level=info msg="Memory available for map entries (0.003% of 67421638656B): 168554096B" subsys=config level=info msg="option bpf-ct-global-tcp-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-ct-global-any-max set by dynamic sizing to 295708" subsys=config level=info msg="option bpf-nat-global-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-neigh-global-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-sock-rev-map-max set by dynamic sizing to 295708" subsys=config level=info msg=" --agent-health-port='9879'" subsys=daemon level=info msg=" --agent-labels=''" subsys=daemon level=info msg=" --agent-liveness-update-interval='1s'" subsys=daemon level=info msg=" --agent-not-ready-taint-key='node.cilium.io/agent-not-ready'" subsys=daemon level=info msg=" --allocator-list-timeout='3m0s'" subsys=daemon level=info msg=" --allow-icmp-frag-needed='true'" subsys=daemon level=info msg=" --allow-localhost='auto'" subsys=daemon level=info msg=" --annotate-k8s-node='false'" subsys=daemon level=info msg=" --api-rate-limit=''" subsys=daemon level=info msg=" --arping-refresh-period='30s'" subsys=daemon level=info msg=" --auto-create-cilium-node-resource='true'" subsys=daemon level=info msg=" --auto-direct-node-routes='false'" subsys=daemon level=info msg=" --bgp-announce-lb-ip='false'" subsys=daemon level=info msg=" --bgp-announce-pod-cidr='false'" subsys=daemon level=info msg=" --bgp-config-path='/var/lib/cilium/bgp/config.yaml'" subsys=daemon level=info msg=" --bpf-auth-map-max='524288'" subsys=daemon level=info msg=" --bpf-ct-global-any-max='262144'" subsys=daemon level=info msg=" --bpf-ct-global-tcp-max='524288'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-any='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp='6h0m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp-fin='10s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp-syn='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-any='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-tcp='6h0m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-tcp-grace='1m0s'" subsys=daemon level=info msg=" --bpf-filter-priority='1'" subsys=daemon level=info msg=" --bpf-fragments-map-max='8192'" subsys=daemon level=info msg=" --bpf-lb-acceleration='disabled'" subsys=daemon level=info msg=" --bpf-lb-affinity-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-algorithm='random'" subsys=daemon level=info msg=" --bpf-lb-dev-ip-addr-inherit=''" subsys=daemon level=info msg=" --bpf-lb-dsr-dispatch='opt'" subsys=daemon level=info msg=" --bpf-lb-dsr-l4-xlate='frontend'" subsys=daemon level=info msg=" --bpf-lb-external-clusterip='false'" subsys=daemon level=info msg=" --bpf-lb-maglev-hash-seed='JLfvgnHc2kaSUFaI'" subsys=daemon level=info msg=" --bpf-lb-maglev-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-maglev-table-size='16381'" subsys=daemon level=info msg=" --bpf-lb-map-max='65536'" subsys=daemon level=info msg=" --bpf-lb-mode='snat'" subsys=daemon level=info msg=" --bpf-lb-rev-nat-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-rss-ipv4-src-cidr=''" subsys=daemon level=info msg=" --bpf-lb-rss-ipv6-src-cidr=''" subsys=daemon level=info msg=" --bpf-lb-service-backend-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-service-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-sock='false'" subsys=daemon level=info msg=" --bpf-lb-sock-hostns-only='false'" subsys=daemon level=info msg=" --bpf-lb-source-range-map-max='0'" subsys=daemon level=info msg=" --bpf-map-dynamic-size-ratio='0.0025'" subsys=daemon level=info msg=" --bpf-map-event-buffers=''" subsys=daemon level=info msg=" --bpf-nat-global-max='524288'" subsys=daemon level=info msg=" --bpf-neigh-global-max='524288'" subsys=daemon level=info msg=" --bpf-policy-map-full-reconciliation-interval='15m0s'" subsys=daemon level=info msg=" --bpf-policy-map-max='16384'" subsys=daemon level=info msg=" --bpf-root='/sys/fs/bpf'" subsys=daemon level=info msg=" --bpf-sock-rev-map-max='262144'" subsys=daemon level=info msg=" --bypass-ip-availability-upon-restore='false'" subsys=daemon level=info msg=" --certificates-directory='/var/run/cilium/certs'" subsys=daemon level=info msg=" --cflags=''" subsys=daemon level=info msg=" --cgroup-root='/run/cilium/cgroupv2'" subsys=daemon level=info msg=" --cilium-endpoint-gc-interval='5m0s'" subsys=daemon level=info msg=" --cluster-health-port='4240'" subsys=daemon level=info msg=" --cluster-id='0'" subsys=daemon level=info msg=" --cluster-name='default'" subsys=daemon level=info msg=" --cluster-pool-ipv4-cidr='10.0.0.0/8'" subsys=daemon level=info msg=" --cluster-pool-ipv4-mask-size='24'" subsys=daemon level=info msg=" --clustermesh-config='/var/lib/cilium/clustermesh/'" subsys=daemon level=info msg=" --clustermesh-ip-identities-sync-timeout='1m0s'" subsys=daemon level=info msg=" --cmdref=''" subsys=daemon level=info msg=" --cni-chaining-mode='none'" subsys=daemon level=info msg=" --cni-chaining-target=''" subsys=daemon level=info msg=" --cni-exclusive='true'" subsys=daemon level=info msg=" --cni-external-routing='false'" subsys=daemon level=info msg=" --cni-log-file='/var/run/cilium/cilium-cni.log'" subsys=daemon level=info msg=" --cnp-node-status-gc-interval='0s'" subsys=daemon level=info msg=" --config=''" subsys=daemon level=info msg=" --config-dir='/tmp/cilium/config-map'" subsys=daemon level=info msg=" --config-sources='config-map:kube-system/cilium-config'" subsys=daemon level=info msg=" --conntrack-gc-interval='0s'" subsys=daemon level=info msg=" --conntrack-gc-max-interval='0s'" subsys=daemon level=info msg=" --crd-wait-timeout='5m0s'" subsys=daemon level=info msg=" --custom-cni-conf='false'" subsys=daemon level=info msg=" --datapath-mode='veth'" subsys=daemon level=info msg=" --debug='false'" subsys=daemon level=info msg=" --debug-verbose=''" subsys=daemon level=info msg=" --derive-masquerade-ip-addr-from-device=''" subsys=daemon level=info msg=" --devices=''" subsys=daemon level=info msg=" --direct-routing-device=''" subsys=daemon level=info msg=" --disable-cnp-status-updates='true'" subsys=daemon level=info msg=" --disable-endpoint-crd='false'" subsys=daemon level=info msg=" --disable-envoy-version-check='false'" subsys=daemon level=info msg=" --disable-iptables-feeder-rules=''" subsys=daemon level=info msg=" --dns-max-ips-per-restored-rule='1000'" subsys=daemon level=info msg=" --dns-policy-unload-on-shutdown='false'" subsys=daemon level=info msg=" --dnsproxy-concurrency-limit='0'" subsys=daemon level=info msg=" --dnsproxy-concurrency-processing-grace-period='0s'" subsys=daemon level=info msg=" --dnsproxy-enable-transparent-mode='true'" subsys=daemon level=info msg=" --dnsproxy-lock-count='128'" subsys=daemon level=info msg=" --dnsproxy-lock-timeout='500ms'" subsys=daemon level=info msg=" --egress-gateway-policy-map-max='16384'" subsys=daemon level=info msg=" --egress-gateway-reconciliation-trigger-interval='1s'" subsys=daemon level=info msg=" --egress-masquerade-interfaces=''" subsys=daemon level=info msg=" --egress-multi-home-ip-rule-compat='false'" subsys=daemon level=info msg=" --enable-auto-protect-node-port-range='true'" subsys=daemon level=info msg=" --enable-bandwidth-manager='false'" subsys=daemon level=info msg=" --enable-bbr='false'" subsys=daemon level=info msg=" --enable-bgp-control-plane='false'" subsys=daemon level=info msg=" --enable-bpf-clock-probe='false'" subsys=daemon level=info msg=" --enable-bpf-masquerade='false'" subsys=daemon level=info msg=" --enable-bpf-tproxy='false'" subsys=daemon level=info msg=" --enable-cilium-api-server-access='*'" subsys=daemon level=info msg=" --enable-cilium-endpoint-slice='false'" subsys=daemon level=info msg=" --enable-cilium-health-api-server-access='*'" subsys=daemon level=info msg=" --enable-custom-calls='false'" subsys=daemon level=info msg=" --enable-endpoint-health-checking='true'" subsys=daemon level=info msg=" --enable-endpoint-routes='false'" subsys=daemon level=info msg=" --enable-envoy-config='false'" subsys=daemon level=info msg=" --enable-external-ips='false'" subsys=daemon level=info msg=" --enable-health-check-nodeport='true'" subsys=daemon level=info msg=" --enable-health-checking='true'" subsys=daemon level=info msg=" --enable-high-scale-ipcache='false'" subsys=daemon level=info msg=" --enable-host-firewall='false'" subsys=daemon level=info msg=" --enable-host-legacy-routing='false'" subsys=daemon level=info msg=" --enable-host-port='false'" subsys=daemon level=info msg=" --enable-hubble='false'" subsys=daemon level=info msg=" --enable-hubble-recorder-api='true'" subsys=daemon level=info msg=" --enable-icmp-rules='true'" subsys=daemon level=info msg=" --enable-identity-mark='true'" subsys=daemon level=info msg=" --enable-ip-masq-agent='false'" subsys=daemon level=info msg=" --enable-ipsec='false'" subsys=daemon level=info msg=" --enable-ipsec-key-watcher='true'" subsys=daemon level=info msg=" --enable-ipv4='true'" subsys=daemon level=info msg=" --enable-ipv4-big-tcp='false'" subsys=daemon level=info msg=" --enable-ipv4-egress-gateway='false'" subsys=daemon level=info msg=" --enable-ipv4-fragment-tracking='true'" subsys=daemon level=info msg=" --enable-ipv4-masquerade='true'" subsys=daemon level=info msg=" --enable-ipv6='false'" subsys=daemon level=info msg=" --enable-ipv6-big-tcp='false'" subsys=daemon level=info msg=" --enable-ipv6-masquerade='true'" subsys=daemon level=info msg=" --enable-ipv6-ndp='false'" subsys=daemon level=info msg=" --enable-k8s='true'" subsys=daemon level=info msg=" --enable-k8s-api-discovery='false'" subsys=daemon level=info msg=" --enable-k8s-endpoint-slice='true'" subsys=daemon level=info msg=" --enable-k8s-event-handover='false'" subsys=daemon level=info msg=" --enable-k8s-networkpolicy='true'" subsys=daemon level=info msg=" --enable-k8s-terminating-endpoint='true'" subsys=daemon level=info msg=" --enable-l2-announcements='false'" subsys=daemon level=info msg=" --enable-l2-neigh-discovery='true'" subsys=daemon level=info msg=" --enable-l2-pod-announcements='false'" subsys=daemon level=info msg=" --enable-l7-proxy='true'" subsys=daemon level=info msg=" --enable-local-node-route='true'" subsys=daemon level=info msg=" --enable-local-redirect-policy='false'" subsys=daemon level=info msg=" --enable-mke='false'" subsys=daemon level=info msg=" --enable-monitor='true'" subsys=daemon level=info msg=" --enable-nat46x64-gateway='false'" subsys=daemon level=info msg=" --enable-node-port='false'" subsys=daemon level=info msg=" --enable-pmtu-discovery='false'" subsys=daemon level=info msg=" --enable-policy='default'" subsys=daemon level=info msg=" --enable-recorder='false'" subsys=daemon level=info msg=" --enable-remote-node-identity='true'" subsys=daemon level=info msg=" --enable-runtime-device-detection='false'" subsys=daemon level=info msg=" --enable-sctp='false'" subsys=daemon level=info msg=" --enable-service-topology='false'" subsys=daemon level=info msg=" --enable-session-affinity='false'" subsys=daemon level=info msg=" --enable-srv6='false'" subsys=daemon level=info msg=" --enable-stale-cilium-endpoint-cleanup='true'" subsys=daemon level=info msg=" --enable-svc-source-range-check='true'" subsys=daemon level=info msg=" --enable-tracing='false'" subsys=daemon level=info msg=" --enable-unreachable-routes='false'" subsys=daemon level=info msg=" --enable-vtep='false'" subsys=daemon level=info msg=" --enable-well-known-identities='false'" subsys=daemon level=info msg=" --enable-wireguard='false'" subsys=daemon level=info msg=" --enable-wireguard-userspace-fallback='false'" subsys=daemon level=info msg=" --enable-xdp-prefilter='false'" subsys=daemon level=info msg=" --enable-xt-socket-fallback='true'" subsys=daemon level=info msg=" --encrypt-interface=''" subsys=daemon level=info msg=" --encrypt-node='false'" subsys=daemon level=info msg=" --endpoint-gc-interval='5m0s'" subsys=daemon level=info msg=" --endpoint-queue-size='25'" subsys=daemon level=info msg=" --endpoint-status=''" subsys=daemon level=info msg=" --envoy-config-timeout='2m0s'" subsys=daemon level=info msg=" --envoy-log=''" subsys=daemon level=info msg=" --exclude-local-address=''" subsys=daemon level=info msg=" --external-envoy-proxy='false'" subsys=daemon level=info msg=" --fixed-identity-mapping=''" subsys=daemon level=info msg=" --fqdn-regex-compile-lru-size='1024'" subsys=daemon level=info msg=" --gops-port='9890'" subsys=daemon level=info msg=" --http-403-msg=''" subsys=daemon level=info msg=" --http-idle-timeout='0'" subsys=daemon level=info msg=" --http-max-grpc-timeout='0'" subsys=daemon level=info msg=" --http-normalize-path='true'" subsys=daemon level=info msg=" --http-request-timeout='3600'" subsys=daemon level=info msg=" --http-retry-count='3'" subsys=daemon level=info msg=" --http-retry-timeout='0'" subsys=daemon level=info msg=" --hubble-disable-tls='false'" subsys=daemon level=info msg=" --hubble-event-buffer-capacity='4095'" subsys=daemon level=info msg=" --hubble-event-queue-size='0'" subsys=daemon level=info msg=" --hubble-export-file-compress='false'" subsys=daemon level=info msg=" --hubble-export-file-max-backups='5'" subsys=daemon level=info msg=" --hubble-export-file-max-size-mb='10'" subsys=daemon level=info msg=" --hubble-export-file-path=''" subsys=daemon level=info msg=" --hubble-listen-address=''" subsys=daemon level=info msg=" --hubble-metrics=''" subsys=daemon level=info msg=" --hubble-metrics-server=''" subsys=daemon level=info msg=" --hubble-monitor-events=''" subsys=daemon level=info msg=" --hubble-prefer-ipv6='false'" subsys=daemon level=info msg=" --hubble-recorder-sink-queue-size='1024'" subsys=daemon level=info msg=" --hubble-recorder-storage-path='/var/run/cilium/pcaps'" subsys=daemon level=info msg=" --hubble-skip-unknown-cgroup-ids='true'" subsys=daemon level=info msg=" --hubble-socket-path='/var/run/cilium/hubble.sock'" subsys=daemon level=info msg=" --hubble-tls-cert-file=''" subsys=daemon level=info msg=" --hubble-tls-client-ca-files=''" subsys=daemon level=info msg=" --hubble-tls-key-file=''" subsys=daemon level=info msg=" --identity-allocation-mode='crd'" subsys=daemon level=info msg=" --identity-change-grace-period='5s'" subsys=daemon level=info msg=" --identity-gc-interval='15m0s'" subsys=daemon level=info msg=" --identity-heartbeat-timeout='30m0s'" subsys=daemon level=info msg=" --identity-restore-grace-period='10m0s'" subsys=daemon level=info msg=" --install-egress-gateway-routes='false'" subsys=daemon level=info msg=" --install-iptables-rules='true'" subsys=daemon level=info msg=" --install-no-conntrack-iptables-rules='false'" subsys=daemon level=info msg=" --ip-allocation-timeout='2m0s'" subsys=daemon level=info msg=" --ip-masq-agent-config-path='/etc/config/ip-masq-agent'" subsys=daemon level=info msg=" --ipam='cluster-pool'" subsys=daemon level=info msg=" --ipam-cilium-node-update-rate='15s'" subsys=daemon level=info msg=" --ipam-multi-pool-pre-allocation='default=8'" subsys=daemon level=info msg=" --ipsec-key-file=''" subsys=daemon level=info msg=" --ipsec-key-rotation-duration='5m0s'" subsys=daemon level=info msg=" --iptables-lock-timeout='5s'" subsys=daemon level=info msg=" --iptables-random-fully='false'" subsys=daemon level=info msg=" --ipv4-native-routing-cidr=''" subsys=daemon level=info msg=" --ipv4-node='auto'" subsys=daemon level=info msg=" --ipv4-pod-subnets=''" subsys=daemon level=info msg=" --ipv4-range='auto'" subsys=daemon level=info msg=" --ipv4-service-loopback-address='169.254.42.1'" subsys=daemon level=info msg=" --ipv4-service-range='auto'" subsys=daemon level=info msg=" --ipv6-cluster-alloc-cidr='f00d::/64'" subsys=daemon level=info msg=" --ipv6-mcast-device=''" subsys=daemon level=info msg=" --ipv6-native-routing-cidr=''" subsys=daemon level=info msg=" --ipv6-node='auto'" subsys=daemon level=info msg=" --ipv6-pod-subnets=''" subsys=daemon level=info msg=" --ipv6-range='auto'" subsys=daemon level=info msg=" --ipv6-service-range='auto'" subsys=daemon level=info msg=" --join-cluster='false'" subsys=daemon level=info msg=" --k8s-api-server=''" subsys=daemon level=info msg=" --k8s-client-burst='10'" subsys=daemon level=info msg=" --k8s-client-qps='5'" subsys=daemon level=info msg=" --k8s-heartbeat-timeout='30s'" subsys=daemon level=info msg=" --k8s-kubeconfig-path=''" subsys=daemon level=info msg=" --k8s-namespace='kube-system'" subsys=daemon level=info msg=" --k8s-require-ipv4-pod-cidr='false'" subsys=daemon level=info msg=" --k8s-require-ipv6-pod-cidr='false'" subsys=daemon level=info msg=" --k8s-service-cache-size='128'" subsys=daemon level=info msg=" --k8s-service-proxy-name=''" subsys=daemon level=info msg=" --k8s-sync-timeout='3m0s'" subsys=daemon level=info msg=" --k8s-watcher-endpoint-selector='metadata.name!=kube-scheduler,metadata.name!=kube-controller-manager,metadata.name!=etcd-operator,metadata.name!=gcp-controller-manager'" subsys=daemon level=info msg=" --keep-config='false'" subsys=daemon level=info msg=" --kube-proxy-replacement='disabled'" subsys=daemon level=info msg=" --kube-proxy-replacement-healthz-bind-address=''" subsys=daemon level=info msg=" --kvstore=''" subsys=daemon level=info msg=" --kvstore-connectivity-timeout='2m0s'" subsys=daemon level=info msg=" --kvstore-lease-ttl='15m0s'" subsys=daemon level=info msg=" --kvstore-max-consecutive-quorum-errors='2'" subsys=daemon level=info msg=" --kvstore-opt=''" subsys=daemon level=info msg=" --kvstore-periodic-sync='5m0s'" subsys=daemon level=info msg=" --l2-announcements-lease-duration='15s'" subsys=daemon level=info msg=" --l2-announcements-renew-deadline='5s'" subsys=daemon level=info msg=" --l2-announcements-retry-period='2s'" subsys=daemon level=info msg=" --l2-pod-announcements-interface=''" subsys=daemon level=info msg=" --label-prefix-file=''" subsys=daemon level=info msg=" --labels=''" subsys=daemon level=info msg=" --lib-dir='/var/lib/cilium'" subsys=daemon level=info msg=" --local-max-addr-scope='252'" subsys=daemon level=info msg=" --local-router-ipv4=''" subsys=daemon level=info msg=" --local-router-ipv6=''" subsys=daemon level=info msg=" --log-driver=''" subsys=daemon level=info msg=" --log-opt=''" subsys=daemon level=info msg=" --log-system-load='false'" subsys=daemon level=info msg=" --max-controller-interval='0'" subsys=daemon level=info msg=" --mesh-auth-enabled='true'" subsys=daemon level=info msg=" --mesh-auth-gc-interval='5m0s'" subsys=daemon level=info msg=" --mesh-auth-mutual-listener-port='0'" subsys=daemon level=info msg=" --mesh-auth-queue-size='1024'" subsys=daemon level=info msg=" --mesh-auth-rotated-identities-queue-size='1024'" subsys=daemon level=info msg=" --mesh-auth-signal-backoff-duration='1s'" subsys=daemon level=info msg=" --mesh-auth-spiffe-trust-domain='spiffe.cilium'" subsys=daemon level=info msg=" --mesh-auth-spire-admin-socket=''" subsys=daemon level=info msg=" --metrics=''" subsys=daemon level=info msg=" --mke-cgroup-mount=''" subsys=daemon level=info msg=" --monitor-aggregation='medium'" subsys=daemon level=info msg=" --monitor-aggregation-flags='all'" subsys=daemon level=info msg=" --monitor-aggregation-interval='5s'" subsys=daemon level=info msg=" --monitor-queue-size='0'" subsys=daemon level=info msg=" --mtu='0'" subsys=daemon level=info msg=" --node-encryption-opt-out-labels='node-role.kubernetes.io/control-plane'" subsys=daemon level=info msg=" --node-port-acceleration='disabled'" subsys=daemon level=info msg=" --node-port-algorithm='random'" subsys=daemon level=info msg=" --node-port-bind-protection='true'" subsys=daemon level=info msg=" --node-port-mode='snat'" subsys=daemon level=info msg=" --node-port-range='30000,32767'" subsys=daemon level=info msg=" --nodes-gc-interval='5m0s'" subsys=daemon level=info msg=" --operator-api-serve-addr='127.0.0.1:9234'" subsys=daemon level=info msg=" --policy-audit-mode='false'" subsys=daemon level=info msg=" --policy-queue-size='100'" subsys=daemon level=info msg=" --policy-trigger-interval='1s'" subsys=daemon level=info msg=" --pprof='false'" subsys=daemon level=info msg=" --pprof-address='localhost'" subsys=daemon level=info msg=" --pprof-port='6060'" subsys=daemon level=info msg=" --preallocate-bpf-maps='false'" subsys=daemon level=info msg=" --prepend-iptables-chains='true'" subsys=daemon level=info msg=" --procfs='/host/proc'" subsys=daemon level=info msg=" --prometheus-serve-addr=':9962'" subsys=daemon level=info msg=" --proxy-connect-timeout='2'" subsys=daemon level=info msg=" --proxy-gid='1337'" subsys=daemon level=info msg=" --proxy-idle-timeout-seconds='60'" subsys=daemon level=info msg=" --proxy-max-connection-duration-seconds='0'" subsys=daemon level=info msg=" --proxy-max-requests-per-connection='0'" subsys=daemon level=info msg=" --proxy-prometheus-port='9964'" subsys=daemon level=info msg=" --read-cni-conf=''" subsys=daemon level=info msg=" --remove-cilium-node-taints='true'" subsys=daemon level=info msg=" --restore='true'" subsys=daemon level=info msg=" --route-metric='0'" subsys=daemon level=info msg=" --routing-mode='tunnel'" subsys=daemon level=info msg=" --set-cilium-is-up-condition='true'" subsys=daemon level=info msg=" --set-cilium-node-taints='true'" subsys=daemon level=info msg=" --sidecar-istio-proxy-image='cilium/istio_proxy'" subsys=daemon level=info msg=" --single-cluster-route='false'" subsys=daemon level=info msg=" --skip-cnp-status-startup-clean='false'" subsys=daemon level=info msg=" --socket-path='/var/run/cilium/cilium.sock'" subsys=daemon level=info msg=" --srv6-encap-mode='reduced'" subsys=daemon level=info msg=" --state-dir='/var/run/cilium'" subsys=daemon level=info msg=" --synchronize-k8s-nodes='true'" subsys=daemon level=info msg=" --tofqdns-dns-reject-response-code='refused'" subsys=daemon level=info msg=" --tofqdns-enable-dns-compression='true'" subsys=daemon level=info msg=" --tofqdns-endpoint-max-ip-per-hostname='50'" subsys=daemon level=info msg=" --tofqdns-idle-connection-grace-period='0s'" subsys=daemon level=info msg=" --tofqdns-max-deferred-connection-deletes='10000'" subsys=daemon level=info msg=" --tofqdns-min-ttl='0'" subsys=daemon level=info msg=" --tofqdns-pre-cache=''" subsys=daemon level=info msg=" --tofqdns-proxy-port='0'" subsys=daemon level=info msg=" --tofqdns-proxy-response-max-delay='100ms'" subsys=daemon level=info msg=" --trace-payloadlen='128'" subsys=daemon level=info msg=" --trace-sock='true'" subsys=daemon level=info msg=" --tunnel=''" subsys=daemon level=info msg=" --tunnel-port='6082'" subsys=daemon level=info msg=" --tunnel-protocol='geneve'" subsys=daemon level=info msg=" --unmanaged-pod-watcher-interval='15'" subsys=daemon level=info msg=" --use-cilium-internal-ip-for-ipsec='false'" subsys=daemon level=info msg=" --version='false'" subsys=daemon level=info msg=" --vlan-bpf-bypass=''" subsys=daemon level=info msg=" --vtep-cidr=''" subsys=daemon level=info msg=" --vtep-endpoint=''" subsys=daemon level=info msg=" --vtep-mac=''" subsys=daemon level=info msg=" --vtep-mask=''" subsys=daemon level=info msg=" --wireguard-encapsulate='false'" subsys=daemon level=info msg=" --write-cni-conf-when-ready='/host/etc/cni/net.d/05-cilium.conflist'" subsys=daemon level=info msg=" _ _ _" subsys=daemon level=info msg=" ___|_| |_|_ _ _____" subsys=daemon level=info msg="| _| | | | | | |" subsys=daemon level=info msg="|___|_|_|_|___|_|_|_|" subsys=daemon level=info msg="Cilium 1.14.8 cf6e022e 2024-03-13T12:23:35-04:00 go version go1.21.8 linux/amd64" subsys=daemon level=info msg="clang (10.0.0) and kernel (5.15.0) versions: OK!" subsys=linux-datapath level=info msg="linking environment: OK!" subsys=linux-datapath level=info msg="Kernel config file not found: if the agent fails to start, check the system requirements at https://docs.cilium.io/en/stable/operations/system_requirements" subsys=probes level=info msg="Detected mounted BPF filesystem at /sys/fs/bpf" subsys=bpf level=info msg="Mounted cgroupv2 filesystem at /run/cilium/cgroupv2" subsys=cgroups level=info msg="Parsing base label prefixes from default label list" subsys=labels-filter level=info msg="Parsing additional label prefixes from user inputs: []" subsys=labels-filter level=info msg="Final label prefixes to be used for identity evaluation:" subsys=labels-filter level=info msg=" - reserved:.*" subsys=labels-filter level=info msg=" - :io\\.kubernetes\\.pod\\.namespace" subsys=labels-filter level=info msg=" - :io\\.cilium\\.k8s\\.namespace\\.labels" subsys=labels-filter level=info msg=" - :app\\.kubernetes\\.io" subsys=labels-filter level=info msg=" - !:io\\.kubernetes" subsys=labels-filter level=info msg=" - !:kubernetes\\.io" subsys=labels-filter level=info msg=" - !:.*beta\\.kubernetes\\.io" subsys=labels-filter level=info msg=" - !:k8s\\.io" subsys=labels-filter level=info msg=" - !:pod-template-generation" subsys=labels-filter level=info msg=" - !:pod-template-hash" subsys=labels-filter level=info msg=" - !:controller-revision-hash" subsys=labels-filter level=info msg=" - !:annotation.*" subsys=labels-filter level=info msg=" - !:etcd_node" subsys=labels-filter level=info msg=Invoked duration=1.712681ms function="pprof.glob..func1 (cell.go:50)" subsys=hive level=info msg=Invoked duration="208.655µs" function="gops.registerGopsHooks (cell.go:38)" subsys=hive level=info msg=Invoked duration=1.747431ms function="metrics.NewRegistry (registry.go:65)" subsys=hive level=info msg=Invoked duration="16.051µs" function="metrics.glob..func1 (cell.go:12)" subsys=hive level=info msg="Spire Delegate API Client is disabled as no socket path is configured" subsys=spire-delegate level=info msg="Mutual authentication handler is disabled as no port is configured" subsys=auth level=info msg=Invoked duration=161.748442ms function="cmd.glob..func4 (daemon_main.go:1607)" subsys=hive level=info msg=Invoked duration="21.66µs" function="gc.registerSignalHandler (cell.go:47)" subsys=hive level=info msg=Invoked duration="31.411µs" function="utime.initUtimeSync (cell.go:29)" subsys=hive level=info msg=Invoked duration="109.823µs" function="agentliveness.newAgentLivenessUpdater (agent_liveness.go:43)" subsys=hive level=info msg=Invoked duration="115.983µs" function="l2responder.NewL2ResponderReconciler (l2responder.go:63)" subsys=hive level=info msg=Invoked duration="154.283µs" function="garp.newGARPProcessor (processor.go:27)" subsys=hive level=info msg=Starting subsys=hive level=info msg="Started gops server" address="127.0.0.1:9890" subsys=gops level=info msg="Start hook executed" duration="608.455µs" function="gops.registerGopsHooks.func1 (cell.go:43)" subsys=hive level=info msg="Start hook executed" duration="5.94µs" function="metrics.NewRegistry.func1 (registry.go:86)" subsys=hive level=info msg="Establishing connection to apiserver" host="https://10.96.0.1:443" subsys=k8s-client level=info msg="Serving prometheus metrics on :9962" subsys=metrics level=info msg="Connected to apiserver" subsys=k8s-client level=info msg="Start hook executed" duration=10.88531ms function="client.(*compositeClientset).onStart" subsys=hive level=info msg="Start hook executed" duration=10.13158ms function="authmap.newAuthMap.func1 (cell.go:27)" subsys=hive level=info msg="Start hook executed" duration="71.062µs" function="configmap.newMap.func1 (cell.go:23)" subsys=hive level=info msg="Start hook executed" duration="52.992µs" function="signalmap.newMap.func1 (cell.go:44)" subsys=hive level=info msg="Start hook executed" duration="339.548µs" function="nodemap.newNodeMap.func1 (cell.go:23)" subsys=hive level=info msg="Start hook executed" duration="131.293µs" function="eventsmap.newEventsMap.func1 (cell.go:35)" subsys=hive level=info msg="Start hook executed" duration="88.352µs" function="*cni.cniConfigManager.Start" subsys=hive level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Wrote CNI configuration file to /host/etc/cni/net.d/05-cilium.conflist" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Start hook executed" duration=51.334132ms function="datapath.newDatapath.func1 (cells.go:113)" subsys=hive level=info msg="Restored 0 node IDs from the BPF map" subsys=linux-datapath level=info msg="Start hook executed" duration="84.262µs" function="datapath.newDatapath.func2 (cells.go:126)" subsys=hive level=info msg="Start hook executed" duration="7.33µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Node].Start" subsys=hive level=info msg="Start hook executed" duration="3.49µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumNode].Start" subsys=hive level=info msg="Using autogenerated IPv4 allocation range" subsys=node v4Prefix=10.211.0.0/16 level=info msg="no local ciliumnode found, will not restore cilium internal ips from k8s" subsys=daemon level=info msg="Start hook executed" duration=103.519935ms function="node.NewLocalNodeStore.func1 (local_node_store.go:76)" subsys=hive level=info msg="Start hook executed" duration="4.33µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Start" subsys=hive level=info msg="Start hook executed" duration=100.219538ms function="*manager.diffStore[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Start" subsys=hive level=info msg="Start hook executed" duration="4.64µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s.Endpoints].Start" subsys=hive level=info msg="Using discoveryv1.EndpointSlice" subsys=k8s level=info msg="Start hook executed" duration=200.622757ms function="*manager.diffStore[*github.com/cilium/cilium/pkg/k8s.Endpoints].Start" subsys=hive level=info msg="Start hook executed" duration="7.76µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Pod].Start" subsys=hive level=info msg="Start hook executed" duration="3.52µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Namespace].Start" subsys=hive level=info msg="Start hook executed" duration="6.04µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumNetworkPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="3.291µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumClusterwideNetworkPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="4.85µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumCIDRGroup].Start" subsys=hive level=info msg="Start hook executed" duration="108.283µs" function="endpointmanager.newDefaultEndpointManager.func1 (cell.go:203)" subsys=hive level=info msg="Start hook executed" duration="129.403µs" function="cmd.newPolicyTrifecta.func1 (policy.go:135)" subsys=hive level=info msg="Start hook executed" duration="53.132µs" function="*manager.manager.Start" subsys=hive level=info msg="Serving cilium node monitor v1.2 API at unix:///var/run/cilium/monitor1_2.sock" subsys=monitor-agent level=info msg="Start hook executed" duration="307.687µs" function="agent.newMonitorAgent.func1 (cell.go:61)" subsys=hive level=info msg="Start hook executed" duration="2.84µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumL2AnnouncementPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="10.31µs" function="*job.group.Start" subsys=hive level=info msg="Start hook executed" duration="329.919µs" function="proxy.newProxy.func1 (cell.go:55)" subsys=hive level=info msg="Envoy: Starting xDS gRPC server listening on /var/run/cilium/envoy/sockets/xds.sock" subsys=envoy-manager level=info msg="Start hook executed" duration=1.095105ms function="signal.provideSignalManager.func1 (cell.go:25)" subsys=hive level=info msg="Datapath signal listener running" subsys=signal level=info msg="Start hook executed" duration=1.532238ms function="auth.registerAuthManager.func1 (cell.go:109)" subsys=hive level=info msg="Start hook executed" duration="4.57µs" function="auth.registerGCJobs.func1 (cell.go:158)" subsys=hive level=info msg="Start hook executed" duration="28.191µs" function="*job.group.Start" subsys=hive level=warning msg="Deprecated value for --kube-proxy-replacement: disabled (use either \"true\", or \"false\")" subsys=daemon level=info msg="Auto-disabling \"enable-node-port\", \"enable-external-ips\", \"bpf-lb-sock\", \"enable-host-port\" features and falling back to \"enable-host-legacy-routing\"" subsys=daemon level=info msg="Inheriting MTU from external network interface" device=ens3 ipAddr=162.253.55.211 mtu=1500 subsys=mtu level=info msg="Removed map pin at /sys/fs/bpf/tc/globals/cilium_ipcache, recreating and re-pinning map cilium_ipcache" file-path=/sys/fs/bpf/tc/globals/cilium_ipcache name=cilium_ipcache subsys=bpf level=info msg="Removed map pin at /sys/fs/bpf/tc/globals/cilium_tunnel_map, recreating and re-pinning map cilium_tunnel_map" file-path=/sys/fs/bpf/tc/globals/cilium_tunnel_map name=cilium_tunnel_map subsys=bpf level=info msg="Restored services from maps" failedServices=0 restoredServices=0 subsys=service level=info msg="Restored backends from maps" failedBackends=0 restoredBackends=0 skippedBackends=0 subsys=service level=info msg="Reading old endpoints..." subsys=daemon level=info msg="No old endpoints found." subsys=daemon level=info msg="Waiting until all Cilium CRDs are available" subsys=k8s level=info msg="All Cilium CRDs have been found and are available" subsys=k8s level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=warning msg="Unable to get node resource" error="ciliumnodes.cilium.io \"instance\" not found" subsys=nodediscovery level=warning msg="Unable to get node resource" error="ciliumnodes.cilium.io \"instance\" not found" subsys=nodediscovery level=info msg="Successfully created CiliumNode resource" subsys=nodediscovery level=warning msg="Unable to create CiliumNode resource, will retry" error="ciliumnodes.cilium.io \"instance\" already exists" subsys=nodediscovery level=info msg="Retrieved node information from cilium node" nodeName=instance subsys=k8s level=info msg="Received own node information from API server" ipAddr.ipv4=162.253.55.211 ipAddr.ipv6="" k8sNodeIP=162.253.55.211 labels="map[beta.kubernetes.io/arch:amd64 beta.kubernetes.io/os:linux kubernetes.io/arch:amd64 kubernetes.io/hostname:instance kubernetes.io/os:linux node-role.kubernetes.io/control-plane: node.kubernetes.io/exclude-from-external-load-balancers:]" nodeName=instance subsys=k8s v4Prefix=10.0.0.0/24 v6Prefix="" level=info msg="k8s mode: Allowing localhost to reach local endpoints" subsys=daemon level=info msg="Detected devices" devices="[]" subsys=linux-datapath level=info msg="Enabling k8s event listener" subsys=k8s-watcher level=info msg="Removing stale endpoint interfaces" subsys=daemon level=info msg="Skipping kvstore configuration" subsys=daemon level=info msg="Waiting until local node addressing before starting watchers depending on it" subsys=k8s-watcher level=info msg="Initializing node addressing" subsys=daemon level=info msg="Initializing cluster-pool IPAM" subsys=ipam v4Prefix=10.0.0.0/24 v6Prefix="" level=info msg="Restoring endpoints..." subsys=daemon level=info msg="Endpoints restored" failed=0 restored=0 subsys=daemon level=info msg="Addressing information:" subsys=daemon level=info msg=" Cluster-Name: default" subsys=daemon level=info msg=" Cluster-ID: 0" subsys=daemon level=info msg=" Local node-name: instance" subsys=daemon level=info msg=" Node-IPv6: " subsys=daemon level=info msg=" External-Node IPv4: 162.253.55.211" subsys=daemon level=info msg=" Internal-Node IPv4: 10.0.0.7" subsys=daemon level=info msg=" IPv4 allocation prefix: 10.0.0.0/24" subsys=daemon level=info msg=" Loopback IPv4: 169.254.42.1" subsys=daemon level=info msg=" Local IPv4 addresses:" subsys=daemon level=info msg=" - 162.253.55.211" subsys=daemon level=info msg=" - 172.17.0.100" subsys=daemon level=info msg=" - 10.96.240.200" subsys=daemon level=info msg="Node updated" clusterName=default nodeName=instance subsys=nodemanager level=info msg="Adding local node to cluster" node="{instance default [{InternalIP 162.253.55.211} {CiliumInternalIP 10.0.0.7}] 10.0.0.0/24 [] [] 10.0.0.95 0 local 0 map[beta.kubernetes.io/arch:amd64 beta.kubernetes.io/os:linux kubernetes.io/arch:amd64 kubernetes.io/hostname:instance kubernetes.io/os:linux node-role.kubernetes.io/control-plane: node.kubernetes.io/exclude-from-external-load-balancers:] map[] 1 }" subsys=nodediscovery level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Waiting until all pre-existing resources have been received" subsys=k8s-watcher level=info msg="Initializing identity allocator" subsys=identity-cache level=info msg="Allocating identities between range" cluster-id=0 max=65535 min=256 subsys=identity-cache level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.forwarding sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.accept_local sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.send_redirects sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.forwarding sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.accept_local sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.send_redirects sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.core.bpf_jit_enable sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.all.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.fib_multipath_use_neigh sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=kernel.unprivileged_bpf_disabled sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=kernel.timer_migration sysParamValue=0 level=info msg="Setting up BPF datapath" bpfClockSource=ktime bpfInsnSet="" subsys=datapath-loader level=info msg="Iptables rules installed" subsys=iptables level=info msg="Adding new proxy port rules for cilium-dns-egress:42213" id=cilium-dns-egress subsys=proxy level=info msg="Iptables proxy rules installed" subsys=iptables level=info msg="Start hook executed" duration=2.777917981s function="cmd.newDaemonPromise.func1 (daemon_main.go:1663)" subsys=hive level=info msg="Start hook executed" duration="21.8µs" function="utime.initUtimeSync.func1 (cell.go:33)" subsys=hive level=info msg="Start hook executed" duration="10.911µs" function="*job.group.Start" subsys=hive level=info msg="Starting IP identity watcher" subsys=ipcache level=info msg="Initializing daemon" subsys=daemon level=info msg="Validating configured node address ranges" subsys=daemon level=info msg="Starting connection tracking garbage collector" subsys=daemon level=info msg="Start hook executed" duration=1.079886ms function="l2respondermap.newMap.func1 (l2_responder_map4.go:44)" subsys=hive level=info msg="Start hook executed" duration="35.801µs" function="*job.group.Start" subsys=hive level=info msg="Initial scan of connection tracking completed" subsys=ct-gc level=info msg="Regenerating restored endpoints" numRestored=0 subsys=daemon level=info msg="Creating host endpoint" subsys=daemon level=info msg="Finished regenerating restored endpoints" regenerated=0 subsys=daemon total=0 level=info msg="Deleted orphan backends" orphanBackends=0 subsys=service level=info msg="New endpoint" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1478 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1478 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Identity of endpoint changed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1478 identity=1 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,reserved:host" ipv4= ipv6= k8sPodName=/ oldIdentity="no identity" subsys=endpoint level=info msg="Launching Cilium health daemon" subsys=daemon level=info msg="Launching Cilium health endpoint" subsys=daemon level=info msg="Started healthz status API server" address="127.0.0.1:9879" subsys=daemon level=info msg="Processing queued endpoint deletion requests from /var/run/cilium/deleteQueue" subsys=daemon level=info msg="processing 0 queued deletion requests" subsys=daemon level=info msg="Initializing Cilium API" subsys=daemon level=info msg="Daemon initialization completed" bootstrapTime=3.943349115s subsys=daemon level=info msg="Hubble server is disabled" subsys=hubble level=info msg="Serving cilium API at unix:///var/run/cilium/cilium.sock" subsys=daemon level=info msg="Compiled new BPF template" BPFCompilationTime=360.812141ms file-path=/var/run/cilium/state/templates/86484a6b54664bd48c9ae3ce8671ee0464096f019b23d686160ba35c400d22f7/bpf_host.o subsys=datapath-loader level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1478 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.112 4462f40f-3acf-4329-8843-cd8178aebded default }" containerID=f3462f00264e53883921f49550fe8cf0f0246b34a7a2fbfeb4154827bf0cc18b datapathConfiguration="&{false false false false false }" interface=lxc4f60e8c9f7bc k8sPodName=kube-system/coredns-7c96b6546b-d7ml7 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f3462f0026 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=502 ipv4=10.0.0.112 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-d7ml7 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f3462f0026 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=502 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.112 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-d7ml7 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:kube-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=coredns;k8s:io.kubernetes.pod.namespace=kube-system;k8s:k8s-app=kube-dns;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=f3462f0026 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=502 identity=26939 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.112 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-d7ml7 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f3462f0026 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=502 identity=26939 ipv4=10.0.0.112 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-d7ml7 subsys=endpoint level=info msg="New endpoint" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3399 ipv4=10.0.0.95 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3399 identityLabels="reserved:health" ipv4=10.0.0.95 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Identity of endpoint changed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3399 identity=4 identityLabels="reserved:health" ipv4=10.0.0.95 ipv6= k8sPodName=/ oldIdentity="no identity" subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.138 b3a84151-ecd8-4e51-a061-215b55d6480b default }" containerID=772c5cfc17041fa66761898e8b6f86c6847bb7a5dc0d36aa0998328102145fa2 datapathConfiguration="&{false false false false false }" interface=lxce2804f687318 k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-chksn labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=772c5cfc17 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2259 ipv4=10.0.0.138 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-chksn subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=772c5cfc17 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2259 identityLabels="k8s:app=certgen,k8s:batch.kubernetes.io/controller-uid=9c21b37c-ebc6-467d-86f5-3f1a3ae038a8,k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen,k8s:controller-uid=9c21b37c-ebc6-467d-86f5-3f1a3ae038a8,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen,k8s:io.kubernetes.pod.namespace=envoy-gateway-system,k8s:job-name=envoy-gateway-gateway-helm-certgen" ipv4=10.0.0.138 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-chksn subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name:envoy-gateway-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=certgen;k8s:batch.kubernetes.io/controller-uid=9c21b37c-ebc6-467d-86f5-3f1a3ae038a8;k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen;k8s:controller-uid=9c21b37c-ebc6-467d-86f5-3f1a3ae038a8;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system;k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen;k8s:io.kubernetes.pod.namespace=envoy-gateway-system;k8s:job-name=envoy-gateway-gateway-helm-certgen;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=772c5cfc17 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2259 identity=17715 identityLabels="k8s:app=certgen,k8s:batch.kubernetes.io/controller-uid=9c21b37c-ebc6-467d-86f5-3f1a3ae038a8,k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen,k8s:controller-uid=9c21b37c-ebc6-467d-86f5-3f1a3ae038a8,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen,k8s:io.kubernetes.pod.namespace=envoy-gateway-system,k8s:job-name=envoy-gateway-gateway-helm-certgen" ipv4=10.0.0.138 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-chksn oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=772c5cfc17 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2259 identity=17715 ipv4=10.0.0.138 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-chksn subsys=endpoint level=info msg="Serving cilium health API at unix:///var/run/cilium/health.sock" subsys=health-server level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Compiled new BPF template" BPFCompilationTime=1.17242613s file-path=/var/run/cilium/state/templates/1d8c0cdfac348598b351ac8be6edda27cd7c8dce1202f3d578a0e6f9a0093e81/bpf_lxc.o subsys=datapath-loader level=info msg="Rewrote endpoint BPF program" containerID=f3462f0026 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=502 identity=26939 ipv4=10.0.0.112 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-d7ml7 subsys=endpoint level=info msg="Successful endpoint creation" containerID=f3462f0026 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=502 identity=26939 ipv4=10.0.0.112 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-d7ml7 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=772c5cfc17 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2259 identity=17715 ipv4=10.0.0.138 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-chksn subsys=endpoint level=info msg="Successful endpoint creation" containerID=772c5cfc17 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2259 identity=17715 ipv4=10.0.0.138 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-chksn subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3399 identity=4 ipv4=10.0.0.95 ipv6= k8sPodName=/ subsys=endpoint level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=772c5cfc17 endpointID=2259 k8sNamespace=envoy-gateway-system k8sPodName=envoy-gateway-gateway-helm-certgen-chksn subsys=daemon level=info msg="Releasing key" key="[k8s:app=certgen k8s:batch.kubernetes.io/controller-uid=9c21b37c-ebc6-467d-86f5-3f1a3ae038a8 k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen k8s:controller-uid=9c21b37c-ebc6-467d-86f5-3f1a3ae038a8 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen k8s:io.kubernetes.pod.namespace=envoy-gateway-system k8s:job-name=envoy-gateway-gateway-helm-certgen]" subsys=allocator level=info msg="Removed endpoint" containerID=772c5cfc17 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2259 identity=17715 ipv4=10.0.0.138 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-chksn subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.128 593d6a63-3f9e-48ce-918b-3c9aeb44f89f default }" containerID=c2d045caa6515a6e3f3ee1f3650959869ee357b10eda5231694875cd555df2dd datapathConfiguration="&{false false false false false }" interface=lxccd1c29d9bdb4 k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-qwdcm labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c2d045caa6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=161 ipv4=10.0.0.128 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-qwdcm subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c2d045caa6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=161 identityLabels="k8s:app.kubernetes.io/instance=envoy-gateway,k8s:app.kubernetes.io/name=gateway-helm,k8s:control-plane=envoy-gateway,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway,k8s:io.kubernetes.pod.namespace=envoy-gateway-system" ipv4=10.0.0.128 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-qwdcm subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name:envoy-gateway-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=envoy-gateway;k8s:app.kubernetes.io/name=gateway-helm;k8s:control-plane=envoy-gateway;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system;k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway;k8s:io.kubernetes.pod.namespace=envoy-gateway-system;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c2d045caa6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=161 identity=1533 identityLabels="k8s:app.kubernetes.io/instance=envoy-gateway,k8s:app.kubernetes.io/name=gateway-helm,k8s:control-plane=envoy-gateway,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway,k8s:io.kubernetes.pod.namespace=envoy-gateway-system" ipv4=10.0.0.128 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-qwdcm oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c2d045caa6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=161 identity=1533 ipv4=10.0.0.128 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-qwdcm subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=c2d045caa6 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=161 identity=1533 ipv4=10.0.0.128 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-qwdcm subsys=endpoint level=info msg="Successful endpoint creation" containerID=c2d045caa6 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=161 identity=1533 ipv4=10.0.0.128 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-qwdcm subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1478 identity=1 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,k8s:openstack-compute-node=enabled,k8s:openstack-control-plane=enabled,k8s:openvswitch=enabled,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_hostns_01478 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_hostns_01478 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_hostns_01478 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_hostns_01478:pending" subsys=bpf level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_netdev_00005 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_netdev_00005 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005:pending" subsys=bpf level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1478 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.228 1d7e7ae5-ac94-48fe-a38d-5df9244355de default }" containerID=b5b862403e3bb35c5cd4eebb607480b7ab954ce03a29090678a705df6434734d datapathConfiguration="&{false false false false false }" interface=lxcdf6de22b5011 k8sPodName=kube-system/coredns-67659f764b-vwq66 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b5b862403e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=390 ipv4=10.0.0.228 ipv6= k8sPodName=kube-system/coredns-67659f764b-vwq66 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b5b862403e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=390 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.228 ipv6= k8sPodName=kube-system/coredns-67659f764b-vwq66 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=b5b862403e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=390 identity=26939 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.228 ipv6= k8sPodName=kube-system/coredns-67659f764b-vwq66 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b5b862403e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=390 identity=26939 ipv4=10.0.0.228 ipv6= k8sPodName=kube-system/coredns-67659f764b-vwq66 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.37 e174adab-cad2-4e07-8c80-c7f562ec7a20 default }" containerID=481c610ba46438a682346a2b81e7d472bf36dcb21ad76398b9e9e526ac938175 datapathConfiguration="&{false false false false false }" interface=lxc8959b2c3ec31 k8sPodName=kube-system/coredns-67659f764b-qrptf labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=481c610ba4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=845 ipv4=10.0.0.37 ipv6= k8sPodName=kube-system/coredns-67659f764b-qrptf subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=481c610ba4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=845 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.37 ipv6= k8sPodName=kube-system/coredns-67659f764b-qrptf subsys=endpoint level=info msg="Identity of endpoint changed" containerID=481c610ba4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=845 identity=26939 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.37 ipv6= k8sPodName=kube-system/coredns-67659f764b-qrptf oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=481c610ba4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=845 identity=26939 ipv4=10.0.0.37 ipv6= k8sPodName=kube-system/coredns-67659f764b-qrptf subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b5b862403e datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=390 identity=26939 ipv4=10.0.0.228 ipv6= k8sPodName=kube-system/coredns-67659f764b-vwq66 subsys=endpoint level=info msg="Successful endpoint creation" containerID=b5b862403e datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=390 identity=26939 ipv4=10.0.0.228 ipv6= k8sPodName=kube-system/coredns-67659f764b-vwq66 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=481c610ba4 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=845 identity=26939 ipv4=10.0.0.37 ipv6= k8sPodName=kube-system/coredns-67659f764b-qrptf subsys=endpoint level=info msg="Successful endpoint creation" containerID=481c610ba4 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=845 identity=26939 ipv4=10.0.0.37 ipv6= k8sPodName=kube-system/coredns-67659f764b-qrptf subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.13 1d6046fa-49b2-43a3-a001-35546ae0e5fa default }" containerID=1ae6694c16e1fb5bf389849b56013d57d5b7f355107b16b56f568992f8f2087b datapathConfiguration="&{false false false false false }" interface=lxce778ab24817e k8sPodName=local-path-storage/local-path-provisioner-679c578f5-k2mhx labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1ae6694c16 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2764 ipv4=10.0.0.13 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-k2mhx subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1ae6694c16 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2764 identityLabels="k8s:app.kubernetes.io/instance=local-path-provisioner,k8s:app.kubernetes.io/name=local-path-provisioner,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.13 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-k2mhx subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:local-path-storage k8s:io.cilium.k8s.namespace.labels.name:local-path-storage]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=1ae6694c16 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2764 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.13 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-k2mhx line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=local-path-provisioner;k8s:app.kubernetes.io/name=local-path-provisioner;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1ae6694c16 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2764 identity=29656 identityLabels="k8s:app.kubernetes.io/instance=local-path-provisioner,k8s:app.kubernetes.io/name=local-path-provisioner,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.13 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-k2mhx oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1ae6694c16 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2764 identity=29656 ipv4=10.0.0.13 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-k2mhx subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=1ae6694c16 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2764 identity=29656 ipv4=10.0.0.13 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-k2mhx subsys=endpoint level=info msg="Successful endpoint creation" containerID=1ae6694c16 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2764 identity=29656 ipv4=10.0.0.13 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-k2mhx subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=f3462f0026 endpointID=502 k8sNamespace=kube-system k8sPodName=coredns-7c96b6546b-d7ml7 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=coredns k8s:io.kubernetes.pod.namespace=kube-system k8s:k8s-app=kube-dns]" subsys=allocator level=info msg="Removed endpoint" containerID=f3462f0026 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=502 identity=26939 ipv4=10.0.0.112 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-d7ml7 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.150 fe1abec4-489e-41c8-adf1-6d18593b3e77 default }" containerID=2ea6c542a4aa2285689cc4007dca716ef13057a9a037c3ffabebb7fb478db4e4 datapathConfiguration="&{false false false false false }" interface=lxc606e8dfbb3bf k8sPodName=cert-manager/cert-manager-webhook-7d6b59cfdc-lbgm9 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2ea6c542a4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1250 ipv4=10.0.0.150 ipv6= k8sPodName=cert-manager/cert-manager-webhook-7d6b59cfdc-lbgm9 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2ea6c542a4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1250 identityLabels="k8s:app.kubernetes.io/component=webhook,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=webhook,k8s:app.kubernetes.io/version=v1.15.5,k8s:app=webhook,k8s:helm.sh/chart=cert-manager-v1.15.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.150 ipv6= k8sPodName=cert-manager/cert-manager-webhook-7d6b59cfdc-lbgm9 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=webhook;k8s:app.kubernetes.io/component=webhook;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=webhook;k8s:app.kubernetes.io/version=v1.15.5;k8s:helm.sh/chart=cert-manager-v1.15.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=2ea6c542a4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1250 identity=33425 identityLabels="k8s:app.kubernetes.io/component=webhook,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=webhook,k8s:app.kubernetes.io/version=v1.15.5,k8s:app=webhook,k8s:helm.sh/chart=cert-manager-v1.15.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.150 ipv6= k8sPodName=cert-manager/cert-manager-webhook-7d6b59cfdc-lbgm9 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2ea6c542a4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1250 identity=33425 ipv4=10.0.0.150 ipv6= k8sPodName=cert-manager/cert-manager-webhook-7d6b59cfdc-lbgm9 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=2ea6c542a4 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1250 identity=33425 ipv4=10.0.0.150 ipv6= k8sPodName=cert-manager/cert-manager-webhook-7d6b59cfdc-lbgm9 subsys=endpoint level=info msg="Successful endpoint creation" containerID=2ea6c542a4 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1250 identity=33425 ipv4=10.0.0.150 ipv6= k8sPodName=cert-manager/cert-manager-webhook-7d6b59cfdc-lbgm9 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.234 5e8fa145-5f7b-469f-a850-61905307696f default }" containerID=afdfd67806553c14639cc51e37f494b833317ae244a8ac6713132dafcb50e2e0 datapathConfiguration="&{false false false false false }" interface=lxc741ac9c254a2 k8sPodName=cert-manager/cert-manager-cainjector-579c9dd7cd-8xcxk labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=afdfd67806 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3162 ipv4=10.0.0.234 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-579c9dd7cd-8xcxk subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.242 250d1a73-b8a5-445e-ab64-20cb1ba54c9d default }" containerID=7239807f729f9d734d61374db5adba3f5eebddd144c332e7b1b2370d2d2ec30f datapathConfiguration="&{false false false false false }" interface=lxcdc51f829f205 k8sPodName=cert-manager/cert-manager-79c48d47db-smnfr labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7239807f72 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1990 ipv4=10.0.0.242 ipv6= k8sPodName=cert-manager/cert-manager-79c48d47db-smnfr subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=afdfd67806 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3162 identityLabels="k8s:app.kubernetes.io/component=cainjector,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cainjector,k8s:app.kubernetes.io/version=v1.15.5,k8s:app=cainjector,k8s:helm.sh/chart=cert-manager-v1.15.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.234 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-579c9dd7cd-8xcxk subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Resolving identity labels (blocking)" containerID=7239807f72 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1990 identityLabels="k8s:app.kubernetes.io/component=controller,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cert-manager,k8s:app.kubernetes.io/version=v1.15.5,k8s:app=cert-manager,k8s:helm.sh/chart=cert-manager-v1.15.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.242 ipv6= k8sPodName=cert-manager/cert-manager-79c48d47db-smnfr subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=cainjector;k8s:app.kubernetes.io/component=cainjector;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=cainjector;k8s:app.kubernetes.io/version=v1.15.5;k8s:helm.sh/chart=cert-manager-v1.15.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=afdfd67806 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3162 identity=4943 identityLabels="k8s:app.kubernetes.io/component=cainjector,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cainjector,k8s:app.kubernetes.io/version=v1.15.5,k8s:app=cainjector,k8s:helm.sh/chart=cert-manager-v1.15.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.234 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-579c9dd7cd-8xcxk oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=afdfd67806 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3162 identity=4943 ipv4=10.0.0.234 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-579c9dd7cd-8xcxk subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=cert-manager;k8s:app.kubernetes.io/component=controller;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=cert-manager;k8s:app.kubernetes.io/version=v1.15.5;k8s:helm.sh/chart=cert-manager-v1.15.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7239807f72 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1990 identity=10333 identityLabels="k8s:app.kubernetes.io/component=controller,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cert-manager,k8s:app.kubernetes.io/version=v1.15.5,k8s:app=cert-manager,k8s:helm.sh/chart=cert-manager-v1.15.