstack/cinder-storage-init-qp2sm subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=fff969b1-47d7-45f2-a7ec-2cf3481f001d;k8s:batch.kubernetes.io/job-name=cinder-storage-init;k8s:component=storage-init;k8s:controller-uid=fff969b1-47d7-45f2-a7ec-2cf3481f001d;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-storage-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-storage-init;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=bb62823521 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1329 identity=20032 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=fff969b1-47d7-45f2-a7ec-2cf3481f001d,k8s:batch.kubernetes.io/job-name=cinder-storage-init,k8s:component=storage-init,k8s:controller-uid=fff969b1-47d7-45f2-a7ec-2cf3481f001d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-storage-init,k8s:release_group=cinder" ipv4=10.0.0.207 ipv6= k8sPodName=openstack/cinder-storage-init-qp2sm oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=bb62823521 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1329 identity=20032 ipv4=10.0.0.207 ipv6= k8sPodName=openstack/cinder-storage-init-qp2sm subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=bb62823521 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1329 identity=20032 ipv4=10.0.0.207 ipv6= k8sPodName=openstack/cinder-storage-init-qp2sm subsys=endpoint level=info msg="Successful endpoint creation" containerID=bb62823521 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1329 identity=20032 ipv4=10.0.0.207 ipv6= k8sPodName=openstack/cinder-storage-init-qp2sm subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=bb62823521 endpointID=1329 k8sNamespace=openstack k8sPodName=cinder-storage-init-qp2sm subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=fff969b1-47d7-45f2-a7ec-2cf3481f001d k8s:batch.kubernetes.io/job-name=cinder-storage-init k8s:component=storage-init k8s:controller-uid=fff969b1-47d7-45f2-a7ec-2cf3481f001d k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-storage-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-storage-init k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=bb62823521 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1329 identity=20032 ipv4=10.0.0.207 ipv6= k8sPodName=openstack/cinder-storage-init-qp2sm subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.165 37e273dd-1570-4593-97dd-42230631b0eb default }" containerID=d892994b04799450088be6c15125a3efe4a487d45dc25dfce101c61fd6f0d7ab datapathConfiguration="&{false false false false false }" interface=lxc9207a6c5f5dc k8sPodName=openstack/cinder-bootstrap-8sfmr labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d892994b04 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2979 ipv4=10.0.0.165 ipv6= k8sPodName=openstack/cinder-bootstrap-8sfmr subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d892994b04 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2979 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=ebdc7099-aff2-44c9-9a74-4360cbc48a7f,k8s:batch.kubernetes.io/job-name=cinder-bootstrap,k8s:component=bootstrap,k8s:controller-uid=ebdc7099-aff2-44c9-9a74-4360cbc48a7f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-bootstrap,k8s:release_group=cinder" ipv4=10.0.0.165 ipv6= k8sPodName=openstack/cinder-bootstrap-8sfmr subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=d892994b04 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2979 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.165 ipv6= k8sPodName=openstack/cinder-bootstrap-8sfmr line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=ebdc7099-aff2-44c9-9a74-4360cbc48a7f;k8s:batch.kubernetes.io/job-name=cinder-bootstrap;k8s:component=bootstrap;k8s:controller-uid=ebdc7099-aff2-44c9-9a74-4360cbc48a7f;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-bootstrap;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-bootstrap;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d892994b04 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2979 identity=12796 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=ebdc7099-aff2-44c9-9a74-4360cbc48a7f,k8s:batch.kubernetes.io/job-name=cinder-bootstrap,k8s:component=bootstrap,k8s:controller-uid=ebdc7099-aff2-44c9-9a74-4360cbc48a7f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-bootstrap,k8s:release_group=cinder" ipv4=10.0.0.165 ipv6= k8sPodName=openstack/cinder-bootstrap-8sfmr oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d892994b04 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2979 identity=12796 ipv4=10.0.0.165 ipv6= k8sPodName=openstack/cinder-bootstrap-8sfmr subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d892994b04 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2979 identity=12796 ipv4=10.0.0.165 ipv6= k8sPodName=openstack/cinder-bootstrap-8sfmr subsys=endpoint level=info msg="Successful endpoint