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.242 ipv6= k8sPodName=cert-manager/cert-manager-79c48d47db-smnfr oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7239807f72 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1990 identity=10333 ipv4=10.0.0.242 ipv6= k8sPodName=cert-manager/cert-manager-79c48d47db-smnfr subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=7239807f72 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1990 identity=10333 ipv4=10.0.0.242 ipv6= k8sPodName=cert-manager/cert-manager-79c48d47db-smnfr subsys=endpoint level=info msg="Successful endpoint creation" containerID=7239807f72 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1990 identity=10333 ipv4=10.0.0.242 ipv6= k8sPodName=cert-manager/cert-manager-79c48d47db-smnfr subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=afdfd67806 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3162 identity=4943 ipv4=10.0.0.234 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-579c9dd7cd-8xcxk subsys=endpoint level=info msg="Successful endpoint creation" containerID=afdfd67806 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3162 identity=4943 ipv4=10.0.0.234 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-579c9dd7cd-8xcxk subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.201 18ceeabd-6537-43f6-beeb-6bac628f5aac default }" containerID=c32c64aab939e0eff4c66ba672abba90c262d6d4b6143a275520f2b75730f61e datapathConfiguration="&{false false false false false }" interface=lxce71844ab975d k8sPodName=cert-manager/cert-manager-startupapicheck-qvghx labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c32c64aab9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1390 ipv4=10.0.0.201 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-qvghx subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c32c64aab9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1390 identityLabels="k8s:app.kubernetes.io/component=startupapicheck,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=startupapicheck,k8s:app.kubernetes.io/version=v1.15.5,k8s:app=startupapicheck,k8s:batch.kubernetes.io/controller-uid=f1082f4d-3a3b-4da0-acc4-d3a575ca0469,k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck,k8s:controller-uid=f1082f4d-3a3b-4da0-acc4-d3a575ca0469,k8s:helm.sh/chart=cert-manager-v1.15.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck,k8s:io.kubernetes.pod.namespace=cert-manager,k8s:job-name=cert-manager-startupapicheck" ipv4=10.0.0.201 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-qvghx subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=startupapicheck;k8s:app.kubernetes.io/component=startupapicheck;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=startupapicheck;k8s:app.kubernetes.io/version=v1.15.5;k8s:batch.kubernetes.io/controller-uid=f1082f4d-3a3b-4da0-acc4-d3a575ca0469;k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck;k8s:controller-uid=f1082f4d-3a3b-4da0-acc4-d3a575ca0469;k8s:helm.sh/chart=cert-manager-v1.15.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck;k8s:io.kubernetes.pod.namespace=cert-manager;k8s:job-name=cert-manager-startupapicheck;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c32c64aab9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1390 identity=52733 identityLabels="k8s:app.kubernetes.io/component=startupapicheck,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=startupapicheck,k8s:app.kubernetes.io/version=v1.15.5,k8s:app=startupapicheck,k8s:batch.kubernetes.io/controller-uid=f1082f4d-3a3b-4da0-acc4-d3a575ca0469,k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck,k8s:controller-uid=f1082f4d-3a3b-4da0-acc4-d3a575ca0469,k8s:helm.sh/chart=cert-manager-v1.15.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck,k8s:io.kubernetes.pod.namespace=cert-manager,k8s:job-name=cert-manager-startupapicheck" ipv4=10.0.0.201 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-qvghx oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c32c64aab9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1390 identity=52733 ipv4=10.0.0.201 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-qvghx subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=c32c64aab9 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1390 identity=52733 ipv4=10.0.0.201 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-qvghx subsys=endpoint level=info msg="Successful endpoint creation" containerID=c32c64aab9 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1390 identity=52733 ipv4=10.0.0.201 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-qvghx subsys=daemon level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=c32c64aab9 endpointID=1390 k8sNamespace=cert-manager k8sPodName=cert-manager-startupapicheck-qvghx subsys=daemon level=info msg="Releasing key" key="[k8s:app=startupapicheck k8s:app.kubernetes.io/component=startupapicheck k8s:app.kubernetes.io/instance=cert-manager k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=startupapicheck k8s:app.kubernetes.io/version=v1.15.5 k8s:batch.kubernetes.io/controller-uid=f1082f4d-3a3b-4da0-acc4-d3a575ca0469 k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck k8s:controller-uid=f1082f4d-3a3b-4da0-acc4-d3a575ca0469 k8s:helm.sh/chart=cert-manager-v1.15.5 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager k8s:io.cilium.k8s.namespace.labels.name=cert-manager k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck k8s:io.kubernetes.pod.namespace=cert-manager k8s:job-name=cert-manager-startupapicheck]" subsys=allocator level=info msg="Removed endpoint" containerID=c32c64aab9 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1390 identity=52733 ipv4=10.0.0.201 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-qvghx subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.206 d5c2b280-2152-4565-bedf-dadf0f6f7611 default }" containerID=957f40dafc487163c89ce0b50bf1d88f0d85f2595a7a79e1b60098154cf1e1e3 datapathConfiguration="&{false false false false false }" interface=lxc49b9ad2190a8 k8sPodName=ingress-nginx/ingress-nginx-admission-create-z9l9f labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=957f40dafc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1106 ipv4=10.0.0.206 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-z9l9f subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=957f40dafc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1106 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=cc4eff52-0b73-469c-a6fd-39c8868544cb,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create,k8s:controller-uid=cc4eff52-0b73-469c-a6fd-39c8868544cb,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-create" ipv4=10.0.0.206 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-z9l9f subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=admission-webhook;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:batch.kubernetes.io/controller-uid=cc4eff52-0b73-469c-a6fd-39c8868544cb;k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create;k8s:controller-uid=cc4eff52-0b73-469c-a6fd-39c8868544cb;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission;k8s:io.kubernetes.pod.namespace=ingress-nginx;k8s:job-name=ingress-nginx-admission-create;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=957f40dafc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1106 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.206 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-z9l9f line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=957f40dafc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1106 identity=51956 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=cc4eff52-0b73-469c-a6fd-39c8868544cb,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create,k8s:controller-uid=cc4eff52-0b73-469c-a6fd-39c8868544cb,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-create" ipv4=10.0.0.206 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-z9l9f oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=957f40dafc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1106 identity=51956 ipv4=10.0.0.206 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-z9l9f subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=957f40dafc datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1106 identity=51956 ipv4=10.0.0.206 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-z9l9f subsys=endpoint level=info msg="Successful endpoint creation" containerID=957f40dafc datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1106 identity=51956 ipv4=10.0.0.206 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-z9l9f subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=957f40dafc endpointID=1106 k8sNamespace=ingress-nginx k8sPodName=ingress-nginx-admission-create-z9l9f subsys=daemon level=info msg="Releasing key" key="[k8s:app.kubernetes.io/component=admission-webhook k8s:app.kubernetes.io/instance=ingress-nginx k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=ingress-nginx k8s:app.kubernetes.io/part-of=ingress-nginx k8s:app.kubernetes.io/version=1.12.1 k8s:batch.kubernetes.io/controller-uid=cc4eff52-0b73-469c-a6fd-39c8868544cb k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create k8s:controller-uid=cc4eff52-0b73-469c-a6fd-39c8868544cb k8s:helm.sh/chart=ingress-nginx-4.12.1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission k8s:io.kubernetes.pod.namespace=ingress-nginx k8s:job-name=ingress-nginx-admission-create]" subsys=allocator level=info msg="Removed endpoint" containerID=957f40dafc datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1106 identity=51956 ipv4=10.0.0.206 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-z9l9f subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.196 2ca03767-3939-4849-873e-9b96a4ace88a default }" containerID=1b8059fa53b430a3cb40c22449e21cc40c9bcdf73dfb16687e1f1d6cd2f977c1 datapathConfiguration="&{false false false false false }" interface=lxc59831059664f k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-679hg labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1b8059fa53 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=384 ipv4=10.0.0.196 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-679hg subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1b8059fa53 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=384 identityLabels="k8s:app.kubernetes.io/component=default-backend,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend,k8s:io.kubernetes.pod.namespace=ingress-nginx" ipv4=10.0.0.196 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-679hg subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=default-backend;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend;k8s:io.kubernetes.pod.namespace=ingress-nginx;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=1b8059fa53 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=384 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.196 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-679hg line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=1b8059fa53 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=384 identity=2878 identityLabels="k8s:app.kubernetes.io/component=default-backend,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend,k8s:io.kubernetes.pod.namespace=ingress-nginx" ipv4=10.0.0.196 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-679hg oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1b8059fa53 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=384 identity=2878 ipv4=10.0.0.196 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-679hg subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=1b8059fa53 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=384 identity=2878 ipv4=10.0.0.196 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-679hg subsys=endpoint level=info msg="Successful endpoint creation" containerID=1b8059fa53 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=384 identity=2878 ipv4=10.0.0.196 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-679hg subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.176 888b5251-53a8-4526-9651-1adcabc51b5d default }" containerID=83a7c707dafc30bf466d33ff6fc9a3535d762347e23fa94f7fc5e4668264a67c datapathConfiguration="&{false false false false false }" interface=lxcc3be57c0525b k8sPodName=ingress-nginx/ingress-nginx-admission-patch-bg8fb labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=83a7c707da datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2239 ipv4=10.0.0.176 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-bg8fb subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=83a7c707da datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2239 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=8ec19947-29c6-47b9-a950-c155c128e08d,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch,k8s:controller-uid=8ec19947-29c6-47b9-a950-c155c128e08d,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-patch" ipv4=10.0.0.176 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-bg8fb subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=admission-webhook;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:batch.kubernetes.io/controller-uid=8ec19947-29c6-47b9-a950-c155c128e08d;k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch;k8s:controller-uid=8ec19947-29c6-47b9-a950-c155c128e08d;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission;k8s:io.kubernetes.pod.namespace=ingress-nginx;k8s:job-name=ingress-nginx-admission-patch;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=83a7c707da datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2239 identity=55670 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=8ec19947-29c6-47b9-a950-c155c128e08d,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch,k8s:controller-uid=8ec19947-29c6-47b9-a950-c155c128e08d,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-patch" ipv4=10.0.0.176 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-bg8fb oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=83a7c707da datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2239 identity=55670 ipv4=10.0.0.176 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-bg8fb subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=83a7c707da datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2239 identity=55670 ipv4=10.0.0.176 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-bg8fb subsys=endpoint level=info msg="Successful endpoint creation" containerID=83a7c707da datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2239 identity=55670 ipv4=10.0.0.176 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-bg8fb subsys=daemon level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=83a7c707da endpointID=2239 k8sNamespace=ingress-nginx k8sPodName=ingress-nginx-admission-patch-bg8fb subsys=daemon level=info msg="Releasing key" key="[k8s:app.kubernetes.io/component=admission-webhook k8s:app.kubernetes.io/instance=ingress-nginx k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=ingress-nginx k8s:app.kubernetes.io/part-of=ingress-nginx k8s:app.kubernetes.io/version=1.12.1 k8s:batch.kubernetes.io/controller-uid=8ec19947-29c6-47b9-a950-c155c128e08d k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch k8s:controller-uid=8ec19947-29c6-47b9-a950-c155c128e08d k8s:helm.sh/chart=ingress-nginx-4.12.1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission k8s:io.kubernetes.pod.namespace=ingress-nginx k8s:job-name=ingress-nginx-admission-patch]" subsys=allocator level=info msg="Removed endpoint" containerID=83a7c707da datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2239 identity=55670 ipv4=10.0.0.176 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-bg8fb subsys=endpoint level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"messaging-topology-operator\",\"k8s:app.kubernetes.io/instance\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/name\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/part-of\":\"rabbitmq\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:9443 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=rabbitmq-messaging-topology-operator k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=38e24bbd-c529-4332-9223-df4e131f82a0] Description:}]" policyAddRequest=8ed88d9a-56b1-4b60-8846-f50ddc72a43b subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=8ed88d9a-56b1-4b60-8846-f50ddc72a43b policyRevision=2 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=rabbitmq-messaging-topology-operator subsys=k8s-watcher level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"rabbitmq-operator\",\"k8s:app.kubernetes.io/instance\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/name\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/part-of\":\"rabbitmq\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=rabbitmq-cluster-operator k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=e3b25bc3-c1d3-4d07-bd1e-e58088c9302f] Description:}]" policyAddRequest=edf98bfb-c5a2-4753-88ea-8e635edf0f8e subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=edf98bfb-c5a2-4753-88ea-8e635edf0f8e policyRevision=3 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=rabbitmq-cluster-operator subsys=k8s-watcher level=info msg="Create endpoint request" addressing="&{10.0.0.9 bf12b774-a466-42fd-adb3-782efd6f11cc default }" containerID=47ea98b9480f6e3c8811414216d432586b5f3db39170ed811147cb6178c326e3 datapathConfiguration="&{false false false false false }" interface=lxc9427b9379e7c k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-7xsc4 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=47ea98b948 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2564 ipv4=10.0.0.9 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-7xsc4 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=47ea98b948 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2564 identityLabels="k8s:app.kubernetes.io/component=rabbitmq-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=2.16.1,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.9 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-7xsc4 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq-operator;k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=rabbitmq-cluster-operator;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:app.kubernetes.io/version=2.16.1;k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=47ea98b948 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2564 identity=54463 identityLabels="k8s:app.kubernetes.io/component=rabbitmq-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=2.16.1,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.9 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-7xsc4 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=47ea98b948 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2564 identity=54463 ipv4=10.0.0.9 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-7xsc4 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=47ea98b948 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=2564 identity=54463 ipv4=10.0.0.9 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-7xsc4 subsys=endpoint level=info msg="Successful endpoint creation" containerID=47ea98b948 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=2564 identity=54463 ipv4=10.0.0.9 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-7xsc4 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.222 32581e00-fc50-44d4-a437-8f57dde5d6c1 default }" containerID=e3ae7ca2f1f5d5529195ed1681b80bc925ac1417ad6f6021a1f637ba6d9e215b datapathConfiguration="&{false false false false false }" interface=lxc6f13280ce591 k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-hk5nv labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e3ae7ca2f1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=85 ipv4=10.0.0.222 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-hk5nv subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e3ae7ca2f1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=85 identityLabels="k8s:app.kubernetes.io/component=messaging-topology-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=1.17.4,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.222 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-hk5nv subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=messaging-topology-operator;k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=rabbitmq-cluster-operator;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:app.kubernetes.io/version=1.17.4;k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e3ae7ca2f1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=85 identity=19140 identityLabels="k8s:app.kubernetes.io/component=messaging-topology-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=1.17.4,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.222 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-hk5nv oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e3ae7ca2f1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=85 identity=19140 ipv4=10.0.0.222 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-hk5nv subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e3ae7ca2f1 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=85 identity=19140 ipv4=10.0.0.222 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-hk5nv subsys=endpoint level=info msg="Successful endpoint creation" containerID=e3ae7ca2f1 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=85 identity=19140 ipv4=10.0.0.222 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-hk5nv subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.5 941e5faa-f22c-4ae0-97d5-28636052dce7 default }" containerID=7d6d3ecc237b0514f4c61a1cddd8748d24c9b6eee66b84817df33b6d4f9cdbe0 datapathConfiguration="&{false false false false false }" interface=lxc86658da41406 k8sPodName=openstack/pxc-operator-69cb5bbdb9-4nnjm labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7d6d3ecc23 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=995 ipv4=10.0.0.5 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-4nnjm subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7d6d3ecc23 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=995 identityLabels="k8s:app.kubernetes.io/component=operator,k8s:app.kubernetes.io/instance=pxc-operator,k8s:app.kubernetes.io/name=pxc-operator,k8s:app.kubernetes.io/part-of=pxc-operator,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.5 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-4nnjm subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=operator;k8s:app.kubernetes.io/instance=pxc-operator;k8s:app.kubernetes.io/name=pxc-operator;k8s:app.kubernetes.io/part-of=pxc-operator;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=7d6d3ecc23 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=995 identity=1267 identityLabels="k8s:app.kubernetes.io/component=operator,k8s:app.kubernetes.io/instance=pxc-operator,k8s:app.kubernetes.io/name=pxc-operator,k8s:app.kubernetes.io/part-of=pxc-operator,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.5 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-4nnjm oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7d6d3ecc23 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=995 identity=1267 ipv4=10.0.0.5 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-4nnjm subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=7d6d3ecc23 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=995 identity=1267 ipv4=10.0.0.5 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-4nnjm subsys=endpoint level=info msg="Successful endpoint creation" containerID=7d6d3ecc23 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=995 identity=1267 ipv4=10.0.0.5 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-4nnjm subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.52 e8fd5237-bbbb-4b4f-9207-4c200a19cae8 default }" containerID=aed46ea2eeb06968bb3413073d018d48aa2c9ee6e54d50d12a542a5283d7e6c6 datapathConfiguration="&{false false false false false }" interface=lxc89c502d3429a k8sPodName=openstack/percona-xtradb-haproxy-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=aed46ea2ee datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3521 ipv4=10.0.0.52 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=aed46ea2ee datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3521 identityLabels="k8s:app.kubernetes.io/component=haproxy,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0" ipv4=10.0.0.52 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=haproxy;k8s:app.kubernetes.io/instance=percona-xtradb;k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator;k8s:app.kubernetes.io/name=percona-xtradb-cluster;k8s:app.kubernetes.io/part-of=percona-xtradb-cluster;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=aed46ea2ee datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3521 identity=6959 identityLabels="k8s:app.kubernetes.io/component=haproxy,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0" ipv4=10.0.0.52 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=aed46ea2ee datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=3521 identity=6959 ipv4=10.0.0.52 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=aed46ea2ee datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=3521 identity=6959 ipv4=10.0.0.52 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=aed46ea2ee datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=3521 identity=6959 ipv4=10.0.0.52 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.229 b083cdb8-9880-4e6d-bdc7-d217f7882c7f default }" containerID=543e724402b85ed2537cac94a91c7d857952feb6f137ab1114530955bdb54491 datapathConfiguration="&{false false false false false }" interface=lxcd45d1a6c98bc k8sPodName=local-path-storage/helper-pod-create-pvc-3f507352-e42b-4a61-8ece-5a24eed242b1 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=543e724402 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1613 ipv4=10.0.0.229 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-3f507352-e42b-4a61-8ece-5a24eed242b1 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=543e724402 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1613 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.229 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-3f507352-e42b-4a61-8ece-5a24eed242b1 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:local-path-storage k8s:io.cilium.k8s.namespace.labels.name:local-path-storage]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=543e724402 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1613 identity=16985 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.229 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-3f507352-e42b-4a61-8ece-5a24eed242b1 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=543e724402 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1613 identity=16985 ipv4=10.0.0.229 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-3f507352-e42b-4a61-8ece-5a24eed242b1 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=543e724402 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=1613 identity=16985 ipv4=10.0.0.229 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-3f507352-e42b-4a61-8ece-5a24eed242b1 subsys=endpoint level=info msg="Successful endpoint creation" containerID=543e724402 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=1613 identity=16985 ipv4=10.0.0.229 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-3f507352-e42b-4a61-8ece-5a24eed242b1 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=543e724402 endpointID=1613 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-3f507352-e42b-4a61-8ece-5a24eed242b1 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=543e724402 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=1613 identity=16985 ipv4=10.0.0.229 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-3f507352-e42b-4a61-8ece-5a24eed242b1 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.100 648e5890-bd02-432c-9043-937bc1ba85a4 default }" containerID=7345645d94d203cd8a692e62cc697719ed4f48b21cc278f0182b487b6193f85b datapathConfiguration="&{false false false false false }" interface=lxce44b8184052d k8sPodName=openstack/percona-xtradb-pxc-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7345645d94 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=681 ipv4=10.0.0.100 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7345645d94 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=681 identityLabels="k8s:app.kubernetes.io/component=pxc,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0" ipv4=10.0.0.100 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=pxc;k8s:app.kubernetes.io/instance=percona-xtradb;k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator;k8s:app.kubernetes.io/name=percona-xtradb-cluster;k8s:app.kubernetes.io/part-of=percona-xtradb-cluster;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=7345645d94 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=681 identity=10772 identityLabels="k8s:app.kubernetes.io/component=pxc,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0" ipv4=10.0.0.100 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7345645d94 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=681 identity=10772 ipv4=10.0.0.100 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=7345645d94 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=681 identity=10772 ipv4=10.0.0.100 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=7345645d94 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=681 identity=10772 ipv4=10.0.0.100 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/instance\":\"valkey\",\"k8s:app.kubernetes.io/name\":\"valkey\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:6379 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:} {Ports:[{Port:26379 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:} {IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:9121 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=valkey k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=bb1e2fe6-d3a6-4275-94c4-a01f4732cfc8] Description:}]" policyAddRequest=17f0fb7a-bac0-40e0-8c87-d8c218395e07 subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=17f0fb7a-bac0-40e0-8c87-d8c218395e07 policyRevision=4 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=valkey subsys=k8s-watcher level=info msg="Create endpoint request" addressing="&{10.0.0.181 c7209317-c996-485c-a0e4-2f4e47b6512e default }" containerID=d1e46417b4bedf89c6ab78968bf0e53188d737e5971bc72c86b8b6929e12afa4 datapathConfiguration="&{false false false false false }" interface=lxcf929691c7db9 k8sPodName=local-path-storage/helper-pod-create-pvc-4a79e562-9100-4d2d-87aa-8db8db6eca47 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d1e46417b4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2963 ipv4=10.0.0.181 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-4a79e562-9100-4d2d-87aa-8db8db6eca47 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d1e46417b4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2963 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.181 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-4a79e562-9100-4d2d-87aa-8db8db6eca47 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d1e46417b4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2963 identity=16985 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.181 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-4a79e562-9100-4d2d-87aa-8db8db6eca47 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d1e46417b4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2963 identity=16985 ipv4=10.0.0.181 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-4a79e562-9100-4d2d-87aa-8db8db6eca47 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d1e46417b4 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2963 identity=16985 ipv4=10.0.0.181 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-4a79e562-9100-4d2d-87aa-8db8db6eca47 subsys=endpoint level=info msg="Successful endpoint creation" containerID=d1e46417b4 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2963 identity=16985 ipv4=10.0.0.181 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-4a79e562-9100-4d2d-87aa-8db8db6eca47 subsys=daemon level=info msg="Delete endpoint request" containerID=d1e46417b4 endpointID=2963 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-4a79e562-9100-4d2d-87aa-8db8db6eca47 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=d1e46417b4 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2963 identity=16985 ipv4=10.0.0.181 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-4a79e562-9100-4d2d-87aa-8db8db6eca47 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.213 30ffb75c-bf60-41fc-a43d-85b9aa931afa default }" containerID=6b8484b7a80279792b6ea21b3dbf39978f5b42da6741bbe26d23bfe789f67878 datapathConfiguration="&{false false false false false }" interface=lxc58f27b3aa67c k8sPodName=openstack/valkey-node-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6b8484b7a8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2904 ipv4=10.0.0.213 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6b8484b7a8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2904 identityLabels="k8s:app.kubernetes.io/component=node,k8s:app.kubernetes.io/instance=valkey,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=valkey,k8s:app.kubernetes.io/version=8.0.2,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=valkey-2.4.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=valkey,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=valkey-node-0" ipv4=10.0.0.213 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=node;k8s:app.kubernetes.io/instance=valkey;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=valkey;k8s:app.kubernetes.io/version=8.0.2;k8s:apps.kubernetes.io/pod-index=0;k8s:helm.sh/chart=valkey-2.4.6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=valkey;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=valkey-node-0;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=6b8484b7a8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2904 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.213 ipv6= k8sPodName=openstack/valkey-node-0 line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=6b8484b7a8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2904 identity=5772 identityLabels="k8s:app.kubernetes.io/component=node,k8s:app.kubernetes.io/instance=valkey,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=valkey,k8s:app.kubernetes.io/version=8.0.2,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=valkey-2.4.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=valkey,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=valkey-node-0" ipv4=10.0.0.213 ipv6= k8sPodName=openstack/valkey-node-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6b8484b7a8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2904 identity=5772 ipv4=10.0.0.213 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=6b8484b7a8 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2904 identity=5772 ipv4=10.0.0.213 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=6b8484b7a8 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2904 identity=5772 ipv4=10.0.0.213 ipv6= k8sPodName=openstack/valkey-node-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"keycloak\",\"k8s:app.kubernetes.io/instance\":\"keycloak\",\"k8s:app.kubernetes.io/name\":\"keycloak\",\"k8s:io.kubernetes.pod.namespace\":\"auth-system\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:7800 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:} {Ports:[{Port:8080 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=keycloak k8s:io.cilium.k8s.policy.namespace=auth-system k8s:io.cilium.k8s.policy.uid=b25f9276-0a57-418c-abdf-77e22218ba76] Description:}]" policyAddRequest=64a4b219-729e-4495-b7d3-34865a8847a4 subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=64a4b219-729e-4495-b7d3-34865a8847a4 policyRevision=5 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=keycloak subsys=k8s-watcher level=info msg="Create endpoint request" addressing="&{10.0.0.121 b1b699b1-4927-48d0-8f6f-cb09d897cc0c default }" containerID=345704ad44e215313608ae9576f52b19101c147580567e364bbe24b7fa4d70f0 datapathConfiguration="&{false false false false false }" interface=lxc755e0add265b k8sPodName=auth-system/keycloak-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=345704ad44 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=340 ipv4=10.0.0.121 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=345704ad44 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=340 identityLabels="k8s:app.kubernetes.io/component=keycloak,k8s:app.kubernetes.io/instance=keycloak,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=keycloak,k8s:app.kubernetes.io/version=24.0.5,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=keycloak-21.4.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system,k8s:io.cilium.k8s.namespace.labels.name=auth-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keycloak,k8s:io.kubernetes.pod.namespace=auth-system,k8s:statefulset.kubernetes.io/pod-name=keycloak-0" ipv4=10.0.0.121 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:auth-system k8s:io.cilium.k8s.namespace.labels.name:auth-system]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=345704ad44 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=340 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.121 ipv6= k8sPodName=auth-system/keycloak-0 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=keycloak;k8s:app.kubernetes.io/instance=keycloak;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=keycloak;k8s:app.kubernetes.io/version=24.0.5;k8s:apps.kubernetes.io/pod-index=0;k8s:helm.sh/chart=keycloak-21.4.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system;k8s:io.cilium.k8s.namespace.labels.name=auth-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keycloak;k8s:io.kubernetes.pod.namespace=auth-system;k8s:statefulset.kubernetes.io/pod-name=keycloak-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=345704ad44 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=340 identity=58849 identityLabels="k8s:app.kubernetes.io/component=keycloak,k8s:app.kubernetes.io/instance=keycloak,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=keycloak,k8s:app.kubernetes.io/version=24.0.5,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=keycloak-21.4.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system,k8s:io.cilium.k8s.namespace.labels.name=auth-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keycloak,k8s:io.kubernetes.pod.namespace=auth-system,k8s:statefulset.kubernetes.io/pod-name=keycloak-0" ipv4=10.0.0.121 ipv6= k8sPodName=auth-system/keycloak-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=345704ad44 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=340 identity=58849 ipv4=10.0.0.121 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=345704ad44 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=340 identity=58849 ipv4=10.0.0.121 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=345704ad44 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=340 identity=58849 ipv4=10.0.0.121 ipv6= k8sPodName=auth-system/keycloak-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Conntrack garbage collector interval recalculated" deleteRatio=0.00875525856588256 newInterval=7m30s subsys=map-ct level=info msg="Create endpoint request" addressing="&{10.0.0.226 901a5f97-caf6-4cef-93bf-3c281766c5ea default }" containerID=39b05ccf84bf61462a7cb910fe9075db5cf18bb0b1e8950267bae43c9459a4da datapathConfiguration="&{false false false false false }" interface=lxc9214ad984388 k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-x9p8m labels="[]" subsys=daemon sync-build=true level=info msg="Create endpoint request" addressing="&{10.0.0.155 86d2ff72-529d-49c4-a449-ad68fde3b240 default }" containerID=8e73e5550bf0bee38888c04d0ef57712cd7d921edde5d1d71e817d3b27ba9223 datapathConfiguration="&{false false false false false }" interface=lxcc7d2b7dce3b2 k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-cnk6b labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=39b05ccf84 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1744 ipv4=10.0.0.226 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-x9p8m subsys=endpoint level=info msg="New endpoint" containerID=8e73e5550b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1704 ipv4=10.0.0.155 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-cnk6b subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=39b05ccf84 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1744 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=master" ipv4=10.0.0.226 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-x9p8m subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Resolving identity labels (blocking)" containerID=8e73e5550b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1704 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=gc" ipv4=10.0.0.155 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-cnk6b subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=master;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=39b05ccf84 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1744 identity=52089 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=master" ipv4=10.0.0.226 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-x9p8m oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=39b05ccf84 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1744 identity=52089 ipv4=10.0.0.226 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-x9p8m subsys=endpoint level=info msg="Invalid state transition skipped" containerID=8e73e5550b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1704 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.155 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-cnk6b line=611 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=gc;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8e73e5550b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1704 identity=60983 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=gc" ipv4=10.0.0.155 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-cnk6b oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8e73e5550b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1704 identity=60983 ipv4=10.0.0.155 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-cnk6b subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.236 01e67475-18be-41a3-9055-a92f702964b3 default }" containerID=3c8d748489e5139be8f13d7680a71055d9415c0e0b4b6bc1363bd3ef2cc06a37 datapathConfiguration="&{false false false false false }" interface=lxcf99f3a2828ed k8sPodName=monitoring/node-feature-discovery-worker-wq7hq labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3c8d748489 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=485 ipv4=10.0.0.236 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-wq7hq subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3c8d748489 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=485 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=worker" ipv4=10.0.0.236 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-wq7hq subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=worker;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3c8d748489 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=485 identity=13738 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=worker" ipv4=10.0.0.236 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-wq7hq oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3c8d748489 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=485 identity=13738 ipv4=10.0.0.236 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-wq7hq subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=39b05ccf84 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1744 identity=52089 ipv4=10.0.0.226 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-x9p8m subsys=endpoint level=info msg="Successful endpoint creation" containerID=39b05ccf84 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1744 identity=52089 ipv4=10.0.0.226 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-x9p8m subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=8e73e5550b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1704 identity=60983 ipv4=10.0.0.155 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-cnk6b subsys=endpoint level=info msg="Successful endpoint creation" containerID=8e73e5550b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1704 identity=60983 ipv4=10.0.0.155 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-cnk6b subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=3c8d748489 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=485 identity=13738 ipv4=10.0.0.236 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-wq7hq subsys=endpoint level=info msg="Successful endpoint creation" containerID=3c8d748489 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=485 identity=13738 ipv4=10.0.0.236 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-wq7hq subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.3 98072cba-47c7-4a8d-b732-220a88a2ea54 default }" containerID=dc8dc967e0f8cc7a0a6e5d3550b351f6b4eb12e87ce0b61dd011ee41c230dd89 datapathConfiguration="&{false false false false false }" interface=lxc34686fe48579 k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-fhmwp labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=dc8dc967e0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=808 ipv4=10.0.0.3 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-fhmwp subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=dc8dc967e0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=808 identityLabels="k8s:app=secretgen-controller,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa,k8s:io.kubernetes.pod.namespace=secretgen-controller" ipv4=10.0.0.3 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-fhmwp subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:secretgen-controller]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=secretgen-controller;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa;k8s:io.kubernetes.pod.namespace=secretgen-controller;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=dc8dc967e0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=808 identity=63025 identityLabels="k8s:app=secretgen-controller,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa,k8s:io.kubernetes.pod.namespace=secretgen-controller" ipv4=10.0.0.3 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-fhmwp oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=dc8dc967e0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=808 identity=63025 ipv4=10.0.0.3 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-fhmwp subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=dc8dc967e0 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=808 identity=63025 ipv4=10.0.0.3 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-fhmwp subsys=endpoint level=info msg="Successful endpoint creation" containerID=dc8dc967e0 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=808 identity=63025 ipv4=10.0.0.3 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-fhmwp subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1478 identity=1 identityLabels="k8s:feature.node.kubernetes.io/cpu-cpuid.ADX=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AESNI=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AVX2=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AVX=true,k8s:feature.node.kubernetes.io/cpu-cpuid.CLZERO=true,k8s:feature.node.kubernetes.io/cpu-cpuid.CMPXCHG8=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FMA3=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FXSR=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FXSROPT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.HYPERVISOR=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IA32_ARCH_CAP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IBPB=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IBRS=true,k8s:feature.node.kubernetes.io/cpu-cpuid.LAHF=true,k8s:feature.node.kubernetes.io/cpu-cpuid.LBRVIRT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.MOVBE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.NRIPS=true,k8s:feature.node.kubernetes.io/cpu-cpuid.OSXSAVE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SHA=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SPEC_CTRL_SSBD=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SSE4A=true,k8s:feature.node.kubernetes.io/cpu-cpuid.STIBP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SVM=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SVMFBASID=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SVMNP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SVMPF=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SVMPFT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SYSCALL=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SYSEE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.TOPEXT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.TSCRATEMSR=true,k8s:feature.node.kubernetes.io/cpu-cpuid.VMCBCLEAN=true,k8s:feature.node.kubernetes.io/cpu-cpuid.WBNOINVD=true,k8s:feature.node.kubernetes.io/cpu-cpuid.X87=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XGETBV1=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVEC=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVEOPT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVES=true,k8s:feature.node.kubernetes.io/cpu-hardware_multithreading=false,k8s:feature.node.kubernetes.io/cpu-model.family=23,k8s:feature.node.kubernetes.io/cpu-model.id=49,k8s:feature.node.kubernetes.io/cpu-model.vendor_id=AMD,k8s:feature.node.kubernetes.io/kernel-config.NO_HZ=true,k8s:feature.node.kubernetes.io/kernel-config.NO_HZ_IDLE=true,k8s:feature.node.kubernetes.io/kernel-version.full=5.15.0-191-generic,k8s:feature.node.kubernetes.io/kernel-version.major=5,k8s:feature.node.kubernetes.io/kernel-version.minor=15,k8s:feature.node.kubernetes.io/kernel-version.revision=0,k8s:feature.node.kubernetes.io/pci-0300_1af4.present=true,k8s:feature.node.kubernetes.io/system-os_release.ID=ubuntu,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID.major=22,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID.minor=04,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID=22.04,k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,k8s:openstack-compute-node=enabled,k8s:openstack-control-plane=enabled,k8s:openvswitch=enabled,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_hostns_01478 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_hostns_01478 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_hostns_01478 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_hostns_01478:pending" subsys=bpf level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_netdev_00005 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_netdev_00005 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005:pending" subsys=bpf level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1478 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.103 1977a8cc-99f7-4171-8855-5d6a16e404a0 default }" containerID=819f580e1729db053c6ee1cf960eb2b69af27f566cce22ff3cbdec4d20c6d5eb datapathConfiguration="&{false false false false false }" interface=lxc336ad41a0344 k8sPodName=monitoring/kube-prometheus-stack-admission-create-kgx9k labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=819f580e17 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2995 ipv4=10.0.0.103 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-kgx9k subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=819f580e17 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2995 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-create,k8s:batch.kubernetes.io/controller-uid=42b5fb27-59b3-4454-b7ac-e541b6a77acb,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=42b5fb27-59b3-4454-b7ac-e541b6a77acb,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-create,k8s:release=kube-prometheus-stack" ipv4=10.0.0.103 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-kgx9k subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-admission-create;k8s:app.kubernetes.io/component=prometheus-operator-webhook;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:batch.kubernetes.io/controller-uid=42b5fb27-59b3-4454-b7ac-e541b6a77acb;k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create;k8s:chart=kube-prometheus-stack-60.2.0;k8s:controller-uid=42b5fb27-59b3-4454-b7ac-e541b6a77acb;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission;k8s:io.kubernetes.pod.namespace=monitoring;k8s:job-name=kube-prometheus-stack-admission-create;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=819f580e17 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2995 identity=28963 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-create,k8s:batch.kubernetes.io/controller-uid=42b5fb27-59b3-4454-b7ac-e541b6a77acb,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=42b5fb27-59b3-4454-b7ac-e541b6a77acb,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-create,k8s:release=kube-prometheus-stack" ipv4=10.0.0.103 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-kgx9k oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=819f580e17 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2995 identity=28963 ipv4=10.0.0.103 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-kgx9k subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=819f580e17 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2995 identity=28963 ipv4=10.0.0.103 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-kgx9k subsys=endpoint level=info msg="Successful endpoint creation" containerID=819f580e17 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2995 identity=28963 ipv4=10.0.0.103 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-kgx9k subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=819f580e17 endpointID=2995 k8sNamespace=monitoring k8sPodName=kube-prometheus-stack-admission-create-kgx9k subsys=daemon level=info msg="Releasing key" key="[k8s:app=kube-prometheus-stack-admission-create k8s:app.kubernetes.io/component=prometheus-operator-webhook k8s:app.kubernetes.io/instance=kube-prometheus-stack k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator k8s:app.kubernetes.io/part-of=kube-prometheus-stack k8s:app.kubernetes.io/version=60.2.0 k8s:batch.kubernetes.io/controller-uid=42b5fb27-59b3-4454-b7ac-e541b6a77acb k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create k8s:chart=kube-prometheus-stack-60.2.0 k8s:controller-uid=42b5fb27-59b3-4454-b7ac-e541b6a77acb k8s:heritage=Helm k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring k8s:io.cilium.k8s.namespace.labels.name=monitoring k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission k8s:io.kubernetes.pod.namespace=monitoring k8s:job-name=kube-prometheus-stack-admission-create k8s:release=kube-prometheus-stack]" subsys=allocator level=info msg="Removed endpoint" containerID=819f580e17 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2995 identity=28963 ipv4=10.0.0.103 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-kgx9k subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.73 95f5530d-4af5-4727-b356-7eadd144a01d default }" containerID=4be984be9d467383e9656909f964f0f161f81f6fbb698b5cd1d27bc1dfdd3d18 datapathConfiguration="&{false false false false false }" interface=lxcf8fb21681013 k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-hs8xt labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4be984be9d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1724 ipv4=10.0.0.73 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-hs8xt subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.156 afcdf407-ad88-4058-a15b-2ddbb7f7103c default }" containerID=f8708c05e839f04cd7e0d64da222df1d1491803384a4fd807abba97290ec432f datapathConfiguration="&{false false false false false }" interface=lxc8da13fefd3ed k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-4z65t labels="[]" subsys=daemon sync-build=true level=info msg="Resolving identity labels (blocking)" containerID=4be984be9d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1724 identityLabels="k8s:app.kubernetes.io/component=metrics,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-state-metrics,k8s:app.kubernetes.io/part-of=kube-state-metrics,k8s:app.kubernetes.io/version=2.12.0,k8s:helm.sh/chart=kube-state-metrics-5.20.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.73 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-hs8xt subsys=endpoint level=info msg="New endpoint" containerID=f8708c05e8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1572 ipv4=10.0.0.156 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-4z65t subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Resolving identity labels (blocking)" containerID=f8708c05e8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1572 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-operator,k8s:chart=kube-prometheus-stack-60.2.0,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.156 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-4z65t subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=metrics;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-state-metrics;k8s:app.kubernetes.io/part-of=kube-state-metrics;k8s:app.kubernetes.io/version=2.12.0;k8s:helm.sh/chart=kube-state-metrics-5.20.0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics;k8s:io.kubernetes.pod.namespace=monitoring;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4be984be9d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1724 identity=18935 identityLabels="k8s:app.kubernetes.io/component=metrics,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-state-metrics,k8s:app.kubernetes.io/part-of=kube-state-metrics,k8s:app.kubernetes.io/version=2.12.0,k8s:helm.sh/chart=kube-state-metrics-5.20.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.73 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-hs8xt oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4be984be9d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1724 identity=18935 ipv4=10.0.0.73 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-hs8xt subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=f8708c05e8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1572 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.156 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-4z65t line=611 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.101 b7a1446e-f5ef-42af-a70b-33a52495422d default }" containerID=1fe629e650a60d2c45b734ccd8fdbc8540cb9cd900df186e3ee3110db1b4d3c2 datapathConfiguration="&{false false false false false }" interface=lxc4f71cc95c120 k8sPodName=monitoring/kube-prometheus-stack-grafana-6c6b444598-qswv6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1fe629e650 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=278 ipv4=10.0.0.101 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-6c6b444598-qswv6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1fe629e650 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=278 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/name=grafana,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.101 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-6c6b444598-qswv6 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-operator;k8s:app.kubernetes.io/component=prometheus-operator;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:chart=kube-prometheus-stack-60.2.0;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator;k8s:io.kubernetes.pod.namespace=monitoring;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f8708c05e8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1572 identity=19417 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-operator,k8s:chart=kube-prometheus-stack-60.2.0,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.156 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-4z65t oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f8708c05e8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1572 identity=19417 ipv4=10.0.0.156 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-4z65t subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/name=grafana;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1fe629e650 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=278 identity=29749 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/name=grafana,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.101 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-6c6b444598-qswv6 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1fe629e650 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=278 identity=29749 ipv4=10.0.0.101 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-6c6b444598-qswv6 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=4be984be9d datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1724 identity=18935 ipv4=10.0.0.73 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-hs8xt subsys=endpoint level=info msg="Successful endpoint creation" containerID=4be984be9d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1724 identity=18935 ipv4=10.0.0.73 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-hs8xt subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=f8708c05e8 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1572 identity=19417 ipv4=10.0.0.156 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-4z65t subsys=endpoint level=info msg="Successful endpoint creation" containerID=f8708c05e8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1572 identity=19417 ipv4=10.0.0.156 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-4z65t subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=1fe629e650 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=278 identity=29749 ipv4=10.0.0.101 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-6c6b444598-qswv6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=1fe629e650 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=278 identity=29749 ipv4=10.0.0.101 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-6c6b444598-qswv6 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.18 d80646c5-6867-4927-b992-4c4354d3444e default }" containerID=d73389bb478e70e6d62172e049b66382a619f52074b3fe238394a32f180f08da datapathConfiguration="&{false false false false false }" interface=lxc328327951079 k8sPodName=monitoring/kube-prometheus-stack-admission-patch-9zn7t labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d73389bb47 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=685 ipv4=10.0.0.18 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-9zn7t subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d73389bb47 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=685 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-patch,k8s:batch.kubernetes.io/controller-uid=86e06c62-bf71-4a3a-9ed8-3d1c860da568,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=86e06c62-bf71-4a3a-9ed8-3d1c860da568,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-patch,k8s:release=kube-prometheus-stack" ipv4=10.0.0.18 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-9zn7t subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-admission-patch;k8s:app.kubernetes.io/component=prometheus-operator-webhook;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:batch.kubernetes.io/controller-uid=86e06c62-bf71-4a3a-9ed8-3d1c860da568;k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch;k8s:chart=kube-prometheus-stack-60.2.0;k8s:controller-uid=86e06c62-bf71-4a3a-9ed8-3d1c860da568;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission;k8s:io.kubernetes.pod.namespace=monitoring;k8s:job-name=kube-prometheus-stack-admission-patch;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d73389bb47 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=685 identity=13022 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-patch,k8s:batch.kubernetes.io/controller-uid=86e06c62-bf71-4a3a-9ed8-3d1c860da568,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=86e06c62-bf71-4a3a-9ed8-3d1c860da568,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-patch,k8s:release=kube-prometheus-stack" ipv4=10.0.0.18 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-9zn7t oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d73389bb47 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=685 identity=13022 ipv4=10.0.0.18 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-9zn7t subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d73389bb47 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=685 identity=13022 ipv4=10.0.0.18 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-9zn7t subsys=endpoint level=info msg="Successful endpoint creation" containerID=d73389bb47 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=685 identity=13022 ipv4=10.0.0.18 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-9zn7t subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=d73389bb47 endpointID=685 k8sNamespace=monitoring k8sPodName=kube-prometheus-stack-admission-patch-9zn7t subsys=daemon level=info msg="Releasing key" key="[k8s:app=kube-prometheus-stack-admission-patch k8s:app.kubernetes.io/component=prometheus-operator-webhook k8s:app.kubernetes.io/instance=kube-prometheus-stack k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator k8s:app.kubernetes.io/part-of=kube-prometheus-stack k8s:app.kubernetes.io/version=60.2.0 k8s:batch.kubernetes.io/controller-uid=86e06c62-bf71-4a3a-9ed8-3d1c860da568 k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch k8s:chart=kube-prometheus-stack-60.2.0 k8s:controller-uid=86e06c62-bf71-4a3a-9ed8-3d1c860da568 k8s:heritage=Helm k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring k8s:io.cilium.k8s.namespace.labels.name=monitoring k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission k8s:io.kubernetes.pod.namespace=monitoring k8s:job-name=kube-prometheus-stack-admission-patch k8s:release=kube-prometheus-stack]" subsys=allocator level=info msg="Removed endpoint" containerID=d73389bb47 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=685 identity=13022 ipv4=10.0.0.18 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-9zn7t subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.204 c1cf0017-bbff-448c-9602-d2e109fdd4e0 default }" containerID=5d66d5018d9ac2b5d9636f5ec55e4a279c92ad2ee8eb19c030dc299067b75f67 datapathConfiguration="&{false false false false false }" interface=lxcddd7b18a14bc k8sPodName=local-path-storage/helper-pod-create-pvc-bb302693-9c92-487d-bb86-c670e8f90a04 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5d66d5018d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1801 ipv4=10.0.0.204 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-bb302693-9c92-487d-bb86-c670e8f90a04 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5d66d5018d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1801 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.204 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-bb302693-9c92-487d-bb86-c670e8f90a04 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5d66d5018d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1801 identity=16985 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.204 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-bb302693-9c92-487d-bb86-c670e8f90a04 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5d66d5018d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1801 identity=16985 ipv4=10.0.0.204 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-bb302693-9c92-487d-bb86-c670e8f90a04 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=5d66d5018d datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1801 identity=16985 ipv4=10.0.0.204 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-bb302693-9c92-487d-bb86-c670e8f90a04 subsys=endpoint level=info msg="Successful endpoint creation" containerID=5d66d5018d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1801 identity=16985 ipv4=10.0.0.204 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-bb302693-9c92-487d-bb86-c670e8f90a04 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.65 ca8778ba-620c-4f76-9ff3-5aef430afc57 default }" containerID=8c15ea81fbc3b2dd07bb4c529ba98bd28c039aed557496f08cdf0ffa23400a2b datapathConfiguration="&{false false false false false }" interface=lxc7e117a352d1a k8sPodName=local-path-storage/helper-pod-create-pvc-6849a51f-3220-4b89-80eb-85517da911ac labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8c15ea81fb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1937 ipv4=10.0.0.65 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-6849a51f-3220-4b89-80eb-85517da911ac subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8c15ea81fb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1937 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.65 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-6849a51f-3220-4b89-80eb-85517da911ac subsys=endpoint level=info msg="Identity of endpoint changed" containerID=8c15ea81fb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1937 identity=16985 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.65 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-6849a51f-3220-4b89-80eb-85517da911ac oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8c15ea81fb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1937 identity=16985 ipv4=10.0.0.65 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-6849a51f-3220-4b89-80eb-85517da911ac subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=8c15ea81fb datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1937 identity=16985 ipv4=10.0.0.65 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-6849a51f-3220-4b89-80eb-85517da911ac subsys=endpoint level=info msg="Successful endpoint creation" containerID=8c15ea81fb datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1937 identity=16985 ipv4=10.0.0.65 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-6849a51f-3220-4b89-80eb-85517da911ac subsys=daemon level=info msg="Delete endpoint request" containerID=5d66d5018d endpointID=1801 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-bb302693-9c92-487d-bb86-c670e8f90a04 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Delete endpoint request" containerID=8c15ea81fb endpointID=1937 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-6849a51f-3220-4b89-80eb-85517da911ac subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=5d66d5018d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1801 identity=16985 ipv4=10.0.0.204 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-bb302693-9c92-487d-bb86-c670e8f90a04 subsys=endpoint level=info msg="Removed endpoint" containerID=8c15ea81fb datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1937 identity=16985 ipv4=10.0.0.65 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-6849a51f-3220-4b89-80eb-85517da911ac subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.235 0d1191d5-ab27-4b65-b388-4850c45288e8 default }" containerID=0a2632914e42192c5cea1b55389091a6cdc37ebeecbf3679704b05a96c87fb94 datapathConfiguration="&{false false false false false }" interface=lxccd0760956f63 k8sPodName=monitoring/loki-chunks-cache-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0a2632914e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3026 ipv4=10.0.0.235 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0a2632914e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3026 identityLabels="k8s:app.kubernetes.io/component=memcached-chunks-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-chunks-cache,k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0" ipv4=10.0.0.235 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Create endpoint request" addressing="&{10.0.0.19 7dfd5347-4f40-46d7-8504-c47b27551f06 default }" containerID=9b06a429ee1e978361456ca39dd21ce0ff37a6a892fa1e7597cbe93998a9ddfc datapathConfiguration="&{false false false false false }" interface=lxcda477c6c6907 k8sPodName=monitoring/loki-results-cache-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9b06a429ee datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=174 ipv4=10.0.0.19 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9b06a429ee datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=174 identityLabels="k8s:app.kubernetes.io/component=memcached-results-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-results-cache,k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0" ipv4=10.0.0.19 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=memcached-chunks-cache;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:name=memcached-chunks-cache;k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=0a2632914e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3026 identity=47048 identityLabels="k8s:app.kubernetes.io/component=memcached-chunks-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-chunks-cache,k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0" ipv4=10.0.0.235 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0a2632914e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3026 identity=47048 ipv4=10.0.0.235 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Invalid state transition skipped" containerID=9b06a429ee datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=174 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.19 ipv6= k8sPodName=monitoring/loki-results-cache-0 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=memcached-results-cache;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:name=memcached-results-cache;k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9b06a429ee datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=174 identity=61482 identityLabels="k8s:app.kubernetes.io/component=memcached-results-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-results-cache,k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0" ipv4=10.0.0.19 ipv6= k8sPodName=monitoring/loki-results-cache-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9b06a429ee datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=174 identity=61482 ipv4=10.0.0.19 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.29 d10163eb-a673-4fef-b23a-0b8b857e1366 default }" containerID=eaf8dfd5a024ddaa1aa351c9642b7340d9829168704cf2c518dcd28b1e15b6a1 datapathConfiguration="&{false false false false false }" interface=lxc62822739ff7e k8sPodName=monitoring/loki-gateway-cf54cb88c-wfsbw labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=eaf8dfd5a0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1644 ipv4=10.0.0.29 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-wfsbw subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=eaf8dfd5a0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1644 identityLabels="k8s:app.kubernetes.io/component=gateway,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.29 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-wfsbw subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=gateway;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=eaf8dfd5a0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1644 identity=25437 identityLabels="k8s:app.kubernetes.io/component=gateway,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.29 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-wfsbw oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=eaf8dfd5a0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1644 identity=25437 ipv4=10.0.0.29 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-wfsbw subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=9b06a429ee datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=174 identity=61482 ipv4=10.0.0.19 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=9b06a429ee datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=174 identity=61482 ipv4=10.0.0.19 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=0a2632914e datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3026 identity=47048 ipv4=10.0.0.235 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=0a2632914e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3026 identity=47048 ipv4=10.0.0.235 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=eaf8dfd5a0 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1644 identity=25437 ipv4=10.0.0.29 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-wfsbw subsys=endpoint level=info msg="Successful endpoint creation" containerID=eaf8dfd5a0 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1644 identity=25437 ipv4=10.0.0.29 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-wfsbw subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.84 348724dc-97ab-404d-a3e4-8ef3f3d01f52 default }" containerID=eb42caef0db351d0b67c303f72485e9b7550a45699549eef10207b582a9d8cec datapathConfiguration="&{false false false false false }" interface=lxcbebbac9f7ba2 k8sPodName=local-path-storage/helper-pod-create-pvc-2048c014-5ece-495c-80af-740b26fabc90 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=eb42caef0d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3007 ipv4=10.0.0.84 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-2048c014-5ece-495c-80af-740b26fabc90 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=eb42caef0d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3007 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.84 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-2048c014-5ece-495c-80af-740b26fabc90 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=eb42caef0d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3007 identity=16985 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.84 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-2048c014-5ece-495c-80af-740b26fabc90 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=eb42caef0d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3007 identity=16985 ipv4=10.0.0.84 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-2048c014-5ece-495c-80af-740b26fabc90 subsys=endpoint level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=eb42caef0d datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3007 identity=16985 ipv4=10.0.0.84 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-2048c014-5ece-495c-80af-740b26fabc90 subsys=endpoint level=info msg="Successful endpoint creation" containerID=eb42caef0d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3007 identity=16985 ipv4=10.0.0.84 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-2048c014-5ece-495c-80af-740b26fabc90 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.24 9d09c1cb-2306-45bb-842b-84e272342fbd default }" containerID=ce277b1c6b7958937b107a146b3ffd97b97ce2b06aec3d9a4be8939d107fb2a7 datapathConfiguration="&{false false false false false }" interface=lxc783d1e230ea9 k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ce277b1c6b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1562 ipv4=10.0.0.24 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ce277b1c6b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1562 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=prometheus,k8s:app.kubernetes.io/version=2.51.2,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus,k8s:io.kubernetes.pod.namespace=monitoring,k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus,k8s:operator.prometheus.io/shard=0,k8s:prometheus=kube-prometheus-stack-prometheus,k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0" ipv4=10.0.0.24 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus;k8s:app.kubernetes.io/managed-by=prometheus-operator;k8s:app.kubernetes.io/name=prometheus;k8s:app.kubernetes.io/version=2.51.2;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus;k8s:io.kubernetes.pod.namespace=monitoring;k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus;k8s:operator.prometheus.io/shard=0;k8s:prometheus=kube-prometheus-stack-prometheus;k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ce277b1c6b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1562 identity=14220 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=prometheus,k8s:app.kubernetes.io/version=2.51.2,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus,k8s:io.kubernetes.pod.namespace=monitoring,k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus,k8s:operator.prometheus.io/shard=0,k8s:prometheus=kube-prometheus-stack-prometheus,k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0" ipv4=10.0.0.24 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ce277b1c6b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1562 identity=14220 ipv4=10.0.0.24 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.186 69d97b7e-68a1-4375-be50-94a610735da8 default }" containerID=ab3d9ad2ceb318b3023a8efb66ac9dc58b6f6bb349b622652b946da69d381605 datapathConfiguration="&{false false false false false }" interface=lxc60204ad3b80e k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ab3d9ad2ce datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3024 ipv4=10.0.0.186 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ab3d9ad2ce datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3024 identityLabels="k8s:alertmanager=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=alertmanager,k8s:app.kubernetes.io/version=0.27.0,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0" ipv4=10.0.0.186 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:alertmanager=kube-prometheus-stack-alertmanager;k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager;k8s:app.kubernetes.io/managed-by=prometheus-operator;k8s:app.kubernetes.io/name=alertmanager;k8s:app.kubernetes.io/version=0.27.0;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager;k8s:io.kubernetes.pod.namespace=monitoring;k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ab3d9ad2ce datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3024 identity=11612 identityLabels="k8s:alertmanager=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=alertmanager,k8s:app.kubernetes.io/version=0.27.0,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0" ipv4=10.0.0.186 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ab3d9ad2ce datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3024 identity=11612 ipv4=10.0.0.186 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ce277b1c6b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1562 identity=14220 ipv4=10.0.0.24 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=ce277b1c6b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1562 identity=14220 ipv4=10.0.0.24 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=ab3d9ad2ce datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3024 identity=11612 ipv4=10.0.0.186 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=ab3d9ad2ce datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3024 identity=11612 ipv4=10.0.0.186 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.25 ddcc14f5-c133-4748-ba54-ad4e64eb9218 default }" containerID=9e4f10032677ce3981e6cbfaa3193efe50685a9d85ebae17b5e39ad2ee731690 datapathConfiguration="&{false false false false false }" interface=lxcaf6077432002 k8sPodName=monitoring/vector-9mgcj labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9e4f100326 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=576 ipv4=10.0.0.25 ipv6= k8sPodName=monitoring/vector-9mgcj subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9e4f100326 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=576 identityLabels="k8s:app.kubernetes.io/component=Agent,k8s:app.kubernetes.io/instance=vector,k8s:app.kubernetes.io/name=vector,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=vector,k8s:io.kubernetes.pod.namespace=monitoring,k8s:vector.dev/exclude=true" ipv4=10.0.0.25 ipv6= k8sPodName=monitoring/vector-9mgcj subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=Agent;k8s:app.kubernetes.io/instance=vector;k8s:app.kubernetes.io/name=vector;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=vector;k8s:io.kubernetes.pod.namespace=monitoring;k8s:vector.dev/exclude=true;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9e4f100326 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=576 identity=33865 identityLabels="k8s:app.kubernetes.io/component=Agent,k8s:app.kubernetes.io/instance=vector,k8s:app.kubernetes.io/name=vector,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=vector,k8s:io.kubernetes.pod.namespace=monitoring,k8s:vector.dev/exclude=true" ipv4=10.0.0.25 ipv6= k8sPodName=monitoring/vector-9mgcj oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9e4f100326 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=576 identity=33865 ipv4=10.0.0.25 ipv6= k8sPodName=monitoring/vector-9mgcj subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=9e4f100326 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=576 identity=33865 ipv4=10.0.0.25 ipv6= k8sPodName=monitoring/vector-9mgcj subsys=endpoint level=info msg="Successful endpoint creation" containerID=9e4f100326 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=576 identity=33865 ipv4=10.0.0.25 ipv6= k8sPodName=monitoring/vector-9mgcj subsys=daemon level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=eb42caef0d endpointID=3007 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-2048c014-5ece-495c-80af-740b26fabc90 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=eb42caef0d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3007 identity=16985 ipv4=10.0.0.84 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-2048c014-5ece-495c-80af-740b26fabc90 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.243 35c95fb9-0471-4858-8e2c-d4346a185db5 default }" containerID=400b6a97bbf64bdfa6139e99ef5bf053399c8f39b901f5c5faaac3654d208ab5 datapathConfiguration="&{false false false false false }" interface=lxc5d9bb87af22f k8sPodName=monitoring/loki-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=400b6a97bb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3795 ipv4=10.0.0.243 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=400b6a97bb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3795 identityLabels="k8s:app.kubernetes.io/component=single-binary,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:app.kubernetes.io/part-of=memberlist,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=loki-0" ipv4=10.0.0.243 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=400b6a97bb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3795 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.243 ipv6= k8sPodName=monitoring/loki-0 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=single-binary;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:app.kubernetes.io/part-of=memberlist;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:statefulset.kubernetes.io/pod-name=loki-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=400b6a97bb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3795 identity=23746 identityLabels="k8s:app.kubernetes.io/component=single-binary,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:app.kubernetes.io/part-of=memberlist,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=loki-0" ipv4=10.0.0.243 ipv6= k8sPodName=monitoring/loki-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=400b6a97bb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3795 identity=23746 ipv4=10.0.0.243 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=400b6a97bb datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3795 identity=23746 ipv4=10.0.0.243 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=400b6a97bb datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3795 identity=23746 ipv4=10.0.0.243 ipv6= k8sPodName=monitoring/loki-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.118 19945ff3-9861-45f9-9025-452de6fafaa1 default }" containerID=fc0941327477e4599a251352c8a312b6117860042579d15a70fdbd3a61bcb8dc datapathConfiguration="&{false false false false false }" interface=lxce2cb7fe081c5 k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-wslcs labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=fc09413274 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1684 ipv4=10.0.0.118 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-wslcs subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=fc09413274 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1684 identityLabels="k8s:app.kubernetes.io/instance=prometheus-pushgateway,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=prometheus-pushgateway,k8s:app.kubernetes.io/version=v1.8.0,k8s:helm.sh/chart=prometheus-pushgateway-2.13.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.118 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-wslcs subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=prometheus-pushgateway;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=prometheus-pushgateway;k8s:app.kubernetes.io/version=v1.8.0;k8s:helm.sh/chart=prometheus-pushgateway-2.13.0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=fc09413274 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1684 identity=29715 identityLabels="k8s:app.kubernetes.io/instance=prometheus-pushgateway,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=prometheus-pushgateway,k8s:app.kubernetes.io/version=v1.8.0,k8s:helm.sh/chart=prometheus-pushgateway-2.13.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.118 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-wslcs oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=fc09413274 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1684 identity=29715 ipv4=10.0.0.118 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-wslcs subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=fc09413274 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1684 identity=29715 ipv4=10.0.0.118 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-wslcs subsys=endpoint level=info msg="Successful endpoint creation" containerID=fc09413274 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1684 identity=29715 ipv4=10.0.0.118 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-wslcs subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.78 836eda45-089d-4865-9cba-d0bd481917d0 default }" containerID=50848529672d786fd782c5e596b0b9b90fcac9d63fbe6bede218373e28543a71 datapathConfiguration="&{false false false false false }" interface=lxc7507edbffedd k8sPodName=openstack/memcached-memcached-cf56b6468-b45k7 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5084852967 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=663 ipv4=10.0.0.78 ipv6= k8sPodName=openstack/memcached-memcached-cf56b6468-b45k7 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5084852967 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=663 identityLabels="k8s:application=memcached,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=memcached" ipv4=10.0.0.78 ipv6= k8sPodName=openstack/memcached-memcached-cf56b6468-b45k7 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=memcached;k8s:component=server;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=memcached;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5084852967 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=663 identity=34910 identityLabels="k8s:application=memcached,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=memcached" ipv4=10.0.0.78 ipv6= k8sPodName=openstack/memcached-memcached-cf56b6468-b45k7 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5084852967 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=663 identity=34910 ipv4=10.0.0.78 ipv6= k8sPodName=openstack/memcached-memcached-cf56b6468-b45k7 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=5084852967 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=663 identity=34910 ipv4=10.0.0.78 ipv6= k8sPodName=openstack/memcached-memcached-cf56b6468-b45k7 subsys=endpoint level=info msg="Successful endpoint creation" containerID=5084852967 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=663 identity=34910 ipv4=10.0.0.78 ipv6= k8sPodName=openstack/memcached-memcached-cf56b6468-b45k7 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.140 084af81d-cc8d-4074-aecb-fe43f918694b default }" containerID=20b4e1b1e57d934b1daaab486e3aaff9d42b0177e5d95c82c75a9b9561072d33 datapathConfiguration="&{false false false false false }" interface=lxccdcde2008f68 k8sPodName=local-path-storage/helper-pod-create-pvc-52a08c8c-fb7a-4517-a3ad-f72b2083911e labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=20b4e1b1e5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4056 ipv4=10.0.0.140 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-52a08c8c-fb7a-4517-a3ad-f72b2083911e subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=20b4e1b1e5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4056 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.140 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-52a08c8c-fb7a-4517-a3ad-f72b2083911e subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=20b4e1b1e5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4056 identity=16985 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.140 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-52a08c8c-fb7a-4517-a3ad-f72b2083911e oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=20b4e1b1e5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4056 identity=16985 ipv4=10.0.0.140 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-52a08c8c-fb7a-4517-a3ad-f72b2083911e subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=20b4e1b1e5 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=4056 identity=16985 ipv4=10.0.0.140 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-52a08c8c-fb7a-4517-a3ad-f72b2083911e subsys=endpoint level=info msg="Successful endpoint creation" containerID=20b4e1b1e5 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=4056 identity=16985 ipv4=10.0.0.140 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-52a08c8c-fb7a-4517-a3ad-f72b2083911e subsys=daemon level=info msg="Delete endpoint request" containerID=20b4e1b1e5 endpointID=4056 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-52a08c8c-fb7a-4517-a3ad-f72b2083911e subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=20b4e1b1e5 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=4056 identity=16985 ipv4=10.0.0.140 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-52a08c8c-fb7a-4517-a3ad-f72b2083911e subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.83 aaa04473-7aae-4489-866d-02f6e0b1386c default }" containerID=23acb1b85e4b24220e36e8e9788df9aacc0d209ffa06e833a8ee385d05ff3a98 datapathConfiguration="&{false false false false false }" interface=lxce0773147ba5f k8sPodName=openstack/rabbitmq-keystone-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=23acb1b85e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=334 ipv4=10.0.0.83 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=23acb1b85e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=334 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-keystone,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0" ipv4=10.0.0.83 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=23acb1b85e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=334 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.83 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-keystone;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=23acb1b85e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=334 identity=10308 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-keystone,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0" ipv4=10.0.0.83 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=23acb1b85e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=334 identity=10308 ipv4=10.0.0.83 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=23acb1b85e datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=334 identity=10308 ipv4=10.0.0.83 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=23acb1b85e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=334 identity=10308 ipv4=10.0.0.83 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.53 a5aa162a-135b-4134-bf5e-fd0a79412a1d default }" containerID=bb8bce7cbb719d223d8a8368de8fb5f73898d77d39658936f3b26844954992ba datapathConfiguration="&{false false false false false }" interface=lxca9ee1bd86d0d k8sPodName=openstack/keystone-credential-setup-cj7rj labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=bb8bce7cbb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=373 ipv4=10.0.0.53 ipv6= k8sPodName=openstack/keystone-credential-setup-cj7rj subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=bb8bce7cbb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=373 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=295f01bc-9e71-41e1-b61c-d6bc8d37de10,k8s:batch.kubernetes.io/job-name=keystone-credential-setup,k8s:component=credential-setup,k8s:controller-uid=295f01bc-9e71-41e1-b61c-d6bc8d37de10,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-credential-setup,k8s:release_group=keystone" ipv4=10.0.0.53 ipv6= k8sPodName=openstack/keystone-credential-setup-cj7rj subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=295f01bc-9e71-41e1-b61c-d6bc8d37de10;k8s:batch.kubernetes.io/job-name=keystone-credential-setup;k8s:component=credential-setup;k8s:controller-uid=295f01bc-9e71-41e1-b61c-d6bc8d37de10;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-credential-setup;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=bb8bce7cbb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=373 identity=2967 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=295f01bc-9e71-41e1-b61c-d6bc8d37de10,k8s:batch.kubernetes.io/job-name=keystone-credential-setup,k8s:component=credential-setup,k8s:controller-uid=295f01bc-9e71-41e1-b61c-d6bc8d37de10,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-credential-setup,k8s:release_group=keystone" ipv4=10.0.0.53 ipv6= k8sPodName=openstack/keystone-credential-setup-cj7rj oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=bb8bce7cbb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=373 identity=2967 ipv4=10.0.0.53 ipv6= k8sPodName=openstack/keystone-credential-setup-cj7rj subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=bb8bce7cbb datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=373 identity=2967 ipv4=10.0.0.53 ipv6= k8sPodName=openstack/keystone-credential-setup-cj7rj subsys=endpoint level=info msg="Successful endpoint creation" containerID=bb8bce7cbb datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=373 identity=2967 ipv4=10.0.0.53 ipv6= k8sPodName=openstack/keystone-credential-setup-cj7rj subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.194 4ef498bf-dee6-4868-8456-69b99345f149 default }" containerID=2b74d3ccf74f5ffebe6a0a12a2dd7a793bdb429bb723e12de660793ccb8e9ab4 datapathConfiguration="&{false false false false false }" interface=lxc00e2a8296eec k8sPodName=openstack/keystone-api-c67bf9f54-9ljnh labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2b74d3ccf7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=820 ipv4=10.0.0.194 ipv6= k8sPodName=openstack/keystone-api-c67bf9f54-9ljnh subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2b74d3ccf7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=820 identityLabels="k8s:application=keystone,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=keystone" ipv4=10.0.0.194 ipv6= k8sPodName=openstack/keystone-api-c67bf9f54-9ljnh subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2b74d3ccf7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=820 identity=5584 identityLabels="k8s:application=keystone,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=keystone" ipv4=10.0.0.194 ipv6= k8sPodName=openstack/keystone-api-c67bf9f54-9ljnh oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2b74d3ccf7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=820 identity=5584 ipv4=10.0.0.194 ipv6= k8sPodName=openstack/keystone-api-c67bf9f54-9ljnh subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=2b74d3ccf7 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=820 identity=5584 ipv4=10.0.0.194 ipv6= k8sPodName=openstack/keystone-api-c67bf9f54-9ljnh subsys=endpoint level=info msg="Successful endpoint creation" containerID=2b74d3ccf7 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=820 identity=5584 ipv4=10.0.0.194 ipv6= k8sPodName=openstack/keystone-api-c67bf9f54-9ljnh subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=bb8bce7cbb endpointID=373 k8sNamespace=openstack k8sPodName=keystone-credential-setup-cj7rj subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=295f01bc-9e71-41e1-b61c-d6bc8d37de10 k8s:batch.kubernetes.io/job-name=keystone-credential-setup k8s:component=credential-setup k8s:controller-uid=295f01bc-9e71-41e1-b61c-d6bc8d37de10 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-credential-setup k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=bb8bce7cbb datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=373 identity=2967 ipv4=10.0.0.53 ipv6= k8sPodName=openstack/keystone-credential-setup-cj7rj subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.158 2247547c-974f-4bac-a154-799870d4d09c default }" containerID=3682ea6a1b4fbbfe9b380c925770e79bb28813dfe1d8534f5316b9c9565f8da9 datapathConfiguration="&{false false false false false }" interface=lxc7142d6ad7878 k8sPodName=openstack/keystone-db-init-lqhpz labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3682ea6a1b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=60 ipv4=10.0.0.158 ipv6= k8sPodName=openstack/keystone-db-init-lqhpz subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3682ea6a1b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=60 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=d24710b9-1ac6-4966-b32a-887669cebe54,k8s:batch.kubernetes.io/job-name=keystone-db-init,k8s:component=db-init,k8s:controller-uid=d24710b9-1ac6-4966-b32a-887669cebe54,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-init,k8s:release_group=keystone" ipv4=10.0.0.158 ipv6= k8sPodName=openstack/keystone-db-init-lqhpz subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=d24710b9-1ac6-4966-b32a-887669cebe54;k8s:batch.kubernetes.io/job-name=keystone-db-init;k8s:component=db-init;k8s:controller-uid=d24710b9-1ac6-4966-b32a-887669cebe54;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-db-init;k8s:release_group=keystone;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=3682ea6a1b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=60 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.158 ipv6= k8sPodName=openstack/keystone-db-init-lqhpz line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=3682ea6a1b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=60 identity=18169 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=d24710b9-1ac6-4966-b32a-887669cebe54,k8s:batch.kubernetes.io/job-name=keystone-db-init,k8s:component=db-init,k8s:controller-uid=d24710b9-1ac6-4966-b32a-887669cebe54,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-init,k8s:release_group=keystone" ipv4=10.0.0.158 ipv6= k8sPodName=openstack/keystone-db-init-lqhpz oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3682ea6a1b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=60 identity=18169 ipv4=10.0.0.158 ipv6= k8sPodName=openstack/keystone-db-init-lqhpz subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=3682ea6a1b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=60 identity=18169 ipv4=10.0.0.158 ipv6= k8sPodName=openstack/keystone-db-init-lqhpz subsys=endpoint level=info msg="Successful endpoint creation" containerID=3682ea6a1b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=60 identity=18169 ipv4=10.0.0.158 ipv6= k8sPodName=openstack/keystone-db-init-lqhpz subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=3682ea6a1b endpointID=60 k8sNamespace=openstack k8sPodName=keystone-db-init-lqhpz subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=d24710b9-1ac6-4966-b32a-887669cebe54 k8s:batch.kubernetes.io/job-name=keystone-db-init k8s:component=db-init k8s:controller-uid=d24710b9-1ac6-4966-b32a-887669cebe54 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-db-init k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=3682ea6a1b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=60 identity=18169 ipv4=10.0.0.158 ipv6= k8sPodName=openstack/keystone-db-init-lqhpz subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.102 e9d35956-b8fd-4d72-a3ce-43a002686820 default }" containerID=f5ce97c0b44ca3a9fce5e0d97a287d18b6881438d79869895c64530a9af92651 datapathConfiguration="&{false false false false false }" interface=lxca7683adbb8b9 k8sPodName=openstack/keystone-fernet-setup-zp824 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f5ce97c0b4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=320 ipv4=10.0.0.102 ipv6= k8sPodName=openstack/keystone-fernet-setup-zp824 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f5ce97c0b4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=320 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=de6d1b31-024c-41c7-b7c8-a6d2213414fe,k8s:batch.kubernetes.io/job-name=keystone-fernet-setup,k8s:component=fernet-setup,k8s:controller-uid=de6d1b31-024c-41c7-b7c8-a6d2213414fe,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-setup,k8s:release_group=keystone" ipv4=10.0.0.102 ipv6= k8sPodName=openstack/keystone-fernet-setup-zp824 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=de6d1b31-024c-41c7-b7c8-a6d2213414fe;k8s:batch.kubernetes.io/job-name=keystone-fernet-setup;k8s:component=fernet-setup;k8s:controller-uid=de6d1b31-024c-41c7-b7c8-a6d2213414fe;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-fernet-setup;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f5ce97c0b4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=320 identity=53156 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=de6d1b31-024c-41c7-b7c8-a6d2213414fe,k8s:batch.kubernetes.io/job-name=keystone-fernet-setup,k8s:component=fernet-setup,k8s:controller-uid=de6d1b31-024c-41c7-b7c8-a6d2213414fe,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-setup,k8s:release_group=keystone" ipv4=10.0.0.102 ipv6= k8sPodName=openstack/keystone-fernet-setup-zp824 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f5ce97c0b4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=320 identity=53156 ipv4=10.0.0.102 ipv6= k8sPodName=openstack/keystone-fernet-setup-zp824 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=f5ce97c0b4 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=320 identity=53156 ipv4=10.0.0.102 ipv6= k8sPodName=openstack/keystone-fernet-setup-zp824 subsys=endpoint level=info msg="Successful endpoint creation" containerID=f5ce97c0b4 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=320 identity=53156 ipv4=10.0.0.102 ipv6= k8sPodName=openstack/keystone-fernet-setup-zp824 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=f5ce97c0b4 endpointID=320 k8sNamespace=openstack k8sPodName=keystone-fernet-setup-zp824 subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=de6d1b31-024c-41c7-b7c8-a6d2213414fe k8s:batch.kubernetes.io/job-name=keystone-fernet-setup k8s:component=fernet-setup k8s:controller-uid=de6d1b31-024c-41c7-b7c8-a6d2213414fe k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-fernet-setup k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=f5ce97c0b4 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=320 identity=53156 ipv4=10.0.0.102 ipv6= k8sPodName=openstack/keystone-fernet-setup-zp824 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.216 fb149a28-b4b7-426f-8adc-dc09f3458c95 default }" containerID=0b19d772f54d98afa73830d8d036600a98ab3d335dca4126c280defdbd4b11bc datapathConfiguration="&{false false false false false }" interface=lxc61fb7b8f73ae k8sPodName=openstack/keystone-db-sync-nzmqh labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0b19d772f5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2534 ipv4=10.0.0.216 ipv6= k8sPodName=openstack/keystone-db-sync-nzmqh subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0b19d772f5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2534 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=38e0c044-7f94-40eb-a6e8-7cf5a8f41a7e,k8s:batch.kubernetes.io/job-name=keystone-db-sync,k8s:component=db-sync,k8s:controller-uid=38e0c044-7f94-40eb-a6e8-7cf5a8f41a7e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-sync,k8s:release_group=keystone" ipv4=10.0.0.216 ipv6= k8sPodName=openstack/keystone-db-sync-nzmqh subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=38e0c044-7f94-40eb-a6e8-7cf5a8f41a7e;k8s:batch.kubernetes.io/job-name=keystone-db-sync;k8s:component=db-sync;k8s:controller-uid=38e0c044-7f94-40eb-a6e8-7cf5a8f41a7e;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-db-sync;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0b19d772f5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2534 identity=20193 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=38e0c044-7f94-40eb-a6e8-7cf5a8f41a7e,k8s:batch.kubernetes.io/job-name=keystone-db-sync,k8s:component=db-sync,k8s:controller-uid=38e0c044-7f94-40eb-a6e8-7cf5a8f41a7e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-sync,k8s:release_group=keystone" ipv4=10.0.0.216 ipv6= k8sPodName=openstack/keystone-db-sync-nzmqh oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0b19d772f5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2534 identity=20193 ipv4=10.0.0.216 ipv6= k8sPodName=openstack/keystone-db-sync-nzmqh subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=0b19d772f5 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2534 identity=20193 ipv4=10.0.0.216 ipv6= k8sPodName=openstack/keystone-db-sync-nzmqh subsys=endpoint level=info msg="Successful endpoint creation" containerID=0b19d772f5 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2534 identity=20193 ipv4=10.0.0.216 ipv6= k8sPodName=openstack/keystone-db-sync-nzmqh subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=0b19d772f5 endpointID=2534 k8sNamespace=openstack k8sPodName=keystone-db-sync-nzmqh subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=38e0c044-7f94-40eb-a6e8-7cf5a8f41a7e k8s:batch.kubernetes.io/job-name=keystone-db-sync k8s:component=db-sync k8s:controller-uid=38e0c044-7f94-40eb-a6e8-7cf5a8f41a7e k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-db-sync k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=0b19d772f5 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2534 identity=20193 ipv4=10.0.0.216 ipv6= k8sPodName=openstack/keystone-db-sync-nzmqh subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.216 32e62261-c813-40b8-8a32-c3abbd6fd71d default }" containerID=3350579937b8be95549111f787049d30666cd520b357491ce1f304fedbe21848 datapathConfiguration="&{false false false false false }" interface=lxc2079a6395e8c k8sPodName=openstack/keystone-rabbit-init-79ppx labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3350579937 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=412 ipv4=10.0.0.216 ipv6= k8sPodName=openstack/keystone-rabbit-init-79ppx subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3350579937 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=412 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=7ca96da3-d5c0-41f3-b879-06a36f2bd132,k8s:batch.kubernetes.io/job-name=keystone-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=7ca96da3-d5c0-41f3-b879-06a36f2bd132,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-rabbit-init,k8s:release_group=keystone" ipv4=10.0.0.216 ipv6= k8sPodName=openstack/keystone-rabbit-init-79ppx subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=3350579937 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=412 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.216 ipv6= k8sPodName=openstack/keystone-rabbit-init-79ppx line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=7ca96da3-d5c0-41f3-b879-06a36f2bd132;k8s:batch.kubernetes.io/job-name=keystone-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=7ca96da3-d5c0-41f3-b879-06a36f2bd132;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-rabbit-init;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3350579937 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=412 identity=21451 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=7ca96da3-d5c0-41f3-b879-06a36f2bd132,k8s:batch.kubernetes.io/job-name=keystone-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=7ca96da3-d5c0-41f3-b879-06a36f2bd132,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-rabbit-init,k8s:release_group=keystone" ipv4=10.0.0.216 ipv6= k8sPodName=openstack/keystone-rabbit-init-79ppx oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3350579937 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=412 identity=21451 ipv4=10.0.0.216 ipv6= k8sPodName=openstack/keystone-rabbit-init-79ppx subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=3350579937 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=412 identity=21451 ipv4=10.0.0.216 ipv6= k8sPodName=openstack/keystone-rabbit-init-79ppx subsys=endpoint level=info msg="Successful endpoint creation" containerID=3350579937 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=412 identity=21451 ipv4=10.0.0.216 ipv6= k8sPodName=openstack/keystone-rabbit-init-79ppx subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=3350579937 endpointID=412 k8sNamespace=openstack k8sPodName=keystone-rabbit-init-79ppx subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=7ca96da3-d5c0-41f3-b879-06a36f2bd132 k8s:batch.kubernetes.io/job-name=keystone-rabbit-init k8s:component=rabbit-init k8s:controller-uid=7ca96da3-d5c0-41f3-b879-06a36f2bd132 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-rabbit-init k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=3350579937 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=412 identity=21451 ipv4=10.0.0.216 ipv6= k8sPodName=openstack/keystone-rabbit-init-79ppx subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.18 e8e2a9c9-aa4f-413e-81f7-d1c9ca3713f0 default }" containerID=f513b496c8ca10181656fe37836d512028675b02d29df24343b508a6da06d6ca datapathConfiguration="&{false false false false false }" interface=lxc0550645290a0 k8sPodName=openstack/keystone-domain-manage-9mfb9 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f513b496c8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1428 ipv4=10.0.0.18 ipv6= k8sPodName=openstack/keystone-domain-manage-9mfb9 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f513b496c8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1428 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=4c463a0d-3c4a-487a-ad20-f28d7802d9e3,k8s:batch.kubernetes.io/job-name=keystone-domain-manage,k8s:component=domain-manage,k8s:controller-uid=4c463a0d-3c4a-487a-ad20-f28d7802d9e3,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-domain-manage,k8s:release_group=keystone" ipv4=10.0.0.18 ipv6= k8sPodName=openstack/keystone-domain-manage-9mfb9 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=4c463a0d-3c4a-487a-ad20-f28d7802d9e3;k8s:batch.kubernetes.io/job-name=keystone-domain-manage;k8s:component=domain-manage;k8s:controller-uid=4c463a0d-3c4a-487a-ad20-f28d7802d9e3;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-domain-manage;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f513b496c8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1428 identity=5134 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=4c463a0d-3c4a-487a-ad20-f28d7802d9e3,k8s:batch.kubernetes.io/job-name=keystone-domain-manage,k8s:component=domain-manage,k8s:controller-uid=4c463a0d-3c4a-487a-ad20-f28d7802d9e3,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-domain-manage,k8s:release_group=keystone" ipv4=10.0.0.18 ipv6= k8sPodName=openstack/keystone-domain-manage-9mfb9 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=f513b496c8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1428 identity=5134 ipv4=10.0.0.18 ipv6= k8sPodName=openstack/keystone-domain-manage-9mfb9 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f513b496c8 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1428 identity=5134 ipv4=10.0.0.18 ipv6= k8sPodName=openstack/keystone-domain-manage-9mfb9 subsys=endpoint level=info msg="Successful endpoint creation" containerID=f513b496c8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1428 identity=5134 ipv4=10.0.0.18 ipv6= k8sPodName=openstack/keystone-domain-manage-9mfb9 subsys=daemon level=info msg="Conntrack garbage collector interval recalculated" deleteRatio=0.033570278788534635 newInterval=11m15s subsys=map-ct level=info msg="Delete endpoint request" containerID=f513b496c8 endpointID=1428 k8sNamespace=openstack k8sPodName=keystone-domain-manage-9mfb9 subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=4c463a0d-3c4a-487a-ad20-f28d7802d9e3 k8s:batch.kubernetes.io/job-name=keystone-domain-manage k8s:component=domain-manage k8s:controller-uid=4c463a0d-3c4a-487a-ad20-f28d7802d9e3 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-domain-manage k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=f513b496c8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1428 identity=5134 ipv4=10.0.0.18 ipv6= k8sPodName=openstack/keystone-domain-manage-9mfb9 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.93 b916613a-ff87-49f6-8dba-181b148bf676 default }" containerID=425ccd59fe354dd3624ace30f6fee2883f7ea70be7597d0bec209fedd4dd3083 datapathConfiguration="&{false false false false false }" interface=lxc115656019eda k8sPodName=openstack/keystone-bootstrap-lxmm9 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=425ccd59fe datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=523 ipv4=10.0.0.93 ipv6= k8sPodName=openstack/keystone-bootstrap-lxmm9 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=425ccd59fe datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=523 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=21ee5a0e-6c72-4230-8b0b-6b44c938780e,k8s:batch.kubernetes.io/job-name=keystone-bootstrap,k8s:component=bootstrap,k8s:controller-uid=21ee5a0e-6c72-4230-8b0b-6b44c938780e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-bootstrap,k8s:release_group=keystone" ipv4=10.0.0.93 ipv6= k8sPodName=openstack/keystone-bootstrap-lxmm9 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=21ee5a0e-6c72-4230-8b0b-6b44c938780e;k8s:batch.kubernetes.io/job-name=keystone-bootstrap;k8s:component=bootstrap;k8s:controller-uid=21ee5a0e-6c72-4230-8b0b-6b44c938780e;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-bootstrap;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=425ccd59fe datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=523 identity=2367 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=21ee5a0e-6c72-4230-8b0b-6b44c938780e,k8s:batch.kubernetes.io/job-name=keystone-bootstrap,k8s:component=bootstrap,k8s:controller-uid=21ee5a0e-6c72-4230-8b0b-6b44c938780e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-bootstrap,k8s:release_group=keystone" ipv4=10.0.0.93 ipv6= k8sPodName=openstack/keystone-bootstrap-lxmm9 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=425ccd59fe datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=523 identity=2367 ipv4=10.0.0.93 ipv6= k8sPodName=openstack/keystone-bootstrap-lxmm9 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=425ccd59fe datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=523 identity=2367 ipv4=10.0.0.93 ipv6= k8sPodName=openstack/keystone-bootstrap-lxmm9 subsys=endpoint level=info msg="Successful endpoint creation" containerID=425ccd59fe datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=523 identity=2367 ipv4=10.0.0.93 ipv6= k8sPodName=openstack/keystone-bootstrap-lxmm9 subsys=daemon level=info msg="Delete endpoint request" containerID=425ccd59fe endpointID=523 k8sNamespace=openstack k8sPodName=keystone-bootstrap-lxmm9 subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=21ee5a0e-6c72-4230-8b0b-6b44c938780e k8s:batch.kubernetes.io/job-name=keystone-bootstrap k8s:component=bootstrap k8s:controller-uid=21ee5a0e-6c72-4230-8b0b-6b44c938780e k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-bootstrap k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=425ccd59fe datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=523 identity=2367 ipv4=10.0.0.93 ipv6= k8sPodName=openstack/keystone-bootstrap-lxmm9 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.60 2d440e7b-c7db-4fb6-a163-38654ccf87e4 default }" containerID=ba60729fde36d4742ed3607b74fe9d86ac98c9aed48f86f8410cd4bf9071e1fa datapathConfiguration="&{false false false false false }" interface=lxc444c30fdbc27 k8sPodName=local-path-storage/helper-pod-create-pvc-522f435c-13ca-480d-a5a8-62e5a9d68433 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ba60729fde datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1866 ipv4=10.0.0.60 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-522f435c-13ca-480d-a5a8-62e5a9d68433 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ba60729fde datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1866 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.60 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-522f435c-13ca-480d-a5a8-62e5a9d68433 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ba60729fde datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1866 identity=16985 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.60 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-522f435c-13ca-480d-a5a8-62e5a9d68433 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ba60729fde datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1866 identity=16985 ipv4=10.0.0.60 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-522f435c-13ca-480d-a5a8-62e5a9d68433 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ba60729fde datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1866 identity=16985 ipv4=10.0.0.60 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-522f435c-13ca-480d-a5a8-62e5a9d68433 subsys=endpoint level=info msg="Successful endpoint creation" containerID=ba60729fde datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1866 identity=16985 ipv4=10.0.0.60 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-522f435c-13ca-480d-a5a8-62e5a9d68433 subsys=daemon level=info msg="Delete endpoint request" containerID=ba60729fde endpointID=1866 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-522f435c-13ca-480d-a5a8-62e5a9d68433 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=ba60729fde datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1866 identity=16985 ipv4=10.0.0.60 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-522f435c-13ca-480d-a5a8-62e5a9d68433 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.188 663e8875-adcc-4600-af10-fa822d0492a1 default }" containerID=c496ea67b3dd14cfea03f921597176a8b9edd4a6d5acb20215108882d3c2a80a datapathConfiguration="&{false false false false false }" interface=lxcb1f971b93f0e k8sPodName=openstack/rabbitmq-barbican-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c496ea67b3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2536 ipv4=10.0.0.188 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c496ea67b3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2536 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-barbican,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0" ipv4=10.0.0.188 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-barbican;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c496ea67b3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2536 identity=28536 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-barbican,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0" ipv4=10.0.0.188 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c496ea67b3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2536 identity=28536 ipv4=10.0.0.188 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c496ea67b3 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2536 identity=28536 ipv4=10.0.0.188 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=c496ea67b3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2536 identity=28536 ipv4=10.0.0.188 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.244 6edecc71-d5f4-4a56-a687-8e2c9b1567a5 default }" containerID=7e7c8e999442c9cd0d2d86212f8028090721ede510b0d83a4ba73ead5d3e3435 datapathConfiguration="&{false false false false false }" interface=lxcededd92b0900 k8sPodName=openstack/barbican-api-6c57d7b78d-lz96c labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7e7c8e9994 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1139 ipv4=10.0.0.244 ipv6= k8sPodName=openstack/barbican-api-6c57d7b78d-lz96c subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7e7c8e9994 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1139 identityLabels="k8s:application=barbican,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=barbican" ipv4=10.0.0.244 ipv6= k8sPodName=openstack/barbican-api-6c57d7b78d-lz96c subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7e7c8e9994 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1139 identity=8256 identityLabels="k8s:application=barbican,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=barbican" ipv4=10.0.0.244 