creation" containerID=d892994b04 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2979 identity=12796 ipv4=10.0.0.165 ipv6= k8sPodName=openstack/cinder-bootstrap-8sfmr subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.50 222e0d00-6499-4e36-93d5-1471d752862a default }" containerID=d5e78ef70b856ea99764e8912311be858d290d803773d2d3e1f91de993ac15e3 datapathConfiguration="&{false false false false false }" interface=lxc3594782e8fc8 k8sPodName=openstack/cinder-backup-68494557f9-bggh5 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d5e78ef70b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2922 ipv4=10.0.0.50 ipv6= k8sPodName=openstack/cinder-backup-68494557f9-bggh5 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d5e78ef70b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2922 identityLabels="k8s:application=cinder,k8s:component=backup,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-backup,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=cinder" ipv4=10.0.0.50 ipv6= k8sPodName=openstack/cinder-backup-68494557f9-bggh5 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:component=backup;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-backup;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d5e78ef70b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2922 identity=19277 identityLabels="k8s:application=cinder,k8s:component=backup,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-backup,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=cinder" ipv4=10.0.0.50 ipv6= k8sPodName=openstack/cinder-backup-68494557f9-bggh5 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=d5e78ef70b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2922 identity=19277 ipv4=10.0.0.50 ipv6= k8sPodName=openstack/cinder-backup-68494557f9-bggh5 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.114 206fa3ad-aab2-41bf-8896-e97b39e287e0 default }" containerID=d2386c93d69f2d39acc225a562e9410d666a614b9aa1adaea925f2e5e2533324 datapathConfiguration="&{false false false false false }" interface=lxc1a9eb0768654 k8sPodName=openstack/cinder-volume-5f49d6467b-pkxrz labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d2386c93d6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2821 ipv4=10.0.0.114 ipv6= k8sPodName=openstack/cinder-volume-5f49d6467b-pkxrz subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d2386c93d6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2821 identityLabels="k8s:application=cinder,k8s:component=volume,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-volume,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=cinder" ipv4=10.0.0.114 ipv6= k8sPodName=openstack/cinder-volume-5f49d6467b-pkxrz subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:component=volume;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-volume;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d2386c93d6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2821 identity=4447 identityLabels="k8s:application=cinder,k8s:component=volume,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-volume,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=cinder" ipv4=10.0.0.114 ipv6= k8sPodName=openstack/cinder-volume-5f49d6467b-pkxrz oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d2386c93d6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2821 identity=4447 ipv4=10.0.0.114 ipv6= k8sPodName=openstack/cinder-volume-5f49d6467b-pkxrz subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d5e78ef70b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2922 identity=19277 ipv4=10.0.0.50 ipv6= k8sPodName=openstack/cinder-backup-68494557f9-bggh5 subsys=endpoint level=info msg="Successful endpoint creation" containerID=d5e78ef70b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2922 identity=19277 ipv4=10.0.0.50 ipv6= k8sPodName=openstack/cinder-backup-68494557f9-bggh5 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=d2386c93d6 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2821 identity=4447 ipv4=10.0.0.114 ipv6= k8sPodName=openstack/cinder-volume-5f49d6467b-pkxrz subsys=endpoint level=info msg="Successful endpoint creation" containerID=d2386c93d6 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2821 identity=4447 ipv4=10.0.0.114 ipv6= k8sPodName=openstack/cinder-volume-5f49d6467b-pkxrz subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=d892994b04 endpointID=2979 k8sNamespace=openstack k8sPodName=cinder-bootstrap-8sfmr subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=ebdc7099-aff2-44c9-9a74-4360cbc48a7f k8s:batch.kubernetes.io/job-name=cinder-bootstrap k8s:component=bootstrap k8s:controller-uid=ebdc7099-aff2-44c9-9a74-4360cbc48a7f k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-bootstrap k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-bootstrap k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=d892994b04 