ipv6= k8sPodName=openstack/barbican-api-6c57d7b78d-lz96c oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=7e7c8e9994 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1139 identity=8256 ipv4=10.0.0.244 ipv6= k8sPodName=openstack/barbican-api-6c57d7b78d-lz96c subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=7e7c8e9994 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1139 identity=8256 ipv4=10.0.0.244 ipv6= k8sPodName=openstack/barbican-api-6c57d7b78d-lz96c subsys=endpoint level=info msg="Successful endpoint creation" containerID=7e7c8e9994 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1139 identity=8256 ipv4=10.0.0.244 ipv6= k8sPodName=openstack/barbican-api-6c57d7b78d-lz96c subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.149 68a0943d-2257-4f9e-8fbb-bcaa3faf9e75 default }" containerID=cc11fc0ca72e343b006d1d4d93010e98fc9d9740ef8564b1e643b363bcc25091 datapathConfiguration="&{false false false false false }" interface=lxcea8123ab0aff k8sPodName=openstack/barbican-db-init-5dlf8 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=cc11fc0ca7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3671 ipv4=10.0.0.149 ipv6= k8sPodName=openstack/barbican-db-init-5dlf8 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=cc11fc0ca7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3671 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=e9705621-071a-48da-89be-1a12fdb6b572,k8s:batch.kubernetes.io/job-name=barbican-db-init,k8s:component=db-init,k8s:controller-uid=e9705621-071a-48da-89be-1a12fdb6b572,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-init,k8s:release_group=barbican" ipv4=10.0.0.149 ipv6= k8sPodName=openstack/barbican-db-init-5dlf8 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=e9705621-071a-48da-89be-1a12fdb6b572;k8s:batch.kubernetes.io/job-name=barbican-db-init;k8s:component=db-init;k8s:controller-uid=e9705621-071a-48da-89be-1a12fdb6b572;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-db-init;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=cc11fc0ca7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3671 identity=19558 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=e9705621-071a-48da-89be-1a12fdb6b572,k8s:batch.kubernetes.io/job-name=barbican-db-init,k8s:component=db-init,k8s:controller-uid=e9705621-071a-48da-89be-1a12fdb6b572,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-init,k8s:release_group=barbican" ipv4=10.0.0.149 ipv6= k8sPodName=openstack/barbican-db-init-5dlf8 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=cc11fc0ca7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3671 identity=19558 ipv4=10.0.0.149 ipv6= k8sPodName=openstack/barbican-db-init-5dlf8 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=cc11fc0ca7 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3671 identity=19558 ipv4=10.0.0.149 ipv6= k8sPodName=openstack/barbican-db-init-5dlf8 subsys=endpoint level=info msg="Successful endpoint creation" containerID=cc11fc0ca7 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3671 identity=19558 ipv4=10.0.0.149 ipv6= k8sPodName=openstack/barbican-db-init-5dlf8 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=cc11fc0ca7 endpointID=3671 k8sNamespace=openstack k8sPodName=barbican-db-init-5dlf8 subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=e9705621-071a-48da-89be-1a12fdb6b572 k8s:batch.kubernetes.io/job-name=barbican-db-init k8s:component=db-init k8s:controller-uid=e9705621-071a-48da-89be-1a12fdb6b572 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-db-init k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=cc11fc0ca7 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3671 identity=19558 ipv4=10.0.0.149 ipv6= k8sPodName=openstack/barbican-db-init-5dlf8 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.144 0ba92375-dc75-44a1-bca6-d16b24108107 default }" containerID=6566c0c0c8aaf075f82f6375da41dc25912f2404b9ad3812fed8d8f4387e07c5 datapathConfiguration="&{false false false false false }" interface=lxc00f44e4fd5d7 k8sPodName=openstack/barbican-db-sync-54rft labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6566c0c0c8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2244 ipv4=10.0.0.144 ipv6= k8sPodName=openstack/barbican-db-sync-54rft subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6566c0c0c8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2244 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=8ba46519-c604-4150-ba45-1fd3851e5c98,k8s:batch.kubernetes.io/job-name=barbican-db-sync,k8s:component=db-sync,k8s:controller-uid=8ba46519-c604-4150-ba45-1fd3851e5c98,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-sync,k8s:release_group=barbican" ipv4=10.0.0.144 ipv6= k8sPodName=openstack/barbican-db-sync-54rft subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=8ba46519-c604-4150-ba45-1fd3851e5c98;k8s:batch.kubernetes.io/job-name=barbican-db-sync;k8s:component=db-sync;k8s:controller-uid=8ba46519-c604-4150-ba45-1fd3851e5c98;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-db-sync;k8s:release_group=barbican;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=6566c0c0c8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2244 identity=7339 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=8ba46519-c604-4150-ba45-1fd3851e5c98,k8s:batch.kubernetes.io/job-name=barbican-db-sync,k8s:component=db-sync,k8s:controller-uid=8ba46519-c604-4150-ba45-1fd3851e5c98,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-sync,k8s:release_group=barbican" ipv4=10.0.0.144 ipv6= k8sPodName=openstack/barbican-db-sync-54rft oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6566c0c0c8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2244 identity=7339 ipv4=10.0.0.144 ipv6= k8sPodName=openstack/barbican-db-sync-54rft subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=6566c0c0c8 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2244 identity=7339 ipv4=10.0.0.144 ipv6= k8sPodName=openstack/barbican-db-sync-54rft subsys=endpoint level=info msg="Successful endpoint creation" containerID=6566c0c0c8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2244 identity=7339 ipv4=10.0.0.144 ipv6= k8sPodName=openstack/barbican-db-sync-54rft subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=6566c0c0c8 endpointID=2244 k8sNamespace=openstack k8sPodName=barbican-db-sync-54rft subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=8ba46519-c604-4150-ba45-1fd3851e5c98 k8s:batch.kubernetes.io/job-name=barbican-db-sync k8s:component=db-sync k8s:controller-uid=8ba46519-c604-4150-ba45-1fd3851e5c98 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-db-sync k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=6566c0c0c8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2244 identity=7339 ipv4=10.0.0.144 ipv6= k8sPodName=openstack/barbican-db-sync-54rft subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.157 eebf2e25-4ebc-44db-92b7-e3e9c4e24e7e default }" containerID=f51a3cdf1b02da3198ef876553cd863bfd81f37ff88848e3d6315a66a80533cb datapathConfiguration="&{false false false false false }" interface=lxce92926350fb8 k8sPodName=openstack/barbican-rabbit-init-mv54p labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f51a3cdf1b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=440 ipv4=10.0.0.157 ipv6= k8sPodName=openstack/barbican-rabbit-init-mv54p subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f51a3cdf1b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=440 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=f07892b7-7cca-4d06-88f0-ad1bdf6894c6,k8s:batch.kubernetes.io/job-name=barbican-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=f07892b7-7cca-4d06-88f0-ad1bdf6894c6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-rabbit-init,k8s:release_group=barbican" ipv4=10.0.0.157 ipv6= k8sPodName=openstack/barbican-rabbit-init-mv54p subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=f07892b7-7cca-4d06-88f0-ad1bdf6894c6;k8s:batch.kubernetes.io/job-name=barbican-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=f07892b7-7cca-4d06-88f0-ad1bdf6894c6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-rabbit-init;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f51a3cdf1b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=440 identity=16769 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=f07892b7-7cca-4d06-88f0-ad1bdf6894c6,k8s:batch.kubernetes.io/job-name=barbican-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=f07892b7-7cca-4d06-88f0-ad1bdf6894c6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-rabbit-init,k8s:release_group=barbican" ipv4=10.0.0.157 ipv6= k8sPodName=openstack/barbican-rabbit-init-mv54p oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f51a3cdf1b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=440 identity=16769 ipv4=10.0.0.157 ipv6= k8sPodName=openstack/barbican-rabbit-init-mv54p subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f51a3cdf1b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=440 identity=16769 ipv4=10.0.0.157 ipv6= k8sPodName=openstack/barbican-rabbit-init-mv54p subsys=endpoint level=info msg="Successful endpoint creation" containerID=f51a3cdf1b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=440 identity=16769 ipv4=10.0.0.157 ipv6= k8sPodName=openstack/barbican-rabbit-init-mv54p subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=f51a3cdf1b endpointID=440 k8sNamespace=openstack k8sPodName=barbican-rabbit-init-mv54p subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=f07892b7-7cca-4d06-88f0-ad1bdf6894c6 k8s:batch.kubernetes.io/job-name=barbican-rabbit-init k8s:component=rabbit-init k8s:controller-uid=f07892b7-7cca-4d06-88f0-ad1bdf6894c6 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-rabbit-init k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=f51a3cdf1b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=440 identity=16769 ipv4=10.0.0.157 ipv6= k8sPodName=openstack/barbican-rabbit-init-mv54p subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.4 d8093771-6144-420a-b225-4bde627f090f default }" containerID=33a56cfc341801f8e2619459fc9776842c6fb7c3023a38904e63fbd284e755c1 datapathConfiguration="&{false false false false false }" interface=lxc1f8adaa20301 k8sPodName=openstack/barbican-ks-service-v9rk4 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=33a56cfc34 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1180 ipv4=10.0.0.4 ipv6= k8sPodName=openstack/barbican-ks-service-v9rk4 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=33a56cfc34 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1180 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=670e39bf-9888-4e8c-b0aa-a42f74e11300,k8s:batch.kubernetes.io/job-name=barbican-ks-service,k8s:component=ks-service,k8s:controller-uid=670e39bf-9888-4e8c-b0aa-a42f74e11300,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-service,k8s:release_group=barbican" ipv4=10.0.0.4 ipv6= k8sPodName=openstack/barbican-ks-service-v9rk4 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=670e39bf-9888-4e8c-b0aa-a42f74e11300;k8s:batch.kubernetes.io/job-name=barbican-ks-service;k8s:component=ks-service;k8s:controller-uid=670e39bf-9888-4e8c-b0aa-a42f74e11300;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-service;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=33a56cfc34 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1180 identity=27376 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=670e39bf-9888-4e8c-b0aa-a42f74e11300,k8s:batch.kubernetes.io/job-name=barbican-ks-service,k8s:component=ks-service,k8s:controller-uid=670e39bf-9888-4e8c-b0aa-a42f74e11300,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-service,k8s:release_group=barbican" ipv4=10.0.0.4 ipv6= k8sPodName=openstack/barbican-ks-service-v9rk4 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=33a56cfc34 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1180 identity=27376 ipv4=10.0.0.4 ipv6= k8sPodName=openstack/barbican-ks-service-v9rk4 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=33a56cfc34 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1180 identity=27376 ipv4=10.0.0.4 ipv6= k8sPodName=openstack/barbican-ks-service-v9rk4 subsys=endpoint level=info msg="Successful endpoint creation" containerID=33a56cfc34 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1180 identity=27376 ipv4=10.0.0.4 ipv6= k8sPodName=openstack/barbican-ks-service-v9rk4 subsys=daemon level=info msg="Delete endpoint request" containerID=33a56cfc34 endpointID=1180 k8sNamespace=openstack k8sPodName=barbican-ks-service-v9rk4 subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=670e39bf-9888-4e8c-b0aa-a42f74e11300 k8s:batch.kubernetes.io/job-name=barbican-ks-service k8s:component=ks-service k8s:controller-uid=670e39bf-9888-4e8c-b0aa-a42f74e11300 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-service k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=33a56cfc34 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1180 identity=27376 ipv4=10.0.0.4 ipv6= k8sPodName=openstack/barbican-ks-service-v9rk4 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.245 3e24a2c2-ab91-4a06-998c-643b63933049 default }" containerID=6e6dd7d8205d39c16df7d8441cf5d193ca8ff0ebec86e0ca3744591059d3b28f datapathConfiguration="&{false false false false false }" interface=lxcaff4a4b5fb75 k8sPodName=openstack/barbican-ks-endpoints-hnl2v labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6e6dd7d820 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1075 ipv4=10.0.0.245 ipv6= k8sPodName=openstack/barbican-ks-endpoints-hnl2v subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6e6dd7d820 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1075 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=0ed1e4cf-b66e-4d86-a572-f790ee2aca17,k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=0ed1e4cf-b66e-4d86-a572-f790ee2aca17,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-endpoints,k8s:release_group=barbican" ipv4=10.0.0.245 ipv6= k8sPodName=openstack/barbican-ks-endpoints-hnl2v subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=0ed1e4cf-b66e-4d86-a572-f790ee2aca17;k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=0ed1e4cf-b66e-4d86-a572-f790ee2aca17;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-endpoints;k8s:release_group=barbican;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=6e6dd7d820 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1075 identity=3249 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=0ed1e4cf-b66e-4d86-a572-f790ee2aca17,k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=0ed1e4cf-b66e-4d86-a572-f790ee2aca17,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-endpoints,k8s:release_group=barbican" ipv4=10.0.0.245 ipv6= k8sPodName=openstack/barbican-ks-endpoints-hnl2v oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6e6dd7d820 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1075 identity=3249 ipv4=10.0.0.245 ipv6= k8sPodName=openstack/barbican-ks-endpoints-hnl2v subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=6e6dd7d820 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1075 identity=3249 ipv4=10.0.0.245 ipv6= k8sPodName=openstack/barbican-ks-endpoints-hnl2v subsys=endpoint level=info msg="Successful endpoint creation" containerID=6e6dd7d820 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1075 identity=3249 ipv4=10.0.0.245 ipv6= k8sPodName=openstack/barbican-ks-endpoints-hnl2v subsys=daemon level=info msg="Delete endpoint request" containerID=6e6dd7d820 endpointID=1075 k8sNamespace=openstack k8sPodName=barbican-ks-endpoints-hnl2v subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=0ed1e4cf-b66e-4d86-a572-f790ee2aca17 k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=0ed1e4cf-b66e-4d86-a572-f790ee2aca17 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-endpoints k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=6e6dd7d820 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1075 identity=3249 ipv4=10.0.0.245 ipv6= k8sPodName=openstack/barbican-ks-endpoints-hnl2v subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.171 de680f8e-91a2-4f3d-bec7-c9a6dcdf1e55 default }" containerID=c5c350f55718ac0ccbed85e855ecc68967b1b48e800e340505b408a0ba28132c datapathConfiguration="&{false false false false false }" interface=lxc1690a23e539e k8sPodName=openstack/barbican-ks-user-ktmvd labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c5c350f557 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2916 ipv4=10.0.0.171 ipv6= k8sPodName=openstack/barbican-ks-user-ktmvd subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c5c350f557 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2916 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=074208cf-2190-4833-999a-71d036fc7128,k8s:batch.kubernetes.io/job-name=barbican-ks-user,k8s:component=ks-user,k8s:controller-uid=074208cf-2190-4833-999a-71d036fc7128,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-user,k8s:release_group=barbican" ipv4=10.0.0.171 ipv6= k8sPodName=openstack/barbican-ks-user-ktmvd subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=c5c350f557 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2916 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.171 ipv6= k8sPodName=openstack/barbican-ks-user-ktmvd line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=074208cf-2190-4833-999a-71d036fc7128;k8s:batch.kubernetes.io/job-name=barbican-ks-user;k8s:component=ks-user;k8s:controller-uid=074208cf-2190-4833-999a-71d036fc7128;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-user;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c5c350f557 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2916 identity=8000 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=074208cf-2190-4833-999a-71d036fc7128,k8s:batch.kubernetes.io/job-name=barbican-ks-user,k8s:component=ks-user,k8s:controller-uid=074208cf-2190-4833-999a-71d036fc7128,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-user,k8s:release_group=barbican" ipv4=10.0.0.171 ipv6= k8sPodName=openstack/barbican-ks-user-ktmvd oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c5c350f557 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2916 identity=8000 ipv4=10.0.0.171 ipv6= k8sPodName=openstack/barbican-ks-user-ktmvd subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c5c350f557 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2916 identity=8000 ipv4=10.0.0.171 ipv6= k8sPodName=openstack/barbican-ks-user-ktmvd subsys=endpoint level=info msg="Successful endpoint creation" containerID=c5c350f557 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2916 identity=8000 ipv4=10.0.0.171 ipv6= k8sPodName=openstack/barbican-ks-user-ktmvd subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=c5c350f557 endpointID=2916 k8sNamespace=openstack k8sPodName=barbican-ks-user-ktmvd subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=074208cf-2190-4833-999a-71d036fc7128 k8s:batch.kubernetes.io/job-name=barbican-ks-user k8s:component=ks-user k8s:controller-uid=074208cf-2190-4833-999a-71d036fc7128 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-user k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=c5c350f557 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2916 identity=8000 ipv4=10.0.0.171 ipv6= k8sPodName=openstack/barbican-ks-user-ktmvd subsys=endpoint level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Create endpoint request" addressing="&{10.0.0.11 a1cb198c-60b5-493f-95f7-7340bc0b1d7e default }" containerID=8696e27bd8e6ec0cf35c1d2ef8763c4c402f903f8c6da588cd9a5614f1be49e7 datapathConfiguration="&{false false false false false }" interface=lxc3d76aab41b51 k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-fxhfd labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8696e27bd8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=777 ipv4=10.0.0.11 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-fxhfd subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8696e27bd8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=777 identityLabels="k8s:app=rook-ceph-operator,k8s:helm.sh/chart=rook-ceph-v1.15.9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph,k8s:io.cilium.k8s.namespace.labels.name=rook-ceph,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system,k8s:io.kubernetes.pod.namespace=rook-ceph" ipv4=10.0.0.11 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-fxhfd subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:rook-ceph k8s:io.cilium.k8s.namespace.labels.name:rook-ceph]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=8696e27bd8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=777 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.11 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-fxhfd line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=rook-ceph-operator;k8s:helm.sh/chart=rook-ceph-v1.15.9;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph;k8s:io.cilium.k8s.namespace.labels.name=rook-ceph;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system;k8s:io.kubernetes.pod.namespace=rook-ceph;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8696e27bd8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=777 identity=14538 identityLabels="k8s:app=rook-ceph-operator,k8s:helm.sh/chart=rook-ceph-v1.15.9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph,k8s:io.cilium.k8s.namespace.labels.name=rook-ceph,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system,k8s:io.kubernetes.pod.namespace=rook-ceph" ipv4=10.0.0.11 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-fxhfd oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8696e27bd8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=777 identity=14538 ipv4=10.0.0.11 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-fxhfd subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=8696e27bd8 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=777 identity=14538 ipv4=10.0.0.11 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-fxhfd subsys=endpoint level=info msg="Successful endpoint creation" containerID=8696e27bd8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=777 identity=14538 ipv4=10.0.0.11 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-fxhfd subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.249 5da160ad-7ccc-4786-bbd7-f7a046994aca default }" containerID=72dd2af38c9745d53fac7349a419a040c2be242db74ee37671be74864936595b datapathConfiguration="&{false false false false false }" interface=lxc9c6b60fdaa23 k8sPodName=openstack/rook-ceph-detect-version-h8mrb labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=72dd2af38c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2810 ipv4=10.0.0.249 ipv6= k8sPodName=openstack/rook-ceph-detect-version-h8mrb subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=72dd2af38c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2810 identityLabels="k8s:app=rook-ceph-detect-version,k8s:batch.kubernetes.io/controller-uid=3c2100c4-723d-4d58-810c-a7427aeb86c2,k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version,k8s:controller-uid=3c2100c4-723d-4d58-810c-a7427aeb86c2,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=rook-ceph-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.249 ipv6= k8sPodName=openstack/rook-ceph-detect-version-h8mrb subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app=rook-ceph-detect-version;k8s:batch.kubernetes.io/controller-uid=3c2100c4-723d-4d58-810c-a7427aeb86c2;k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version;k8s:controller-uid=3c2100c4-723d-4d58-810c-a7427aeb86c2;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=rook-ceph-detect-version;k8s:rook-version=v1.15.9;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=72dd2af38c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2810 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.249 ipv6= k8sPodName=openstack/rook-ceph-detect-version-h8mrb line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=72dd2af38c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2810 identity=22251 identityLabels="k8s:app=rook-ceph-detect-version,k8s:batch.kubernetes.io/controller-uid=3c2100c4-723d-4d58-810c-a7427aeb86c2,k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version,k8s:controller-uid=3c2100c4-723d-4d58-810c-a7427aeb86c2,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=rook-ceph-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.249 ipv6= k8sPodName=openstack/rook-ceph-detect-version-h8mrb oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=72dd2af38c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2810 identity=22251 ipv4=10.0.0.249 ipv6= k8sPodName=openstack/rook-ceph-detect-version-h8mrb subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=72dd2af38c datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2810 identity=22251 ipv4=10.0.0.249 ipv6= k8sPodName=openstack/rook-ceph-detect-version-h8mrb subsys=endpoint level=info msg="Successful endpoint creation" containerID=72dd2af38c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2810 identity=22251 ipv4=10.0.0.249 ipv6= k8sPodName=openstack/rook-ceph-detect-version-h8mrb subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=72dd2af38c endpointID=2810 k8sNamespace=openstack k8sPodName=rook-ceph-detect-version-h8mrb subsys=daemon level=info msg="Releasing key" key="[k8s:app=rook-ceph-detect-version k8s:batch.kubernetes.io/controller-uid=3c2100c4-723d-4d58-810c-a7427aeb86c2 k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version k8s:controller-uid=3c2100c4-723d-4d58-810c-a7427aeb86c2 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=rook-ceph-detect-version k8s:rook-version=v1.15.9]" subsys=allocator level=info msg="Removed endpoint" containerID=72dd2af38c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2810 identity=22251 ipv4=10.0.0.249 ipv6= k8sPodName=openstack/rook-ceph-detect-version-h8mrb subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.75 7c882b25-0e2a-46c7-9492-589a14b11d7c default }" containerID=4a15c8c57121e167a2be8ba00158bc8f380b34b85b521dc1c780d5f6f7fd8366 datapathConfiguration="&{false false false false false }" interface=lxc808ccf924f23 k8sPodName=openstack/ceph-object-controller-detect-version-xl8rx labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4a15c8c571 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3439 ipv4=10.0.0.75 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-xl8rx subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4a15c8c571 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3439 identityLabels="k8s:app=ceph-object-controller-detect-version,k8s:batch.kubernetes.io/controller-uid=0c31cb59-0318-44b4-be08-0d7854d2786a,k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version,k8s:controller-uid=0c31cb59-0318-44b4-be08-0d7854d2786a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=ceph-object-controller-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.75 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-xl8rx subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=ceph-object-controller-detect-version;k8s:batch.kubernetes.io/controller-uid=0c31cb59-0318-44b4-be08-0d7854d2786a;k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version;k8s:controller-uid=0c31cb59-0318-44b4-be08-0d7854d2786a;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=ceph-object-controller-detect-version;k8s:rook-version=v1.15.9;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=4a15c8c571 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3439 identity=63856 identityLabels="k8s:app=ceph-object-controller-detect-version,k8s:batch.kubernetes.io/controller-uid=0c31cb59-0318-44b4-be08-0d7854d2786a,k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version,k8s:controller-uid=0c31cb59-0318-44b4-be08-0d7854d2786a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=ceph-object-controller-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.75 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-xl8rx oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4a15c8c571 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3439 identity=63856 ipv4=10.0.0.75 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-xl8rx subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=4a15c8c571 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3439 identity=63856 ipv4=10.0.0.75 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-xl8rx subsys=endpoint level=info msg="Successful endpoint creation" containerID=4a15c8c571 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3439 identity=63856 ipv4=10.0.0.75 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-xl8rx subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=4a15c8c571 endpointID=3439 k8sNamespace=openstack k8sPodName=ceph-object-controller-detect-version-xl8rx subsys=daemon level=info msg="Releasing key" key="[k8s:app=ceph-object-controller-detect-version k8s:batch.kubernetes.io/controller-uid=0c31cb59-0318-44b4-be08-0d7854d2786a k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version k8s:controller-uid=0c31cb59-0318-44b4-be08-0d7854d2786a k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=ceph-object-controller-detect-version k8s:rook-version=v1.15.9]" subsys=allocator level=info msg="Removed endpoint" containerID=4a15c8c571 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3439 identity=63856 ipv4=10.0.0.75 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-xl8rx subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.119 7dd40ead-47f7-489e-8f10-a99f0d974248 default }" containerID=5a958316c92da6e20f98fa487056d918fd63ddb63697020699a4b842f3405754 datapathConfiguration="&{false false false false false }" interface=lxca7549f660263 k8sPodName=local-path-storage/helper-pod-create-pvc-6601f516-420f-4a92-8e75-3777b290000d labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5a958316c9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1595 ipv4=10.0.0.119 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-6601f516-420f-4a92-8e75-3777b290000d subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5a958316c9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1595 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.119 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-6601f516-420f-4a92-8e75-3777b290000d subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5a958316c9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1595 identity=16985 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.119 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-6601f516-420f-4a92-8e75-3777b290000d oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5a958316c9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1595 identity=16985 ipv4=10.0.0.119 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-6601f516-420f-4a92-8e75-3777b290000d subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=5a958316c9 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1595 identity=16985 ipv4=10.0.0.119 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-6601f516-420f-4a92-8e75-3777b290000d subsys=endpoint level=info msg="Successful endpoint creation" containerID=5a958316c9 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1595 identity=16985 ipv4=10.0.0.119 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-6601f516-420f-4a92-8e75-3777b290000d subsys=daemon level=info msg="Delete endpoint request" containerID=5a958316c9 endpointID=1595 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-6601f516-420f-4a92-8e75-3777b290000d subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=5a958316c9 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1595 identity=16985 ipv4=10.0.0.119 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-6601f516-420f-4a92-8e75-3777b290000d subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.4 daa2bf06-d325-4317-ae93-a5511c9ad3c4 default }" containerID=11a15a83a04484d485201c54aa20c63706fdc9f02aab4e9f62882dd66453f0ef datapathConfiguration="&{false false false false false }" interface=lxcc70fc0c2e57c k8sPodName=openstack/rabbitmq-glance-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=11a15a83a0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2797 ipv4=10.0.0.4 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=11a15a83a0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2797 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-glance,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0" ipv4=10.0.0.4 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-glance;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=11a15a83a0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2797 identity=5340 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-glance,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0" ipv4=10.0.0.4 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=11a15a83a0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2797 identity=5340 ipv4=10.0.0.4 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=11a15a83a0 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2797 identity=5340 ipv4=10.0.0.4 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=11a15a83a0 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2797 identity=5340 ipv4=10.0.0.4 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.214 d9d56d49-ebd5-4431-a323-c495a92cb31b default }" containerID=3a504ffe39e995ab6900d43a4ffae97553d708877a94f1d42e9a1c4d0840c980 datapathConfiguration="&{false false false false false }" interface=lxc4e07980d5245 k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-bwfng labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3a504ffe39 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=244 ipv4=10.0.0.214 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-bwfng subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3a504ffe39 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=244 identityLabels="k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io,k8s:app.kubernetes.io/created-by=rook-ceph-operator,k8s:app.kubernetes.io/instance=ceph,k8s:app.kubernetes.io/managed-by=rook-ceph-operator,k8s:app.kubernetes.io/name=ceph-rgw,k8s:app.kubernetes.io/part-of=ceph,k8s:app=rook-ceph-rgw,k8s:ceph_daemon_id=ceph,k8s:ceph_daemon_type=rgw,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw,k8s:io.kubernetes.pod.namespace=openstack,k8s:rgw=ceph,k8s:rook.io/operator-namespace=rook-ceph,k8s:rook_cluster=openstack,k8s:rook_object_store=ceph" ipv4=10.0.0.214 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-bwfng subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=3a504ffe39 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=244 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.214 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-bwfng line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=rook-ceph-rgw;k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io;k8s:app.kubernetes.io/created-by=rook-ceph-operator;k8s:app.kubernetes.io/instance=ceph;k8s:app.kubernetes.io/managed-by=rook-ceph-operator;k8s:app.kubernetes.io/name=ceph-rgw;k8s:app.kubernetes.io/part-of=ceph;k8s:ceph_daemon_id=ceph;k8s:ceph_daemon_type=rgw;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw;k8s:io.kubernetes.pod.namespace=openstack;k8s:rgw=ceph;k8s:rook.io/operator-namespace=rook-ceph;k8s:rook_cluster=openstack;k8s:rook_object_store=ceph;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3a504ffe39 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=244 identity=5411 identityLabels="k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io,k8s:app.kubernetes.io/created-by=rook-ceph-operator,k8s:app.kubernetes.io/instance=ceph,k8s:app.kubernetes.io/managed-by=rook-ceph-operator,k8s:app.kubernetes.io/name=ceph-rgw,k8s:app.kubernetes.io/part-of=ceph,k8s:app=rook-ceph-rgw,k8s:ceph_daemon_id=ceph,k8s:ceph_daemon_type=rgw,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw,k8s:io.kubernetes.pod.namespace=openstack,k8s:rgw=ceph,k8s:rook.io/operator-namespace=rook-ceph,k8s:rook_cluster=openstack,k8s:rook_object_store=ceph" ipv4=10.0.0.214 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-bwfng oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3a504ffe39 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=244 identity=5411 ipv4=10.0.0.214 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-bwfng subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.164 53273cb6-4b45-492f-8ab8-2aac4ded4ac1 default }" containerID=18cb06282313f98a2e271e4de496b4f674656958dfd87a77fe4d9e224303a41a datapathConfiguration="&{false false false false false }" interface=lxcd789b199241e k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-8v5pq labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=18cb062823 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=940 ipv4=10.0.0.164 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-8v5pq subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=18cb062823 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=940 identityLabels="k8s:app=rook-ceph-crashcollector,k8s:ceph-version=18.2.7-0,k8s:ceph_daemon_id=crash,k8s:crashcollector=crash,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default,k8s:io.kubernetes.pod.namespace=openstack,k8s:node_name=instance,k8s:rook_cluster=openstack" ipv4=10.0.0.164 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-8v5pq subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-crashcollector;k8s:ceph-version=18.2.7-0;k8s:ceph_daemon_id=crash;k8s:crashcollector=crash;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default;k8s:io.kubernetes.pod.namespace=openstack;k8s:node_name=instance;k8s:rook_cluster=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=18cb062823 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=940 identity=9377 identityLabels="k8s:app=rook-ceph-crashcollector,k8s:ceph-version=18.2.7-0,k8s:ceph_daemon_id=crash,k8s:crashcollector=crash,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default,k8s:io.kubernetes.pod.namespace=openstack,k8s:node_name=instance,k8s:rook_cluster=openstack" ipv4=10.0.0.164 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-8v5pq oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=18cb062823 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=940 identity=9377 ipv4=10.0.0.164 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-8v5pq subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=3a504ffe39 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=244 identity=5411 ipv4=10.0.0.214 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-bwfng subsys=endpoint level=info msg="Successful endpoint creation" containerID=3a504ffe39 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=244 identity=5411 ipv4=10.0.0.214 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-bwfng subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=18cb062823 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=940 identity=9377 ipv4=10.0.0.164 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-8v5pq subsys=endpoint level=info msg="Successful endpoint creation" containerID=18cb062823 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=940 identity=9377 ipv4=10.0.0.164 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-8v5pq subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.180 ffc4aea1-cb30-4833-ac37-012fd233f580 default }" containerID=cef2356ad70a44ab23647c9e0f0f1ff3349a2257c79c9d8ab23277955ca5f06d datapathConfiguration="&{false false false false false }" interface=lxcb41543467237 k8sPodName=openstack/glance-db-init-jx6j5 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=cef2356ad7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=54 ipv4=10.0.0.180 ipv6= k8sPodName=openstack/glance-db-init-jx6j5 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=cef2356ad7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=54 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=2406cfa9-68f7-4a47-a901-62249688898f,k8s:batch.kubernetes.io/job-name=glance-db-init,k8s:component=db-init,k8s:controller-uid=2406cfa9-68f7-4a47-a901-62249688898f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-init,k8s:release_group=glance" ipv4=10.0.0.180 ipv6= k8sPodName=openstack/glance-db-init-jx6j5 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=2406cfa9-68f7-4a47-a901-62249688898f;k8s:batch.kubernetes.io/job-name=glance-db-init;k8s:component=db-init;k8s:controller-uid=2406cfa9-68f7-4a47-a901-62249688898f;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-db-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=cef2356ad7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=54 identity=5404 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=2406cfa9-68f7-4a47-a901-62249688898f,k8s:batch.kubernetes.io/job-name=glance-db-init,k8s:component=db-init,k8s:controller-uid=2406cfa9-68f7-4a47-a901-62249688898f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-init,k8s:release_group=glance" ipv4=10.0.0.180 ipv6= k8sPodName=openstack/glance-db-init-jx6j5 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=cef2356ad7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=54 identity=5404 ipv4=10.0.0.180 ipv6= k8sPodName=openstack/glance-db-init-jx6j5 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=cef2356ad7 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=54 identity=5404 ipv4=10.0.0.180 ipv6= k8sPodName=openstack/glance-db-init-jx6j5 subsys=endpoint level=info msg="Successful endpoint creation" containerID=cef2356ad7 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=54 identity=5404 ipv4=10.0.0.180 ipv6= k8sPodName=openstack/glance-db-init-jx6j5 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=cef2356ad7 endpointID=54 k8sNamespace=openstack k8sPodName=glance-db-init-jx6j5 subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=2406cfa9-68f7-4a47-a901-62249688898f k8s:batch.kubernetes.io/job-name=glance-db-init k8s:component=db-init k8s:controller-uid=2406cfa9-68f7-4a47-a901-62249688898f k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-db-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=cef2356ad7 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=54 identity=5404 ipv4=10.0.0.180 ipv6= k8sPodName=openstack/glance-db-init-jx6j5 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.201 ee5c197a-116d-465a-a064-c7625799e5e5 default }" containerID=8a65f2e293b5d2319c7ad9fd7513821b20ffcc693fb7e785ddfc8c2a4225a3c0 datapathConfiguration="&{false false false false false }" interface=lxcf85b8bafc2ee k8sPodName=openstack/glance-db-sync-5q5pd labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8a65f2e293 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1722 ipv4=10.0.0.201 ipv6= k8sPodName=openstack/glance-db-sync-5q5pd subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8a65f2e293 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1722 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=dc075a5f-be81-4320-88d6-4e4652356a50,k8s:batch.kubernetes.io/job-name=glance-db-sync,k8s:component=db-sync,k8s:controller-uid=dc075a5f-be81-4320-88d6-4e4652356a50,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-sync,k8s:release_group=glance" ipv4=10.0.0.201 ipv6= k8sPodName=openstack/glance-db-sync-5q5pd subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=dc075a5f-be81-4320-88d6-4e4652356a50;k8s:batch.kubernetes.io/job-name=glance-db-sync;k8s:component=db-sync;k8s:controller-uid=dc075a5f-be81-4320-88d6-4e4652356a50;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-db-sync;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8a65f2e293 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1722 identity=61203 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=dc075a5f-be81-4320-88d6-4e4652356a50,k8s:batch.kubernetes.io/job-name=glance-db-sync,k8s:component=db-sync,k8s:controller-uid=dc075a5f-be81-4320-88d6-4e4652356a50,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-sync,k8s:release_group=glance" ipv4=10.0.0.201 ipv6= k8sPodName=openstack/glance-db-sync-5q5pd oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=8a65f2e293 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1722 identity=61203 ipv4=10.0.0.201 ipv6= k8sPodName=openstack/glance-db-sync-5q5pd subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=8a65f2e293 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1722 identity=61203 ipv4=10.0.0.201 ipv6= k8sPodName=openstack/glance-db-sync-5q5pd subsys=endpoint level=info msg="Successful endpoint creation" containerID=8a65f2e293 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1722 identity=61203 ipv4=10.0.0.201 ipv6= k8sPodName=openstack/glance-db-sync-5q5pd subsys=daemon level=info msg="Delete endpoint request" containerID=8a65f2e293 endpointID=1722 k8sNamespace=openstack k8sPodName=glance-db-sync-5q5pd subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=dc075a5f-be81-4320-88d6-4e4652356a50 k8s:batch.kubernetes.io/job-name=glance-db-sync k8s:component=db-sync k8s:controller-uid=dc075a5f-be81-4320-88d6-4e4652356a50 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-db-sync k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=8a65f2e293 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1722 identity=61203 ipv4=10.0.0.201 ipv6= k8sPodName=openstack/glance-db-sync-5q5pd subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.109 60f4c979-b583-4ddf-a4f0-d5d333dd7087 default }" containerID=6bdcf0b0f9c97c3f8d8925e79c620d714c3d90f0a94f9f1f7a79ff8224e7b3a5 datapathConfiguration="&{false false false false false }" interface=lxcd7904317a49d k8sPodName=openstack/glance-rabbit-init-czv77 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6bdcf0b0f9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2765 ipv4=10.0.0.109 ipv6= k8sPodName=openstack/glance-rabbit-init-czv77 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6bdcf0b0f9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2765 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=267cb371-5bb1-49b7-a41d-685063f4023a,k8s:batch.kubernetes.io/job-name=glance-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=267cb371-5bb1-49b7-a41d-685063f4023a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-rabbit-init,k8s:release_group=glance" ipv4=10.0.0.109 ipv6= k8sPodName=openstack/glance-rabbit-init-czv77 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=6bdcf0b0f9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2765 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.109 ipv6= k8sPodName=openstack/glance-rabbit-init-czv77 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=267cb371-5bb1-49b7-a41d-685063f4023a;k8s:batch.kubernetes.io/job-name=glance-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=267cb371-5bb1-49b7-a41d-685063f4023a;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-rabbit-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6bdcf0b0f9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2765 identity=3153 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=267cb371-5bb1-49b7-a41d-685063f4023a,k8s:batch.kubernetes.io/job-name=glance-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=267cb371-5bb1-49b7-a41d-685063f4023a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-rabbit-init,k8s:release_group=glance" ipv4=10.0.0.109 ipv6= k8sPodName=openstack/glance-rabbit-init-czv77 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6bdcf0b0f9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2765 identity=3153 ipv4=10.0.0.109 ipv6= k8sPodName=openstack/glance-rabbit-init-czv77 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=6bdcf0b0f9 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2765 identity=3153 ipv4=10.0.0.109 ipv6= k8sPodName=openstack/glance-rabbit-init-czv77 subsys=endpoint level=info msg="Successful endpoint creation" containerID=6bdcf0b0f9 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2765 identity=3153 ipv4=10.0.0.109 ipv6= k8sPodName=openstack/glance-rabbit-init-czv77 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=6bdcf0b0f9 endpointID=2765 k8sNamespace=openstack k8sPodName=glance-rabbit-init-czv77 subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=267cb371-5bb1-49b7-a41d-685063f4023a k8s:batch.kubernetes.io/job-name=glance-rabbit-init k8s:component=rabbit-init k8s:controller-uid=267cb371-5bb1-49b7-a41d-685063f4023a k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-rabbit-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=6bdcf0b0f9 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2765 identity=3153 ipv4=10.0.0.109 ipv6= k8sPodName=openstack/glance-rabbit-init-czv77 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.132 426c4b79-4012-4a9d-9e9a-10877c5631e0 default }" containerID=bd8ebc109a43f9cf62314d8414cd04dbfedbac06deb9426e46fd1396ec69b86a datapathConfiguration="&{false false false false false }" interface=lxcc4a2541a76b9 k8sPodName=openstack/glance-ks-service-cjwds labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=bd8ebc109a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=564 ipv4=10.0.0.132 ipv6= k8sPodName=openstack/glance-ks-service-cjwds subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=bd8ebc109a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=564 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=8ad8ff13-ba5d-4ae1-b9d4-b81804e34dc7,k8s:batch.kubernetes.io/job-name=glance-ks-service,k8s:component=ks-service,k8s:controller-uid=8ad8ff13-ba5d-4ae1-b9d4-b81804e34dc7,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-service,k8s:release_group=glance" ipv4=10.0.0.132 ipv6= k8sPodName=openstack/glance-ks-service-cjwds subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=8ad8ff13-ba5d-4ae1-b9d4-b81804e34dc7;k8s:batch.kubernetes.io/job-name=glance-ks-service;k8s:component=ks-service;k8s:controller-uid=8ad8ff13-ba5d-4ae1-b9d4-b81804e34dc7;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-service;k8s:release_group=glance;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=bd8ebc109a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=564 identity=45549 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=8ad8ff13-ba5d-4ae1-b9d4-b81804e34dc7,k8s:batch.kubernetes.io/job-name=glance-ks-service,k8s:component=ks-service,k8s:controller-uid=8ad8ff13-ba5d-4ae1-b9d4-b81804e34dc7,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-service,k8s:release_group=glance" ipv4=10.0.0.132 ipv6= k8sPodName=openstack/glance-ks-service-cjwds oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=bd8ebc109a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=564 identity=45549 ipv4=10.0.0.132 ipv6= k8sPodName=openstack/glance-ks-service-cjwds subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=bd8ebc109a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=564 identity=45549 ipv4=10.0.0.132 ipv6= k8sPodName=openstack/glance-ks-service-cjwds subsys=endpoint level=info msg="Successful endpoint creation" containerID=bd8ebc109a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=564 identity=45549 ipv4=10.0.0.132 ipv6= k8sPodName=openstack/glance-ks-service-cjwds subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=bd8ebc109a endpointID=564 k8sNamespace=openstack k8sPodName=glance-ks-service-cjwds subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=8ad8ff13-ba5d-4ae1-b9d4-b81804e34dc7 k8s:batch.kubernetes.io/job-name=glance-ks-service k8s:component=ks-service k8s:controller-uid=8ad8ff13-ba5d-4ae1-b9d4-b81804e34dc7 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-service k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=bd8ebc109a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=564 identity=45549 ipv4=10.0.0.132 ipv6= k8sPodName=openstack/glance-ks-service-cjwds subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.6 b943c406-6b60-4a74-9301-73a81772abe8 default }" containerID=86e01bc656c140eadd427f9de826010d1c1523ec1c986b9aae60f860cac63588 datapathConfiguration="&{false false false false false }" interface=lxc2bd983bdd8e7 k8sPodName=openstack/glance-ks-endpoints-hs96z labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=86e01bc656 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=23 ipv4=10.0.0.6 ipv6= k8sPodName=openstack/glance-ks-endpoints-hs96z subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=86e01bc656 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=23 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=cfb2e63c-c71a-4b6a-b0fd-76c2c48194df,k8s:batch.kubernetes.io/job-name=glance-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=cfb2e63c-c71a-4b6a-b0fd-76c2c48194df,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-endpoints,k8s:release_group=glance" ipv4=10.0.0.6 ipv6= k8sPodName=openstack/glance-ks-endpoints-hs96z subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=cfb2e63c-c71a-4b6a-b0fd-76c2c48194df;k8s:batch.kubernetes.io/job-name=glance-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=cfb2e63c-c71a-4b6a-b0fd-76c2c48194df;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-endpoints;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=86e01bc656 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=23 identity=4416 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=cfb2e63c-c71a-4b6a-b0fd-76c2c48194df,k8s:batch.kubernetes.io/job-name=glance-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=cfb2e63c-c71a-4b6a-b0fd-76c2c48194df,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-endpoints,k8s:release_group=glance" ipv4=10.0.0.6 ipv6= k8sPodName=openstack/glance-ks-endpoints-hs96z oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=86e01bc656 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=23 identity=4416 ipv4=10.0.0.6 ipv6= k8sPodName=openstack/glance-ks-endpoints-hs96z subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=86e01bc656 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=23 identity=4416 ipv4=10.0.0.6 ipv6= k8sPodName=openstack/glance-ks-endpoints-hs96z subsys=endpoint level=info msg="Successful endpoint creation" containerID=86e01bc656 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=23 identity=4416 ipv4=10.0.0.6 ipv6= k8sPodName=openstack/glance-ks-endpoints-hs96z subsys=daemon level=info msg="Delete endpoint request" containerID=86e01bc656 endpointID=23 k8sNamespace=openstack k8sPodName=glance-ks-endpoints-hs96z subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=cfb2e63c-c71a-4b6a-b0fd-76c2c48194df k8s:batch.kubernetes.io/job-name=glance-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=cfb2e63c-c71a-4b6a-b0fd-76c2c48194df k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-endpoints k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=86e01bc656 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=23 identity=4416 ipv4=10.0.0.6 ipv6= k8sPodName=openstack/glance-ks-endpoints-hs96z subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.157 3976a068-6b8f-4e32-99ac-f182d4dfc6e9 default }" containerID=a9d48a47c26e099f25d067f74b62643126a1cca58926653737bd19131b88fa2d datapathConfiguration="&{false false false false false }" interface=lxcb3847a1a65ae k8sPodName=openstack/glance-ks-user-frb9t labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a9d48a47c2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=226 ipv4=10.0.0.157 ipv6= k8sPodName=openstack/glance-ks-user-frb9t subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a9d48a47c2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=226 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=9210cb94-31fc-410f-9be6-82f9c7e3379f,k8s:batch.kubernetes.io/job-name=glance-ks-user,k8s:component=ks-user,k8s:controller-uid=9210cb94-31fc-410f-9be6-82f9c7e3379f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-user,k8s:release_group=glance" ipv4=10.0.0.157 ipv6= k8sPodName=openstack/glance-ks-user-frb9t subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=9210cb94-31fc-410f-9be6-82f9c7e3379f;k8s:batch.kubernetes.io/job-name=glance-ks-user;k8s:component=ks-user;k8s:controller-uid=9210cb94-31fc-410f-9be6-82f9c7e3379f;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-user;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a9d48a47c2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=226 identity=44709 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=9210cb94-31fc-410f-9be6-82f9c7e3379f,k8s:batch.kubernetes.io/job-name=glance-ks-user,k8s:component=ks-user,k8s:controller-uid=9210cb94-31fc-410f-9be6-82f9c7e3379f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-user,k8s:release_group=glance" ipv4=10.0.0.157 ipv6= k8sPodName=openstack/glance-ks-user-frb9t oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a9d48a47c2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=226 identity=44709 ipv4=10.0.0.157 ipv6= k8sPodName=openstack/glance-ks-user-frb9t subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a9d48a47c2 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=226 identity=44709 ipv4=10.0.0.157 ipv6= k8sPodName=openstack/glance-ks-user-frb9t subsys=endpoint level=info msg="Successful endpoint creation" containerID=a9d48a47c2 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=226 identity=44709 ipv4=10.0.0.157 ipv6= k8sPodName=openstack/glance-ks-user-frb9t subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=a9d48a47c2 endpointID=226 k8sNamespace=openstack k8sPodName=glance-ks-user-frb9t subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=9210cb94-31fc-410f-9be6-82f9c7e3379f k8s:batch.kubernetes.io/job-name=glance-ks-user k8s:component=ks-user k8s:controller-uid=9210cb94-31fc-410f-9be6-82f9c7e3379f k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-user k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=a9d48a47c2 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=226 identity=44709 ipv4=10.0.0.157 ipv6= k8sPodName=openstack/glance-ks-user-frb9t subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.204 9ce42191-2ea2-4b63-907c-d0149574db5b default }" containerID=3bbcb0c50b45751992349774202b4b13bd16a01fa01ee94130226c142fbcd330 datapathConfiguration="&{false false false false false }" interface=lxc0ef462d01fd6 k8sPodName=openstack/glance-metadefs-load-4q2dj labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3bbcb0c50b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1955 ipv4=10.0.0.204 ipv6= k8sPodName=openstack/glance-metadefs-load-4q2dj subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3bbcb0c50b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1955 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=a9f0341d-1cd9-494b-85f3-90bbd104778f,k8s:batch.kubernetes.io/job-name=glance-metadefs-load,k8s:component=metadefs_load,k8s:controller-uid=a9f0341d-1cd9-494b-85f3-90bbd104778f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-metadefs-load,k8s:release_group=glance" ipv4=10.0.0.204 ipv6= k8sPodName=openstack/glance-metadefs-load-4q2dj subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=a9f0341d-1cd9-494b-85f3-90bbd104778f;k8s:batch.kubernetes.io/job-name=glance-metadefs-load;k8s:component=metadefs_load;k8s:controller-uid=a9f0341d-1cd9-494b-85f3-90bbd104778f;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-metadefs-load;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3bbcb0c50b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1955 identity=23517 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=a9f0341d-1cd9-494b-85f3-90bbd104778f,k8s:batch.kubernetes.io/job-name=glance-metadefs-load,k8s:component=metadefs_load,k8s:controller-uid=a9f0341d-1cd9-494b-85f3-90bbd104778f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-metadefs-load,k8s:release_group=glance" ipv4=10.0.0.204 ipv6= k8sPodName=openstack/glance-metadefs-load-4q2dj oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=3bbcb0c50b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1955 identity=23517 ipv4=10.0.0.204 ipv6= k8sPodName=openstack/glance-metadefs-load-4q2dj subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=3bbcb0c50b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1955 identity=23517 ipv4=10.0.0.204 ipv6= k8sPodName=openstack/glance-metadefs-load-4q2dj subsys=endpoint level=info msg="Successful endpoint creation" containerID=3bbcb0c50b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1955 identity=23517 ipv4=10.0.0.204 ipv6= k8sPodName=openstack/glance-metadefs-load-4q2dj subsys=daemon level=info msg="Delete endpoint request" containerID=3bbcb0c50b endpointID=1955 k8sNamespace=openstack k8sPodName=glance-metadefs-load-4q2dj subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=a9f0341d-1cd9-494b-85f3-90bbd104778f k8s:batch.kubernetes.io/job-name=glance-metadefs-load k8s:component=metadefs_load k8s:controller-uid=a9f0341d-1cd9-494b-85f3-90bbd104778f k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-metadefs-load k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=3bbcb0c50b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1955 identity=23517 ipv4=10.0.0.204 ipv6= k8sPodName=openstack/glance-metadefs-load-4q2dj subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.245 2259ac07-90c9-4de6-ba8d-7b6696d8da28 default }" containerID=6fc87b3add31e8858424bfeeb509eaa23e4f54fbda0d4a4b65ba6a5b6f7d8c79 datapathConfiguration="&{false false false false false }" interface=lxcf8bd91b2c2f2 k8sPodName=openstack/glance-storage-init-2fj5k labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6fc87b3add datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=292 ipv4=10.0.0.245 ipv6= k8sPodName=openstack/glance-storage-init-2fj5k subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6fc87b3add datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=292 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=97b66a95-4c23-4f9f-9cb8-4ac30ebec46b,k8s:batch.kubernetes.io/job-name=glance-storage-init,k8s:component=storage-init,k8s:controller-uid=97b66a95-4c23-4f9f-9cb8-4ac30ebec46b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-storage-init,k8s:release_group=glance" ipv4=10.0.0.245 ipv6= k8sPodName=openstack/glance-storage-init-2fj5k subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=97b66a95-4c23-4f9f-9cb8-4ac30ebec46b;k8s:batch.kubernetes.io/job-name=glance-storage-init;k8s:component=storage-init;k8s:controller-uid=97b66a95-4c23-4f9f-9cb8-4ac30ebec46b;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-storage-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6fc87b3add datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=292 identity=11372 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=97b66a95-4c23-4f9f-9cb8-4ac30ebec46b,k8s:batch.kubernetes.io/job-name=glance-storage-init,k8s:component=storage-init,k8s:controller-uid=97b66a95-4c23-4f9f-9cb8-4ac30ebec46b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-storage-init,k8s:release_group=glance" ipv4=10.0.0.245 ipv6= k8sPodName=openstack/glance-storage-init-2fj5k oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6fc87b3add datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=292 identity=11372 ipv4=10.0.0.245 ipv6= k8sPodName=openstack/glance-storage-init-2fj5k subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=6fc87b3add datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=292 identity=11372 ipv4=10.0.0.245 ipv6= k8sPodName=openstack/glance-storage-init-2fj5k subsys=endpoint level=info msg="Successful endpoint creation" containerID=6fc87b3add datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=292 identity=11372 ipv4=10.0.0.245 ipv6= k8sPodName=openstack/glance-storage-init-2fj5k subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=6fc87b3add endpointID=292 k8sNamespace=openstack k8sPodName=glance-storage-init-2fj5k subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=97b66a95-4c23-4f9f-9cb8-4ac30ebec46b k8s:batch.kubernetes.io/job-name=glance-storage-init k8s:component=storage-init k8s:controller-uid=97b66a95-4c23-4f9f-9cb8-4ac30ebec46b k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-storage-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=6fc87b3add datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=292 identity=11372 ipv4=10.0.0.245 ipv6= k8sPodName=openstack/glance-storage-init-2fj5k subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.80 1193d406-5b3a-442f-a0df-db7ee17e6873 default }" containerID=da5c70e47d1e4e7e45759799a62b5b36b883340a86e3c7709b977e3085420a40 datapathConfiguration="&{false false false false false }" interface=lxcec6d9b269295 k8sPodName=openstack/glance-api-5fdb4fcc5-p889f labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=da5c70e47d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=231 ipv4=10.0.0.80 ipv6= k8sPodName=openstack/glance-api-5fdb4fcc5-p889f subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=da5c70e47d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=231 identityLabels="k8s:application=glance,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=glance" ipv4=10.0.0.80 ipv6= k8sPodName=openstack/glance-api-5fdb4fcc5-p889f subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=da5c70e47d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=231 identity=53346 identityLabels="k8s:application=glance,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=glance" ipv4=10.0.0.80 ipv6= k8sPodName=openstack/glance-api-5fdb4fcc5-p889f oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=da5c70e47d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=231 identity=53346 ipv4=10.0.0.80 ipv6= k8sPodName=openstack/glance-api-5fdb4fcc5-p889f subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=da5c70e47d datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=231 identity=53346 ipv4=10.0.0.80 ipv6= k8sPodName=openstack/glance-api-5fdb4fcc5-p889f subsys=endpoint level=info msg="Successful endpoint creation" containerID=da5c70e47d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=231 identity=53346 ipv4=10.0.0.80 ipv6= k8sPodName=openstack/glance-api-5fdb4fcc5-p889f subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.33 fe9f2157-639a-41bc-ad92-a9ef5e194029 default }" containerID=5d76c04d34450b8dc5690faf4062be79c14161d931769a4a6baeb500d7db814f datapathConfiguration="&{false false false false false }" interface=lxc7ed717632516 k8sPodName=openstack/staffeln-api-86659c556b-x2wjc labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5d76c04d34 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1038 ipv4=10.0.0.33 ipv6= k8sPodName=openstack/staffeln-api-86659c556b-x2wjc subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5d76c04d34 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1038 identityLabels="k8s:application=staffeln,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.33 ipv6= k8sPodName=openstack/staffeln-api-86659c556b-x2wjc subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Create endpoint request" addressing="&{10.0.0.35 0bf8ad68-e9fd-4656-926b-bd0d482c99ef default }" containerID=cb248db57cb768cbaf6da2bd22579a92758ce023749f5e1fa630ce7387714e91 datapathConfiguration="&{false false false false false }" interface=lxc6a76aa7c1140 k8sPodName=openstack/staffeln-conductor-76dddc69d7-ccgvt labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=cb248db57c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=440 ipv4=10.0.0.35 ipv6= k8sPodName=openstack/staffeln-conductor-76dddc69d7-ccgvt subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=cb248db57c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=440 identityLabels="k8s:application=staffeln,k8s:component=conductor,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.35 ipv6= k8sPodName=openstack/staffeln-conductor-76dddc69d7-ccgvt subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=cb248db57c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=440 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.35 ipv6= k8sPodName=openstack/staffeln-conductor-76dddc69d7-ccgvt line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=staffeln;" subsys=allocator level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Identity of endpoint changed" containerID=5d76c04d34 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1038 identity=46119 identityLabels="k8s:application=staffeln,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.33 ipv6= k8sPodName=openstack/staffeln-api-86659c556b-x2wjc oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5d76c04d34 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1038 identity=46119 ipv4=10.0.0.33 ipv6= k8sPodName=openstack/staffeln-api-86659c556b-x2wjc subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:component=conductor;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=cb248db57c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=440 identity=1917 identityLabels="k8s:application=staffeln,k8s:component=conductor,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.35 ipv6= k8sPodName=openstack/staffeln-conductor-76dddc69d7-ccgvt oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=cb248db57c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=440 identity=1917 ipv4=10.0.0.35 ipv6= k8sPodName=openstack/staffeln-conductor-76dddc69d7-ccgvt subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.157 b75b826a-3c50-4ead-b825-f392f34fca4f default }" containerID=8751fc19e3af6f6436c40b1cacf6c465a910665501008267aac180998c618bb8 datapathConfiguration="&{false false false false false }" interface=lxcd7be85196573 k8sPodName=openstack/staffeln-db-init-kxwxw labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8751fc19e3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2051 ipv4=10.0.0.157 ipv6= k8sPodName=openstack/staffeln-db-init-kxwxw subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8751fc19e3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2051 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=3e6508a2-e17f-471b-afe8-4d06b64703e9,k8s:batch.kubernetes.io/job-name=staffeln-db-init,k8s:component=db-init,k8s:controller-uid=3e6508a2-e17f-471b-afe8-4d06b64703e9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-init,k8s:release_group=staffeln" ipv4=10.0.0.157 ipv6= k8sPodName=openstack/staffeln-db-init-kxwxw subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:batch.kubernetes.io/controller-uid=3e6508a2-e17f-471b-afe8-4d06b64703e9;k8s:batch.kubernetes.io/job-name=staffeln-db-init;k8s:component=db-init;k8s:controller-uid=3e6508a2-e17f-471b-afe8-4d06b64703e9;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=staffeln-db-init;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8751fc19e3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2051 identity=62979 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=3e6508a2-e17f-471b-afe8-4d06b64703e9,k8s:batch.kubernetes.io/job-name=staffeln-db-init,k8s:component=db-init,k8s:controller-uid=3e6508a2-e17f-471b-afe8-4d06b64703e9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-init,k8s:release_group=staffeln" ipv4=10.0.0.157 ipv6= k8sPodName=openstack/staffeln-db-init-kxwxw oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8751fc19e3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2051 identity=62979 ipv4=10.0.0.157 ipv6= k8sPodName=openstack/staffeln-db-init-kxwxw subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=5d76c04d34 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1038 identity=46119 ipv4=10.0.0.33 ipv6= k8sPodName=openstack/staffeln-api-86659c556b-x2wjc subsys=endpoint level=info msg="Successful endpoint creation" containerID=5d76c04d34 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1038 identity=46119 ipv4=10.0.0.33 ipv6= k8sPodName=openstack/staffeln-api-86659c556b-x2wjc subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=cb248db57c datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=440 identity=1917 ipv4=10.0.0.35 ipv6= k8sPodName=openstack/staffeln-conductor-76dddc69d7-ccgvt subsys=endpoint level=info msg="Successful endpoint creation" containerID=cb248db57c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=440 identity=1917 ipv4=10.0.0.35 ipv6= k8sPodName=openstack/staffeln-conductor-76dddc69d7-ccgvt subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=8751fc19e3 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2051 identity=62979 ipv4=10.0.0.157 ipv6= k8sPodName=openstack/staffeln-db-init-kxwxw subsys=endpoint level=info msg="Successful endpoint creation" containerID=8751fc19e3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2051 identity=62979 ipv4=10.0.0.157 ipv6= k8sPodName=openstack/staffeln-db-init-kxwxw subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=8751fc19e3 endpointID=2051 k8sNamespace=openstack k8sPodName=staffeln-db-init-kxwxw subsys=daemon level=info msg="Releasing key" key="[k8s:application=staffeln k8s:batch.kubernetes.io/controller-uid=3e6508a2-e17f-471b-afe8-4d06b64703e9 k8s:batch.kubernetes.io/job-name=staffeln-db-init k8s:component=db-init k8s:controller-uid=3e6508a2-e17f-471b-afe8-4d06b64703e9 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=staffeln-db-init k8s:release_group=staffeln]" subsys=allocator level=info msg="Removed endpoint" containerID=8751fc19e3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2051 identity=62979 ipv4=10.0.0.157 ipv6= k8sPodName=openstack/staffeln-db-init-kxwxw subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.57 ddb4e556-31eb-4b5e-b6ed-05c48d119ec4 default }" containerID=3356a133252a16292cc5d3b9f6d015f6e9b6378737de3ed647c2029140729d34 datapathConfiguration="&{false false false false false }" interface=lxcbee892d7f78c k8sPodName=openstack/staffeln-db-sync-fw9c9 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3356a13325 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3257 ipv4=10.0.0.57 ipv6= k8sPodName=openstack/staffeln-db-sync-fw9c9 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3356a13325 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3257 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=f8aacc10-8f0c-4afb-800d-58d717cc2898,k8s:batch.kubernetes.io/job-name=staffeln-db-sync,k8s:component=db-sync,k8s:controller-uid=f8aacc10-8f0c-4afb-800d-58d717cc2898,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-sync,k8s:release_group=staffeln" ipv4=10.0.0.57 ipv6= k8sPodName=openstack/staffeln-db-sync-fw9c9 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:batch.kubernetes.io/controller-uid=f8aacc10-8f0c-4afb-800d-58d717cc2898;k8s:batch.kubernetes.io/job-name=staffeln-db-sync;k8s:component=db-sync;k8s:controller-uid=f8aacc10-8f0c-4afb-800d-58d717cc2898;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=staffeln-db-sync;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3356a13325 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3257 identity=52710 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=f8aacc10-8f0c-4afb-800d-58d717cc2898,k8s:batch.kubernetes.io/job-name=staffeln-db-sync,k8s:component=db-sync,k8s:controller-uid=f8aacc10-8f0c-4afb-800d-58d717cc2898,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-sync,k8s:release_group=staffeln" ipv4=10.0.0.57 ipv6= k8sPodName=openstack/staffeln-db-sync-fw9c9 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3356a13325 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3257 identity=52710 ipv4=10.0.0.57 ipv6= k8sPodName=openstack/staffeln-db-sync-fw9c9 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=3356a13325 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3257 identity=52710 ipv4=10.0.0.57 ipv6= k8sPodName=openstack/staffeln-db-sync-fw9c9 subsys=endpoint level=info msg="Successful endpoint creation" containerID=3356a13325 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3257 identity=52710 ipv4=10.0.0.57 ipv6= k8sPodName=openstack/staffeln-db-sync-fw9c9 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=3356a13325 endpointID=3257 k8sNamespace=openstack k8sPodName=staffeln-db-sync-fw9c9 subsys=daemon level=info msg="Releasing key" key="[k8s:application=staffeln k8s:batch.kubernetes.io/controller-uid=f8aacc10-8f0c-4afb-800d-58d717cc2898 k8s:batch.kubernetes.io/job-name=staffeln-db-sync k8s:component=db-sync k8s:controller-uid=f8aacc10-8f0c-4afb-800d-58d717cc2898 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=staffeln-db-sync k8s:release_group=staffeln]" subsys=allocator level=info msg="Removed endpoint" containerID=3356a13325 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3257 identity=52710 ipv4=10.0.0.57 ipv6= k8sPodName=openstack/staffeln-db-sync-fw9c9 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.26 be8a7eeb-d141-49ba-9e6d-6d3252c5453f default }" containerID=92a87f223e9aaf3038942a9e859835460a6b1ca031c0e0b64b4b8de196f12506 datapathConfiguration="&{false false false false false }" interface=lxc7f85d15ddfe5 k8sPodName=local-path-storage/helper-pod-create-pvc-79e46bdf-bb74-4770-a57b-eca6b49b6e75 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=92a87f223e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=420 ipv4=10.0.0.26 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-79e46bdf-bb74-4770-a57b-eca6b49b6e75 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=92a87f223e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=420 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.26 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-79e46bdf-bb74-4770-a57b-eca6b49b6e75 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=92a87f223e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=420 identity=16985 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.26 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-79e46bdf-bb74-4770-a57b-eca6b49b6e75 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=92a87f223e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=420 identity=16985 ipv4=10.0.0.26 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-79e46bdf-bb74-4770-a57b-eca6b49b6e75 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=92a87f223e datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=420 identity=16985 ipv4=10.0.0.26 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-79e46bdf-bb74-4770-a57b-eca6b49b6e75 subsys=endpoint level=info msg="Successful endpoint creation" containerID=92a87f223e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=420 identity=16985 ipv4=10.0.0.26 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-79e46bdf-bb74-4770-a57b-eca6b49b6e75 subsys=daemon level=info msg="Delete endpoint request" containerID=92a87f223e endpointID=420 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-79e46bdf-bb74-4770-a57b-eca6b49b6e75 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=92a87f223e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=420 identity=16985 ipv4=10.0.0.26 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-79e46bdf-bb74-4770-a57b-eca6b49b6e75 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.251 a9f3ecba-2fee-4014-a20c-9fd8f04258c5 default }" containerID=0049ccac08f28de8d9b051f1ce06bd31641aa3694e9daebfe111b1d7c62f490f datapathConfiguration="&{false false false false false }" interface=lxc47946473bc73 k8sPodName=openstack/rabbitmq-cinder-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0049ccac08 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1949 ipv4=10.0.0.251 ipv6= k8sPodName=openstack/rabbitmq-cinder-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0049ccac08 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1949 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-cinder,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cinder-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-cinder-server-0" ipv4=10.0.0.251 ipv6= k8sPodName=openstack/rabbitmq-cinder-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-cinder;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cinder-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-cinder-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0049ccac08 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1949 identity=22978 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-cinder,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cinder-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-cinder-server-0" ipv4=10.0.0.251 ipv6= k8sPodName=openstack/rabbitmq-cinder-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0049ccac08 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1949 identity=22978 ipv4=10.0.0.251 ipv6= k8sPodName=openstack/rabbitmq-cinder-server-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=0049ccac08 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1949 identity=22978 ipv4=10.0.0.251 ipv6= k8sPodName=openstack/rabbitmq-cinder-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=0049ccac08 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1949 identity=22978 ipv4=10.0.0.251 ipv6= k8sPodName=openstack/rabbitmq-cinder-server-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.171 a38e703c-d5a2-437d-a39c-c104af59e2fa default }" containerID=6544890d0499981d0ef496c71ffc620951b767e2283dc45522ea89c7574a9ec0 datapathConfiguration="&{false false false false false }" interface=lxcf1229051681f k8sPodName=openstack/cinder-api-75d96b68b-75s9m labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6544890d04 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1017 ipv4=10.0.0.171 ipv6= k8sPodName=openstack/cinder-api-75d96b68b-75s9m subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6544890d04 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1017 identityLabels="k8s:application=cinder,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=cinder" ipv4=10.0.0.171 ipv6= k8sPodName=openstack/cinder-api-75d96b68b-75s9m subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=cinder;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=6544890d04 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1017 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.171 ipv6= k8sPodName=openstack/cinder-api-75d96b68b-75s9m line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=6544890d04 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1017 identity=36165 identityLabels="k8s:application=cinder,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=cinder" ipv4=10.0.0.171 ipv6= k8sPodName=openstack/cinder-api-75d96b68b-75s9m oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6544890d04 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1017 identity=36165 ipv4=10.0.0.171 ipv6= k8sPodName=openstack/cinder-api-75d96b68b-75s9m subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.20 a5e19906-6f6c-472c-b208-c37cdcab9139 default }" containerID=12c72dc970706b066a6891b1f781804dd119c71804265760c5e1efd72230b508 datapathConfiguration="&{false false false false false }" interface=lxc7d10aac376f4 k8sPodName=openstack/cinder-scheduler-7595cb9f66-zkrjx labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=12c72dc970 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=508 ipv4=10.0.0.20 ipv6= k8sPodName=openstack/cinder-scheduler-7595cb9f66-zkrjx subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=12c72dc970 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=508 identityLabels="k8s:application=cinder,k8s:component=scheduler,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-scheduler,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=cinder" ipv4=10.0.0.20 ipv6= k8sPodName=openstack/cinder-scheduler-7595cb9f66-zkrjx subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:component=scheduler;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-scheduler;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=12c72dc970 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=508 identity=22969 identityLabels="k8s:application=cinder,k8s:component=scheduler,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-scheduler,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=cinder" ipv4=10.0.0.20 ipv6= k8sPodName=openstack/cinder-scheduler-7595cb9f66-zkrjx oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=12c72dc970 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=508 identity=22969 ipv4=10.0.0.20 ipv6= k8sPodName=openstack/cinder-scheduler-7595cb9f66-zkrjx subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.93 3d906da4-6db2-4c84-889d-fd4a043d228b default }" containerID=c039fc7d8a3637286db82ae9d2f0531137980b0cedbd584bb88ff7431ea0ab49 datapathConfiguration="&{false false false false false }" interface=lxc78630b975155 k8sPodName=openstack/cinder-db-init-khcs6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c039fc7d8a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2256 ipv4=10.0.0.93 ipv6= k8sPodName=openstack/cinder-db-init-khcs6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c039fc7d8a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2256 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=eb7ee40d-9766-4cab-bea9-d9a20e7bb142,k8s:batch.kubernetes.io/job-name=cinder-db-init,k8s:component=db-init,k8s:controller-uid=eb7ee40d-9766-4cab-bea9-d9a20e7bb142,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-db-init,k8s:release_group=cinder" ipv4=10.0.0.93 ipv6= k8sPodName=openstack/cinder-db-init-khcs6 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=eb7ee40d-9766-4cab-bea9-d9a20e7bb142;k8s:batch.kubernetes.io/job-name=cinder-db-init;k8s:component=db-init;k8s:controller-uid=eb7ee40d-9766-4cab-bea9-d9a20e7bb142;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-db-init;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c039fc7d8a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2256 identity=9709 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=eb7ee40d-9766-4cab-bea9-d9a20e7bb142,k8s:batch.kubernetes.io/job-name=cinder-db-init,k8s:component=db-init,k8s:controller-uid=eb7ee40d-9766-4cab-bea9-d9a20e7bb142,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-db-init,k8s:release_group=cinder" ipv4=10.0.0.93 ipv6= k8sPodName=openstack/cinder-db-init-khcs6 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c039fc7d8a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2256 identity=9709 ipv4=10.0.0.93 ipv6= k8sPodName=openstack/cinder-db-init-khcs6 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=6544890d04 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1017 identity=36165 ipv4=10.0.0.171 ipv6= k8sPodName=openstack/cinder-api-75d96b68b-75s9m subsys=endpoint level=info msg="Successful endpoint creation" containerID=6544890d04 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1017 identity=36165 ipv4=10.0.0.171 ipv6= k8sPodName=openstack/cinder-api-75d96b68b-75s9m subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=12c72dc970 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=508 identity=22969 ipv4=10.0.0.20 ipv6= k8sPodName=openstack/cinder-scheduler-7595cb9f66-zkrjx subsys=endpoint level=info msg="Successful endpoint creation" containerID=12c72dc970 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=508 identity=22969 ipv4=10.0.0.20 ipv6= k8sPodName=openstack/cinder-scheduler-7595cb9f66-zkrjx subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=c039fc7d8a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2256 identity=9709 ipv4=10.0.0.93 ipv6= k8sPodName=openstack/cinder-db-init-khcs6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=c039fc7d8a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2256 identity=9709 ipv4=10.0.0.93 ipv6= k8sPodName=openstack/cinder-db-init-khcs6 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=c039fc7d8a endpointID=2256 k8sNamespace=openstack k8sPodName=cinder-db-init-khcs6 subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=eb7ee40d-9766-4cab-bea9-d9a20e7bb142 k8s:batch.kubernetes.io/job-name=cinder-db-init k8s:component=db-init k8s:controller-uid=eb7ee40d-9766-4cab-bea9-d9a20e7bb142 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-db-init k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=c039fc7d8a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2256 identity=9709 ipv4=10.0.0.93 ipv6= k8sPodName=openstack/cinder-db-init-khcs6 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.91 68828b34-e810-44e6-a697-81083dff0746 default }" containerID=5f915cbf4cf4e7e30041f5b91f0b2c4f1443acbc1d23155d96e46ab4af44ff64 datapathConfiguration="&{false false false false false }" interface=lxcb304614024da k8sPodName=openstack/cinder-db-sync-mpq4r labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5f915cbf4c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3773 ipv4=10.0.0.91 ipv6= k8sPodName=openstack/cinder-db-sync-mpq4r subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5f915cbf4c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3773 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=e84fa820-8a13-486e-8c0f-91690ced70d5,k8s:batch.kubernetes.io/job-name=cinder-db-sync,k8s:component=db-sync,k8s:controller-uid=e84fa820-8a13-486e-8c0f-91690ced70d5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-db-sync,k8s:release_group=cinder" ipv4=10.0.0.91 ipv6= k8sPodName=openstack/cinder-db-sync-mpq4r subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=e84fa820-8a13-486e-8c0f-91690ced70d5;k8s:batch.kubernetes.io/job-name=cinder-db-sync;k8s:component=db-sync;k8s:controller-uid=e84fa820-8a13-486e-8c0f-91690ced70d5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-db-sync;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5f915cbf4c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3773 identity=23569 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=e84fa820-8a13-486e-8c0f-91690ced70d5,k8s:batch.kubernetes.io/job-name=cinder-db-sync,k8s:component=db-sync,k8s:controller-uid=e84fa820-8a13-486e-8c0f-91690ced70d5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-db-sync,k8s:release_group=cinder" ipv4=10.0.0.91 ipv6= k8sPodName=openstack/cinder-db-sync-mpq4r oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=5f915cbf4c datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3773 identity=23569 ipv4=10.0.0.91 ipv6= k8sPodName=openstack/cinder-db-sync-mpq4r subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=5f915cbf4c datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3773 identity=23569 ipv4=10.0.0.91 ipv6= k8sPodName=openstack/cinder-db-sync-mpq4r subsys=endpoint level=info msg="Successful endpoint creation" containerID=5f915cbf4c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3773 identity=23569 ipv4=10.0.0.91 ipv6= k8sPodName=openstack/cinder-db-sync-mpq4r subsys=daemon level=info msg="Delete endpoint request" containerID=5f915cbf4c endpointID=3773 k8sNamespace=openstack k8sPodName=cinder-db-sync-mpq4r subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=e84fa820-8a13-486e-8c0f-91690ced70d5 k8s:batch.kubernetes.io/job-name=cinder-db-sync k8s:component=db-sync k8s:controller-uid=e84fa820-8a13-486e-8c0f-91690ced70d5 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-db-sync k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=5f915cbf4c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3773 identity=23569 ipv4=10.0.0.91 ipv6= k8sPodName=openstack/cinder-db-sync-mpq4r subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.34 3f9c0268-53c7-48dd-a603-ce0f93e96860 default }" containerID=9b8ff54809d8f6a89654845db5dba0412ce0c5f1be7d65feda0f4b3d6c8e6949 datapathConfiguration="&{false false false false false }" interface=lxced3b4364384d k8sPodName=openstack/cinder-rabbit-init-qkxzq labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9b8ff54809 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3890 ipv4=10.0.0.34 ipv6= k8sPodName=openstack/cinder-rabbit-init-qkxzq subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9b8ff54809 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3890 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=fb2b85bf-3ae7-4f8f-bc63-40d5ad118d86,k8s:batch.kubernetes.io/job-name=cinder-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=fb2b85bf-3ae7-4f8f-bc63-40d5ad118d86,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-rabbit-init,k8s:release_group=cinder" ipv4=10.0.0.34 ipv6= k8sPodName=openstack/cinder-rabbit-init-qkxzq subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=fb2b85bf-3ae7-4f8f-bc63-40d5ad118d86;k8s:batch.kubernetes.io/job-name=cinder-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=fb2b85bf-3ae7-4f8f-bc63-40d5ad118d86;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-rabbit-init;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9b8ff54809 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3890 identity=6657 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=fb2b85bf-3ae7-4f8f-bc63-40d5ad118d86,k8s:batch.kubernetes.io/job-name=cinder-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=fb2b85bf-3ae7-4f8f-bc63-40d5ad118d86,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-rabbit-init,k8s:release_group=cinder" ipv4=10.0.0.34 ipv6= k8sPodName=openstack/cinder-rabbit-init-qkxzq oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9b8ff54809 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3890 identity=6657 ipv4=10.0.0.34 ipv6= k8sPodName=openstack/cinder-rabbit-init-qkxzq subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=9b8ff54809 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3890 identity=6657 ipv4=10.0.0.34 ipv6= k8sPodName=openstack/cinder-rabbit-init-qkxzq subsys=endpoint level=info msg="Successful endpoint creation" containerID=9b8ff54809 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3890 identity=6657 ipv4=10.0.0.34 ipv6= k8sPodName=openstack/cinder-rabbit-init-qkxzq subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=9b8ff54809 endpointID=3890 k8sNamespace=openstack k8sPodName=cinder-rabbit-init-qkxzq subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=fb2b85bf-3ae7-4f8f-bc63-40d5ad118d86 k8s:batch.kubernetes.io/job-name=cinder-rabbit-init k8s:component=rabbit-init k8s:controller-uid=fb2b85bf-3ae7-4f8f-bc63-40d5ad118d86 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-rabbit-init k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=9b8ff54809 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3890 identity=6657 ipv4=10.0.0.34 ipv6= k8sPodName=openstack/cinder-rabbit-init-qkxzq subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.134 0423cb63-89c6-4a92-af13-d459a28aab15 default }" containerID=c2fd598b43ddf95537515ecb0c5c7cea8a5cb0df845e64fcd5d496ca39d8f097 datapathConfiguration="&{false false false false false }" interface=lxc67bc25fbf420 k8sPodName=openstack/cinder-ks-service-kzhf6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c2fd598b43 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=921 ipv4=10.0.0.134 ipv6= k8sPodName=openstack/cinder-ks-service-kzhf6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c2fd598b43 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=921 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=cc715bf7-b438-450c-b8e1-2d9fc934fbfa,k8s:batch.kubernetes.io/job-name=cinder-ks-service,k8s:component=ks-service,k8s:controller-uid=cc715bf7-b438-450c-b8e1-2d9fc934fbfa,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-ks-service,k8s:release_group=cinder" ipv4=10.0.0.134 ipv6= k8sPodName=openstack/cinder-ks-service-kzhf6 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=cc715bf7-b438-450c-b8e1-2d9fc934fbfa;k8s:batch.kubernetes.io/job-name=cinder-ks-service;k8s:component=ks-service;k8s:controller-uid=cc715bf7-b438-450c-b8e1-2d9fc934fbfa;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-ks-service;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c2fd598b43 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=921 identity=46284 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=cc715bf7-b438-450c-b8e1-2d9fc934fbfa,k8s:batch.kubernetes.io/job-name=cinder-ks-service,k8s:component=ks-service,k8s:controller-uid=cc715bf7-b438-450c-b8e1-2d9fc934fbfa,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-ks-service,k8s:release_group=cinder" ipv4=10.0.0.134 ipv6= k8sPodName=openstack/cinder-ks-service-kzhf6 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c2fd598b43 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=921 identity=46284 ipv4=10.0.0.134 ipv6= k8sPodName=openstack/cinder-ks-service-kzhf6 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c2fd598b43 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=921 identity=46284 ipv4=10.0.0.134 ipv6= k8sPodName=openstack/cinder-ks-service-kzhf6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=c2fd598b43 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=921 identity=46284 ipv4=10.0.0.134 ipv6= k8sPodName=openstack/cinder-ks-service-kzhf6 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=c2fd598b43 endpointID=921 k8sNamespace=openstack k8sPodName=cinder-ks-service-kzhf6 subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=cc715bf7-b438-450c-b8e1-2d9fc934fbfa k8s:batch.kubernetes.io/job-name=cinder-ks-service k8s:component=ks-service k8s:controller-uid=cc715bf7-b438-450c-b8e1-2d9fc934fbfa k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-ks-service k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=c2fd598b43 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=921 identity=46284 ipv4=10.0.0.134 ipv6= k8sPodName=openstack/cinder-ks-service-kzhf6 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.72 e837720d-2faf-4150-a356-5ee34bccf667 default }" containerID=79acf7c611cdebae33b765bd11894f04477dba87eddd4338018765b9ec6d50bf datapathConfiguration="&{false false false false false }" interface=lxc8bf6c42a2ccb k8sPodName=openstack/cinder-ks-endpoints-rdcc8 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=79acf7c611 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=519 ipv4=10.0.0.72 ipv6= k8sPodName=openstack/cinder-ks-endpoints-rdcc8 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=79acf7c611 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=519 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=7d6b73fd-ed1a-4d44-aadc-c5105c489e86,k8s:batch.kubernetes.io/job-name=cinder-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=7d6b73fd-ed1a-4d44-aadc-c5105c489e86,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-ks-endpoints,k8s:release_group=cinder" ipv4=10.0.0.72 ipv6= k8sPodName=openstack/cinder-ks-endpoints-rdcc8 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=79acf7c611 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=519 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.72 ipv6= k8sPodName=openstack/cinder-ks-endpoints-rdcc8 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=7d6b73fd-ed1a-4d44-aadc-c5105c489e86;k8s:batch.kubernetes.io/job-name=cinder-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=7d6b73fd-ed1a-4d44-aadc-c5105c489e86;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-ks-endpoints;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=79acf7c611 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=519 identity=51716 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=7d6b73fd-ed1a-4d44-aadc-c5105c489e86,k8s:batch.kubernetes.io/job-name=cinder-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=7d6b73fd-ed1a-4d44-aadc-c5105c489e86,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-ks-endpoints,k8s:release_group=cinder" ipv4=10.0.0.72 ipv6= k8sPodName=openstack/cinder-ks-endpoints-rdcc8 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=79acf7c611 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=519 identity=51716 ipv4=10.0.0.72 ipv6= k8sPodName=openstack/cinder-ks-endpoints-rdcc8 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=79acf7c611 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=519 identity=51716 ipv4=10.0.0.72 ipv6= k8sPodName=openstack/cinder-ks-endpoints-rdcc8 subsys=endpoint level=info msg="Successful endpoint creation" containerID=79acf7c611 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=519 identity=51716 ipv4=10.0.0.72 ipv6= k8sPodName=openstack/cinder-ks-endpoints-rdcc8 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=79acf7c611 endpointID=519 k8sNamespace=openstack k8sPodName=cinder-ks-endpoints-rdcc8 subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=7d6b73fd-ed1a-4d44-aadc-c5105c489e86 k8s:batch.kubernetes.io/job-name=cinder-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=7d6b73fd-ed1a-4d44-aadc-c5105c489e86 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-ks-endpoints k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=79acf7c611 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=519 identity=51716 ipv4=10.0.0.72 ipv6= k8sPodName=openstack/cinder-ks-endpoints-rdcc8 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.232 68b6cc8d-9af7-4c2d-8667-1bf68664bd49 default }" containerID=bf7a630746cadbc5195b06bf99b9a3f40dc993b2e7585c1f5f0aa829ff9d9ccb datapathConfiguration="&{false false false false false }" interface=lxc90d80bd76c5a k8sPodName=openstack/cinder-ks-user-xz5cl labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=bf7a630746 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=897 ipv4=10.0.0.232 ipv6= k8sPodName=openstack/cinder-ks-user-xz5cl subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=bf7a630746 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=897 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=5498529f-9fd2-4c2e-81a1-d0dce6513f2a,k8s:batch.kubernetes.io/job-name=cinder-ks-user,k8s:component=ks-user,k8s:controller-uid=5498529f-9fd2-4c2e-81a1-d0dce6513f2a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-ks-user,k8s:release_group=cinder" ipv4=10.0.0.232 ipv6= k8sPodName=openstack/cinder-ks-user-xz5cl subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=5498529f-9fd2-4c2e-81a1-d0dce6513f2a;k8s:batch.kubernetes.io/job-name=cinder-ks-user;k8s:component=ks-user;k8s:controller-uid=5498529f-9fd2-4c2e-81a1-d0dce6513f2a;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-ks-user;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=bf7a630746 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=897 identity=9437 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=5498529f-9fd2-4c2e-81a1-d0dce6513f2a,k8s:batch.kubernetes.io/job-name=cinder-ks-user,k8s:component=ks-user,k8s:controller-uid=5498529f-9fd2-4c2e-81a1-d0dce6513f2a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-ks-user,k8s:release_group=cinder" ipv4=10.0.0.232 ipv6= k8sPodName=openstack/cinder-ks-user-xz5cl oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=bf7a630746 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=897 identity=9437 ipv4=10.0.0.232 ipv6= k8sPodName=openstack/cinder-ks-user-xz5cl subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=bf7a630746 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=897 identity=9437 ipv4=10.0.0.232 ipv6= k8sPodName=openstack/cinder-ks-user-xz5cl subsys=endpoint level=info msg="Successful endpoint creation" containerID=bf7a630746 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=897 identity=9437 ipv4=10.0.0.232 ipv6= k8sPodName=openstack/cinder-ks-user-xz5cl subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=bf7a630746 endpointID=897 k8sNamespace=openstack k8sPodName=cinder-ks-user-xz5cl subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=5498529f-9fd2-4c2e-81a1-d0dce6513f2a k8s:batch.kubernetes.io/job-name=cinder-ks-user k8s:component=ks-user k8s:controller-uid=5498529f-9fd2-4c2e-81a1-d0dce6513f2a k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-ks-user k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=bf7a630746 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=897 identity=9437 ipv4=10.0.0.232 ipv6= k8sPodName=openstack/cinder-ks-user-xz5cl subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.57 9b781e17-cdf4-443b-8607-912bf70adfff default }" containerID=0b755603143b9fd54e1ca6a664d603cc593d7ab3e8d2a943febefb7ce621383f datapathConfiguration="&{false false false false false }" interface=lxc1078bc78557e k8sPodName=openstack/cinder-backup-storage-init-7k4jf labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0b75560314 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3794 ipv4=10.0.0.57 ipv6= k8sPodName=openstack/cinder-backup-storage-init-7k4jf subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0b75560314 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3794 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=d6ea564d-b143-4ba3-8af6-f064cdbfed70,k8s:batch.kubernetes.io/job-name=cinder-backup-storage-init,k8s:component=storage-init,k8s:controller-uid=d6ea564d-b143-4ba3-8af6-f064cdbfed70,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-backup-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-backup-storage-init,k8s:release_group=cinder" ipv4=10.0.0.57 ipv6= k8sPodName=openstack/cinder-backup-storage-init-7k4jf subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=d6ea564d-b143-4ba3-8af6-f064cdbfed70;k8s:batch.kubernetes.io/job-name=cinder-backup-storage-init;k8s:component=storage-init;k8s:controller-uid=d6ea564d-b143-4ba3-8af6-f064cdbfed70;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-backup-storage-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-backup-storage-init;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0b75560314 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3794 identity=2662 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=d6ea564d-b143-4ba3-8af6-f064cdbfed70,k8s:batch.kubernetes.io/job-name=cinder-backup-storage-init,k8s:component=storage-init,k8s:controller-uid=d6ea564d-b143-4ba3-8af6-f064cdbfed70,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-backup-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-backup-storage-init,k8s:release_group=cinder" ipv4=10.0.0.57 ipv6= k8sPodName=openstack/cinder-backup-storage-init-7k4jf oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=0b75560314 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3794 identity=2662 ipv4=10.0.0.57 ipv6= k8sPodName=openstack/cinder-backup-storage-init-7k4jf subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=0b75560314 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3794 identity=2662 ipv4=10.0.0.57 ipv6= k8sPodName=openstack/cinder-backup-storage-init-7k4jf subsys=endpoint level=info msg="Successful endpoint creation" containerID=0b75560314 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3794 identity=2662 ipv4=10.0.0.57 ipv6= k8sPodName=openstack/cinder-backup-storage-init-7k4jf subsys=daemon level=info msg="Delete endpoint request" containerID=0b75560314 endpointID=3794 k8sNamespace=openstack k8sPodName=cinder-backup-storage-init-7k4jf subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=d6ea564d-b143-4ba3-8af6-f064cdbfed70 k8s:batch.kubernetes.io/job-name=cinder-backup-storage-init k8s:component=storage-init k8s:controller-uid=d6ea564d-b143-4ba3-8af6-f064cdbfed70 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-backup-storage-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-backup-storage-init k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=0b75560314 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3794 identity=2662 ipv4=10.0.0.57 ipv6= k8sPodName=openstack/cinder-backup-storage-init-7k4jf subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.130 65a08772-7ba2-4e9a-83a8-4b5ad1d235c1 default }" containerID=c18f568219fe10cb19ded89ceb6fbce54d524d9ed758bdc969e090adcf436e23 datapathConfiguration="&{false false false false false }" interface=lxcd14780fe2a94 k8sPodName=openstack/cinder-create-internal-tenant-fvhqg labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c18f568219 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1151 ipv4=10.0.0.130 ipv6= k8sPodName=openstack/cinder-create-internal-tenant-fvhqg subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c18f568219 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1151 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=d8bcea6a-ae26-4e81-81e9-76f74d979343,k8s:batch.kubernetes.io/job-name=cinder-create-internal-tenant,k8s:component=create-internal-tenant,k8s:controller-uid=d8bcea6a-ae26-4e81-81e9-76f74d979343,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-create-internal-tenant,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-create-internal-tenant,k8s:release_group=cinder" ipv4=10.0.0.130 ipv6= k8sPodName=openstack/cinder-create-internal-tenant-fvhqg subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=d8bcea6a-ae26-4e81-81e9-76f74d979343;k8s:batch.kubernetes.io/job-name=cinder-create-internal-tenant;k8s:component=create-internal-tenant;k8s:controller-uid=d8bcea6a-ae26-4e81-81e9-76f74d979343;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-create-internal-tenant;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-create-internal-tenant;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c18f568219 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1151 identity=12141 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=d8bcea6a-ae26-4e81-81e9-76f74d979343,k8s:batch.kubernetes.io/job-name=cinder-create-internal-tenant,k8s:component=create-internal-tenant,k8s:controller-uid=d8bcea6a-ae26-4e81-81e9-76f74d979343,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-create-internal-tenant,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-create-internal-tenant,k8s:release_group=cinder" ipv4=10.0.0.130 ipv6= k8sPodName=openstack/cinder-create-internal-tenant-fvhqg oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c18f568219 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1151 identity=12141 ipv4=10.0.0.130 ipv6= k8sPodName=openstack/cinder-create-internal-tenant-fvhqg subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=c18f568219 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1151 identity=12141 ipv4=10.0.0.130 ipv6= k8sPodName=openstack/cinder-create-internal-tenant-fvhqg subsys=endpoint level=info msg="Successful endpoint creation" containerID=c18f568219 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1151 identity=12141 ipv4=10.0.0.130 ipv6= k8sPodName=openstack/cinder-create-internal-tenant-fvhqg subsys=daemon level=info msg="Delete endpoint request" containerID=c18f568219 endpointID=1151 k8sNamespace=openstack k8sPodName=cinder-create-internal-tenant-fvhqg subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=d8bcea6a-ae26-4e81-81e9-76f74d979343 k8s:batch.kubernetes.io/job-name=cinder-create-internal-tenant k8s:component=create-internal-tenant k8s:controller-uid=d8bcea6a-ae26-4e81-81e9-76f74d979343 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-create-internal-tenant k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-create-internal-tenant k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=c18f568219 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1151 identity=12141 ipv4=10.0.0.130 ipv6= k8sPodName=openstack/cinder-create-internal-tenant-fvhqg subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.79 3fd2bfe9-716f-4315-bd04-3543141b27df default }" containerID=39107fb6e4ead551cf53306b57bd21afa51da9190e97b1b56f1478a6d09da80c datapathConfiguration="&{false false false false false }" interface=lxcd4646ec71468 k8sPodName=openstack/cinder-storage-init-68t7b labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=39107fb6e4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=52 ipv4=10.0.0.79 ipv6= k8sPodName=openstack/cinder-storage-init-68t7b subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=39107fb6e4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=52 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=3e6a1cfc-5e1f-4286-b42d-140d6977bc60,k8s:batch.kubernetes.io/job-name=cinder-storage-init,k8s:component=storage-init,k8s:controller-uid=3e6a1cfc-5e1f-4286-b42d-140d6977bc60,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-storage-init,k8s:release_group=cinder" ipv4=10.0.0.79 ipv6= k8sPodName=openstack/cinder-storage-init-68t7b subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=3e6a1cfc-5e1f-4286-b42d-140d6977bc60;k8s:batch.kubernetes.io/job-name=cinder-storage-init;k8s:component=storage-init;k8s:controller-uid=3e6a1cfc-5e1f-4286-b42d-140d6977bc60;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-storage-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-storage-init;k8s:release_group=cinder;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=39107fb6e4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=52 identity=1786 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=3e6a1cfc-5e1f-4286-b42d-140d6977bc60,k8s:batch.kubernetes.io/job-name=cinder-storage-init,k8s:component=storage-init,k8s:controller-uid=3e6a1cfc-5e1f-4286-b42d-140d6977bc60,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-storage-init,k8s:release_group=cinder" ipv4=10.0.0.79 ipv6= k8sPodName=openstack/cinder-storage-init-68t7b oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=39107fb6e4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=52 identity=1786 ipv4=10.0.0.79 ipv6= k8sPodName=openstack/cinder-storage-init-68t7b subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=39107fb6e4 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=52 identity=1786 ipv4=10.0.0.79 ipv6= k8sPodName=openstack/cinder-storage-init-68t7b subsys=endpoint level=info msg="Successful endpoint creation" containerID=39107fb6e4 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=52 identity=1786 ipv4=10.0.0.79 ipv6= k8sPodName=openstack/cinder-storage-init-68t7b subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=39107fb6e4 endpointID=52 k8sNamespace=openstack k8sPodName=cinder-storage-init-68t7b subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=3e6a1cfc-5e1f-4286-b42d-140d6977bc60 k8s:batch.kubernetes.io/job-name=cinder-storage-init k8s:component=storage-init k8s:controller-uid=3e6a1cfc-5e1f-4286-b42d-140d6977bc60 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-storage-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-storage-init k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=39107fb6e4 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=52 identity=1786 ipv4=10.0.0.79 ipv6= k8sPodName=openstack/cinder-storage-init-68t7b subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.74 b58ca906-2d14-4cfd-98f5-42337d8ab79f default }" containerID=24fa85cdf6c1b595b478d23c68b31c6a0fd5d0f229b6f59c229ba21fd4f8e986 datapathConfiguration="&{false false false false false }" interface=lxcfa11e8d3a941 k8sPodName=openstack/cinder-bootstrap-w74wf labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=24fa85cdf6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=444 ipv4=10.0.0.74 ipv6= k8sPodName=openstack/cinder-bootstrap-w74wf subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=24fa85cdf6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=444 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=df7b1cdd-de06-4da3-aaa3-39675cb9bae1,k8s:batch.kubernetes.io/job-name=cinder-bootstrap,k8s:component=bootstrap,k8s:controller-uid=df7b1cdd-de06-4da3-aaa3-39675cb9bae1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-bootstrap,k8s:release_group=cinder" ipv4=10.0.0.74 ipv6= k8sPodName=openstack/cinder-bootstrap-w74wf subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=df7b1cdd-de06-4da3-aaa3-39675cb9bae1;k8s:batch.kubernetes.io/job-name=cinder-bootstrap;k8s:component=bootstrap;k8s:controller-uid=df7b1cdd-de06-4da3-aaa3-39675cb9bae1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-bootstrap;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-bootstrap;k8s:release_group=cinder;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=24fa85cdf6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=444 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.74 ipv6= k8sPodName=openstack/cinder-bootstrap-w74wf line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=24fa85cdf6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=444 identity=916 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=df7b1cdd-de06-4da3-aaa3-39675cb9bae1,k8s:batch.kubernetes.io/job-name=cinder-bootstrap,k8s:component=bootstrap,k8s:controller-uid=df7b1cdd-de06-4da3-aaa3-39675cb9bae1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-bootstrap,k8s:release_group=cinder" ipv4=10.0.0.74 ipv6= k8sPodName=openstack/cinder-bootstrap-w74wf oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=24fa85cdf6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=444 identity=916 ipv4=10.0.0.74 ipv6= k8sPodName=openstack/cinder-bootstrap-w74wf subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=24fa85cdf6 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=444 identity=916 ipv4=10.0.0.74 ipv6= k8sPodName=openstack/cinder-bootstrap-w74wf subsys=endpoint level=info msg="Successful endpoint creation" containerID=24fa85cdf6 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=444 identity=916 ipv4=10.0.0.74 ipv6= k8sPodName=openstack/cinder-bootstrap-w74wf subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.249 64b64bb5-3612-4f3d-8e91-92d3506693cd default }" containerID=17cde94f2f08999ce7720667b5aa087d2382ac4c2a7bf6fd14797e9493886370 datapathConfiguration="&{false false false false false }" interface=lxca776754223c1 k8sPodName=openstack/cinder-backup-56866fb954-pkj9p labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=17cde94f2f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=92 ipv4=10.0.0.249 ipv6= k8sPodName=openstack/cinder-backup-56866fb954-pkj9p subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=17cde94f2f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=92 identityLabels="k8s:application=cinder,k8s:component=backup,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-backup,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=cinder" ipv4=10.0.0.249 ipv6= k8sPodName=openstack/cinder-backup-56866fb954-pkj9p subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:component=backup;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-backup;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=cinder;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=17cde94f2f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=92 identity=16281 identityLabels="k8s:application=cinder,k8s:component=backup,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-backup,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=cinder" ipv4=10.0.0.249 ipv6= k8sPodName=openstack/cinder-backup-56866fb954-pkj9p oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=17cde94f2f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=92 identity=16281 ipv4=10.0.0.249 ipv6= k8sPodName=openstack/cinder-backup-56866fb954-pkj9p subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=17cde94f2f datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=92 identity=16281 ipv4=10.0.0.249 ipv6= k8sPodName=openstack/cinder-backup-56866fb954-pkj9p subsys=endpoint level=info msg="Successful endpoint creation" containerID=17cde94f2f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=92 identity=16281 ipv4=10.0.0.249 ipv6= k8sPodName=openstack/cinder-backup-56866fb954-pkj9p subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.6 1a3d3eab-49ba-4f8e-ab23-cc4dd7cdea88 default }" containerID=cced541156ad6a6344f2d0e7e724295fdbcca00d9b6f4be4f16ad40411121dd0 datapathConfiguration="&{false false false false false }" interface=lxcdbab0bf7abb4 k8sPodName=openstack/cinder-volume-79fbbc75b-w8mq2 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=cced541156 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=973 ipv4=10.0.0.6 ipv6= k8sPodName=openstack/cinder-volume-79fbbc75b-w8mq2 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=cced541156 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=973 identityLabels="k8s:application=cinder,k8s:component=volume,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-volume,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=cinder" ipv4=10.0.0.6 ipv6= k8sPodName=openstack/cinder-volume-79fbbc75b-w8mq2 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:component=volume;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-volume;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=cced541156 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=973 identity=62586 identityLabels="k8s:application=cinder,k8s:component=volume,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-volume,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=cinder" ipv4=10.0.0.6 ipv6= k8sPodName=openstack/cinder-volume-79fbbc75b-w8mq2 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=cced541156 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=973 identity=62586 ipv4=10.0.0.6 ipv6= k8sPodName=openstack/cinder-volume-79fbbc75b-w8mq2 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=cced541156 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=973 identity=62586 ipv4=10.0.0.6 ipv6= k8sPodName=openstack/cinder-volume-79fbbc75b-w8mq2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=cced541156 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=973 identity=62586 ipv4=10.0.0.6 ipv6= k8sPodName=openstack/cinder-volume-79fbbc75b-w8mq2 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=24fa85cdf6 endpointID=444 k8sNamespace=openstack k8sPodName=cinder-bootstrap-w74wf subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=df7b1cdd-de06-4da3-aaa3-39675cb9bae1 k8s:batch.kubernetes.io/job-name=cinder-bootstrap k8s:component=bootstrap k8s:controller-uid=df7b1cdd-de06-4da3-aaa3-39675cb9bae1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-bootstrap k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-bootstrap k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=24fa85cdf6 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=444 identity=916 ipv4=10.0.0.74 ipv6= k8sPodName=openstack/cinder-bootstrap-w74wf subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.46 158f9f24-d78a-48c1-b1f9-036980b9a073 default }" containerID=d31afee68dae7ec2866e5eaa2a3f38c89cd249896ca5352d0a2ce022cbed31f8 datapathConfiguration="&{false false false false false }" interface=lxc0828420e4a8b k8sPodName=openstack/placement-api-7576c8fcd8-jt56j labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d31afee68d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1631 ipv4=10.0.0.46 ipv6= k8sPodName=openstack/placement-api-7576c8fcd8-jt56j subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d31afee68d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1631 identityLabels="k8s:application=placement,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=placement" ipv4=10.0.0.46 ipv6= k8sPodName=openstack/placement-api-7576c8fcd8-jt56j subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=placement;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=placement-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=placement;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d31afee68d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1631 identity=3255 identityLabels="k8s:application=placement,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=placement" ipv4=10.0.0.46 ipv6= k8sPodName=openstack/placement-api-7576c8fcd8-jt56j oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d31afee68d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1631 identity=3255 ipv4=10.0.0.46 ipv6= k8sPodName=openstack/placement-api-7576c8fcd8-jt56j subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.221 675a1e0f-6ebc-434d-beaa-46d29b5358eb default }" containerID=43188a804eb88eaa63ff36904293e44918e3197776ca53035ad76e78dae7b717 datapathConfiguration="&{false false false false false }" interface=lxcddd36d1df981 k8sPodName=openstack/placement-db-init-95hxv labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=43188a804e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=285 ipv4=10.0.0.221 ipv6= k8sPodName=openstack/placement-db-init-95hxv subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=43188a804e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=285 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=4a9bfae0-ee47-47dd-a19f-d061376f1add,k8s:batch.kubernetes.io/job-name=placement-db-init,k8s:component=db-init,k8s:controller-uid=4a9bfae0-ee47-47dd-a19f-d061376f1add,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-db-init,k8s:release_group=placement" ipv4=10.0.0.221 ipv6= k8sPodName=openstack/placement-db-init-95hxv subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=placement;k8s:batch.kubernetes.io/controller-uid=4a9bfae0-ee47-47dd-a19f-d061376f1add;k8s:batch.kubernetes.io/job-name=placement-db-init;k8s:component=db-init;k8s:controller-uid=4a9bfae0-ee47-47dd-a19f-d061376f1add;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=placement-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=placement-db-init;k8s:release_group=placement;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=43188a804e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=285 identity=47729 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=4a9bfae0-ee47-47dd-a19f-d061376f1add,k8s:batch.kubernetes.io/job-name=placement-db-init,k8s:component=db-init,k8s:controller-uid=4a9bfae0-ee47-47dd-a19f-d061376f1add,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-db-init,k8s:release_group=placement" ipv4=10.0.0.221 ipv6= k8sPodName=openstack/placement-db-init-95hxv oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=43188a804e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=285 