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2979 identity=12796 ipv4=10.0.0.165 ipv6= k8sPodName=openstack/cinder-bootstrap-8sfmr subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.124 232f6067-6018-472d-9cf5-9ef472fa6410 default }" containerID=af3dc120588438bd1d401e1627fcb9e710f8c1c59f596372965c8607e9ad9eec datapathConfiguration="&{false false false false false }" interface=lxcd693d341f0bf k8sPodName=openstack/placement-api-6c87c4896d-b6br9 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=af3dc12058 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2623 ipv4=10.0.0.124 ipv6= k8sPodName=openstack/placement-api-6c87c4896d-b6br9 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=af3dc12058 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2623 identityLabels="k8s:application=placement,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=placement" ipv4=10.0.0.124 ipv6= k8sPodName=openstack/placement-api-6c87c4896d-b6br9 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=af3dc12058 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2623 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.124 ipv6= k8sPodName=openstack/placement-api-6c87c4896d-b6br9 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=placement;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=placement-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=placement;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=af3dc12058 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2623 identity=35122 identityLabels="k8s:application=placement,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=placement" ipv4=10.0.0.124 ipv6= k8sPodName=openstack/placement-api-6c87c4896d-b6br9 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=af3dc12058 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2623 identity=35122 ipv4=10.0.0.124 ipv6= k8sPodName=openstack/placement-api-6c87c4896d-b6br9 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.108 ad505024-6d2b-4d30-a7b5-60cb57941809 default }" containerID=7e36003a6e7413bb5ab4fa6108aff1ce2f1cc84f6db3b77269464690c7833e8b datapathConfiguration="&{false false false false false }" interface=lxc15919e759304 k8sPodName=openstack/placement-db-init-8vzpf labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7e36003a6e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=873 ipv4=10.0.0.108 ipv6= k8sPodName=openstack/placement-db-init-8vzpf subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7e36003a6e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=873 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=8f19f8f7-1de2-426f-9391-ca5b375d29b0,k8s:batch.kubernetes.io/job-name=placement-db-init,k8s:component=db-init,k8s:controller-uid=8f19f8f7-1de2-426f-9391-ca5b375d29b0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-db-init,k8s:release_group=placement" ipv4=10.0.0.108 ipv6= k8sPodName=openstack/placement-db-init-8vzpf subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=placement;k8s:batch.kubernetes.io/controller-uid=8f19f8f7-1de2-426f-9391-ca5b375d29b0;k8s:batch.kubernetes.io/job-name=placement-db-init;k8s:component=db-init;k8s:controller-uid=8f19f8f7-1de2-426f-9391-ca5b375d29b0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=placement-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=placement-db-init;k8s:release_group=placement;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7e36003a6e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=873 identity=27533 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=8f19f8f7-1de2-426f-9391-ca5b375d29b0,k8s:batch.kubernetes.io/job-name=placement-db-init,k8s:component=db-init,k8s:controller-uid=8f19f8f7-1de2-426f-9391-ca5b375d29b0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-db-init,k8s:release_group=placement" ipv4=10.0.0.108 ipv6= k8sPodName=openstack/placement-db-init-8vzpf oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7e36003a6e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=873 identity=27533 ipv4=10.0.0.108 ipv6= k8sPodName=openstack/placement-db-init-8vzpf subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=af3dc12058 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2623 identity=35122 ipv4=10.0.0.124 ipv6= k8sPodName=openstack/placement-api-6c87c4896d-b6br9 subsys=endpoint level=info msg="Successful endpoint creation" containerID=af3dc12058 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2623 identity=35122 ipv4=10.0.0.124 ipv6= k8sPodName=openstack/placement-api-6c87c4896d-b6br9 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=7e36003a6e datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=873 identity=27533 ipv4=10.0.0.108 ipv6= k8sPodName=openstack/placement-db-init-8vzpf subsys=endpoint level=info msg="Successful endpoint creation" containerID=7e36003a6e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=873 