identity=47729 ipv4=10.0.0.221 ipv6= k8sPodName=openstack/placement-db-init-95hxv subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d31afee68d datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1631 identity=3255 ipv4=10.0.0.46 ipv6= k8sPodName=openstack/placement-api-7576c8fcd8-jt56j subsys=endpoint level=info msg="Successful endpoint creation" containerID=d31afee68d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1631 identity=3255 ipv4=10.0.0.46 ipv6= k8sPodName=openstack/placement-api-7576c8fcd8-jt56j subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=43188a804e datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=285 identity=47729 ipv4=10.0.0.221 ipv6= k8sPodName=openstack/placement-db-init-95hxv subsys=endpoint level=info msg="Successful endpoint creation" containerID=43188a804e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=285 identity=47729 ipv4=10.0.0.221 ipv6= k8sPodName=openstack/placement-db-init-95hxv subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=43188a804e endpointID=285 k8sNamespace=openstack k8sPodName=placement-db-init-95hxv subsys=daemon level=info msg="Releasing key" key="[k8s:application=placement k8s:batch.kubernetes.io/controller-uid=4a9bfae0-ee47-47dd-a19f-d061376f1add k8s:batch.kubernetes.io/job-name=placement-db-init k8s:component=db-init k8s:controller-uid=4a9bfae0-ee47-47dd-a19f-d061376f1add k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=placement-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=placement-db-init k8s:release_group=placement]" subsys=allocator level=info msg="Removed endpoint" containerID=43188a804e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=285 identity=47729 ipv4=10.0.0.221 ipv6= k8sPodName=openstack/placement-db-init-95hxv subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.21 ee85c61a-2abb-431c-b1c0-270159184004 default }" containerID=5268da1a3f48d4c487955ed728d8a504eaad3d8eee0ea0b9a59f21fa776e0327 datapathConfiguration="&{false false false false false }" interface=lxcc7b0596f526e k8sPodName=openstack/placement-db-sync-hgp2x labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5268da1a3f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=469 ipv4=10.0.0.21 ipv6= k8sPodName=openstack/placement-db-sync-hgp2x subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5268da1a3f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=469 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=ee46c4cd-8913-429e-993b-43de8fb19334,k8s:batch.kubernetes.io/job-name=placement-db-sync,k8s:component=db-sync,k8s:controller-uid=ee46c4cd-8913-429e-993b-43de8fb19334,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-db-sync,k8s:release_group=placement" ipv4=10.0.0.21 ipv6= k8sPodName=openstack/placement-db-sync-hgp2x subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=placement;k8s:batch.kubernetes.io/controller-uid=ee46c4cd-8913-429e-993b-43de8fb19334;k8s:batch.kubernetes.io/job-name=placement-db-sync;k8s:component=db-sync;k8s:controller-uid=ee46c4cd-8913-429e-993b-43de8fb19334;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=placement-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=placement-db-sync;k8s:release_group=placement;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5268da1a3f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=469 identity=2821 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=ee46c4cd-8913-429e-993b-43de8fb19334,k8s:batch.kubernetes.io/job-name=placement-db-sync,k8s:component=db-sync,k8s:controller-uid=ee46c4cd-8913-429e-993b-43de8fb19334,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-db-sync,k8s:release_group=placement" ipv4=10.0.0.21 ipv6= k8sPodName=openstack/placement-db-sync-hgp2x oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5268da1a3f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=469 identity=2821 ipv4=10.0.0.21 ipv6= k8sPodName=openstack/placement-db-sync-hgp2x subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=5268da1a3f datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=469 identity=2821 ipv4=10.0.0.21 ipv6= k8sPodName=openstack/placement-db-sync-hgp2x subsys=endpoint level=info msg="Successful endpoint creation" containerID=5268da1a3f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=469 identity=2821 ipv4=10.0.0.21 ipv6= k8sPodName=openstack/placement-db-sync-hgp2x subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=5268da1a3f endpointID=469 k8sNamespace=openstack k8sPodName=placement-db-sync-hgp2x subsys=daemon level=info msg="Releasing key" key="[k8s:application=placement k8s:batch.kubernetes.io/controller-uid=ee46c4cd-8913-429e-993b-43de8fb19334 k8s:batch.kubernetes.io/job-name=placement-db-sync k8s:component=db-sync k8s:controller-uid=ee46c4cd-8913-429e-993b-43de8fb19334 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=placement-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=placement-db-sync k8s:release_group=placement]" subsys=allocator level=info msg="Removed endpoint" containerID=5268da1a3f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=469 identity=2821 ipv4=10.0.0.21 ipv6= k8sPodName=openstack/placement-db-sync-hgp2x subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.59 dab1190c-bdd3-4f17-9d22-d2384d6426ab default }" containerID=cdf74009b9baa82dad80a1c66d3f093a8b567169cf3e1f0456aa9e108a782ef7 datapathConfiguration="&{false false false false false }" interface=lxcc4d4f2319a48 k8sPodName=openstack/placement-ks-service-m5khr labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=cdf74009b9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1813 ipv4=10.0.0.59 ipv6= k8sPodName=openstack/placement-ks-service-m5khr subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=cdf74009b9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1813 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=02419253-dd27-4080-86e6-8094f437ff4a,k8s:batch.kubernetes.io/job-name=placement-ks-service,k8s:component=ks-service,k8s:controller-uid=02419253-dd27-4080-86e6-8094f437ff4a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-ks-service,k8s:release_group=placement" ipv4=10.0.0.59 ipv6= k8sPodName=openstack/placement-ks-service-m5khr subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=cdf74009b9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1813 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.59 ipv6= k8sPodName=openstack/placement-ks-service-m5khr line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=placement;k8s:batch.kubernetes.io/controller-uid=02419253-dd27-4080-86e6-8094f437ff4a;k8s:batch.kubernetes.io/job-name=placement-ks-service;k8s:component=ks-service;k8s:controller-uid=02419253-dd27-4080-86e6-8094f437ff4a;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=placement-ks-service;k8s:release_group=placement;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=cdf74009b9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1813 identity=13225 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=02419253-dd27-4080-86e6-8094f437ff4a,k8s:batch.kubernetes.io/job-name=placement-ks-service,k8s:component=ks-service,k8s:controller-uid=02419253-dd27-4080-86e6-8094f437ff4a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-ks-service,k8s:release_group=placement" ipv4=10.0.0.59 ipv6= k8sPodName=openstack/placement-ks-service-m5khr oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=cdf74009b9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1813 identity=13225 ipv4=10.0.0.59 ipv6= k8sPodName=openstack/placement-ks-service-m5khr subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=cdf74009b9 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1813 identity=13225 ipv4=10.0.0.59 ipv6= k8sPodName=openstack/placement-ks-service-m5khr subsys=endpoint level=info msg="Successful endpoint creation" containerID=cdf74009b9 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1813 identity=13225 ipv4=10.0.0.59 ipv6= k8sPodName=openstack/placement-ks-service-m5khr subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=cdf74009b9 endpointID=1813 k8sNamespace=openstack k8sPodName=placement-ks-service-m5khr subsys=daemon level=info msg="Releasing key" key="[k8s:application=placement k8s:batch.kubernetes.io/controller-uid=02419253-dd27-4080-86e6-8094f437ff4a k8s:batch.kubernetes.io/job-name=placement-ks-service k8s:component=ks-service k8s:controller-uid=02419253-dd27-4080-86e6-8094f437ff4a k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=placement-ks-service k8s:release_group=placement]" subsys=allocator level=info msg="Removed endpoint" containerID=cdf74009b9 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1813 identity=13225 ipv4=10.0.0.59 ipv6= k8sPodName=openstack/placement-ks-service-m5khr subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.245 529ab8cd-74c3-41b6-ad3e-fc8b163ac452 default }" containerID=c28b45066fa269caa1e9679556025f06cdcfcb63380a06b60eb784a444d8b41d datapathConfiguration="&{false false false false false }" interface=lxcf4fb6c1bc200 k8sPodName=openstack/placement-ks-user-bc79g labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c28b45066f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=77 ipv4=10.0.0.245 ipv6= k8sPodName=openstack/placement-ks-user-bc79g subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c28b45066f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=77 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=e9aa9dd8-af04-4edc-afa5-9fe9fc58cea7,k8s:batch.kubernetes.io/job-name=placement-ks-user,k8s:component=ks-user,k8s:controller-uid=e9aa9dd8-af04-4edc-afa5-9fe9fc58cea7,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-ks-user,k8s:release_group=placement" ipv4=10.0.0.245 ipv6= k8sPodName=openstack/placement-ks-user-bc79g subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=c28b45066f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=77 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.245 ipv6= k8sPodName=openstack/placement-ks-user-bc79g line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=placement;k8s:batch.kubernetes.io/controller-uid=e9aa9dd8-af04-4edc-afa5-9fe9fc58cea7;k8s:batch.kubernetes.io/job-name=placement-ks-user;k8s:component=ks-user;k8s:controller-uid=e9aa9dd8-af04-4edc-afa5-9fe9fc58cea7;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=placement-ks-user;k8s:release_group=placement;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c28b45066f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=77 identity=7532 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=e9aa9dd8-af04-4edc-afa5-9fe9fc58cea7,k8s:batch.kubernetes.io/job-name=placement-ks-user,k8s:component=ks-user,k8s:controller-uid=e9aa9dd8-af04-4edc-afa5-9fe9fc58cea7,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-ks-user,k8s:release_group=placement" ipv4=10.0.0.245 ipv6= k8sPodName=openstack/placement-ks-user-bc79g oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c28b45066f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=77 identity=7532 ipv4=10.0.0.245 ipv6= k8sPodName=openstack/placement-ks-user-bc79g subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c28b45066f datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=77 identity=7532 ipv4=10.0.0.245 ipv6= k8sPodName=openstack/placement-ks-user-bc79g subsys=endpoint level=info msg="Successful endpoint creation" containerID=c28b45066f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=77 identity=7532 ipv4=10.0.0.245 ipv6= k8sPodName=openstack/placement-ks-user-bc79g subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=c28b45066f endpointID=77 k8sNamespace=openstack k8sPodName=placement-ks-user-bc79g subsys=daemon level=info msg="Releasing key" key="[k8s:application=placement k8s:batch.kubernetes.io/controller-uid=e9aa9dd8-af04-4edc-afa5-9fe9fc58cea7 k8s:batch.kubernetes.io/job-name=placement-ks-user k8s:component=ks-user k8s:controller-uid=e9aa9dd8-af04-4edc-afa5-9fe9fc58cea7 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=placement-ks-user k8s:release_group=placement]" subsys=allocator level=info msg="Removed endpoint" containerID=c28b45066f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=77 identity=7532 ipv4=10.0.0.245 ipv6= k8sPodName=openstack/placement-ks-user-bc79g subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.230 204bc5ba-fea9-446d-98a0-c50153e9c3a6 default }" containerID=3f224b6e6c829bb749bb9c5a3ff01073ecefa0043592f29f2d97584c012f88a4 datapathConfiguration="&{false false false false false }" interface=lxc3f4efa835cc5 k8sPodName=openstack/placement-ks-endpoints-jbq44 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3f224b6e6c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1015 ipv4=10.0.0.230 ipv6= k8sPodName=openstack/placement-ks-endpoints-jbq44 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3f224b6e6c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1015 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=d81c6402-b5d7-4e78-b552-aac0228108b9,k8s:batch.kubernetes.io/job-name=placement-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=d81c6402-b5d7-4e78-b552-aac0228108b9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-ks-endpoints,k8s:release_group=placement" ipv4=10.0.0.230 ipv6= k8sPodName=openstack/placement-ks-endpoints-jbq44 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=placement;k8s:batch.kubernetes.io/controller-uid=d81c6402-b5d7-4e78-b552-aac0228108b9;k8s:batch.kubernetes.io/job-name=placement-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=d81c6402-b5d7-4e78-b552-aac0228108b9;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=placement-ks-endpoints;k8s:release_group=placement;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3f224b6e6c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1015 identity=8338 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=d81c6402-b5d7-4e78-b552-aac0228108b9,k8s:batch.kubernetes.io/job-name=placement-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=d81c6402-b5d7-4e78-b552-aac0228108b9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-ks-endpoints,k8s:release_group=placement" ipv4=10.0.0.230 ipv6= k8sPodName=openstack/placement-ks-endpoints-jbq44 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3f224b6e6c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1015 identity=8338 ipv4=10.0.0.230 ipv6= k8sPodName=openstack/placement-ks-endpoints-jbq44 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=3f224b6e6c datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1015 identity=8338 ipv4=10.0.0.230 ipv6= k8sPodName=openstack/placement-ks-endpoints-jbq44 subsys=endpoint level=info msg="Successful endpoint creation" containerID=3f224b6e6c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1015 identity=8338 ipv4=10.0.0.230 ipv6= k8sPodName=openstack/placement-ks-endpoints-jbq44 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=3f224b6e6c endpointID=1015 k8sNamespace=openstack k8sPodName=placement-ks-endpoints-jbq44 subsys=daemon level=info msg="Releasing key" key="[k8s:application=placement k8s:batch.kubernetes.io/controller-uid=d81c6402-b5d7-4e78-b552-aac0228108b9 k8s:batch.kubernetes.io/job-name=placement-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=d81c6402-b5d7-4e78-b552-aac0228108b9 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=placement-ks-endpoints k8s:release_group=placement]" subsys=allocator level=info msg="Removed endpoint" containerID=3f224b6e6c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1015 identity=8338 ipv4=10.0.0.230 ipv6= k8sPodName=openstack/placement-ks-endpoints-jbq44 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.229 79f5f208-cf34-4080-b5b6-e2f3553a0134 default }" containerID=963aeb405e812b4697cc1c59972dfcedb859fce45a3b422814d72facac346369 datapathConfiguration="&{false false false false false }" interface=lxce4840e9a3f71 k8sPodName=openstack/neutron-coredns-7dd4958666-6bmdb labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=963aeb405e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2455 ipv4=10.0.0.229 ipv6= k8sPodName=openstack/neutron-coredns-7dd4958666-6bmdb subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=963aeb405e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2455 identityLabels="k8s:app.kubernetes.io/instance=neutron-coredns,k8s:app.kubernetes.io/name=coredns,k8s:application=neutron,k8s:component=coredns,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.229 ipv6= k8sPodName=openstack/neutron-coredns-7dd4958666-6bmdb subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=neutron-coredns;k8s:app.kubernetes.io/name=coredns;k8s:application=neutron;k8s:component=coredns;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=963aeb405e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2455 identity=65143 identityLabels="k8s:app.kubernetes.io/instance=neutron-coredns,k8s:app.kubernetes.io/name=coredns,k8s:application=neutron,k8s:component=coredns,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.229 ipv6= k8sPodName=openstack/neutron-coredns-7dd4958666-6bmdb oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=963aeb405e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2455 identity=65143 ipv4=10.0.0.229 ipv6= k8sPodName=openstack/neutron-coredns-7dd4958666-6bmdb subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=963aeb405e datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2455 identity=65143 ipv4=10.0.0.229 ipv6= k8sPodName=openstack/neutron-coredns-7dd4958666-6bmdb subsys=endpoint level=info msg="Successful endpoint creation" containerID=963aeb405e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2455 identity=65143 ipv4=10.0.0.229 ipv6= k8sPodName=openstack/neutron-coredns-7dd4958666-6bmdb subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.36 1c7d587c-d968-4db5-bb2d-6acdf2a703a6 default }" containerID=730be8991df5fff2e48a7a05c85183aed2152fe8590c632ea104d8dde7acbacc datapathConfiguration="&{false false false false false }" interface=lxc858c63a6a5b3 k8sPodName=local-path-storage/helper-pod-create-pvc-354cb5f6-5151-4997-9140-8c8557d6929c labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=730be8991d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1531 ipv4=10.0.0.36 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-354cb5f6-5151-4997-9140-8c8557d6929c subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=730be8991d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1531 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.36 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-354cb5f6-5151-4997-9140-8c8557d6929c subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=730be8991d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1531 identity=16985 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.36 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-354cb5f6-5151-4997-9140-8c8557d6929c oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=730be8991d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1531 identity=16985 ipv4=10.0.0.36 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-354cb5f6-5151-4997-9140-8c8557d6929c subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=730be8991d datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1531 identity=16985 ipv4=10.0.0.36 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-354cb5f6-5151-4997-9140-8c8557d6929c subsys=endpoint level=info msg="Successful endpoint creation" containerID=730be8991d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1531 identity=16985 ipv4=10.0.0.36 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-354cb5f6-5151-4997-9140-8c8557d6929c subsys=daemon level=info msg="Delete endpoint request" containerID=730be8991d endpointID=1531 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-354cb5f6-5151-4997-9140-8c8557d6929c subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=730be8991d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1531 identity=16985 ipv4=10.0.0.36 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-354cb5f6-5151-4997-9140-8c8557d6929c subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.208 4f7e7737-cc61-476f-bbfb-1f69458ddeb6 default }" containerID=bb5c71fee8c025bc81b87e9bfedeefd5bf86cba8fb04643dfd19719e6e5b8b82 datapathConfiguration="&{false false false false false }" interface=lxc194af5d3d12d k8sPodName=openstack/rabbitmq-nova-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=bb5c71fee8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=804 ipv4=10.0.0.208 ipv6= k8sPodName=openstack/rabbitmq-nova-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=bb5c71fee8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=804 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-nova,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-nova-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-nova-server-0" ipv4=10.0.0.208 ipv6= k8sPodName=openstack/rabbitmq-nova-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-nova;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-nova-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-nova-server-0;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=bb5c71fee8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=804 identity=53396 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-nova,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-nova-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-nova-server-0" ipv4=10.0.0.208 ipv6= k8sPodName=openstack/rabbitmq-nova-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=bb5c71fee8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=804 identity=53396 ipv4=10.0.0.208 ipv6= k8sPodName=openstack/rabbitmq-nova-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=bb5c71fee8 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=804 identity=53396 ipv4=10.0.0.208 ipv6= k8sPodName=openstack/rabbitmq-nova-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=bb5c71fee8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=804 identity=53396 ipv4=10.0.0.208 ipv6= k8sPodName=openstack/rabbitmq-nova-server-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.36 210b4381-3fc4-4fad-bc31-37453f3816eb default }" containerID=9829d3828d7eb61fbb3efe54641821840a7b2b8dc65b49e2c64aca4f005fcbb8 datapathConfiguration="&{false false false false false }" interface=lxcf172424c19f3 k8sPodName=openstack/nova-conductor-65d7d9c99-n82sj labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9829d3828d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1179 ipv4=10.0.0.36 ipv6= k8sPodName=openstack/nova-conductor-65d7d9c99-n82sj subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9829d3828d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1179 identityLabels="k8s:application=nova,k8s:component=conductor,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-conductor,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=nova" ipv4=10.0.0.36 ipv6= k8sPodName=openstack/nova-conductor-65d7d9c99-n82sj subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.99 31ec6f43-f6c9-45e9-b4a9-1ef958dce14c default }" containerID=75e9bdf55ac321d0c2a5308bedf9ffc800c4e712573a4f6200db772b6fb44f8b datapathConfiguration="&{false false false false false }" interface=lxcee01cef6687f k8sPodName=openstack/nova-scheduler-5f6b884595-96qn2 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=75e9bdf55a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1588 ipv4=10.0.0.99 ipv6= k8sPodName=openstack/nova-scheduler-5f6b884595-96qn2 subsys=endpoint level=info msg="Invalid state transition skipped" containerID=9829d3828d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1179 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.36 ipv6= k8sPodName=openstack/nova-conductor-65d7d9c99-n82sj line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=nova;k8s:component=conductor;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=nova-conductor;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=nova;" subsys=allocator level=info msg="Resolving identity labels (blocking)" containerID=75e9bdf55a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1588 identityLabels="k8s:application=nova,k8s:component=scheduler,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-scheduler,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=nova" ipv4=10.0.0.99 ipv6= k8sPodName=openstack/nova-scheduler-5f6b884595-96qn2 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Identity of endpoint changed" containerID=9829d3828d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1179 identity=42884 identityLabels="k8s:application=nova,k8s:component=conductor,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-conductor,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=nova" ipv4=10.0.0.36 ipv6= k8sPodName=openstack/nova-conductor-65d7d9c99-n82sj oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9829d3828d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1179 identity=42884 ipv4=10.0.0.36 ipv6= k8sPodName=openstack/nova-conductor-65d7d9c99-n82sj subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=nova;k8s:component=scheduler;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=nova-scheduler;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=nova;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=75e9bdf55a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1588 identity=15456 identityLabels="k8s:application=nova,k8s:component=scheduler,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-scheduler,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=nova" ipv4=10.0.0.99 ipv6= k8sPodName=openstack/nova-scheduler-5f6b884595-96qn2 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=75e9bdf55a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1588 identity=15456 ipv4=10.0.0.99 ipv6= k8sPodName=openstack/nova-scheduler-5f6b884595-96qn2 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.14 9786de9e-e61b-4b43-b81b-9d4bce63fab0 default }" containerID=e907e42da350626246a1eac6b9de3f7c39966b684dface5204822e7c3f457b6d datapathConfiguration="&{false false false false false }" interface=lxcbee7bee9b50e k8sPodName=openstack/nova-bootstrap-2shf7 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e907e42da3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=42 ipv4=10.0.0.14 ipv6= k8sPodName=openstack/nova-bootstrap-2shf7 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e907e42da3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=42 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=b07dba1c-1cc8-4d36-b06e-1a9a442f0108,k8s:batch.kubernetes.io/job-name=nova-bootstrap,k8s:component=bootstrap,k8s:controller-uid=b07dba1c-1cc8-4d36-b06e-1a9a442f0108,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-bootstrap,k8s:release_group=nova" ipv4=10.0.0.14 ipv6= k8sPodName=openstack/nova-bootstrap-2shf7 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=nova;k8s:batch.kubernetes.io/controller-uid=b07dba1c-1cc8-4d36-b06e-1a9a442f0108;k8s:batch.kubernetes.io/job-name=nova-bootstrap;k8s:component=bootstrap;k8s:controller-uid=b07dba1c-1cc8-4d36-b06e-1a9a442f0108;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=nova-bootstrap;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=nova-bootstrap;k8s:release_group=nova;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e907e42da3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=42 identity=18855 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=b07dba1c-1cc8-4d36-b06e-1a9a442f0108,k8s:batch.kubernetes.io/job-name=nova-bootstrap,k8s:component=bootstrap,k8s:controller-uid=b07dba1c-1cc8-4d36-b06e-1a9a442f0108,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-bootstrap,k8s:release_group=nova" ipv4=10.0.0.14 ipv6= k8sPodName=openstack/nova-bootstrap-2shf7 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e907e42da3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=42 identity=18855 ipv4=10.0.0.14 ipv6= k8sPodName=openstack/nova-bootstrap-2shf7 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.96 2bf2cb3a-2732-40f7-a865-f806f141f9be default }" containerID=6e38422896e36599d14dfdffb9dca0b7f98ce9f91bb1a6d451c55a1cb63a3dee datapathConfiguration="&{false false false false false }" interface=lxcf740d034d813 k8sPodName=openstack/nova-api-osapi-5cd865794f-pxqk6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6e38422896 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2241 ipv4=10.0.0.96 ipv6= k8sPodName=openstack/nova-api-osapi-5cd865794f-pxqk6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6e38422896 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2241 identityLabels="k8s:application=nova,k8s:component=os-api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-api-osapi,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=nova" ipv4=10.0.0.96 ipv6= k8sPodName=openstack/nova-api-osapi-5cd865794f-pxqk6 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=nova;k8s:component=os-api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=nova-api-osapi;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=nova;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6e38422896 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2241 identity=9970 identityLabels="k8s:application=nova,k8s:component=os-api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-api-osapi,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=nova" ipv4=10.0.0.96 ipv6= k8sPodName=openstack/nova-api-osapi-5cd865794f-pxqk6 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6e38422896 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2241 identity=9970 ipv4=10.0.0.96 ipv6= k8sPodName=openstack/nova-api-osapi-5cd865794f-pxqk6 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=9829d3828d datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1179 identity=42884 ipv4=10.0.0.36 ipv6= k8sPodName=openstack/nova-conductor-65d7d9c99-n82sj subsys=endpoint level=info msg="Successful endpoint creation" containerID=9829d3828d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1179 identity=42884 ipv4=10.0.0.36 ipv6= k8sPodName=openstack/nova-conductor-65d7d9c99-n82sj subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.127 0d9741ac-7a70-4db6-8140-5f7dce395a83 default }" containerID=ce4b4157a3b0a857fbfb2025317e1a1519968805b538875f48223376c1cb5576 datapathConfiguration="&{false false false false false }" interface=lxc2b9977a7e02c k8sPodName=openstack/nova-db-init-6t9fx labels="[]" subsys=daemon sync-build=true level=info msg="Create endpoint request" addressing="&{10.0.0.204 022b8d93-5ef8-4518-8515-79385685d25d default }" containerID=25bfd8247532393f939e60d4007f02c05ab64df78a864e341c19b4719c1ada53 datapathConfiguration="&{false false false false false }" interface=lxc8872664373ad k8sPodName=openstack/nova-api-metadata-5b898675b8-6zqmk labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ce4b4157a3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=283 ipv4=10.0.0.127 ipv6= k8sPodName=openstack/nova-db-init-6t9fx subsys=endpoint level=info msg="New endpoint" containerID=25bfd82475 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2666 ipv4=10.0.0.204 ipv6= k8sPodName=openstack/nova-api-metadata-5b898675b8-6zqmk subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ce4b4157a3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=283 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=0f902cd3-2896-45fc-8a48-6684521b1017,k8s:batch.kubernetes.io/job-name=nova-db-init,k8s:component=db-init,k8s:controller-uid=0f902cd3-2896-45fc-8a48-6684521b1017,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-db-init,k8s:release_group=nova" ipv4=10.0.0.127 ipv6= k8sPodName=openstack/nova-db-init-6t9fx subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=25bfd82475 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2666 identityLabels="k8s:application=nova,k8s:component=metadata,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-api-metadata,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=nova" ipv4=10.0.0.204 ipv6= k8sPodName=openstack/nova-api-metadata-5b898675b8-6zqmk subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Rewrote endpoint BPF program" containerID=e907e42da3 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=42 identity=18855 ipv4=10.0.0.14 ipv6= k8sPodName=openstack/nova-bootstrap-2shf7 subsys=endpoint level=info msg="Successful endpoint creation" containerID=e907e42da3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=42 identity=18855 ipv4=10.0.0.14 ipv6= k8sPodName=openstack/nova-bootstrap-2shf7 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.50 d6170923-e97a-4286-8fd7-d7af19b89e54 default }" containerID=f072c5125c6f93be5e59f05178f07e799cb66ba72e8c046b0df0a3829af9eb47 datapathConfiguration="&{false false false false false }" interface=lxc8fc742acd1c8 k8sPodName=openstack/nova-cell-setup-b7jng labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f072c5125c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3027 ipv4=10.0.0.50 ipv6= k8sPodName=openstack/nova-cell-setup-b7jng subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f072c5125c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3027 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=999da6f3-ca11-4ff0-a1e1-1ee4afdd8e4f,k8s:batch.kubernetes.io/job-name=nova-cell-setup,k8s:component=cell-setup,k8s:controller-uid=999da6f3-ca11-4ff0-a1e1-1ee4afdd8e4f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-cell-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-cell-setup,k8s:release_group=nova" ipv4=10.0.0.50 ipv6= k8sPodName=openstack/nova-cell-setup-b7jng subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=6e38422896 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2241 identity=9970 ipv4=10.0.0.96 ipv6= k8sPodName=openstack/nova-api-osapi-5cd865794f-pxqk6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=6e38422896 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2241 identity=9970 ipv4=10.0.0.96 ipv6= k8sPodName=openstack/nova-api-osapi-5cd865794f-pxqk6 subsys=daemon level=info msg="Allocated new global key" key="k8s:application=nova;k8s:batch.kubernetes.io/controller-uid=0f902cd3-2896-45fc-8a48-6684521b1017;k8s:batch.kubernetes.io/job-name=nova-db-init;k8s:component=db-init;k8s:controller-uid=0f902cd3-2896-45fc-8a48-6684521b1017;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=nova-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=nova-db-init;k8s:release_group=nova;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ce4b4157a3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=283 identity=11798 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=0f902cd3-2896-45fc-8a48-6684521b1017,k8s:batch.kubernetes.io/job-name=nova-db-init,k8s:component=db-init,k8s:controller-uid=0f902cd3-2896-45fc-8a48-6684521b1017,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-db-init,k8s:release_group=nova" ipv4=10.0.0.127 ipv6= k8sPodName=openstack/nova-db-init-6t9fx oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ce4b4157a3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=283 identity=11798 ipv4=10.0.0.127 ipv6= k8sPodName=openstack/nova-db-init-6t9fx subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Rewrote endpoint BPF program" containerID=75e9bdf55a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1588 identity=15456 ipv4=10.0.0.99 ipv6= k8sPodName=openstack/nova-scheduler-5f6b884595-96qn2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=75e9bdf55a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1588 identity=15456 ipv4=10.0.0.99 ipv6= k8sPodName=openstack/nova-scheduler-5f6b884595-96qn2 subsys=daemon level=info msg="Allocated new global key" key="k8s:application=nova;k8s:component=metadata;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=nova-api-metadata;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=nova;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=25bfd82475 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2666 identity=8480 identityLabels="k8s:application=nova,k8s:component=metadata,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-api-metadata,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=nova" ipv4=10.0.0.204 ipv6= k8sPodName=openstack/nova-api-metadata-5b898675b8-6zqmk oldIdentity="no identity" subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Waiting for endpoint to be generated" containerID=25bfd82475 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2666 identity=8480 ipv4=10.0.0.204 ipv6= k8sPodName=openstack/nova-api-metadata-5b898675b8-6zqmk subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ce4b4157a3 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=283 identity=11798 ipv4=10.0.0.127 ipv6= k8sPodName=openstack/nova-db-init-6t9fx subsys=endpoint level=info msg="Successful endpoint creation" containerID=ce4b4157a3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=283 identity=11798 ipv4=10.0.0.127 ipv6= k8sPodName=openstack/nova-db-init-6t9fx subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=25bfd82475 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2666 identity=8480 ipv4=10.0.0.204 ipv6= k8sPodName=openstack/nova-api-metadata-5b898675b8-6zqmk subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=f072c5125c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3027 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.50 ipv6= k8sPodName=openstack/nova-cell-setup-b7jng line=611 subsys=endpoint level=info msg="Successful endpoint creation" containerID=25bfd82475 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2666 identity=8480 ipv4=10.0.0.204 ipv6= k8sPodName=openstack/nova-api-metadata-5b898675b8-6zqmk subsys=daemon level=info msg="Allocated new global key" key="k8s:application=nova;k8s:batch.kubernetes.io/controller-uid=999da6f3-ca11-4ff0-a1e1-1ee4afdd8e4f;k8s:batch.kubernetes.io/job-name=nova-cell-setup;k8s:component=cell-setup;k8s:controller-uid=999da6f3-ca11-4ff0-a1e1-1ee4afdd8e4f;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=nova-cell-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=nova-cell-setup;k8s:release_group=nova;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f072c5125c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3027 identity=1514 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=999da6f3-ca11-4ff0-a1e1-1ee4afdd8e4f,k8s:batch.kubernetes.io/job-name=nova-cell-setup,k8s:component=cell-setup,k8s:controller-uid=999da6f3-ca11-4ff0-a1e1-1ee4afdd8e4f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-cell-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-cell-setup,k8s:release_group=nova" ipv4=10.0.0.50 ipv6= k8sPodName=openstack/nova-cell-setup-b7jng oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f072c5125c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3027 identity=1514 ipv4=10.0.0.50 ipv6= k8sPodName=openstack/nova-cell-setup-b7jng subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f072c5125c datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3027 identity=1514 ipv4=10.0.0.50 ipv6= k8sPodName=openstack/nova-cell-setup-b7jng subsys=endpoint level=info msg="Successful endpoint creation" containerID=f072c5125c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3027 identity=1514 ipv4=10.0.0.50 ipv6= k8sPodName=openstack/nova-cell-setup-b7jng subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.149 78f18e39-cb47-415b-b4dd-fe2882079e59 default }" containerID=f131ec1ce77decc354f3cfd47cfd5b3d9fa81d31711296697deaf65c52a89e50 datapathConfiguration="&{false false false false false }" interface=lxc883003a8fa04 k8sPodName=openstack/nova-novncproxy-65b9c7fb88-7dg79 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f131ec1ce7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1756 ipv4=10.0.0.149 ipv6= k8sPodName=openstack/nova-novncproxy-65b9c7fb88-7dg79 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f131ec1ce7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1756 identityLabels="k8s:application=nova,k8s:component=novnc-proxy,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-novncproxy,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=nova" ipv4=10.0.0.149 ipv6= k8sPodName=openstack/nova-novncproxy-65b9c7fb88-7dg79 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=nova;k8s:component=novnc-proxy;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=nova-novncproxy;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=nova;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f131ec1ce7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1756 identity=51224 identityLabels="k8s:application=nova,k8s:component=novnc-proxy,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-novncproxy,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=nova" ipv4=10.0.0.149 ipv6= k8sPodName=openstack/nova-novncproxy-65b9c7fb88-7dg79 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f131ec1ce7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1756 identity=51224 ipv4=10.0.0.149 ipv6= k8sPodName=openstack/nova-novncproxy-65b9c7fb88-7dg79 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f131ec1ce7 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1756 identity=51224 ipv4=10.0.0.149 ipv6= k8sPodName=openstack/nova-novncproxy-65b9c7fb88-7dg79 subsys=endpoint level=info msg="Successful endpoint creation" containerID=f131ec1ce7 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1756 identity=51224 ipv4=10.0.0.149 ipv6= k8sPodName=openstack/nova-novncproxy-65b9c7fb88-7dg79 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=ce4b4157a3 endpointID=283 k8sNamespace=openstack k8sPodName=nova-db-init-6t9fx subsys=daemon level=info msg="Releasing key" key="[k8s:application=nova k8s:batch.kubernetes.io/controller-uid=0f902cd3-2896-45fc-8a48-6684521b1017 k8s:batch.kubernetes.io/job-name=nova-db-init k8s:component=db-init k8s:controller-uid=0f902cd3-2896-45fc-8a48-6684521b1017 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=nova-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=nova-db-init k8s:release_group=nova]" subsys=allocator level=info msg="Removed endpoint" containerID=ce4b4157a3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=283 identity=11798 ipv4=10.0.0.127 ipv6= k8sPodName=openstack/nova-db-init-6t9fx subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.21 d81a14ff-7f91-4c26-ba7d-bd021ba51758 default }" containerID=8c9a8730cda88af8208f08121b9cdf2d22b3d7fa5c296ab09297e3a896f9e8aa datapathConfiguration="&{false false false false false }" interface=lxca3a6e7cef642 k8sPodName=openstack/nova-db-sync-hd62s labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8c9a8730cd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3031 ipv4=10.0.0.21 ipv6= k8sPodName=openstack/nova-db-sync-hd62s subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8c9a8730cd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3031 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=1cbc4cd0-8fd0-434c-a9eb-e6c064afc2a2,k8s:batch.kubernetes.io/job-name=nova-db-sync,k8s:component=db-sync,k8s:controller-uid=1cbc4cd0-8fd0-434c-a9eb-e6c064afc2a2,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-db-sync,k8s:release_group=nova" ipv4=10.0.0.21 ipv6= k8sPodName=openstack/nova-db-sync-hd62s subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=nova;k8s:batch.kubernetes.io/controller-uid=1cbc4cd0-8fd0-434c-a9eb-e6c064afc2a2;k8s:batch.kubernetes.io/job-name=nova-db-sync;k8s:component=db-sync;k8s:controller-uid=1cbc4cd0-8fd0-434c-a9eb-e6c064afc2a2;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=nova-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=nova-db-sync;k8s:release_group=nova;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8c9a8730cd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3031 identity=36424 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=1cbc4cd0-8fd0-434c-a9eb-e6c064afc2a2,k8s:batch.kubernetes.io/job-name=nova-db-sync,k8s:component=db-sync,k8s:controller-uid=1cbc4cd0-8fd0-434c-a9eb-e6c064afc2a2,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-db-sync,k8s:release_group=nova" ipv4=10.0.0.21 ipv6= k8sPodName=openstack/nova-db-sync-hd62s oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8c9a8730cd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3031 identity=36424 ipv4=10.0.0.21 ipv6= k8sPodName=openstack/nova-db-sync-hd62s subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=8c9a8730cd datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3031 identity=36424 ipv4=10.0.0.21 ipv6= k8sPodName=openstack/nova-db-sync-hd62s subsys=endpoint level=info msg="Successful endpoint creation" containerID=8c9a8730cd datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3031 identity=36424 ipv4=10.0.0.21 ipv6= k8sPodName=openstack/nova-db-sync-hd62s subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.143 a3f8af53-e0db-475e-af2e-80cfc1b10016 default }" containerID=c17831c69fb59d42d4a18fd4c65b8825c24d75a21822583a47008338283c5b26 datapathConfiguration="&{false false false false false }" interface=lxc7b6bed2858d9 k8sPodName=openstack/nova-service-cleaner-29824020-f6mjp labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c17831c69f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3418 ipv4=10.0.0.143 ipv6= k8sPodName=openstack/nova-service-cleaner-29824020-f6mjp subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c17831c69f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3418 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=422ddc92-6906-4664-837e-09d6d116ebe0,k8s:batch.kubernetes.io/job-name=nova-service-cleaner-29824020,k8s:component=service-cleaner,k8s:controller-uid=422ddc92-6906-4664-837e-09d6d116ebe0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-service-cleaner,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-service-cleaner-29824020,k8s:release_group=nova" ipv4=10.0.0.143 ipv6= k8sPodName=openstack/nova-service-cleaner-29824020-f6mjp subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=nova;k8s:batch.kubernetes.io/controller-uid=422ddc92-6906-4664-837e-09d6d116ebe0;k8s:batch.kubernetes.io/job-name=nova-service-cleaner-29824020;k8s:component=service-cleaner;k8s:controller-uid=422ddc92-6906-4664-837e-09d6d116ebe0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=nova-service-cleaner;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=nova-service-cleaner-29824020;k8s:release_group=nova;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c17831c69f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3418 identity=45386 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=422ddc92-6906-4664-837e-09d6d116ebe0,k8s:batch.kubernetes.io/job-name=nova-service-cleaner-29824020,k8s:component=service-cleaner,k8s:controller-uid=422ddc92-6906-4664-837e-09d6d116ebe0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-service-cleaner,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-service-cleaner-29824020,k8s:release_group=nova" ipv4=10.0.0.143 ipv6= k8sPodName=openstack/nova-service-cleaner-29824020-f6mjp oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c17831c69f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3418 identity=45386 ipv4=10.0.0.143 ipv6= k8sPodName=openstack/nova-service-cleaner-29824020-f6mjp subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.56 627f7bd2-79fb-4013-87b6-9050020b1839 default }" containerID=8cf47381b1134bd6d107b03d0801e76bbc67453972b424c1181e84c65ec149be datapathConfiguration="&{false false false false false }" interface=lxc0178faed8cf7 k8sPodName=openstack/nova-cell-setup-29824020-t8qrz labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8cf47381b1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=595 ipv4=10.0.0.56 ipv6= k8sPodName=openstack/nova-cell-setup-29824020-t8qrz subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8cf47381b1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=595 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=5955b167-0d7e-4d74-a952-aa3ba15c58c6,k8s:batch.kubernetes.io/job-name=nova-cell-setup-29824020,k8s:component=cell-setup,k8s:controller-uid=5955b167-0d7e-4d74-a952-aa3ba15c58c6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-cell-setup-cron,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-cell-setup-29824020,k8s:release_group=nova" ipv4=10.0.0.56 ipv6= k8sPodName=openstack/nova-cell-setup-29824020-t8qrz subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=nova;k8s:batch.kubernetes.io/controller-uid=5955b167-0d7e-4d74-a952-aa3ba15c58c6;k8s:batch.kubernetes.io/job-name=nova-cell-setup-29824020;k8s:component=cell-setup;k8s:controller-uid=5955b167-0d7e-4d74-a952-aa3ba15c58c6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=nova-cell-setup-cron;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=nova-cell-setup-29824020;k8s:release_group=nova;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8cf47381b1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=595 identity=2861 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=5955b167-0d7e-4d74-a952-aa3ba15c58c6,k8s:batch.kubernetes.io/job-name=nova-cell-setup-29824020,k8s:component=cell-setup,k8s:controller-uid=5955b167-0d7e-4d74-a952-aa3ba15c58c6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-cell-setup-cron,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-cell-setup-29824020,k8s:release_group=nova" ipv4=10.0.0.56 ipv6= k8sPodName=openstack/nova-cell-setup-29824020-t8qrz oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8cf47381b1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=595 identity=2861 ipv4=10.0.0.56 ipv6= k8sPodName=openstack/nova-cell-setup-29824020-t8qrz subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c17831c69f datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3418 identity=45386 ipv4=10.0.0.143 ipv6= k8sPodName=openstack/nova-service-cleaner-29824020-f6mjp subsys=endpoint level=info msg="Successful endpoint creation" containerID=c17831c69f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3418 identity=45386 ipv4=10.0.0.143 ipv6= k8sPodName=openstack/nova-service-cleaner-29824020-f6mjp subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=8cf47381b1 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=595 identity=2861 ipv4=10.0.0.56 ipv6= k8sPodName=openstack/nova-cell-setup-29824020-t8qrz subsys=endpoint level=info msg="Successful endpoint creation" containerID=8cf47381b1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=595 identity=2861 ipv4=10.0.0.56 ipv6= k8sPodName=openstack/nova-cell-setup-29824020-t8qrz subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=8c9a8730cd endpointID=3031 k8sNamespace=openstack k8sPodName=nova-db-sync-hd62s subsys=daemon level=info msg="Releasing key" key="[k8s:application=nova k8s:batch.kubernetes.io/controller-uid=1cbc4cd0-8fd0-434c-a9eb-e6c064afc2a2 k8s:batch.kubernetes.io/job-name=nova-db-sync k8s:component=db-sync k8s:controller-uid=1cbc4cd0-8fd0-434c-a9eb-e6c064afc2a2 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=nova-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=nova-db-sync k8s:release_group=nova]" subsys=allocator level=info msg="Removed endpoint" containerID=8c9a8730cd datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3031 identity=36424 ipv4=10.0.0.21 ipv6= k8sPodName=openstack/nova-db-sync-hd62s subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.1 058be046-bb25-456d-a442-46372d38776c default }" containerID=58e7a2dc974053788f8357cb98fd7b94e512011f5a48b5ae83c6f1c93707c15b datapathConfiguration="&{false false false false false }" interface=lxc6b7ee8175b52 k8sPodName=openstack/nova-rabbit-init-c22gf labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=58e7a2dc97 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2745 ipv4=10.0.0.1 ipv6= k8sPodName=openstack/nova-rabbit-init-c22gf subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=58e7a2dc97 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2745 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=c48b92ff-22a3-4580-b22d-41819c58493b,k8s:batch.kubernetes.io/job-name=nova-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=c48b92ff-22a3-4580-b22d-41819c58493b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-rabbit-init,k8s:release_group=nova" ipv4=10.0.0.1 ipv6= k8sPodName=openstack/nova-rabbit-init-c22gf subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=nova;k8s:batch.kubernetes.io/controller-uid=c48b92ff-22a3-4580-b22d-41819c58493b;k8s:batch.kubernetes.io/job-name=nova-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=c48b92ff-22a3-4580-b22d-41819c58493b;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=nova-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=nova-rabbit-init;k8s:release_group=nova;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=58e7a2dc97 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2745 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.1 ipv6= k8sPodName=openstack/nova-rabbit-init-c22gf line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=58e7a2dc97 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2745 identity=2728 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=c48b92ff-22a3-4580-b22d-41819c58493b,k8s:batch.kubernetes.io/job-name=nova-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=c48b92ff-22a3-4580-b22d-41819c58493b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-rabbit-init,k8s:release_group=nova" ipv4=10.0.0.1 ipv6= k8sPodName=openstack/nova-rabbit-init-c22gf oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=58e7a2dc97 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2745 identity=2728 ipv4=10.0.0.1 ipv6= k8sPodName=openstack/nova-rabbit-init-c22gf subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=58e7a2dc97 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2745 identity=2728 ipv4=10.0.0.1 ipv6= k8sPodName=openstack/nova-rabbit-init-c22gf subsys=endpoint level=info msg="Successful endpoint creation" containerID=58e7a2dc97 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2745 identity=2728 ipv4=10.0.0.1 ipv6= k8sPodName=openstack/nova-rabbit-init-c22gf subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=58e7a2dc97 endpointID=2745 k8sNamespace=openstack k8sPodName=nova-rabbit-init-c22gf subsys=daemon level=info msg="Releasing key" key="[k8s:application=nova k8s:batch.kubernetes.io/controller-uid=c48b92ff-22a3-4580-b22d-41819c58493b k8s:batch.kubernetes.io/job-name=nova-rabbit-init k8s:component=rabbit-init k8s:controller-uid=c48b92ff-22a3-4580-b22d-41819c58493b k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=nova-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=nova-rabbit-init k8s:release_group=nova]" subsys=allocator level=info msg="Removed endpoint" containerID=58e7a2dc97 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2745 identity=2728 ipv4=10.0.0.1 ipv6= k8sPodName=openstack/nova-rabbit-init-c22gf subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.57 bf5f16ac-4ab3-476a-aef2-8406413ff7a6 default }" containerID=c1b848df20fb6c6736d1bbb48c54e83eb3db84724ef6b995eca41659cb2942ec datapathConfiguration="&{false false false false false }" interface=lxcbbda892ba29e k8sPodName=openstack/nova-ks-service-rfngw labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c1b848df20 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=994 ipv4=10.0.0.57 ipv6= k8sPodName=openstack/nova-ks-service-rfngw subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c1b848df20 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=994 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=9a67396d-891e-46d5-8397-f380fe3ae128,k8s:batch.kubernetes.io/job-name=nova-ks-service,k8s:component=ks-service,k8s:controller-uid=9a67396d-891e-46d5-8397-f380fe3ae128,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-ks-service,k8s:release_group=nova" ipv4=10.0.0.57 ipv6= k8sPodName=openstack/nova-ks-service-rfngw subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=nova;k8s:batch.kubernetes.io/controller-uid=9a67396d-891e-46d5-8397-f380fe3ae128;k8s:batch.kubernetes.io/job-name=nova-ks-service;k8s:component=ks-service;k8s:controller-uid=9a67396d-891e-46d5-8397-f380fe3ae128;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=nova-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=nova-ks-service;k8s:release_group=nova;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c1b848df20 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=994 identity=46705 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=9a67396d-891e-46d5-8397-f380fe3ae128,k8s:batch.kubernetes.io/job-name=nova-ks-service,k8s:component=ks-service,k8s:controller-uid=9a67396d-891e-46d5-8397-f380fe3ae128,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-ks-service,k8s:release_group=nova" ipv4=10.0.0.57 ipv6= k8sPodName=openstack/nova-ks-service-rfngw oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c1b848df20 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=994 identity=46705 ipv4=10.0.0.57 ipv6= k8sPodName=openstack/nova-ks-service-rfngw subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c1b848df20 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=994 identity=46705 ipv4=10.0.0.57 ipv6= k8sPodName=openstack/nova-ks-service-rfngw subsys=endpoint level=info msg="Successful endpoint creation" containerID=c1b848df20 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=994 identity=46705 ipv4=10.0.0.57 ipv6= k8sPodName=openstack/nova-ks-service-rfngw subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=c1b848df20 endpointID=994 k8sNamespace=openstack k8sPodName=nova-ks-service-rfngw subsys=daemon level=info msg="Releasing key" key="[k8s:application=nova k8s:batch.kubernetes.io/controller-uid=9a67396d-891e-46d5-8397-f380fe3ae128 k8s:batch.kubernetes.io/job-name=nova-ks-service k8s:component=ks-service k8s:controller-uid=9a67396d-891e-46d5-8397-f380fe3ae128 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=nova-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=nova-ks-service k8s:release_group=nova]" subsys=allocator level=info msg="Removed endpoint" containerID=c1b848df20 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=994 identity=46705 ipv4=10.0.0.57 ipv6= k8sPodName=openstack/nova-ks-service-rfngw subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.199 7e8ebacf-d536-4a04-a291-845f10fea89b default }" containerID=0f30a3d3a1533a047d93db76ff9b64862880c4293093ea0b8b0e3af6a9d00d55 datapathConfiguration="&{false false false false false }" interface=lxcbcff79f1861b k8sPodName=openstack/nova-ks-endpoints-xj85k labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0f30a3d3a1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=586 ipv4=10.0.0.199 ipv6= k8sPodName=openstack/nova-ks-endpoints-xj85k subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0f30a3d3a1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=586 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=b20a4570-fcba-4241-bcb8-1a5ee88380a5,k8s:batch.kubernetes.io/job-name=nova-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=b20a4570-fcba-4241-bcb8-1a5ee88380a5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-ks-endpoints,k8s:release_group=nova" ipv4=10.0.0.199 ipv6= k8sPodName=openstack/nova-ks-endpoints-xj85k subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=0f30a3d3a1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=586 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.199 ipv6= k8sPodName=openstack/nova-ks-endpoints-xj85k line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=nova;k8s:batch.kubernetes.io/controller-uid=b20a4570-fcba-4241-bcb8-1a5ee88380a5;k8s:batch.kubernetes.io/job-name=nova-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=b20a4570-fcba-4241-bcb8-1a5ee88380a5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=nova-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=nova-ks-endpoints;k8s:release_group=nova;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0f30a3d3a1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=586 identity=31089 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=b20a4570-fcba-4241-bcb8-1a5ee88380a5,k8s:batch.kubernetes.io/job-name=nova-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=b20a4570-fcba-4241-bcb8-1a5ee88380a5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-ks-endpoints,k8s:release_group=nova" ipv4=10.0.0.199 ipv6= k8sPodName=openstack/nova-ks-endpoints-xj85k oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0f30a3d3a1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=586 identity=31089 ipv4=10.0.0.199 ipv6= k8sPodName=openstack/nova-ks-endpoints-xj85k subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=0f30a3d3a1 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=586 identity=31089 ipv4=10.0.0.199 ipv6= k8sPodName=openstack/nova-ks-endpoints-xj85k subsys=endpoint level=info msg="Successful endpoint creation" containerID=0f30a3d3a1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=586 identity=31089 ipv4=10.0.0.199 ipv6= k8sPodName=openstack/nova-ks-endpoints-xj85k subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=0f30a3d3a1 endpointID=586 k8sNamespace=openstack k8sPodName=nova-ks-endpoints-xj85k subsys=daemon level=info msg="Releasing key" key="[k8s:application=nova k8s:batch.kubernetes.io/controller-uid=b20a4570-fcba-4241-bcb8-1a5ee88380a5 k8s:batch.kubernetes.io/job-name=nova-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=b20a4570-fcba-4241-bcb8-1a5ee88380a5 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=nova-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=nova-ks-endpoints k8s:release_group=nova]" subsys=allocator level=info msg="Removed endpoint" containerID=0f30a3d3a1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=586 identity=31089 ipv4=10.0.0.199 ipv6= k8sPodName=openstack/nova-ks-endpoints-xj85k subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.241 b3b7f64c-e07b-4000-b62d-59fc584d84d9 default }" containerID=c562cd92cb5df1eba6099b512894216c3ddc72bc208cdc2b50623362aa26256f datapathConfiguration="&{false false false false false }" interface=lxc4fd25fe1323f k8sPodName=openstack/nova-ks-user-wxbm2 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c562cd92cb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1180 ipv4=10.0.0.241 ipv6= k8sPodName=openstack/nova-ks-user-wxbm2 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c562cd92cb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1180 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=d6311a8d-ed17-4012-9e30-2cdcbbd880fc,k8s:batch.kubernetes.io/job-name=nova-ks-user,k8s:component=ks-user,k8s:controller-uid=d6311a8d-ed17-4012-9e30-2cdcbbd880fc,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-ks-user,k8s:release_group=nova" ipv4=10.0.0.241 ipv6= k8sPodName=openstack/nova-ks-user-wxbm2 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=nova;k8s:batch.kubernetes.io/controller-uid=d6311a8d-ed17-4012-9e30-2cdcbbd880fc;k8s:batch.kubernetes.io/job-name=nova-ks-user;k8s:component=ks-user;k8s:controller-uid=d6311a8d-ed17-4012-9e30-2cdcbbd880fc;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=nova-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=nova-ks-user;k8s:release_group=nova;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=c562cd92cb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1180 identity=3721 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=d6311a8d-ed17-4012-9e30-2cdcbbd880fc,k8s:batch.kubernetes.io/job-name=nova-ks-user,k8s:component=ks-user,k8s:controller-uid=d6311a8d-ed17-4012-9e30-2cdcbbd880fc,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-ks-user,k8s:release_group=nova" ipv4=10.0.0.241 ipv6= k8sPodName=openstack/nova-ks-user-wxbm2 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c562cd92cb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1180 identity=3721 ipv4=10.0.0.241 ipv6= k8sPodName=openstack/nova-ks-user-wxbm2 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c562cd92cb datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1180 identity=3721 ipv4=10.0.0.241 ipv6= k8sPodName=openstack/nova-ks-user-wxbm2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=c562cd92cb datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1180 identity=3721 ipv4=10.0.0.241 ipv6= k8sPodName=openstack/nova-ks-user-wxbm2 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=c562cd92cb endpointID=1180 k8sNamespace=openstack k8sPodName=nova-ks-user-wxbm2 subsys=daemon level=info msg="Releasing key" key="[k8s:application=nova k8s:batch.kubernetes.io/controller-uid=d6311a8d-ed17-4012-9e30-2cdcbbd880fc k8s:batch.kubernetes.io/job-name=nova-ks-user k8s:component=ks-user k8s:controller-uid=d6311a8d-ed17-4012-9e30-2cdcbbd880fc k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=nova-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=nova-ks-user k8s:release_group=nova]" subsys=allocator level=info msg="Removed endpoint" containerID=c562cd92cb datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1180 identity=3721 ipv4=10.0.0.241 ipv6= k8sPodName=openstack/nova-ks-user-wxbm2 subsys=endpoint level=info msg="Delete endpoint request" containerID=e907e42da3 endpointID=42 k8sNamespace=openstack k8sPodName=nova-bootstrap-2shf7 subsys=daemon level=info msg="Releasing key" key="[k8s:application=nova k8s:batch.kubernetes.io/controller-uid=b07dba1c-1cc8-4d36-b06e-1a9a442f0108 k8s:batch.kubernetes.io/job-name=nova-bootstrap k8s:component=bootstrap k8s:controller-uid=b07dba1c-1cc8-4d36-b06e-1a9a442f0108 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=nova-bootstrap k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=nova-bootstrap k8s:release_group=nova]" subsys=allocator level=info msg="Removed endpoint" containerID=e907e42da3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=42 identity=18855 ipv4=10.0.0.14 ipv6= k8sPodName=openstack/nova-bootstrap-2shf7 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.223 a376a8d7-ddf3-4858-9f91-2cced787c4cf default }" containerID=44c1ea82d67a78614557121806deccb4d1b2f86c6593a2b1f0a87e1883740b13 datapathConfiguration="&{false false false false false }" interface=lxc94d5037061f5 k8sPodName=local-path-storage/helper-pod-create-pvc-977111e8-9c11-47a2-b52a-82bf664b0187 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=44c1ea82d6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1346 ipv4=10.0.0.223 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-977111e8-9c11-47a2-b52a-82bf664b0187 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=44c1ea82d6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1346 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.223 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-977111e8-9c11-47a2-b52a-82bf664b0187 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=44c1ea82d6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1346 identity=16985 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.223 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-977111e8-9c11-47a2-b52a-82bf664b0187 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=44c1ea82d6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1346 identity=16985 ipv4=10.0.0.223 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-977111e8-9c11-47a2-b52a-82bf664b0187 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=44c1ea82d6 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1346 identity=16985 ipv4=10.0.0.223 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-977111e8-9c11-47a2-b52a-82bf664b0187 subsys=endpoint level=info msg="Successful endpoint creation" containerID=44c1ea82d6 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1346 identity=16985 ipv4=10.0.0.223 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-977111e8-9c11-47a2-b52a-82bf664b0187 subsys=daemon level=info msg="Delete endpoint request" containerID=44c1ea82d6 endpointID=1346 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-977111e8-9c11-47a2-b52a-82bf664b0187 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=44c1ea82d6 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1346 identity=16985 ipv4=10.0.0.223 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-977111e8-9c11-47a2-b52a-82bf664b0187 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.129 92ee11d2-6d1e-4dcd-a8da-15d14fba5a28 default }" containerID=5013107adf828981a14f08a6bb6058f534109e080a1a1668b470bdd4e93ed60f datapathConfiguration="&{false false false false false }" interface=lxc34c2a5cb9b8b k8sPodName=openstack/rabbitmq-neutron-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5013107adf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=10 ipv4=10.0.0.129 ipv6= k8sPodName=openstack/rabbitmq-neutron-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5013107adf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=10 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-neutron,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-neutron-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-neutron-server-0" ipv4=10.0.0.129 ipv6= k8sPodName=openstack/rabbitmq-neutron-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-neutron;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-neutron-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-neutron-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5013107adf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=10 identity=22382 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-neutron,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-neutron-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-neutron-server-0" ipv4=10.0.0.129 ipv6= k8sPodName=openstack/rabbitmq-neutron-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=5013107adf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=10 identity=22382 ipv4=10.0.0.129 ipv6= k8sPodName=openstack/rabbitmq-neutron-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=5013107adf datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=10 identity=22382 ipv4=10.0.0.129 ipv6= k8sPodName=openstack/rabbitmq-neutron-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=5013107adf datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=10 identity=22382 ipv4=10.0.0.129 ipv6= k8sPodName=openstack/rabbitmq-neutron-server-0 subsys=daemon level=info msg="Delete endpoint request" containerID=c17831c69f endpointID=3418 k8sNamespace=openstack k8sPodName=nova-service-cleaner-29824020-f6mjp subsys=daemon level=info msg="Releasing key" key="[k8s:application=nova k8s:batch.kubernetes.io/controller-uid=422ddc92-6906-4664-837e-09d6d116ebe0 k8s:batch.kubernetes.io/job-name=nova-service-cleaner-29824020 k8s:component=service-cleaner k8s:controller-uid=422ddc92-6906-4664-837e-09d6d116ebe0 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=nova-service-cleaner k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=nova-service-cleaner-29824020 k8s:release_group=nova]" subsys=allocator level=info msg="Removed endpoint" containerID=c17831c69f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3418 identity=45386 ipv4=10.0.0.143 ipv6= k8sPodName=openstack/nova-service-cleaner-29824020-f6mjp subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.233 1e3af349-5371-40db-9f91-60a34b130d42 default }" containerID=22842d55c6ea1a91fdd9e3a09dfd982168427eb9ae754f0907450fe7864ee4e0 datapathConfiguration="&{false false false false false }" interface=lxc4a3372bcabf1 k8sPodName=openstack/neutron-rpc-server-645d84847c-r8lg2 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=22842d55c6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=51 ipv4=10.0.0.233 ipv6= k8sPodName=openstack/neutron-rpc-server-645d84847c-r8lg2 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=22842d55c6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=51 identityLabels="k8s:application=neutron,k8s:component=rpc_server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=neutron-rpc-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=neutron" ipv4=10.0.0.233 ipv6= k8sPodName=openstack/neutron-rpc-server-645d84847c-r8lg2 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=neutron;k8s:component=rpc_server;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=neutron-rpc-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=neutron;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=22842d55c6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=51 identity=5129 identityLabels="k8s:application=neutron,k8s:component=rpc_server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=neutron-rpc-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=neutron" ipv4=10.0.0.233 ipv6= k8sPodName=openstack/neutron-rpc-server-645d84847c-r8lg2 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=22842d55c6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=51 identity=5129 ipv4=10.0.0.233 ipv6= k8sPodName=openstack/neutron-rpc-server-645d84847c-r8lg2 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.178 bd1e91eb-fd12-45af-a346-2301451d4555 default }" containerID=81eab5c7bca3c63dd421afd09ecc95c34fdeda388eb487285c4ee052a67dd32b datapathConfiguration="&{false false false false false }" interface=lxc8654d9a57d4c k8sPodName=openstack/neutron-server-cdbc468b6-jqw58 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=81eab5c7bc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1156 ipv4=10.0.0.178 ipv6= k8sPodName=openstack/neutron-server-cdbc468b6-jqw58 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=81eab5c7bc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1156 identityLabels="k8s:application=neutron,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=neutron-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=neutron" ipv4=10.0.0.178 ipv6= k8sPodName=openstack/neutron-server-cdbc468b6-jqw58 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=neutron;k8s:component=server;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=neutron-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=neutron;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=81eab5c7bc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1156 identity=30935 identityLabels="k8s:application=neutron,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=neutron-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=neutron" ipv4=10.0.0.178 ipv6= k8sPodName=openstack/neutron-server-cdbc468b6-jqw58 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=81eab5c7bc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1156 identity=30935 ipv4=10.0.0.178 ipv6= k8sPodName=openstack/neutron-server-cdbc468b6-jqw58 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.15 51b72e68-c23a-4092-98ff-0846321c71e6 default }" containerID=bcff5fb2ef8619c7604ae8c99e147afb1ade6af1d8fa230d4fa62218c01ca9bc datapathConfiguration="&{false false false false false }" interface=lxcb36eeaba8518 k8sPodName=openstack/neutron-db-init-l7w9s labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=bcff5fb2ef datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1938 ipv4=10.0.0.15 ipv6= k8sPodName=openstack/neutron-db-init-l7w9s subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=bcff5fb2ef datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1938 identityLabels="k8s:application=neutron,k8s:batch.kubernetes.io/controller-uid=e8dcaa4b-f43f-4ef0-8919-c273536cbe0e,k8s:batch.kubernetes.io/job-name=neutron-db-init,k8s:component=db-init,k8s:controller-uid=e8dcaa4b-f43f-4ef0-8919-c273536cbe0e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=neutron-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=neutron-db-init,k8s:release_group=neutron" ipv4=10.0.0.15 ipv6= k8sPodName=openstack/neutron-db-init-l7w9s subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=neutron;k8s:batch.kubernetes.io/controller-uid=e8dcaa4b-f43f-4ef0-8919-c273536cbe0e;k8s:batch.kubernetes.io/job-name=neutron-db-init;k8s:component=db-init;k8s:controller-uid=e8dcaa4b-f43f-4ef0-8919-c273536cbe0e;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=neutron-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=neutron-db-init;k8s:release_group=neutron;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=bcff5fb2ef datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1938 identity=44946 identityLabels="k8s:application=neutron,k8s:batch.kubernetes.io/controller-uid=e8dcaa4b-f43f-4ef0-8919-c273536cbe0e,k8s:batch.kubernetes.io/job-name=neutron-db-init,k8s:component=db-init,k8s:controller-uid=e8dcaa4b-f43f-4ef0-8919-c273536cbe0e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=neutron-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=neutron-db-init,k8s:release_group=neutron" ipv4=10.0.0.15 ipv6= k8sPodName=openstack/neutron-db-init-l7w9s oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=bcff5fb2ef datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1938 identity=44946 ipv4=10.0.0.15 ipv6= k8sPodName=openstack/neutron-db-init-l7w9s subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=22842d55c6 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=51 identity=5129 ipv4=10.0.0.233 ipv6= k8sPodName=openstack/neutron-rpc-server-645d84847c-r8lg2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=22842d55c6 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=51 identity=5129 ipv4=10.0.0.233 ipv6= k8sPodName=openstack/neutron-rpc-server-645d84847c-r8lg2 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=81eab5c7bc datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1156 identity=30935 ipv4=10.0.0.178 ipv6= k8sPodName=openstack/neutron-server-cdbc468b6-jqw58 subsys=endpoint level=info msg="Successful endpoint creation" containerID=81eab5c7bc datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1156 identity=30935 ipv4=10.0.0.178 ipv6= k8sPodName=openstack/neutron-server-cdbc468b6-jqw58 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=bcff5fb2ef datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1938 identity=44946 ipv4=10.0.0.15 ipv6= k8sPodName=openstack/neutron-db-init-l7w9s subsys=endpoint level=info msg="Successful endpoint creation" containerID=bcff5fb2ef datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1938 identity=44946 ipv4=10.0.0.15 ipv6= k8sPodName=openstack/neutron-db-init-l7w9s subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=bcff5fb2ef endpointID=1938 k8sNamespace=openstack k8sPodName=neutron-db-init-l7w9s subsys=daemon level=info msg="Releasing key" key="[k8s:application=neutron k8s:batch.kubernetes.io/controller-uid=e8dcaa4b-f43f-4ef0-8919-c273536cbe0e k8s:batch.kubernetes.io/job-name=neutron-db-init k8s:component=db-init k8s:controller-uid=e8dcaa4b-f43f-4ef0-8919-c273536cbe0e k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=neutron-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=neutron-db-init k8s:release_group=neutron]" subsys=allocator level=info msg="Removed endpoint" containerID=bcff5fb2ef datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1938 identity=44946 ipv4=10.0.0.15 ipv6= k8sPodName=openstack/neutron-db-init-l7w9s subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.131 d9eb1c1e-9071-46eb-9e98-15135f8c28e5 default }" containerID=5086c36ad53060813609dbd7e352df41d96490d35c957b8d3b9698b7f6c409a8 datapathConfiguration="&{false false false false false }" interface=lxca16bafb3ee61 k8sPodName=openstack/neutron-db-sync-qldv6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5086c36ad5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=564 ipv4=10.0.0.131 ipv6= k8sPodName=openstack/neutron-db-sync-qldv6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5086c36ad5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=564 identityLabels="k8s:application=neutron,k8s:batch.kubernetes.io/controller-uid=5b7e2ebf-a245-4937-8ca2-fc1e7bf1f9d9,k8s:batch.kubernetes.io/job-name=neutron-db-sync,k8s:component=db-sync,k8s:controller-uid=5b7e2ebf-a245-4937-8ca2-fc1e7bf1f9d9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=neutron-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=neutron-db-sync,k8s:release_group=neutron" ipv4=10.0.0.131 ipv6= k8sPodName=openstack/neutron-db-sync-qldv6 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=neutron;k8s:batch.kubernetes.io/controller-uid=5b7e2ebf-a245-4937-8ca2-fc1e7bf1f9d9;k8s:batch.kubernetes.io/job-name=neutron-db-sync;k8s:component=db-sync;k8s:controller-uid=5b7e2ebf-a245-4937-8ca2-fc1e7bf1f9d9;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=neutron-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=neutron-db-sync;k8s:release_group=neutron;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5086c36ad5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=564 identity=22883 identityLabels="k8s:application=neutron,k8s:batch.kubernetes.io/controller-uid=5b7e2ebf-a245-4937-8ca2-fc1e7bf1f9d9,k8s:batch.kubernetes.io/job-name=neutron-db-sync,k8s:component=db-sync,k8s:controller-uid=5b7e2ebf-a245-4937-8ca2-fc1e7bf1f9d9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=neutron-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=neutron-db-sync,k8s:release_group=neutron" ipv4=10.0.0.131 ipv6= k8sPodName=openstack/neutron-db-sync-qldv6 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5086c36ad5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=564 identity=22883 ipv4=10.0.0.131 ipv6= k8sPodName=openstack/neutron-db-sync-qldv6 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=5086c36ad5 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=564 identity=22883 ipv4=10.0.0.131 ipv6= k8sPodName=openstack/neutron-db-sync-qldv6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=5086c36ad5 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=564 identity=22883 ipv4=10.0.0.131 ipv6= k8sPodName=openstack/neutron-db-sync-qldv6 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=5086c36ad5 endpointID=564 k8sNamespace=openstack k8sPodName=neutron-db-sync-qldv6 subsys=daemon level=info msg="Releasing key" key="[k8s:application=neutron k8s:batch.kubernetes.io/controller-uid=5b7e2ebf-a245-4937-8ca2-fc1e7bf1f9d9 k8s:batch.kubernetes.io/job-name=neutron-db-sync k8s:component=db-sync k8s:controller-uid=5b7e2ebf-a245-4937-8ca2-fc1e7bf1f9d9 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=neutron-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=neutron-db-sync k8s:release_group=neutron]" subsys=allocator level=info msg="Removed endpoint" containerID=5086c36ad5 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=564 identity=22883 ipv4=10.0.0.131 ipv6= k8sPodName=openstack/neutron-db-sync-qldv6 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.223 8b4ba4c3-0f37-4f68-b1fc-687ba10a04c3 default }" containerID=3e775aa3e1723af749bc6a0b1074fc63289535302882ecb0422841ee598bc30f datapathConfiguration="&{false false false false false }" interface=lxcdef591803601 k8sPodName=openstack/neutron-rabbit-init-52kqf labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3e775aa3e1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4074 ipv4=10.0.0.223 ipv6= k8sPodName=openstack/neutron-rabbit-init-52kqf subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3e775aa3e1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4074 identityLabels="k8s:application=neutron,k8s:batch.kubernetes.io/controller-uid=f47c4798-cdbf-4f8d-bf74-e16883d2f6bc,k8s:batch.kubernetes.io/job-name=neutron-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=f47c4798-cdbf-4f8d-bf74-e16883d2f6bc,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=neutron-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=neutron-rabbit-init,k8s:release_group=neutron" ipv4=10.0.0.223 ipv6= k8sPodName=openstack/neutron-rabbit-init-52kqf subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=3e775aa3e1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4074 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.223 ipv6= k8sPodName=openstack/neutron-rabbit-init-52kqf line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=neutron;k8s:batch.kubernetes.io/controller-uid=f47c4798-cdbf-4f8d-bf74-e16883d2f6bc;k8s:batch.kubernetes.io/job-name=neutron-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=f47c4798-cdbf-4f8d-bf74-e16883d2f6bc;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=neutron-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=neutron-rabbit-init;k8s:release_group=neutron;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3e775aa3e1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4074 identity=64094 identityLabels="k8s:application=neutron,k8s:batch.kubernetes.io/controller-uid=f47c4798-cdbf-4f8d-bf74-e16883d2f6bc,k8s:batch.kubernetes.io/job-name=neutron-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=f47c4798-cdbf-4f8d-bf74-e16883d2f6bc,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=neutron-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=neutron-rabbit-init,k8s:release_group=neutron" ipv4=10.0.0.223 ipv6= k8sPodName=openstack/neutron-rabbit-init-52kqf oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3e775aa3e1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4074 identity=64094 ipv4=10.0.0.223 ipv6= k8sPodName=openstack/neutron-rabbit-init-52kqf subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=3e775aa3e1 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=4074 identity=64094 ipv4=10.0.0.223 ipv6= k8sPodName=openstack/neutron-rabbit-init-52kqf subsys=endpoint level=info msg="Successful endpoint creation" containerID=3e775aa3e1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=4074 identity=64094 ipv4=10.0.0.223 ipv6= k8sPodName=openstack/neutron-rabbit-init-52kqf subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=3e775aa3e1 endpointID=4074 k8sNamespace=openstack k8sPodName=neutron-rabbit-init-52kqf subsys=daemon level=info msg="Releasing key" key="[k8s:application=neutron k8s:batch.kubernetes.io/controller-uid=f47c4798-cdbf-4f8d-bf74-e16883d2f6bc k8s:batch.kubernetes.io/job-name=neutron-rabbit-init k8s:component=rabbit-init k8s:controller-uid=f47c4798-cdbf-4f8d-bf74-e16883d2f6bc k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=neutron-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=neutron-rabbit-init k8s:release_group=neutron]" subsys=allocator level=info msg="Removed endpoint" containerID=3e775aa3e1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=4074 identity=64094 ipv4=10.0.0.223 ipv6= k8sPodName=openstack/neutron-rabbit-init-52kqf subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.26 455762ce-474f-4f8e-affe-01ee8e91c8be default }" containerID=1a9d5730b63c8b04bd182a469356fe01aba3bcc9093ce90aa4133c6432b1e36c datapathConfiguration="&{false false false false false }" interface=lxcbad080e6799b k8sPodName=openstack/neutron-ks-service-dvbzc labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1a9d5730b6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4 ipv4=10.0.0.26 ipv6= k8sPodName=openstack/neutron-ks-service-dvbzc subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1a9d5730b6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4 identityLabels="k8s:application=neutron,k8s:batch.kubernetes.io/controller-uid=9fe6e5fd-d470-448e-95b6-cb1e664e0958,k8s:batch.kubernetes.io/job-name=neutron-ks-service,k8s:component=ks-service,k8s:controller-uid=9fe6e5fd-d470-448e-95b6-cb1e664e0958,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=neutron-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=neutron-ks-service,k8s:release_group=neutron" ipv4=10.0.0.26 ipv6= k8sPodName=openstack/neutron-ks-service-dvbzc subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=neutron;k8s:batch.kubernetes.io/controller-uid=9fe6e5fd-d470-448e-95b6-cb1e664e0958;k8s:batch.kubernetes.io/job-name=neutron-ks-service;k8s:component=ks-service;k8s:controller-uid=9fe6e5fd-d470-448e-95b6-cb1e664e0958;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=neutron-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=neutron-ks-service;k8s:release_group=neutron;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1a9d5730b6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4 identity=2243 identityLabels="k8s:application=neutron,k8s:batch.kubernetes.io/controller-uid=9fe6e5fd-d470-448e-95b6-cb1e664e0958,k8s:batch.kubernetes.io/job-name=neutron-ks-service,k8s:component=ks-service,k8s:controller-uid=9fe6e5fd-d470-448e-95b6-cb1e664e0958,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=neutron-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=neutron-ks-service,k8s:release_group=neutron" ipv4=10.0.0.26 ipv6= k8sPodName=openstack/neutron-ks-service-dvbzc oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1a9d5730b6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4 identity=2243 ipv4=10.0.0.26 ipv6= k8sPodName=openstack/neutron-ks-service-dvbzc subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=1a9d5730b6 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=4 identity=2243 ipv4=10.0.0.26 ipv6= k8sPodName=openstack/neutron-ks-service-dvbzc subsys=endpoint level=info msg="Successful endpoint creation" containerID=1a9d5730b6 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=4 identity=2243 ipv4=10.0.0.26 ipv6= k8sPodName=openstack/neutron-ks-service-dvbzc subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=1a9d5730b6 endpointID=4 k8sNamespace=openstack k8sPodName=neutron-ks-service-dvbzc subsys=daemon level=info msg="Releasing key" key="[k8s:application=neutron k8s:batch.kubernetes.io/controller-uid=9fe6e5fd-d470-448e-95b6-cb1e664e0958 k8s:batch.kubernetes.io/job-name=neutron-ks-service k8s:component=ks-service k8s:controller-uid=9fe6e5fd-d470-448e-95b6-cb1e664e0958 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=neutron-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=neutron-ks-service k8s:release_group=neutron]" subsys=allocator level=info msg="Removed endpoint" containerID=1a9d5730b6 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=4 identity=2243 ipv4=10.0.0.26 ipv6= k8sPodName=openstack/neutron-ks-service-dvbzc subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.97 c35db8f6-2f64-4301-a7f3-76454cd2c93e default }" containerID=3ecbabd22745dd98c4a90379a3801dda50b5fc8032d00818fa7884ab39d2a077 datapathConfiguration="&{false false false false false }" interface=lxc0ab56b1f4ae3 k8sPodName=openstack/neutron-ks-endpoints-xb4zz labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3ecbabd227 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=454 ipv4=10.0.0.97 ipv6= k8sPodName=openstack/neutron-ks-endpoints-xb4zz subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3ecbabd227 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=454 identityLabels="k8s:application=neutron,k8s:batch.kubernetes.io/controller-uid=741934af-0c03-4274-aab5-3213da9d8854,k8s:batch.kubernetes.io/job-name=neutron-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=741934af-0c03-4274-aab5-3213da9d8854,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=neutron-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=neutron-ks-endpoints,k8s:release_group=neutron" ipv4=10.0.0.97 ipv6= k8sPodName=openstack/neutron-ks-endpoints-xb4zz subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=neutron;k8s:batch.kubernetes.io/controller-uid=741934af-0c03-4274-aab5-3213da9d8854;k8s:batch.kubernetes.io/job-name=neutron-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=741934af-0c03-4274-aab5-3213da9d8854;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=neutron-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=neutron-ks-endpoints;k8s:release_group=neutron;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3ecbabd227 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=454 identity=45974 identityLabels="k8s:application=neutron,k8s:batch.kubernetes.io/controller-uid=741934af-0c03-4274-aab5-3213da9d8854,k8s:batch.kubernetes.io/job-name=neutron-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=741934af-0c03-4274-aab5-3213da9d8854,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=neutron-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=neutron-ks-endpoints,k8s:release_group=neutron" ipv4=10.0.0.97 ipv6= k8sPodName=openstack/neutron-ks-endpoints-xb4zz oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3ecbabd227 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=454 identity=45974 ipv4=10.0.0.97 ipv6= k8sPodName=openstack/neutron-ks-endpoints-xb4zz subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=3ecbabd227 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=454 identity=45974 ipv4=10.0.0.97 ipv6= k8sPodName=openstack/neutron-ks-endpoints-xb4zz subsys=endpoint level=info msg="Successful endpoint creation" containerID=3ecbabd227 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=454 identity=45974 ipv4=10.0.0.97 ipv6= k8sPodName=openstack/neutron-ks-endpoints-xb4zz subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.141 b9771777-07fe-4856-b5b8-63e5c99bc08c default }" containerID=9dcb33f4b2e591abdd9085d7bb534c853783726eb27b3db821876cfb98c3dccc datapathConfiguration="&{false false false false false }" interface=lxcb8535a4ed832 k8sPodName=openstack/cinder-volume-usage-audit-29824025-mm6h6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9dcb33f4b2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4053 ipv4=10.0.0.141 ipv6= k8sPodName=openstack/cinder-volume-usage-audit-29824025-mm6h6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9dcb33f4b2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4053 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=646e1d71-859b-4648-be23-e78809b08be7,k8s:batch.kubernetes.io/job-name=cinder-volume-usage-audit-29824025,k8s:component=volume-usage-audit,k8s:controller-uid=646e1d71-859b-4648-be23-e78809b08be7,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-volume-usage-audit,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-volume-usage-audit-29824025,k8s:release_group=cinder" ipv4=10.0.0.141 ipv6= k8sPodName=openstack/cinder-volume-usage-audit-29824025-mm6h6 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=646e1d71-859b-4648-be23-e78809b08be7;k8s:batch.kubernetes.io/job-name=cinder-volume-usage-audit-29824025;k8s:component=volume-usage-audit;k8s:controller-uid=646e1d71-859b-4648-be23-e78809b08be7;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-volume-usage-audit;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-volume-usage-audit-29824025;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9dcb33f4b2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4053 identity=9916 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=646e1d71-859b-4648-be23-e78809b08be7,k8s:batch.kubernetes.io/job-name=cinder-volume-usage-audit-29824025,k8s:component=volume-usage-audit,k8s:controller-uid=646e1d71-859b-4648-be23-e78809b08be7,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-volume-usage-audit,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-volume-usage-audit-29824025,k8s:release_group=cinder" ipv4=10.0.0.141 ipv6= k8sPodName=openstack/cinder-volume-usage-audit-29824025-mm6h6 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9dcb33f4b2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4053 identity=9916 ipv4=10.0.0.141 ipv6= k8sPodName=openstack/cinder-volume-usage-audit-29824025-mm6h6 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=9dcb33f4b2 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=4053 identity=9916 ipv4=10.0.0.141 ipv6= k8sPodName=openstack/cinder-volume-usage-audit-29824025-mm6h6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=9dcb33f4b2 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=4053 identity=9916 ipv4=10.0.0.141 ipv6= k8sPodName=openstack/cinder-volume-usage-audit-29824025-mm6h6 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=9dcb33f4b2 endpointID=4053 k8sNamespace=openstack k8sPodName=cinder-volume-usage-audit-29824025-mm6h6 subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=646e1d71-859b-4648-be23-e78809b08be7 k8s:batch.kubernetes.io/job-name=cinder-volume-usage-audit-29824025 k8s:component=volume-usage-audit k8s:controller-uid=646e1d71-859b-4648-be23-e78809b08be7 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-volume-usage-audit k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-volume-usage-audit-29824025 k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=9dcb33f4b2 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=4053 identity=9916 ipv4=10.0.0.141 ipv6= k8sPodName=openstack/cinder-volume-usage-audit-29824025-mm6h6 subsys=endpoint level=info msg="Delete endpoint request" containerID=3ecbabd227 endpointID=454 k8sNamespace=openstack k8sPodName=neutron-ks-endpoints-xb4zz subsys=daemon level=info msg="Releasing key" key="[k8s:application=neutron k8s:batch.kubernetes.io/controller-uid=741934af-0c03-4274-aab5-3213da9d8854 k8s:batch.kubernetes.io/job-name=neutron-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=741934af-0c03-4274-aab5-3213da9d8854 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=neutron-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=neutron-ks-endpoints k8s:release_group=neutron]" subsys=allocator level=info msg="Removed endpoint" containerID=3ecbabd227 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=454 identity=45974 ipv4=10.0.0.97 ipv6= k8sPodName=openstack/neutron-ks-endpoints-xb4zz subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.16 30e6d9a5-6bfa-4e93-af85-af5a97ed2c07 default }" containerID=643dcb02a9368a3a0bcb566e359fd42af2d2e333df5b7a362d7fe55b88bfb3e6 datapathConfiguration="&{false false false false false }" interface=lxcd6a53b0041fd k8sPodName=openstack/neutron-ks-user-r5mx5 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=643dcb02a9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2328 ipv4=10.0.0.16 ipv6= k8sPodName=openstack/neutron-ks-user-r5mx5 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=643dcb02a9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2328 identityLabels="k8s:application=neutron,k8s:batch.kubernetes.io/controller-uid=205602d3-f984-46d6-b3c7-38418c24fa0c,k8s:batch.kubernetes.io/job-name=neutron-ks-user,k8s:component=ks-user,k8s:controller-uid=205602d3-f984-46d6-b3c7-38418c24fa0c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=neutron-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=neutron-ks-user,k8s:release_group=neutron" ipv4=10.0.0.16 ipv6= k8sPodName=openstack/neutron-ks-user-r5mx5 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=643dcb02a9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2328 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.16 ipv6= k8sPodName=openstack/neutron-ks-user-r5mx5 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=neutron;k8s:batch.kubernetes.io/controller-uid=205602d3-f984-46d6-b3c7-38418c24fa0c;k8s:batch.kubernetes.io/job-name=neutron-ks-user;k8s:component=ks-user;k8s:controller-uid=205602d3-f984-46d6-b3c7-38418c24fa0c;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=neutron-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=neutron-ks-user;k8s:release_group=neutron;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=643dcb02a9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2328 identity=6218 identityLabels="k8s:application=neutron,k8s:batch.kubernetes.io/controller-uid=205602d3-f984-46d6-b3c7-38418c24fa0c,k8s:batch.kubernetes.io/job-name=neutron-ks-user,k8s:component=ks-user,k8s:controller-uid=205602d3-f984-46d6-b3c7-38418c24fa0c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=neutron-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=neutron-ks-user,k8s:release_group=neutron" ipv4=10.0.0.16 ipv6= k8sPodName=openstack/neutron-ks-user-r5mx5 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=643dcb02a9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2328 identity=6218 ipv4=10.0.0.16 ipv6= k8sPodName=openstack/neutron-ks-user-r5mx5 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=643dcb02a9 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2328 identity=6218 ipv4=10.0.0.16 ipv6= k8sPodName=openstack/neutron-ks-user-r5mx5 subsys=endpoint level=info msg="Successful endpoint creation" containerID=643dcb02a9 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2328 identity=6218 ipv4=10.0.0.16 ipv6= k8sPodName=openstack/neutron-ks-user-r5mx5 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=643dcb02a9 endpointID=2328 k8sNamespace=openstack k8sPodName=neutron-ks-user-r5mx5 subsys=daemon level=info msg="Releasing key" key="[k8s:application=neutron k8s:batch.kubernetes.io/controller-uid=205602d3-f984-46d6-b3c7-38418c24fa0c k8s:batch.kubernetes.io/job-name=neutron-ks-user k8s:component=ks-user k8s:controller-uid=205602d3-f984-46d6-b3c7-38418c24fa0c k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=neutron-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=neutron-ks-user k8s:release_group=neutron]" subsys=allocator level=info msg="Removed endpoint" containerID=643dcb02a9 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2328 identity=6218 ipv4=10.0.0.16 ipv6= k8sPodName=openstack/neutron-ks-user-r5mx5 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.8 83ef3953-761e-44a0-858f-c717b7c52782 default }" containerID=9f4c06d5dd405664935c04d86d7dd5f3e21970132b4c403236de959e66b1b737 datapathConfiguration="&{false false false false false }" interface=lxc9bb0c1b49490 k8sPodName=local-path-storage/helper-pod-create-pvc-ec8d4485-307a-4ac4-b938-aeae7335795c labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9f4c06d5dd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=436 ipv4=10.0.0.8 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-ec8d4485-307a-4ac4-b938-aeae7335795c subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9f4c06d5dd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=436 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.8 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-ec8d4485-307a-4ac4-b938-aeae7335795c subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9f4c06d5dd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=436 identity=16985 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.8 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-ec8d4485-307a-4ac4-b938-aeae7335795c oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9f4c06d5dd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=436 identity=16985 ipv4=10.0.0.8 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-ec8d4485-307a-4ac4-b938-aeae7335795c subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=9f4c06d5dd datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=436 identity=16985 ipv4=10.0.0.8 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-ec8d4485-307a-4ac4-b938-aeae7335795c subsys=endpoint level=info msg="Successful endpoint creation" containerID=9f4c06d5dd datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=436 identity=16985 ipv4=10.0.0.8 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-ec8d4485-307a-4ac4-b938-aeae7335795c subsys=daemon level=info msg="Delete endpoint request" containerID=9f4c06d5dd endpointID=436 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-ec8d4485-307a-4ac4-b938-aeae7335795c subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=9f4c06d5dd datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=436 identity=16985 ipv4=10.0.0.8 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-ec8d4485-307a-4ac4-b938-aeae7335795c subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.91 cca513c1-f8bc-4d04-90a7-d443a2c23d62 default }" containerID=250ccbca54f44d896d5a4ffe917eae3ea27964be31242525d735b4da5f025b73 datapathConfiguration="&{false false false false false }" interface=lxc393c5d998f31 k8sPodName=openstack/rabbitmq-heat-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=250ccbca54 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1624 ipv4=10.0.0.91 ipv6= k8sPodName=openstack/rabbitmq-heat-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=250ccbca54 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1624 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-heat,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-heat-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-heat-server-0" ipv4=10.0.0.91 ipv6= k8sPodName=openstack/rabbitmq-heat-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=250ccbca54 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1624 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.91 ipv6= k8sPodName=openstack/rabbitmq-heat-server-0 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-heat;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-heat-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-heat-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=250ccbca54 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1624 identity=5341 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-heat,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-heat-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-heat-server-0" ipv4=10.0.0.91 ipv6= k8sPodName=openstack/rabbitmq-heat-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=250ccbca54 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1624 identity=5341 ipv4=10.0.0.91 ipv6= k8sPodName=openstack/rabbitmq-heat-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=250ccbca54 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1624 identity=5341 ipv4=10.0.0.91 ipv6= k8sPodName=openstack/rabbitmq-heat-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=250ccbca54 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1624 identity=5341 ipv4=10.0.0.91 ipv6= k8sPodName=openstack/rabbitmq-heat-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.199 e038c992-83e9-4bf7-8c4e-f730f7f5badf default }" containerID=c343af1c71f426073aad76ae1271c52a9804362cad8fdc977f8cd1ada5badd6b datapathConfiguration="&{false false false false false }" interface=lxc01102ce91e21 k8sPodName=openstack/heat-engine-549b5d9cbf-fq6wd labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c343af1c71 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1806 ipv4=10.0.0.199 ipv6= k8sPodName=openstack/heat-engine-549b5d9cbf-fq6wd subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c343af1c71 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1806 identityLabels="k8s:application=heat,k8s:component=engine,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=heat-engine,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=heat" ipv4=10.0.0.199 ipv6= k8sPodName=openstack/heat-engine-549b5d9cbf-fq6wd subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=heat;k8s:component=engine;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=heat-engine;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=heat;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=c343af1c71 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1806 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.199 ipv6= k8sPodName=openstack/heat-engine-549b5d9cbf-fq6wd line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=c343af1c71 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1806 identity=47220 identityLabels="k8s:application=heat,k8s:component=engine,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=heat-engine,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=heat" ipv4=10.0.0.199 ipv6= k8sPodName=openstack/heat-engine-549b5d9cbf-fq6wd oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c343af1c71 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1806 identity=47220 ipv4=10.0.0.199 ipv6= k8sPodName=openstack/heat-engine-549b5d9cbf-fq6wd subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.12 7088119c-2779-43b0-b635-f5f2a1becf1c default }" containerID=8589819c1918bd2cd74534a1b22d1fe3e53acf9c9146598b4cb2c08809e25a4d datapathConfiguration="&{false false false false false }" interface=lxc91e589f83474 k8sPodName=openstack/heat-cfn-b64c6fdc8-xlh7c labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8589819c19 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=711 ipv4=10.0.0.12 ipv6= k8sPodName=openstack/heat-cfn-b64c6fdc8-xlh7c subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8589819c19 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=711 identityLabels="k8s:application=heat,k8s:component=cfn,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=heat-cfn,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=heat" ipv4=10.0.0.12 ipv6= k8sPodName=openstack/heat-cfn-b64c6fdc8-xlh7c subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=heat;k8s:component=cfn;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=heat-cfn;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=heat;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8589819c19 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=711 identity=52553 identityLabels="k8s:application=heat,k8s:component=cfn,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=heat-cfn,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=heat" ipv4=10.0.0.12 ipv6= k8sPodName=openstack/heat-cfn-b64c6fdc8-xlh7c oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8589819c19 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=711 identity=52553 ipv4=10.0.0.12 ipv6= k8sPodName=openstack/heat-cfn-b64c6fdc8-xlh7c subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.120 f0d4de7b-233f-427f-aaaf-17084ba60a7b default }" containerID=366b3850df8959cb438023eeced5eb59dfff55f75c7d8f1fbf815f3916adbc87 datapathConfiguration="&{false false false false false }" interface=lxca9c2145e6972 k8sPodName=openstack/heat-api-7f4496c596-hz7st labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=366b3850df datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2495 ipv4=10.0.0.120 ipv6= k8sPodName=openstack/heat-api-7f4496c596-hz7st subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=366b3850df datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2495 identityLabels="k8s:application=heat,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=heat-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=heat" ipv4=10.0.0.120 ipv6= k8sPodName=openstack/heat-api-7f4496c596-hz7st subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=heat;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=heat-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=heat;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=366b3850df datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2495 identity=40712 identityLabels="k8s:application=heat,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=heat-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=heat" ipv4=10.0.0.120 ipv6= k8sPodName=openstack/heat-api-7f4496c596-hz7st oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=366b3850df datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2495 identity=40712 ipv4=10.0.0.120 ipv6= k8sPodName=openstack/heat-api-7f4496c596-hz7st subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c343af1c71 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1806 identity=47220 ipv4=10.0.0.199 ipv6= k8sPodName=openstack/heat-engine-549b5d9cbf-fq6wd subsys=endpoint level=info msg="Successful endpoint creation" containerID=c343af1c71 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1806 identity=47220 ipv4=10.0.0.199 ipv6= k8sPodName=openstack/heat-engine-549b5d9cbf-fq6wd subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.30 9cab76c0-abdd-4582-9281-23fea0a266e3 default }" containerID=bd087eb3b3355ea89316fa8797dd36b8b78e7c071494f3ea1bdc90ecb5ed644e datapathConfiguration="&{false false false false false }" interface=lxccfb725aff8b7 k8sPodName=openstack/heat-db-init-7prwf labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=bd087eb3b3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2608 ipv4=10.0.0.30 ipv6= k8sPodName=openstack/heat-db-init-7prwf subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=bd087eb3b3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2608 identityLabels="k8s:application=heat,k8s:batch.kubernetes.io/controller-uid=aa595cfb-2330-4312-be78-69849114e940,k8s:batch.kubernetes.io/job-name=heat-db-init,k8s:component=db-init,k8s:controller-uid=aa595cfb-2330-4312-be78-69849114e940,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=heat-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=heat-db-init,k8s:release_group=heat" ipv4=10.0.0.30 ipv6= k8sPodName=openstack/heat-db-init-7prwf subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=heat;k8s:batch.kubernetes.io/controller-uid=aa595cfb-2330-4312-be78-69849114e940;k8s:batch.kubernetes.io/job-name=heat-db-init;k8s:component=db-init;k8s:controller-uid=aa595cfb-2330-4312-be78-69849114e940;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=heat-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=heat-db-init;k8s:release_group=heat;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=bd087eb3b3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2608 identity=8171 identityLabels="k8s:application=heat,k8s:batch.kubernetes.io/controller-uid=aa595cfb-2330-4312-be78-69849114e940,k8s:batch.kubernetes.io/job-name=heat-db-init,k8s:component=db-init,k8s:controller-uid=aa595cfb-2330-4312-be78-69849114e940,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=heat-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=heat-db-init,k8s:release_group=heat" ipv4=10.0.0.30 ipv6= k8sPodName=openstack/heat-db-init-7prwf oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=bd087eb3b3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2608 identity=8171 ipv4=10.0.0.30 ipv6= k8sPodName=openstack/heat-db-init-7prwf subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=366b3850df datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2495 identity=40712 ipv4=10.0.0.120 ipv6= k8sPodName=openstack/heat-api-7f4496c596-hz7st subsys=endpoint level=info msg="Successful endpoint creation" containerID=366b3850df datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2495 identity=40712 ipv4=10.0.0.120 ipv6= k8sPodName=openstack/heat-api-7f4496c596-hz7st subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=8589819c19 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=711 identity=52553 ipv4=10.0.0.12 ipv6= k8sPodName=openstack/heat-cfn-b64c6fdc8-xlh7c subsys=endpoint level=info msg="Successful endpoint creation" containerID=8589819c19 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=711 identity=52553 ipv4=10.0.0.12 ipv6= k8sPodName=openstack/heat-cfn-b64c6fdc8-xlh7c subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=bd087eb3b3 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2608 identity=8171 ipv4=10.0.0.30 ipv6= k8sPodName=openstack/heat-db-init-7prwf subsys=endpoint level=info msg="Successful endpoint creation" containerID=bd087eb3b3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2608 identity=8171 ipv4=10.0.0.30 ipv6= k8sPodName=openstack/heat-db-init-7prwf subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=bd087eb3b3 endpointID=2608 k8sNamespace=openstack k8sPodName=heat-db-init-7prwf subsys=daemon level=info msg="Releasing key" key="[k8s:application=heat k8s:batch.kubernetes.io/controller-uid=aa595cfb-2330-4312-be78-69849114e940 k8s:batch.kubernetes.io/job-name=heat-db-init k8s:component=db-init k8s:controller-uid=aa595cfb-2330-4312-be78-69849114e940 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=heat-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=heat-db-init k8s:release_group=heat]" subsys=allocator level=info msg="Removed endpoint" containerID=bd087eb3b3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2608 identity=8171 ipv4=10.0.0.30 ipv6= k8sPodName=openstack/heat-db-init-7prwf subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.223 23b4b05e-8d67-4084-ad81-bcd33e4e3b68 default }" containerID=e9b51f5ff12b41c2ed44c47eb81e8cefdeb6154f9b33343d0e2f67df1f2995e6 datapathConfiguration="&{false false false false false }" interface=lxc74d421214a25 k8sPodName=openstack/heat-db-sync-j65zc labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e9b51f5ff1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2684 ipv4=10.0.0.223 ipv6= k8sPodName=openstack/heat-db-sync-j65zc subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e9b51f5ff1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2684 identityLabels="k8s:application=heat,k8s:batch.kubernetes.io/controller-uid=0620808b-5778-4f5e-b32f-3adbeb62ec0a,k8s:batch.kubernetes.io/job-name=heat-db-sync,k8s:component=db-sync,k8s:controller-uid=0620808b-5778-4f5e-b32f-3adbeb62ec0a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=heat-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=heat-db-sync,k8s:release_group=heat" ipv4=10.0.0.223 ipv6= k8sPodName=openstack/heat-db-sync-j65zc subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=heat;k8s:batch.kubernetes.io/controller-uid=0620808b-5778-4f5e-b32f-3adbeb62ec0a;k8s:batch.kubernetes.io/job-name=heat-db-sync;k8s:component=db-sync;k8s:controller-uid=0620808b-5778-4f5e-b32f-3adbeb62ec0a;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=heat-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=heat-db-sync;k8s:release_group=heat;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e9b51f5ff1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2684 identity=30718 identityLabels="k8s:application=heat,k8s:batch.kubernetes.io/controller-uid=0620808b-5778-4f5e-b32f-3adbeb62ec0a,k8s:batch.kubernetes.io/job-name=heat-db-sync,k8s:component=db-sync,k8s:controller-uid=0620808b-5778-4f5e-b32f-3adbeb62ec0a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=heat-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=heat-db-sync,k8s:release_group=heat" ipv4=10.0.0.223 ipv6= k8sPodName=openstack/heat-db-sync-j65zc oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e9b51f5ff1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2684 identity=30718 ipv4=10.0.0.223 ipv6= k8sPodName=openstack/heat-db-sync-j65zc subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=e9b51f5ff1 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2684 identity=30718 ipv4=10.0.0.223 ipv6= k8sPodName=openstack/heat-db-sync-j65zc subsys=endpoint level=info msg="Successful endpoint creation" containerID=e9b51f5ff1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2684 identity=30718 ipv4=10.0.0.223 ipv6= k8sPodName=openstack/heat-db-sync-j65zc subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=e9b51f5ff1 endpointID=2684 k8sNamespace=openstack k8sPodName=heat-db-sync-j65zc subsys=daemon level=info msg="Releasing key" key="[k8s:application=heat k8s:batch.kubernetes.io/controller-uid=0620808b-5778-4f5e-b32f-3adbeb62ec0a k8s:batch.kubernetes.io/job-name=heat-db-sync k8s:component=db-sync k8s:controller-uid=0620808b-5778-4f5e-b32f-3adbeb62ec0a k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=heat-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=heat-db-sync k8s:release_group=heat]" subsys=allocator level=info msg="Removed endpoint" containerID=e9b51f5ff1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2684 identity=30718 ipv4=10.0.0.223 ipv6= k8sPodName=openstack/heat-db-sync-j65zc subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.137 6711d7a8-c60a-414f-b934-4e0b2efa4f8a default }" containerID=d22763c20c92c42cb3c316df9ace168f1860434b47c76b34a7811b66e489bc3d datapathConfiguration="&{false false false false false }" interface=lxcdf0557059290 k8sPodName=openstack/heat-rabbit-init-5gdhs labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d22763c20c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=605 ipv4=10.0.0.137 ipv6= k8sPodName=openstack/heat-rabbit-init-5gdhs subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d22763c20c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=605 identityLabels="k8s:application=heat,k8s:batch.kubernetes.io/controller-uid=a30c2712-fecb-49a4-b3c4-387891cabbbd,k8s:batch.kubernetes.io/job-name=heat-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=a30c2712-fecb-49a4-b3c4-387891cabbbd,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=heat-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=heat-rabbit-init,k8s:release_group=heat" ipv4=10.0.0.137 ipv6= k8sPodName=openstack/heat-rabbit-init-5gdhs subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=heat;k8s:batch.kubernetes.io/controller-uid=a30c2712-fecb-49a4-b3c4-387891cabbbd;k8s:batch.kubernetes.io/job-name=heat-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=a30c2712-fecb-49a4-b3c4-387891cabbbd;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=heat-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=heat-rabbit-init;k8s:release_group=heat;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d22763c20c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=605 identity=539 identityLabels="k8s:application=heat,k8s:batch.kubernetes.io/controller-uid=a30c2712-fecb-49a4-b3c4-387891cabbbd,k8s:batch.kubernetes.io/job-name=heat-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=a30c2712-fecb-49a4-b3c4-387891cabbbd,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=heat-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=heat-rabbit-init,k8s:release_group=heat" ipv4=10.0.0.137 ipv6= k8sPodName=openstack/heat-rabbit-init-5gdhs oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d22763c20c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=605 identity=539 ipv4=10.0.0.137 ipv6= k8sPodName=openstack/heat-rabbit-init-5gdhs subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=d22763c20c datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=605 identity=539 ipv4=10.0.0.137 ipv6= k8sPodName=openstack/heat-rabbit-init-5gdhs subsys=endpoint level=info msg="Successful endpoint creation" containerID=d22763c20c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=605 identity=539 ipv4=10.0.0.137 ipv6= k8sPodName=openstack/heat-rabbit-init-5gdhs subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=d22763c20c endpointID=605 k8sNamespace=openstack k8sPodName=heat-rabbit-init-5gdhs subsys=daemon level=info msg="Releasing key" key="[k8s:application=heat k8s:batch.kubernetes.io/controller-uid=a30c2712-fecb-49a4-b3c4-387891cabbbd k8s:batch.kubernetes.io/job-name=heat-rabbit-init k8s:component=rabbit-init k8s:controller-uid=a30c2712-fecb-49a4-b3c4-387891cabbbd k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=heat-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=heat-rabbit-init k8s:release_group=heat]" subsys=allocator level=info msg="Removed endpoint" containerID=d22763c20c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=605 identity=539 ipv4=10.0.0.137 ipv6= k8sPodName=openstack/heat-rabbit-init-5gdhs subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.102 619ddb85-763e-4eae-8d00-bc8cede3f363 default }" containerID=9dc7d6d2b2354ea698d897ed6000dc30889344b96b68447034b4a4373f0615f0 datapathConfiguration="&{false false false false false }" interface=lxc9fa59b8239ae k8sPodName=openstack/heat-ks-service-2hrvx labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9dc7d6d2b2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=26 ipv4=10.0.0.102 ipv6= k8sPodName=openstack/heat-ks-service-2hrvx subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9dc7d6d2b2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=26 identityLabels="k8s:application=heat,k8s:batch.kubernetes.io/controller-uid=bcdeef76-4ebe-4e6a-b48f-78a5b335b1d4,k8s:batch.kubernetes.io/job-name=heat-ks-service,k8s:component=ks-service,k8s:controller-uid=bcdeef76-4ebe-4e6a-b48f-78a5b335b1d4,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=heat-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=heat-ks-service,k8s:release_group=heat" ipv4=10.0.0.102 ipv6= k8sPodName=openstack/heat-ks-service-2hrvx subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=9dc7d6d2b2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=26 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.102 ipv6= k8sPodName=openstack/heat-ks-service-2hrvx line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=heat;k8s:batch.kubernetes.io/controller-uid=bcdeef76-4ebe-4e6a-b48f-78a5b335b1d4;k8s:batch.kubernetes.io/job-name=heat-ks-service;k8s:component=ks-service;k8s:controller-uid=bcdeef76-4ebe-4e6a-b48f-78a5b335b1d4;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=heat-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=heat-ks-service;k8s:release_group=heat;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9dc7d6d2b2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=26 identity=18837 identityLabels="k8s:application=heat,k8s:batch.kubernetes.io/controller-uid=bcdeef76-4ebe-4e6a-b48f-78a5b335b1d4,k8s:batch.kubernetes.io/job-name=heat-ks-service,k8s:component=ks-service,k8s:controller-uid=bcdeef76-4ebe-4e6a-b48f-78a5b335b1d4,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=heat-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=heat-ks-service,k8s:release_group=heat" ipv4=10.0.0.102 ipv6= k8sPodName=openstack/heat-ks-service-2hrvx oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9dc7d6d2b2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=26 identity=18837 ipv4=10.0.0.102 ipv6= k8sPodName=openstack/heat-ks-service-2hrvx subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=9dc7d6d2b2 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=26 identity=18837 ipv4=10.0.0.102 ipv6= k8sPodName=openstack/heat-ks-service-2hrvx subsys=endpoint level=info msg="Successful endpoint creation" containerID=9dc7d6d2b2 