identity=27533 ipv4=10.0.0.108 ipv6= k8sPodName=openstack/placement-db-init-8vzpf subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=7e36003a6e endpointID=873 k8sNamespace=openstack k8sPodName=placement-db-init-8vzpf subsys=daemon level=info msg="Releasing key" key="[k8s:application=placement k8s:batch.kubernetes.io/controller-uid=8f19f8f7-1de2-426f-9391-ca5b375d29b0 k8s:batch.kubernetes.io/job-name=placement-db-init k8s:component=db-init k8s:controller-uid=8f19f8f7-1de2-426f-9391-ca5b375d29b0 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=placement-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=placement-db-init k8s:release_group=placement]" subsys=allocator level=info msg="Removed endpoint" containerID=7e36003a6e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=873 identity=27533 ipv4=10.0.0.108 ipv6= k8sPodName=openstack/placement-db-init-8vzpf subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.176 2d5e7b23-2530-48ce-b04e-b22a3cada22b default }" containerID=7df969d77b9f679c4a353e408ee79742004374a53eec16fa63bcb382ed91104a datapathConfiguration="&{false false false false false }" interface=lxc67ec015a27db k8sPodName=openstack/placement-db-sync-f74js labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7df969d77b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2007 ipv4=10.0.0.176 ipv6= k8sPodName=openstack/placement-db-sync-f74js subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7df969d77b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2007 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=88eeb511-1bf5-4c5f-9ad6-f2acdfc108d1,k8s:batch.kubernetes.io/job-name=placement-db-sync,k8s:component=db-sync,k8s:controller-uid=88eeb511-1bf5-4c5f-9ad6-f2acdfc108d1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-db-sync,k8s:release_group=placement" ipv4=10.0.0.176 ipv6= k8sPodName=openstack/placement-db-sync-f74js subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=placement;k8s:batch.kubernetes.io/controller-uid=88eeb511-1bf5-4c5f-9ad6-f2acdfc108d1;k8s:batch.kubernetes.io/job-name=placement-db-sync;k8s:component=db-sync;k8s:controller-uid=88eeb511-1bf5-4c5f-9ad6-f2acdfc108d1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=placement-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=placement-db-sync;k8s:release_group=placement;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7df969d77b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2007 identity=5562 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=88eeb511-1bf5-4c5f-9ad6-f2acdfc108d1,k8s:batch.kubernetes.io/job-name=placement-db-sync,k8s:component=db-sync,k8s:controller-uid=88eeb511-1bf5-4c5f-9ad6-f2acdfc108d1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-db-sync,k8s:release_group=placement" ipv4=10.0.0.176 ipv6= k8sPodName=openstack/placement-db-sync-f74js oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7df969d77b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2007 identity=5562 ipv4=10.0.0.176 ipv6= k8sPodName=openstack/placement-db-sync-f74js subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=7df969d77b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2007 identity=5562 ipv4=10.0.0.176 ipv6= k8sPodName=openstack/placement-db-sync-f74js subsys=endpoint level=info msg="Successful endpoint creation" containerID=7df969d77b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2007 identity=5562 ipv4=10.0.0.176 ipv6= k8sPodName=openstack/placement-db-sync-f74js subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=7df969d77b endpointID=2007 k8sNamespace=openstack k8sPodName=placement-db-sync-f74js subsys=daemon level=info msg="Releasing key" key="[k8s:application=placement k8s:batch.kubernetes.io/controller-uid=88eeb511-1bf5-4c5f-9ad6-f2acdfc108d1 k8s:batch.kubernetes.io/job-name=placement-db-sync k8s:component=db-sync k8s:controller-uid=88eeb511-1bf5-4c5f-9ad6-f2acdfc108d1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=placement-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=placement-db-sync k8s:release_group=placement]" subsys=allocator level=info msg="Removed endpoint" containerID=7df969d77b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2007 identity=5562 ipv4=10.0.0.176 ipv6= k8sPodName=openstack/placement-db-sync-f74js subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.186 39c37a11-bffe-4f8d-9d92-4575e159d020 default }" containerID=12c979e712f318a776535dafbaa9c95f61690f21744625fb4a6e86574865e270 datapathConfiguration="&{false false false false false }" interface=lxc39b2156ecffd k8sPodName=openstack/placement-ks-service-rbjxr labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=12c979e712 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1564 ipv4=10.0.0.186 ipv6= k8sPodName=openstack/placement-ks-service-rbjxr subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=12c979e712 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1564 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=df71ca2a-c321-414f-80c2-d56c82f9436d,k8s:batch.kubernetes.io/job-name=placement-ks-service,k8s:component=ks-service,k8s:controller-uid=df71ca2a-c321-414f-80c2-d56c82f9436d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-ks-service,k8s:release_group=placement" ipv4=10.0.0.186 ipv6= k8sPodName=openstack/placement-ks-service-rbjxr subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=12c979e712 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1564 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.186 ipv6= k8sPodName=openstack/placement-ks-service-rbjxr line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=placement;k8s:batch.kubernetes.io/controller-uid=df71ca2a-c321-414f-80c2-d56c82f9436d;k8s:batch.kubernetes.io/job-name=placement-ks-service;k8s:component=ks-service;k8s:controller-uid=df71ca2a-c321-414f-80c2-d56c82f9436d;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=placement-ks-service;k8s:release_group=placement;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=12c979e712 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1564 identity=1181 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=df71ca2a-c321-414f-80c2-d56c82f9436d,k8s:batch.kubernetes.io/job-name=placement-ks-service,k8s:component=ks-service,k8s:controller-uid=df71ca2a-c321-414f-80c2-d56c82f9436d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-ks-service,k8s:release_group=placement" ipv4=10.0.0.186 ipv6= k8sPodName=openstack/placement-ks-service-rbjxr oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=12c979e712 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1564 identity=1181 ipv4=10.0.0.186 ipv6= k8sPodName=openstack/placement-ks-service-rbjxr subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=12c979e712 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1564 identity=1181 ipv4=10.0.0.186 ipv6= k8sPodName=openstack/placement-ks-service-rbjxr subsys=endpoint level=info msg="Successful endpoint creation" containerID=12c979e712 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1564 identity=1181 ipv4=10.0.0.186 ipv6= k8sPodName=openstack/placement-ks-service-rbjxr subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=12c979e712 endpointID=1564 k8sNamespace=openstack k8sPodName=placement-ks-service-rbjxr subsys=daemon level=info msg="Releasing key" key="[k8s:application=placement k8s:batch.kubernetes.io/controller-uid=df71ca2a-c321-414f-80c2-d56c82f9436d k8s:batch.kubernetes.io/job-name=placement-ks-service k8s:component=ks-service k8s:controller-uid=df71ca2a-c321-414f-80c2-d56c82f9436d k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=placement-ks-service k8s:release_group=placement]" subsys=allocator level=info msg="Removed endpoint" containerID=12c979e712 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1564 identity=1181 ipv4=10.0.0.186 ipv6= k8sPodName=openstack/placement-ks-service-rbjxr subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.41 2ac2f530-f7f2-4f15-a2d6-8978978655ed default }" containerID=7c3aecd477d70cae9a3ef98c3c6b42d24b12b314d124eeb49fb70c885f54618d datapathConfiguration="&{false false false false false }" interface=lxc3d57b536accc k8sPodName=openstack/placement-ks-user-dlp5g labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7c3aecd477 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=550 ipv4=10.0.0.41 ipv6= k8sPodName=openstack/placement-ks-user-dlp5g subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7c3aecd477 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=550 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=5642a732-9fa0-4ef1-8c15-369abaa24d9d,k8s:batch.kubernetes.io/job-name=placement-ks-user,k8s:component=ks-user,k8s:controller-uid=5642a732-9fa0-4ef1-8c15-369abaa24d9d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-ks-user,k8s:release_group=placement" ipv4=10.0.0.41 ipv6= k8sPodName=openstack/placement-ks-user-dlp5g subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=placement;k8s:batch.kubernetes.io/controller-uid=5642a732-9fa0-4ef1-8c15-369abaa24d9d;k8s:batch.kubernetes.io/job-name=placement-ks-user;k8s:component=ks-user;k8s:controller-uid=5642a732-9fa0-4ef1-8c15-369abaa24d9d;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=placement-ks-user;k8s:release_group=placement;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7c3aecd477 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=550 identity=11966 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=5642a732-9fa0-4ef1-8c15-369abaa24d9d,k8s:batch.kubernetes.io/job-name=placement-ks-user,k8s:component=ks-user,k8s:controller-uid=5642a732-9fa0-4ef1-8c15-369abaa24d9d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-ks-user,k8s:release_group=placement" ipv4=10.0.0.41 ipv6= k8sPodName=openstack/placement-ks-user-dlp5g oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=7c3aecd477 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=550 identity=11966 ipv4=10.0.0.41 ipv6= k8sPodName=openstack/placement-ks-user-dlp5g subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=7c3aecd477 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=550 identity=11966 ipv4=10.0.0.41 ipv6= k8sPodName=openstack/placement-ks-user-dlp5g subsys=endpoint level=info msg="Successful endpoint creation" containerID=7c3aecd477 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=550 identity=11966 ipv4=10.0.0.41 ipv6= k8sPodName=openstack/placement-ks-user-dlp5g subsys=daemon level=info msg="Delete endpoint request" containerID=7c3aecd477 endpointID=550 k8sNamespace=openstack k8sPodName=placement-ks-user-dlp5g subsys=daemon level=info msg="Releasing key" key="[k8s:application=placement k8s:batch.kubernetes.io/controller-uid=5642a732-9fa0-4ef1-8c15-369abaa24d9d k8s:batch.kubernetes.io/job-name=placement-ks-user k8s:component=ks-user k8s:controller-uid=5642a732-9fa0-4ef1-8c15-369abaa24d9d k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=placement-ks-user k8s:release_group=placement]" subsys=allocator level=info msg="Removed endpoint" containerID=7c3aecd477 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=550 identity=11966 ipv4=10.0.0.41 ipv6= k8sPodName=openstack/placement-ks-user-dlp5g subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.151 bc240f9a-7b4c-4efa-8eed-d27cd5040979 default }" containerID=4a35c2e9818c86f7984b403a1767addf780de25ff8979cc6ba5f6306776cfd55 datapathConfiguration="&{false false false false false }" interface=lxcb7b1ae54da3f k8sPodName=openstack/placement-ks-endpoints-2bd4d labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4a35c2e981 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3035 ipv4=10.0.0.151 ipv6= k8sPodName=openstack/placement-ks-endpoints-2bd4d subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4a35c2e981 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3035 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=586ce9cd-297b-4ca2-b7de-8c04b8b9f6c4,k8s:batch.kubernetes.io/job-name=placement-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=586ce9cd-297b-4ca2-b7de-8c04b8b9f6c4,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-ks-endpoints,k8s:release_group=placement" ipv4=10.0.0.151 ipv6= k8sPodName=openstack/placement-ks-endpoints-2bd4d subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=placement;k8s:batch.kubernetes.io/controller-uid=586ce9cd-297b-4ca2-b7de-8c04b8b9f6c4;k8s:batch.kubernetes.io/job-name=placement-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=586ce9cd-297b-4ca2-b7de-8c04b8b9f6c4;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=placement-ks-endpoints;k8s:release_group=placement;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4a35c2e981 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3035 identity=16535 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=586ce9cd-297b-4ca2-b7de-8c04b8b9f6c4,k8s:batch.kubernetes.io/job-name=placement-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=586ce9cd-297b-4ca2-b7de-8c04b8b9f6c4,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-ks-endpoints,k8s:release_group=placement" ipv4=10.0.0.151 ipv6= k8sPodName=openstack/placement-ks-endpoints-2bd4d oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=4a35c2e981 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3035 identity=16535 ipv4=10.0.0.151 ipv6= k8sPodName=openstack/placement-ks-endpoints-2bd4d subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=4a35c2e981 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3035 identity=16535 ipv4=10.0.0.151 ipv6= k8sPodName=openstack/placement-ks-endpoints-2bd4d subsys=endpoint level=info msg="Successful endpoint creation" containerID=4a35c2e981 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3035 identity=16535 ipv4=10.0.0.151 ipv6= k8sPodName=openstack/placement-ks-endpoints-2bd4d subsys=daemon level=info msg="Delete endpoint request" containerID=4a35c2e981 endpointID=3035 k8sNamespace=openstack k8sPodName=placement-ks-endpoints-2bd4d subsys=daemon level=info msg="Releasing key" key="[k8s:application=placement k8s:batch.kubernetes.io/controller-uid=586ce9cd-297b-4ca2-b7de-8c04b8b9f6c4 k8s:batch.kubernetes.io/job-name=placement-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=586ce9cd-297b-4ca2-b7de-8c04b8b9f6c4 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=placement-ks-endpoints k8s:release_group=placement]" subsys=allocator level=info msg="Removed endpoint" containerID=4a35c2e981 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3035 identity=16535 ipv4=10.0.0.151 ipv6= k8sPodName=openstack/placement-ks-endpoints-2bd4d subsys=endpoint