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=26 identity=18837 ipv4=10.0.0.102 ipv6= k8sPodName=openstack/heat-ks-service-2hrvx subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=9dc7d6d2b2 endpointID=26 k8sNamespace=openstack k8sPodName=heat-ks-service-2hrvx subsys=daemon level=info msg="Releasing key" key="[k8s:application=heat k8s:batch.kubernetes.io/controller-uid=bcdeef76-4ebe-4e6a-b48f-78a5b335b1d4 k8s:batch.kubernetes.io/job-name=heat-ks-service k8s:component=ks-service k8s:controller-uid=bcdeef76-4ebe-4e6a-b48f-78a5b335b1d4 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=heat-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=heat-ks-service k8s:release_group=heat]" subsys=allocator level=info msg="Removed endpoint" containerID=9dc7d6d2b2 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=26 identity=18837 ipv4=10.0.0.102 ipv6= k8sPodName=openstack/heat-ks-service-2hrvx subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.143 85d9c026-0343-4730-b12c-f81369a493fa default }" containerID=c60dff730126d57f9e97f33f2b8caf94c68cee05e01145bfab5374de534b2b4f datapathConfiguration="&{false false false false false }" interface=lxc7fd5db76ab24 k8sPodName=openstack/heat-ks-endpoints-cfmdz labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c60dff7301 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2257 ipv4=10.0.0.143 ipv6= k8sPodName=openstack/heat-ks-endpoints-cfmdz subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c60dff7301 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2257 identityLabels="k8s:application=heat,k8s:batch.kubernetes.io/controller-uid=c7676d61-0f43-400c-969a-2d7bd8c7c475,k8s:batch.kubernetes.io/job-name=heat-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=c7676d61-0f43-400c-969a-2d7bd8c7c475,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=heat-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=heat-ks-endpoints,k8s:release_group=heat" ipv4=10.0.0.143 ipv6= k8sPodName=openstack/heat-ks-endpoints-cfmdz subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=heat;k8s:batch.kubernetes.io/controller-uid=c7676d61-0f43-400c-969a-2d7bd8c7c475;k8s:batch.kubernetes.io/job-name=heat-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=c7676d61-0f43-400c-969a-2d7bd8c7c475;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=heat-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=heat-ks-endpoints;k8s:release_group=heat;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=c60dff7301 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2257 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.143 ipv6= k8sPodName=openstack/heat-ks-endpoints-cfmdz line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=c60dff7301 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2257 identity=58038 identityLabels="k8s:application=heat,k8s:batch.kubernetes.io/controller-uid=c7676d61-0f43-400c-969a-2d7bd8c7c475,k8s:batch.kubernetes.io/job-name=heat-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=c7676d61-0f43-400c-969a-2d7bd8c7c475,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=heat-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=heat-ks-endpoints,k8s:release_group=heat" ipv4=10.0.0.143 ipv6= k8sPodName=openstack/heat-ks-endpoints-cfmdz oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c60dff7301 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2257 identity=58038 ipv4=10.0.0.143 ipv6= k8sPodName=openstack/heat-ks-endpoints-cfmdz subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c60dff7301 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2257 identity=58038 ipv4=10.0.0.143 ipv6= k8sPodName=openstack/heat-ks-endpoints-cfmdz subsys=endpoint level=info msg="Successful endpoint creation" containerID=c60dff7301 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2257 identity=58038 ipv4=10.0.0.143 ipv6= k8sPodName=openstack/heat-ks-endpoints-cfmdz subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=c60dff7301 endpointID=2257 k8sNamespace=openstack k8sPodName=heat-ks-endpoints-cfmdz subsys=daemon level=info msg="Releasing key" key="[k8s:application=heat k8s:batch.kubernetes.io/controller-uid=c7676d61-0f43-400c-969a-2d7bd8c7c475 k8s:batch.kubernetes.io/job-name=heat-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=c7676d61-0f43-400c-969a-2d7bd8c7c475 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=heat-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=heat-ks-endpoints k8s:release_group=heat]" subsys=allocator level=info msg="Removed endpoint" containerID=c60dff7301 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2257 identity=58038 ipv4=10.0.0.143 ipv6= k8sPodName=openstack/heat-ks-endpoints-cfmdz subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.82 b965855c-d37c-41c6-8bd4-2bc7509763d9 default }" containerID=68fde9fe4b87755299cdb4908597d6c48e5296c900245068940b3b5cb73241b6 datapathConfiguration="&{false false false false false }" interface=lxc18ba70c5a09a k8sPodName=openstack/heat-ks-user-dd2xr labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=68fde9fe4b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1308 ipv4=10.0.0.82 ipv6= k8sPodName=openstack/heat-ks-user-dd2xr subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=68fde9fe4b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1308 identityLabels="k8s:application=heat,k8s:batch.kubernetes.io/controller-uid=07f9f08f-0e2a-4552-ac3a-119fa134521a,k8s:batch.kubernetes.io/job-name=heat-ks-user,k8s:component=ks-user,k8s:controller-uid=07f9f08f-0e2a-4552-ac3a-119fa134521a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=heat-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=heat-ks-user,k8s:release_group=heat" ipv4=10.0.0.82 ipv6= k8sPodName=openstack/heat-ks-user-dd2xr subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=68fde9fe4b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1308 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.82 ipv6= k8sPodName=openstack/heat-ks-user-dd2xr line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=heat;k8s:batch.kubernetes.io/controller-uid=07f9f08f-0e2a-4552-ac3a-119fa134521a;k8s:batch.kubernetes.io/job-name=heat-ks-user;k8s:component=ks-user;k8s:controller-uid=07f9f08f-0e2a-4552-ac3a-119fa134521a;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=heat-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=heat-ks-user;k8s:release_group=heat;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=68fde9fe4b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1308 identity=6603 identityLabels="k8s:application=heat,k8s:batch.kubernetes.io/controller-uid=07f9f08f-0e2a-4552-ac3a-119fa134521a,k8s:batch.kubernetes.io/job-name=heat-ks-user,k8s:component=ks-user,k8s:controller-uid=07f9f08f-0e2a-4552-ac3a-119fa134521a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=heat-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=heat-ks-user,k8s:release_group=heat" ipv4=10.0.0.82 ipv6= k8sPodName=openstack/heat-ks-user-dd2xr oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=68fde9fe4b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1308 identity=6603 ipv4=10.0.0.82 ipv6= k8sPodName=openstack/heat-ks-user-dd2xr subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=68fde9fe4b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1308 identity=6603 ipv4=10.0.0.82 ipv6= k8sPodName=openstack/heat-ks-user-dd2xr subsys=endpoint level=info msg="Successful endpoint creation" containerID=68fde9fe4b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1308 identity=6603 ipv4=10.0.0.82 ipv6= k8sPodName=openstack/heat-ks-user-dd2xr subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=8cf47381b1 endpointID=595 k8sNamespace=openstack k8sPodName=nova-cell-setup-29824020-t8qrz subsys=daemon level=info msg="Releasing key" key="[k8s:application=nova k8s:batch.kubernetes.io/controller-uid=5955b167-0d7e-4d74-a952-aa3ba15c58c6 k8s:batch.kubernetes.io/job-name=nova-cell-setup-29824020 k8s:component=cell-setup k8s:controller-uid=5955b167-0d7e-4d74-a952-aa3ba15c58c6 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=nova-cell-setup-cron k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=nova-cell-setup-29824020 k8s:release_group=nova]" subsys=allocator level=info msg="Removed endpoint" containerID=8cf47381b1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=595 identity=2861 ipv4=10.0.0.56 ipv6= k8sPodName=openstack/nova-cell-setup-29824020-t8qrz subsys=endpoint level=info msg="Delete endpoint request" containerID=68fde9fe4b endpointID=1308 k8sNamespace=openstack k8sPodName=heat-ks-user-dd2xr subsys=daemon level=info msg="Releasing key" key="[k8s:application=heat k8s:batch.kubernetes.io/controller-uid=07f9f08f-0e2a-4552-ac3a-119fa134521a k8s:batch.kubernetes.io/job-name=heat-ks-user k8s:component=ks-user k8s:controller-uid=07f9f08f-0e2a-4552-ac3a-119fa134521a k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=heat-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=heat-ks-user k8s:release_group=heat]" subsys=allocator level=info msg="Delete endpoint request" containerID=f072c5125c endpointID=3027 k8sNamespace=openstack k8sPodName=nova-cell-setup-b7jng subsys=daemon level=info msg="Releasing key" key="[k8s:application=nova k8s:batch.kubernetes.io/controller-uid=999da6f3-ca11-4ff0-a1e1-1ee4afdd8e4f k8s:batch.kubernetes.io/job-name=nova-cell-setup k8s:component=cell-setup k8s:controller-uid=999da6f3-ca11-4ff0-a1e1-1ee4afdd8e4f k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=nova-cell-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=nova-cell-setup k8s:release_group=nova]" subsys=allocator level=info msg="Removed endpoint" containerID=68fde9fe4b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1308 identity=6603 ipv4=10.0.0.82 ipv6= k8sPodName=openstack/heat-ks-user-dd2xr subsys=endpoint level=info msg="Removed endpoint" containerID=f072c5125c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3027 identity=1514 ipv4=10.0.0.50 ipv6= k8sPodName=openstack/nova-cell-setup-b7jng subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.103 c68abcea-0c53-4311-93ce-eddd6f70df9e default }" containerID=a5bfd037785baaa79cb0c4ad061fd6cbf9aa9efcdd3e21de18425240b31dc250 datapathConfiguration="&{false false false false false }" interface=lxcfc88ae1505d6 k8sPodName=openstack/heat-bootstrap-8llcw labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a5bfd03778 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=100 ipv4=10.0.0.103 ipv6= k8sPodName=openstack/heat-bootstrap-8llcw subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a5bfd03778 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=100 identityLabels="k8s:application=heat,k8s:batch.kubernetes.io/controller-uid=ca1da531-7ae4-4321-bd4c-70fbfc651ed8,k8s:batch.kubernetes.io/job-name=heat-bootstrap,k8s:component=bootstrap,k8s:controller-uid=ca1da531-7ae4-4321-bd4c-70fbfc651ed8,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=heat-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=heat-bootstrap,k8s:release_group=heat" ipv4=10.0.0.103 ipv6= k8sPodName=openstack/heat-bootstrap-8llcw subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=heat;k8s:batch.kubernetes.io/controller-uid=ca1da531-7ae4-4321-bd4c-70fbfc651ed8;k8s:batch.kubernetes.io/job-name=heat-bootstrap;k8s:component=bootstrap;k8s:controller-uid=ca1da531-7ae4-4321-bd4c-70fbfc651ed8;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=heat-bootstrap;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=heat-bootstrap;k8s:release_group=heat;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a5bfd03778 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=100 identity=16001 identityLabels="k8s:application=heat,k8s:batch.kubernetes.io/controller-uid=ca1da531-7ae4-4321-bd4c-70fbfc651ed8,k8s:batch.kubernetes.io/job-name=heat-bootstrap,k8s:component=bootstrap,k8s:controller-uid=ca1da531-7ae4-4321-bd4c-70fbfc651ed8,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=heat-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=heat-bootstrap,k8s:release_group=heat" ipv4=10.0.0.103 ipv6= k8sPodName=openstack/heat-bootstrap-8llcw oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=a5bfd03778 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=100 identity=16001 ipv4=10.0.0.103 ipv6= k8sPodName=openstack/heat-bootstrap-8llcw subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a5bfd03778 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=100 identity=16001 ipv4=10.0.0.103 ipv6= k8sPodName=openstack/heat-bootstrap-8llcw subsys=endpoint level=info msg="Successful endpoint creation" containerID=a5bfd03778 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=100 identity=16001 ipv4=10.0.0.103 ipv6= k8sPodName=openstack/heat-bootstrap-8llcw subsys=daemon level=info msg="Delete endpoint request" containerID=a5bfd03778 endpointID=100 k8sNamespace=openstack k8sPodName=heat-bootstrap-8llcw subsys=daemon level=info msg="Releasing key" key="[k8s:application=heat k8s:batch.kubernetes.io/controller-uid=ca1da531-7ae4-4321-bd4c-70fbfc651ed8 k8s:batch.kubernetes.io/job-name=heat-bootstrap k8s:component=bootstrap k8s:controller-uid=ca1da531-7ae4-4321-bd4c-70fbfc651ed8 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=heat-bootstrap k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=heat-bootstrap k8s:release_group=heat]" subsys=allocator level=info msg="Removed endpoint" containerID=a5bfd03778 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=100 identity=16001 ipv4=10.0.0.103 ipv6= k8sPodName=openstack/heat-bootstrap-8llcw subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.165 50580ca8-653f-4d7b-a9a0-7b53511dd35d default }" containerID=a2a6bde5a8b706967f839e946654b69977c6ab196bb9fe8eb40933a3b5ea6c2c datapathConfiguration="&{false false false false false }" interface=lxc9faadf6f799c k8sPodName=openstack/heat-domain-ks-user-p88qn labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a2a6bde5a8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2585 ipv4=10.0.0.165 ipv6= k8sPodName=openstack/heat-domain-ks-user-p88qn subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a2a6bde5a8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2585 identityLabels="k8s:application=heat,k8s:batch.kubernetes.io/controller-uid=0aec6120-c462-44fd-85bf-2bb66190213a,k8s:batch.kubernetes.io/job-name=heat-domain-ks-user,k8s:component=ks-user,k8s:controller-uid=0aec6120-c462-44fd-85bf-2bb66190213a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=heat-ks-user-domain,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=heat-domain-ks-user,k8s:release_group=heat" ipv4=10.0.0.165 ipv6= k8sPodName=openstack/heat-domain-ks-user-p88qn subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=heat;k8s:batch.kubernetes.io/controller-uid=0aec6120-c462-44fd-85bf-2bb66190213a;k8s:batch.kubernetes.io/job-name=heat-domain-ks-user;k8s:component=ks-user;k8s:controller-uid=0aec6120-c462-44fd-85bf-2bb66190213a;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=heat-ks-user-domain;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=heat-domain-ks-user;k8s:release_group=heat;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a2a6bde5a8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2585 identity=35608 identityLabels="k8s:application=heat,k8s:batch.kubernetes.io/controller-uid=0aec6120-c462-44fd-85bf-2bb66190213a,k8s:batch.kubernetes.io/job-name=heat-domain-ks-user,k8s:component=ks-user,k8s:controller-uid=0aec6120-c462-44fd-85bf-2bb66190213a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=heat-ks-user-domain,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=heat-domain-ks-user,k8s:release_group=heat" ipv4=10.0.0.165 ipv6= k8sPodName=openstack/heat-domain-ks-user-p88qn oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a2a6bde5a8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2585 identity=35608 ipv4=10.0.0.165 ipv6= k8sPodName=openstack/heat-domain-ks-user-p88qn subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a2a6bde5a8 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2585 identity=35608 ipv4=10.0.0.165 ipv6= k8sPodName=openstack/heat-domain-ks-user-p88qn subsys=endpoint level=info msg="Successful endpoint creation" containerID=a2a6bde5a8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2585 identity=35608 ipv4=10.0.0.165 ipv6= k8sPodName=openstack/heat-domain-ks-user-p88qn subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.247 ddf5e71f-4604-44a9-a52b-c31b1577cbf9 default }" containerID=49e4ebab919d2557c1b7506cebae6578373aac67a926d288080d0718fbc79af3 datapathConfiguration="&{false false false false false }" interface=lxcd573a5113fa0 k8sPodName=openstack/heat-engine-cleaner-29824030-wx5kl labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=49e4ebab91 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1534 ipv4=10.0.0.247 ipv6= k8sPodName=openstack/heat-engine-cleaner-29824030-wx5kl subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=49e4ebab91 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1534 identityLabels="k8s:application=heat,k8s:batch.kubernetes.io/controller-uid=cdbd995d-1053-48f9-819b-4148e2820efb,k8s:batch.kubernetes.io/job-name=heat-engine-cleaner-29824030,k8s:component=engine-cleaner,k8s:controller-uid=cdbd995d-1053-48f9-819b-4148e2820efb,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=heat-engine-cleaner,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=heat-engine-cleaner-29824030,k8s:release_group=heat" ipv4=10.0.0.247 ipv6= k8sPodName=openstack/heat-engine-cleaner-29824030-wx5kl subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=49e4ebab91 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1534 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.247 ipv6= k8sPodName=openstack/heat-engine-cleaner-29824030-wx5kl line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=heat;k8s:batch.kubernetes.io/controller-uid=cdbd995d-1053-48f9-819b-4148e2820efb;k8s:batch.kubernetes.io/job-name=heat-engine-cleaner-29824030;k8s:component=engine-cleaner;k8s:controller-uid=cdbd995d-1053-48f9-819b-4148e2820efb;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=heat-engine-cleaner;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=heat-engine-cleaner-29824030;k8s:release_group=heat;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=49e4ebab91 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1534 identity=11189 identityLabels="k8s:application=heat,k8s:batch.kubernetes.io/controller-uid=cdbd995d-1053-48f9-819b-4148e2820efb,k8s:batch.kubernetes.io/job-name=heat-engine-cleaner-29824030,k8s:component=engine-cleaner,k8s:controller-uid=cdbd995d-1053-48f9-819b-4148e2820efb,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=heat-engine-cleaner,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=heat-engine-cleaner-29824030,k8s:release_group=heat" ipv4=10.0.0.247 ipv6= k8sPodName=openstack/heat-engine-cleaner-29824030-wx5kl oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=49e4ebab91 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1534 identity=11189 ipv4=10.0.0.247 ipv6= k8sPodName=openstack/heat-engine-cleaner-29824030-wx5kl subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=49e4ebab91 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1534 identity=11189 ipv4=10.0.0.247 ipv6= k8sPodName=openstack/heat-engine-cleaner-29824030-wx5kl subsys=endpoint level=info msg="Successful endpoint creation" containerID=49e4ebab91 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1534 identity=11189 ipv4=10.0.0.247 ipv6= k8sPodName=openstack/heat-engine-cleaner-29824030-wx5kl subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=a2a6bde5a8 endpointID=2585 k8sNamespace=openstack k8sPodName=heat-domain-ks-user-p88qn subsys=daemon level=info msg="Releasing key" key="[k8s:application=heat k8s:batch.kubernetes.io/controller-uid=0aec6120-c462-44fd-85bf-2bb66190213a k8s:batch.kubernetes.io/job-name=heat-domain-ks-user k8s:component=ks-user k8s:controller-uid=0aec6120-c462-44fd-85bf-2bb66190213a k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=heat-ks-user-domain k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=heat-domain-ks-user k8s:release_group=heat]" subsys=allocator level=info msg="Removed endpoint" containerID=a2a6bde5a8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2585 identity=35608 ipv4=10.0.0.165 ipv6= k8sPodName=openstack/heat-domain-ks-user-p88qn subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.157 2793eb62-95e4-45f7-b6a2-9c546769483c default }" containerID=e5d9f569f5417687b0cca485f445851902635f2b22b32b5787f5354c556de1cb datapathConfiguration="&{false false false false false }" interface=lxcc6a566e4700a k8sPodName=openstack/heat-trusts-vdkcc labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e5d9f569f5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2960 ipv4=10.0.0.157 ipv6= k8sPodName=openstack/heat-trusts-vdkcc subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e5d9f569f5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2960 identityLabels="k8s:application=heat,k8s:batch.kubernetes.io/controller-uid=9a9a0621-3ad9-4359-a0b4-8434d7c48d40,k8s:batch.kubernetes.io/job-name=heat-trusts,k8s:component=trusts,k8s:controller-uid=9a9a0621-3ad9-4359-a0b4-8434d7c48d40,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=heat-trusts,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=heat-trusts,k8s:release_group=heat" ipv4=10.0.0.157 ipv6= k8sPodName=openstack/heat-trusts-vdkcc subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=heat;k8s:batch.kubernetes.io/controller-uid=9a9a0621-3ad9-4359-a0b4-8434d7c48d40;k8s:batch.kubernetes.io/job-name=heat-trusts;k8s:component=trusts;k8s:controller-uid=9a9a0621-3ad9-4359-a0b4-8434d7c48d40;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=heat-trusts;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=heat-trusts;k8s:release_group=heat;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=e5d9f569f5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2960 identity=52855 identityLabels="k8s:application=heat,k8s:batch.kubernetes.io/controller-uid=9a9a0621-3ad9-4359-a0b4-8434d7c48d40,k8s:batch.kubernetes.io/job-name=heat-trusts,k8s:component=trusts,k8s:controller-uid=9a9a0621-3ad9-4359-a0b4-8434d7c48d40,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=heat-trusts,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=heat-trusts,k8s:release_group=heat" ipv4=10.0.0.157 ipv6= k8sPodName=openstack/heat-trusts-vdkcc oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e5d9f569f5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2960 identity=52855 ipv4=10.0.0.157 ipv6= k8sPodName=openstack/heat-trusts-vdkcc subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e5d9f569f5 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2960 identity=52855 ipv4=10.0.0.157 ipv6= k8sPodName=openstack/heat-trusts-vdkcc subsys=endpoint level=info msg="Successful endpoint creation" containerID=e5d9f569f5 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2960 identity=52855 ipv4=10.0.0.157 ipv6= k8sPodName=openstack/heat-trusts-vdkcc subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=49e4ebab91 endpointID=1534 k8sNamespace=openstack k8sPodName=heat-engine-cleaner-29824030-wx5kl subsys=daemon level=info msg="Releasing key" key="[k8s:application=heat k8s:batch.kubernetes.io/controller-uid=cdbd995d-1053-48f9-819b-4148e2820efb k8s:batch.kubernetes.io/job-name=heat-engine-cleaner-29824030 k8s:component=engine-cleaner k8s:controller-uid=cdbd995d-1053-48f9-819b-4148e2820efb k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=heat-engine-cleaner k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=heat-engine-cleaner-29824030 k8s:release_group=heat]" subsys=allocator level=info msg="Removed endpoint" containerID=49e4ebab91 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1534 identity=11189 ipv4=10.0.0.247 ipv6= k8sPodName=openstack/heat-engine-cleaner-29824030-wx5kl subsys=endpoint level=info msg="Delete endpoint request" containerID=e5d9f569f5 endpointID=2960 k8sNamespace=openstack k8sPodName=heat-trusts-vdkcc subsys=daemon level=info msg="Releasing key" key="[k8s:application=heat k8s:batch.kubernetes.io/controller-uid=9a9a0621-3ad9-4359-a0b4-8434d7c48d40 k8s:batch.kubernetes.io/job-name=heat-trusts k8s:component=trusts k8s:controller-uid=9a9a0621-3ad9-4359-a0b4-8434d7c48d40 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=heat-trusts k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=heat-trusts k8s:release_group=heat]" subsys=allocator level=info msg="Removed endpoint" containerID=e5d9f569f5 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2960 identity=52855 ipv4=10.0.0.157 ipv6= k8sPodName=openstack/heat-trusts-vdkcc subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.146 59e68d56-6080-45dd-b285-f4782c07e892 default }" containerID=8628203a47359a61bae763e1205e0c89ae6aaa8000c0f22c139e2a5b15c7d3a5 datapathConfiguration="&{false false false false false }" interface=lxc59d8f3147657 k8sPodName=local-path-storage/helper-pod-create-pvc-7347fdb6-70fb-43da-b006-c6838ef37234 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8628203a47 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1921 ipv4=10.0.0.146 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-7347fdb6-70fb-43da-b006-c6838ef37234 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8628203a47 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1921 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.146 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-7347fdb6-70fb-43da-b006-c6838ef37234 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8628203a47 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1921 identity=16985 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.146 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-7347fdb6-70fb-43da-b006-c6838ef37234 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8628203a47 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1921 identity=16985 ipv4=10.0.0.146 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-7347fdb6-70fb-43da-b006-c6838ef37234 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=8628203a47 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1921 identity=16985 ipv4=10.0.0.146 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-7347fdb6-70fb-43da-b006-c6838ef37234 subsys=endpoint level=info msg="Successful endpoint creation" containerID=8628203a47 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1921 identity=16985 ipv4=10.0.0.146 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-7347fdb6-70fb-43da-b006-c6838ef37234 subsys=daemon level=info msg="Delete endpoint request" containerID=8628203a47 endpointID=1921 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-7347fdb6-70fb-43da-b006-c6838ef37234 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=8628203a47 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1921 identity=16985 ipv4=10.0.0.146 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-7347fdb6-70fb-43da-b006-c6838ef37234 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.184 952b73c5-e657-4810-b552-06512e5679af default }" containerID=cbb0b39beb4ac65358a81093365f0eb5b68e99e42e369a0c783e81c4ce91c5f1 datapathConfiguration="&{false false false false false }" interface=lxc2c1e34046523 k8sPodName=openstack/rabbitmq-octavia-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=cbb0b39beb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=31 ipv4=10.0.0.184 ipv6= k8sPodName=openstack/rabbitmq-octavia-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=cbb0b39beb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=31 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-octavia,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-octavia-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-octavia-server-0" ipv4=10.0.0.184 ipv6= k8sPodName=openstack/rabbitmq-octavia-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-octavia;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-octavia-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-octavia-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=cbb0b39beb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=31 identity=1518 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-octavia,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-octavia-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-octavia-server-0" ipv4=10.0.0.184 ipv6= k8sPodName=openstack/rabbitmq-octavia-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=cbb0b39beb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=31 identity=1518 ipv4=10.0.0.184 ipv6= k8sPodName=openstack/rabbitmq-octavia-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=cbb0b39beb datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=31 identity=1518 ipv4=10.0.0.184 ipv6= k8sPodName=openstack/rabbitmq-octavia-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=cbb0b39beb datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=31 identity=1518 ipv4=10.0.0.184 ipv6= k8sPodName=openstack/rabbitmq-octavia-server-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.89 dfe8692f-1dd8-449f-ab7f-cd8ef8316827 default }" containerID=fbf86619bc0c98b9b998f6e961d42c7483f64b7280e62e8207dbaca1f276151a datapathConfiguration="&{false false false false false }" interface=lxc07c4f66a0c39 k8sPodName=openstack/octavia-api-bf5ff66cb-r2ncx labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=fbf86619bc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=279 ipv4=10.0.0.89 ipv6= k8sPodName=openstack/octavia-api-bf5ff66cb-r2ncx subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=fbf86619bc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=279 identityLabels="k8s:application=octavia,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=octavia-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=octavia" ipv4=10.0.0.89 ipv6= k8sPodName=openstack/octavia-api-bf5ff66cb-r2ncx subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=fbf86619bc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=279 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.89 ipv6= k8sPodName=openstack/octavia-api-bf5ff66cb-r2ncx line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=octavia;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=octavia-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=octavia;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=fbf86619bc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=279 identity=34428 identityLabels="k8s:application=octavia,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=octavia-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=octavia" ipv4=10.0.0.89 ipv6= k8sPodName=openstack/octavia-api-bf5ff66cb-r2ncx oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=fbf86619bc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=279 identity=34428 ipv4=10.0.0.89 ipv6= k8sPodName=openstack/octavia-api-bf5ff66cb-r2ncx subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.148 4e5473a4-3e92-4c5d-a06c-584a44811afd default }" containerID=3d8cf2b8eb54948c86d2842a5682fcc9f62da2f294a08dda9e45b8fd8ce494b7 datapathConfiguration="&{false false false false false }" interface=lxc0544593e481e k8sPodName=openstack/octavia-db-init-lks5m labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3d8cf2b8eb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1894 ipv4=10.0.0.148 ipv6= k8sPodName=openstack/octavia-db-init-lks5m subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3d8cf2b8eb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1894 identityLabels="k8s:application=octavia,k8s:batch.kubernetes.io/controller-uid=7dcc22b6-720b-4a17-9283-6d187ba455b3,k8s:batch.kubernetes.io/job-name=octavia-db-init,k8s:component=db-init,k8s:controller-uid=7dcc22b6-720b-4a17-9283-6d187ba455b3,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=octavia-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=octavia-db-init,k8s:release_group=octavia" ipv4=10.0.0.148 ipv6= k8sPodName=openstack/octavia-db-init-lks5m subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=octavia;k8s:batch.kubernetes.io/controller-uid=7dcc22b6-720b-4a17-9283-6d187ba455b3;k8s:batch.kubernetes.io/job-name=octavia-db-init;k8s:component=db-init;k8s:controller-uid=7dcc22b6-720b-4a17-9283-6d187ba455b3;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=octavia-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=octavia-db-init;k8s:release_group=octavia;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3d8cf2b8eb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1894 identity=4084 identityLabels="k8s:application=octavia,k8s:batch.kubernetes.io/controller-uid=7dcc22b6-720b-4a17-9283-6d187ba455b3,k8s:batch.kubernetes.io/job-name=octavia-db-init,k8s:component=db-init,k8s:controller-uid=7dcc22b6-720b-4a17-9283-6d187ba455b3,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=octavia-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=octavia-db-init,k8s:release_group=octavia" ipv4=10.0.0.148 ipv6= k8sPodName=openstack/octavia-db-init-lks5m oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3d8cf2b8eb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1894 identity=4084 ipv4=10.0.0.148 ipv6= k8sPodName=openstack/octavia-db-init-lks5m subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=fbf86619bc datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=279 identity=34428 ipv4=10.0.0.89 ipv6= k8sPodName=openstack/octavia-api-bf5ff66cb-r2ncx subsys=endpoint level=info msg="Successful endpoint creation" containerID=fbf86619bc datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=279 identity=34428 ipv4=10.0.0.89 ipv6= k8sPodName=openstack/octavia-api-bf5ff66cb-r2ncx subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=3d8cf2b8eb datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1894 identity=4084 ipv4=10.0.0.148 ipv6= k8sPodName=openstack/octavia-db-init-lks5m subsys=endpoint level=info msg="Successful endpoint creation" containerID=3d8cf2b8eb datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1894 identity=4084 ipv4=10.0.0.148 ipv6= k8sPodName=openstack/octavia-db-init-lks5m subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=3d8cf2b8eb endpointID=1894 k8sNamespace=openstack k8sPodName=octavia-db-init-lks5m subsys=daemon level=info msg="Releasing key" key="[k8s:application=octavia k8s:batch.kubernetes.io/controller-uid=7dcc22b6-720b-4a17-9283-6d187ba455b3 k8s:batch.kubernetes.io/job-name=octavia-db-init k8s:component=db-init k8s:controller-uid=7dcc22b6-720b-4a17-9283-6d187ba455b3 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=octavia-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=octavia-db-init k8s:release_group=octavia]" subsys=allocator level=info msg="Removed endpoint" containerID=3d8cf2b8eb datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1894 identity=4084 ipv4=10.0.0.148 ipv6= k8sPodName=openstack/octavia-db-init-lks5m subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.65 2149df9f-9073-41c8-8583-1666a2f77789 default }" containerID=dd51434a20278882b4f7b4eacf6b0c1f573ff9497f46aed1f982129ba4f6e404 datapathConfiguration="&{false false false false false }" interface=lxc6b3a3779fcdf k8sPodName=openstack/octavia-db-sync-f49d5 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=dd51434a20 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=5 ipv4=10.0.0.65 ipv6= k8sPodName=openstack/octavia-db-sync-f49d5 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=dd51434a20 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=5 identityLabels="k8s:application=octavia,k8s:batch.kubernetes.io/controller-uid=5cefe121-ec27-4a75-8a0b-c099cab3ce5f,k8s:batch.kubernetes.io/job-name=octavia-db-sync,k8s:component=db-sync,k8s:controller-uid=5cefe121-ec27-4a75-8a0b-c099cab3ce5f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=octavia-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=octavia-db-sync,k8s:release_group=octavia" ipv4=10.0.0.65 ipv6= k8sPodName=openstack/octavia-db-sync-f49d5 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=dd51434a20 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=5 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.65 ipv6= k8sPodName=openstack/octavia-db-sync-f49d5 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=octavia;k8s:batch.kubernetes.io/controller-uid=5cefe121-ec27-4a75-8a0b-c099cab3ce5f;k8s:batch.kubernetes.io/job-name=octavia-db-sync;k8s:component=db-sync;k8s:controller-uid=5cefe121-ec27-4a75-8a0b-c099cab3ce5f;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=octavia-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=octavia-db-sync;k8s:release_group=octavia;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=dd51434a20 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=5 identity=39988 identityLabels="k8s:application=octavia,k8s:batch.kubernetes.io/controller-uid=5cefe121-ec27-4a75-8a0b-c099cab3ce5f,k8s:batch.kubernetes.io/job-name=octavia-db-sync,k8s:component=db-sync,k8s:controller-uid=5cefe121-ec27-4a75-8a0b-c099cab3ce5f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=octavia-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=octavia-db-sync,k8s:release_group=octavia" ipv4=10.0.0.65 ipv6= k8sPodName=openstack/octavia-db-sync-f49d5 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=dd51434a20 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=5 identity=39988 ipv4=10.0.0.65 ipv6= k8sPodName=openstack/octavia-db-sync-f49d5 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=dd51434a20 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=5 identity=39988 ipv4=10.0.0.65 ipv6= k8sPodName=openstack/octavia-db-sync-f49d5 subsys=endpoint level=info msg="Successful endpoint creation" containerID=dd51434a20 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=5 identity=39988 ipv4=10.0.0.65 ipv6= k8sPodName=openstack/octavia-db-sync-f49d5 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=dd51434a20 endpointID=5 k8sNamespace=openstack k8sPodName=octavia-db-sync-f49d5 subsys=daemon level=info msg="Releasing key" key="[k8s:application=octavia k8s:batch.kubernetes.io/controller-uid=5cefe121-ec27-4a75-8a0b-c099cab3ce5f k8s:batch.kubernetes.io/job-name=octavia-db-sync k8s:component=db-sync k8s:controller-uid=5cefe121-ec27-4a75-8a0b-c099cab3ce5f k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=octavia-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=octavia-db-sync k8s:release_group=octavia]" subsys=allocator level=info msg="Removed endpoint" containerID=dd51434a20 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=5 identity=39988 ipv4=10.0.0.65 ipv6= k8sPodName=openstack/octavia-db-sync-f49d5 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.57 ab4c7aa5-60ca-480a-8b42-0dd0c813449c default }" containerID=a7f138204a40affd86829f5c7fc292e993cc248eb3cce5c3680a95f5f0c9db18 datapathConfiguration="&{false false false false false }" interface=lxcefbf5fb772f1 k8sPodName=openstack/octavia-rabbit-init-vc9v4 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a7f138204a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1946 ipv4=10.0.0.57 ipv6= k8sPodName=openstack/octavia-rabbit-init-vc9v4 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a7f138204a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1946 identityLabels="k8s:application=octavia,k8s:batch.kubernetes.io/controller-uid=f5223212-98e7-475f-a43b-fd2642811afd,k8s:batch.kubernetes.io/job-name=octavia-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=f5223212-98e7-475f-a43b-fd2642811afd,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=octavia-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=octavia-rabbit-init,k8s:release_group=octavia" ipv4=10.0.0.57 ipv6= k8sPodName=openstack/octavia-rabbit-init-vc9v4 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=a7f138204a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1946 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.57 ipv6= k8sPodName=openstack/octavia-rabbit-init-vc9v4 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=octavia;k8s:batch.kubernetes.io/controller-uid=f5223212-98e7-475f-a43b-fd2642811afd;k8s:batch.kubernetes.io/job-name=octavia-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=f5223212-98e7-475f-a43b-fd2642811afd;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=octavia-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=octavia-rabbit-init;k8s:release_group=octavia;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a7f138204a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1946 identity=6612 identityLabels="k8s:application=octavia,k8s:batch.kubernetes.io/controller-uid=f5223212-98e7-475f-a43b-fd2642811afd,k8s:batch.kubernetes.io/job-name=octavia-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=f5223212-98e7-475f-a43b-fd2642811afd,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=octavia-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=octavia-rabbit-init,k8s:release_group=octavia" ipv4=10.0.0.57 ipv6= k8sPodName=openstack/octavia-rabbit-init-vc9v4 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a7f138204a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1946 identity=6612 ipv4=10.0.0.57 ipv6= k8sPodName=openstack/octavia-rabbit-init-vc9v4 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a7f138204a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1946 identity=6612 ipv4=10.0.0.57 ipv6= k8sPodName=openstack/octavia-rabbit-init-vc9v4 subsys=endpoint level=info msg="Successful endpoint creation" containerID=a7f138204a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1946 identity=6612 ipv4=10.0.0.57 ipv6= k8sPodName=openstack/octavia-rabbit-init-vc9v4 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=a7f138204a endpointID=1946 k8sNamespace=openstack k8sPodName=octavia-rabbit-init-vc9v4 subsys=daemon level=info msg="Releasing key" key="[k8s:application=octavia k8s:batch.kubernetes.io/controller-uid=f5223212-98e7-475f-a43b-fd2642811afd k8s:batch.kubernetes.io/job-name=octavia-rabbit-init k8s:component=rabbit-init k8s:controller-uid=f5223212-98e7-475f-a43b-fd2642811afd k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=octavia-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=octavia-rabbit-init k8s:release_group=octavia]" subsys=allocator level=info msg="Removed endpoint" containerID=a7f138204a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1946 identity=6612 ipv4=10.0.0.57 ipv6= k8sPodName=openstack/octavia-rabbit-init-vc9v4 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.104 614fbd26-a7e1-4b36-b52c-ad9096aa5523 default }" containerID=b1dbcd8c17fc52b87db8ba20ed89efad3c30719fd8706c22ddce3e63c7fa8da5 datapathConfiguration="&{false false false false false }" interface=lxcaa61d1511a51 k8sPodName=openstack/octavia-ks-service-lwv5q labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b1dbcd8c17 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2270 ipv4=10.0.0.104 ipv6= k8sPodName=openstack/octavia-ks-service-lwv5q subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b1dbcd8c17 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2270 identityLabels="k8s:application=octavia,k8s:batch.kubernetes.io/controller-uid=0356772c-a21b-4314-8841-a6bc518872f5,k8s:batch.kubernetes.io/job-name=octavia-ks-service,k8s:component=ks-service,k8s:controller-uid=0356772c-a21b-4314-8841-a6bc518872f5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=octavia-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=octavia-ks-service,k8s:release_group=octavia" ipv4=10.0.0.104 ipv6= k8sPodName=openstack/octavia-ks-service-lwv5q subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=octavia;k8s:batch.kubernetes.io/controller-uid=0356772c-a21b-4314-8841-a6bc518872f5;k8s:batch.kubernetes.io/job-name=octavia-ks-service;k8s:component=ks-service;k8s:controller-uid=0356772c-a21b-4314-8841-a6bc518872f5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=octavia-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=octavia-ks-service;k8s:release_group=octavia;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=b1dbcd8c17 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2270 identity=14008 identityLabels="k8s:application=octavia,k8s:batch.kubernetes.io/controller-uid=0356772c-a21b-4314-8841-a6bc518872f5,k8s:batch.kubernetes.io/job-name=octavia-ks-service,k8s:component=ks-service,k8s:controller-uid=0356772c-a21b-4314-8841-a6bc518872f5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=octavia-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=octavia-ks-service,k8s:release_group=octavia" ipv4=10.0.0.104 ipv6= k8sPodName=openstack/octavia-ks-service-lwv5q oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b1dbcd8c17 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2270 identity=14008 ipv4=10.0.0.104 ipv6= k8sPodName=openstack/octavia-ks-service-lwv5q subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b1dbcd8c17 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2270 identity=14008 ipv4=10.0.0.104 ipv6= k8sPodName=openstack/octavia-ks-service-lwv5q subsys=endpoint level=info msg="Successful endpoint creation" containerID=b1dbcd8c17 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2270 identity=14008 ipv4=10.0.0.104 ipv6= k8sPodName=openstack/octavia-ks-service-lwv5q subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=b1dbcd8c17 endpointID=2270 k8sNamespace=openstack k8sPodName=octavia-ks-service-lwv5q subsys=daemon level=info msg="Releasing key" key="[k8s:application=octavia k8s:batch.kubernetes.io/controller-uid=0356772c-a21b-4314-8841-a6bc518872f5 k8s:batch.kubernetes.io/job-name=octavia-ks-service k8s:component=ks-service k8s:controller-uid=0356772c-a21b-4314-8841-a6bc518872f5 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=octavia-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=octavia-ks-service k8s:release_group=octavia]" subsys=allocator level=info msg="Removed endpoint" containerID=b1dbcd8c17 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2270 identity=14008 ipv4=10.0.0.104 ipv6= k8sPodName=openstack/octavia-ks-service-lwv5q subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.146 9ee9549f-cf30-4c2c-b338-861a4326e0a8 default }" containerID=64ac829b564c0b75e379ae81bb7e3e03b33b0438102bb8a0048f016e808d8b92 datapathConfiguration="&{false false false false false }" interface=lxc5b88c3f91a8e k8sPodName=openstack/octavia-ks-endpoints-mxpv6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=64ac829b56 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1820 ipv4=10.0.0.146 ipv6= k8sPodName=openstack/octavia-ks-endpoints-mxpv6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=64ac829b56 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1820 identityLabels="k8s:application=octavia,k8s:batch.kubernetes.io/controller-uid=1b246b82-a8a0-49fc-b25b-bce90bada507,k8s:batch.kubernetes.io/job-name=octavia-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=1b246b82-a8a0-49fc-b25b-bce90bada507,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=octavia-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=octavia-ks-endpoints,k8s:release_group=octavia" ipv4=10.0.0.146 ipv6= k8sPodName=openstack/octavia-ks-endpoints-mxpv6 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=64ac829b56 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1820 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.146 ipv6= k8sPodName=openstack/octavia-ks-endpoints-mxpv6 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=octavia;k8s:batch.kubernetes.io/controller-uid=1b246b82-a8a0-49fc-b25b-bce90bada507;k8s:batch.kubernetes.io/job-name=octavia-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=1b246b82-a8a0-49fc-b25b-bce90bada507;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=octavia-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=octavia-ks-endpoints;k8s:release_group=octavia;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=64ac829b56 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1820 identity=29012 identityLabels="k8s:application=octavia,k8s:batch.kubernetes.io/controller-uid=1b246b82-a8a0-49fc-b25b-bce90bada507,k8s:batch.kubernetes.io/job-name=octavia-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=1b246b82-a8a0-49fc-b25b-bce90bada507,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=octavia-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=octavia-ks-endpoints,k8s:release_group=octavia" ipv4=10.0.0.146 ipv6= k8sPodName=openstack/octavia-ks-endpoints-mxpv6 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=64ac829b56 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1820 identity=29012 ipv4=10.0.0.146 ipv6= k8sPodName=openstack/octavia-ks-endpoints-mxpv6 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=64ac829b56 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1820 identity=29012 ipv4=10.0.0.146 ipv6= k8sPodName=openstack/octavia-ks-endpoints-mxpv6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=64ac829b56 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1820 identity=29012 ipv4=10.0.0.146 ipv6= k8sPodName=openstack/octavia-ks-endpoints-mxpv6 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=64ac829b56 endpointID=1820 k8sNamespace=openstack k8sPodName=octavia-ks-endpoints-mxpv6 subsys=daemon level=info msg="Releasing key" key="[k8s:application=octavia k8s:batch.kubernetes.io/controller-uid=1b246b82-a8a0-49fc-b25b-bce90bada507 k8s:batch.kubernetes.io/job-name=octavia-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=1b246b82-a8a0-49fc-b25b-bce90bada507 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=octavia-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=octavia-ks-endpoints k8s:release_group=octavia]" subsys=allocator level=info msg="Removed endpoint" containerID=64ac829b56 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1820 identity=29012 ipv4=10.0.0.146 ipv6= k8sPodName=openstack/octavia-ks-endpoints-mxpv6 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.115 f1feed3d-15a3-4d66-bab7-d629dfd8a86e default }" containerID=530b92f09139f089554cee0dc43812a92e627fe9482280fd9d4f21299ad85d46 datapathConfiguration="&{false false false false false }" interface=lxce5e0fbc26aa7 k8sPodName=openstack/octavia-ks-user-prdn5 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=530b92f091 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=316 ipv4=10.0.0.115 ipv6= k8sPodName=openstack/octavia-ks-user-prdn5 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=530b92f091 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=316 identityLabels="k8s:application=octavia,k8s:batch.kubernetes.io/controller-uid=751acec5-077d-4fb1-89c1-a5dacc033787,k8s:batch.kubernetes.io/job-name=octavia-ks-user,k8s:component=ks-user,k8s:controller-uid=751acec5-077d-4fb1-89c1-a5dacc033787,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=octavia-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=octavia-ks-user,k8s:release_group=octavia" ipv4=10.0.0.115 ipv6= k8sPodName=openstack/octavia-ks-user-prdn5 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=octavia;k8s:batch.kubernetes.io/controller-uid=751acec5-077d-4fb1-89c1-a5dacc033787;k8s:batch.kubernetes.io/job-name=octavia-ks-user;k8s:component=ks-user;k8s:controller-uid=751acec5-077d-4fb1-89c1-a5dacc033787;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=octavia-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=octavia-ks-user;k8s:release_group=octavia;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=530b92f091 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=316 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.115 ipv6= k8sPodName=openstack/octavia-ks-user-prdn5 line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=530b92f091 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=316 identity=41845 identityLabels="k8s:application=octavia,k8s:batch.kubernetes.io/controller-uid=751acec5-077d-4fb1-89c1-a5dacc033787,k8s:batch.kubernetes.io/job-name=octavia-ks-user,k8s:component=ks-user,k8s:controller-uid=751acec5-077d-4fb1-89c1-a5dacc033787,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=octavia-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=octavia-ks-user,k8s:release_group=octavia" ipv4=10.0.0.115 ipv6= k8sPodName=openstack/octavia-ks-user-prdn5 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=530b92f091 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=316 identity=41845 ipv4=10.0.0.115 ipv6= k8sPodName=openstack/octavia-ks-user-prdn5 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=530b92f091 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=316 identity=41845 ipv4=10.0.0.115 ipv6= k8sPodName=openstack/octavia-ks-user-prdn5 subsys=endpoint level=info msg="Successful endpoint creation" containerID=530b92f091 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=316 identity=41845 ipv4=10.0.0.115 ipv6= k8sPodName=openstack/octavia-ks-user-prdn5 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.136 615229d4-9694-4861-b057-c8c6afa8e8ee default }" containerID=295aecbdb80cd677b0c0f8bea07ffb004c90f6dfcbdce165d052b27ca4cc085f datapathConfiguration="&{false false false false false }" interface=lxc5a9f87866ba2 k8sPodName=openstack/heat-engine-cleaner-29824035-6z2mp labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=295aecbdb8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1428 ipv4=10.0.0.136 ipv6= k8sPodName=openstack/heat-engine-cleaner-29824035-6z2mp subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=295aecbdb8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1428 identityLabels="k8s:application=heat,k8s:batch.kubernetes.io/controller-uid=db2959fe-f901-4bde-a9e7-66475fc690ba,k8s:batch.kubernetes.io/job-name=heat-engine-cleaner-29824035,k8s:component=engine-cleaner,k8s:controller-uid=db2959fe-f901-4bde-a9e7-66475fc690ba,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=heat-engine-cleaner,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=heat-engine-cleaner-29824035,k8s:release_group=heat" ipv4=10.0.0.136 ipv6= k8sPodName=openstack/heat-engine-cleaner-29824035-6z2mp subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=heat;k8s:batch.kubernetes.io/controller-uid=db2959fe-f901-4bde-a9e7-66475fc690ba;k8s:batch.kubernetes.io/job-name=heat-engine-cleaner-29824035;k8s:component=engine-cleaner;k8s:controller-uid=db2959fe-f901-4bde-a9e7-66475fc690ba;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=heat-engine-cleaner;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=heat-engine-cleaner-29824035;k8s:release_group=heat;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=295aecbdb8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1428 identity=7917 identityLabels="k8s:application=heat,k8s:batch.kubernetes.io/controller-uid=db2959fe-f901-4bde-a9e7-66475fc690ba,k8s:batch.kubernetes.io/job-name=heat-engine-cleaner-29824035,k8s:component=engine-cleaner,k8s:controller-uid=db2959fe-f901-4bde-a9e7-66475fc690ba,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=heat-engine-cleaner,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=heat-engine-cleaner-29824035,k8s:release_group=heat" ipv4=10.0.0.136 ipv6= k8sPodName=openstack/heat-engine-cleaner-29824035-6z2mp oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=295aecbdb8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1428 identity=7917 ipv4=10.0.0.136 ipv6= k8sPodName=openstack/heat-engine-cleaner-29824035-6z2mp subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=295aecbdb8 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1428 identity=7917 ipv4=10.0.0.136 ipv6= k8sPodName=openstack/heat-engine-cleaner-29824035-6z2mp subsys=endpoint level=info msg="Successful endpoint creation" containerID=295aecbdb8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1428 identity=7917 ipv4=10.0.0.136 ipv6= k8sPodName=openstack/heat-engine-cleaner-29824035-6z2mp subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=295aecbdb8 endpointID=1428 k8sNamespace=openstack k8sPodName=heat-engine-cleaner-29824035-6z2mp subsys=daemon level=info msg="Releasing key" key="[k8s:application=heat k8s:batch.kubernetes.io/controller-uid=db2959fe-f901-4bde-a9e7-66475fc690ba k8s:batch.kubernetes.io/job-name=heat-engine-cleaner-29824035 k8s:component=engine-cleaner k8s:controller-uid=db2959fe-f901-4bde-a9e7-66475fc690ba k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=heat-engine-cleaner k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=heat-engine-cleaner-29824035 k8s:release_group=heat]" subsys=allocator level=info msg="Removed endpoint" containerID=295aecbdb8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1428 identity=7917 ipv4=10.0.0.136 ipv6= k8sPodName=openstack/heat-engine-cleaner-29824035-6z2mp subsys=endpoint level=info msg="Delete endpoint request" containerID=530b92f091 endpointID=316 k8sNamespace=openstack k8sPodName=octavia-ks-user-prdn5 subsys=daemon level=info msg="Releasing key" key="[k8s:application=octavia k8s:batch.kubernetes.io/controller-uid=751acec5-077d-4fb1-89c1-a5dacc033787 k8s:batch.kubernetes.io/job-name=octavia-ks-user k8s:component=ks-user k8s:controller-uid=751acec5-077d-4fb1-89c1-a5dacc033787 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=octavia-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=octavia-ks-user k8s:release_group=octavia]" subsys=allocator level=info msg="Removed endpoint" containerID=530b92f091 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=316 identity=41845 ipv4=10.0.0.115 ipv6= k8sPodName=openstack/octavia-ks-user-prdn5 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.74 790fc324-3701-469b-b295-aff36ee0d1f5 default }" containerID=e1baa58c75a9777b5a6e61a4e9c1d8228bb9acddf807afb495fcd62b061c62e0 datapathConfiguration="&{false false false false false }" interface=lxc558497d5ee3b k8sPodName=openstack/octavia-bootstrap-czfl4 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e1baa58c75 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=743 ipv4=10.0.0.74 ipv6= k8sPodName=openstack/octavia-bootstrap-czfl4 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e1baa58c75 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=743 identityLabels="k8s:application=octavia,k8s:batch.kubernetes.io/controller-uid=ce2b65aa-e797-4db2-af08-894a62a7307f,k8s:batch.kubernetes.io/job-name=octavia-bootstrap,k8s:component=bootstrap,k8s:controller-uid=ce2b65aa-e797-4db2-af08-894a62a7307f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=octavia-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=octavia-bootstrap,k8s:release_group=octavia" ipv4=10.0.0.74 ipv6= k8sPodName=openstack/octavia-bootstrap-czfl4 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=octavia;k8s:batch.kubernetes.io/controller-uid=ce2b65aa-e797-4db2-af08-894a62a7307f;k8s:batch.kubernetes.io/job-name=octavia-bootstrap;k8s:component=bootstrap;k8s:controller-uid=ce2b65aa-e797-4db2-af08-894a62a7307f;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=octavia-bootstrap;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=octavia-bootstrap;k8s:release_group=octavia;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e1baa58c75 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=743 identity=54996 identityLabels="k8s:application=octavia,k8s:batch.kubernetes.io/controller-uid=ce2b65aa-e797-4db2-af08-894a62a7307f,k8s:batch.kubernetes.io/job-name=octavia-bootstrap,k8s:component=bootstrap,k8s:controller-uid=ce2b65aa-e797-4db2-af08-894a62a7307f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=octavia-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=octavia-bootstrap,k8s:release_group=octavia" ipv4=10.0.0.74 ipv6= k8sPodName=openstack/octavia-bootstrap-czfl4 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e1baa58c75 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=743 identity=54996 ipv4=10.0.0.74 ipv6= k8sPodName=openstack/octavia-bootstrap-czfl4 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e1baa58c75 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=743 identity=54996 ipv4=10.0.0.74 ipv6= k8sPodName=openstack/octavia-bootstrap-czfl4 subsys=endpoint level=info msg="Successful endpoint creation" containerID=e1baa58c75 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=743 identity=54996 ipv4=10.0.0.74 ipv6= k8sPodName=openstack/octavia-bootstrap-czfl4 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=e1baa58c75 endpointID=743 k8sNamespace=openstack k8sPodName=octavia-bootstrap-czfl4 subsys=daemon level=info msg="Releasing key" key="[k8s:application=octavia k8s:batch.kubernetes.io/controller-uid=ce2b65aa-e797-4db2-af08-894a62a7307f k8s:batch.kubernetes.io/job-name=octavia-bootstrap k8s:component=bootstrap k8s:controller-uid=ce2b65aa-e797-4db2-af08-894a62a7307f k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=octavia-bootstrap k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=octavia-bootstrap k8s:release_group=octavia]" subsys=allocator level=info msg="Removed endpoint" containerID=e1baa58c75 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=743 identity=54996 ipv4=10.0.0.74 ipv6= k8sPodName=openstack/octavia-bootstrap-czfl4 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.102 36a4c5e1-561b-44e3-953f-3747c2ce12d7 default }" containerID=c7f33f80914ff16a55fabd3b3496ca379408315d39683def594d0e7b26eef989 datapathConfiguration="&{false false false false false }" interface=lxc102f17bfebac k8sPodName=local-path-storage/helper-pod-create-pvc-fa877402-4227-4ea8-8ad0-a2974b6f3c16 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c7f33f8091 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1874 ipv4=10.0.0.102 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-fa877402-4227-4ea8-8ad0-a2974b6f3c16 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c7f33f8091 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1874 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.102 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-fa877402-4227-4ea8-8ad0-a2974b6f3c16 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity marked for deletion (at 2026-09-15T03:12:01.688673646Z); attempting to unmark it" identity="&{{ } {16985 58f4ae19-b888-4644-a2bc-b56134581786 21938 1 2026-09-15 02:28:32 +0000 UTC map[io.cilium.k8s.policy.cluster:default io.cilium.k8s.policy.serviceaccount:local-path-provisioner io.kubernetes.pod.namespace:local-path-storage] map[io.cilium.heartbeat:2026-09-15T03:12:01.688673646Z] [] [] [{cilium-agent Update cilium.io/v2 2026-09-15 02:28:32 +0000 UTC FieldsV1 {\"f:metadata\":{\"f:labels\":{\".\":{},\"f:io.cilium.k8s.policy.cluster\":{},\"f:io.cilium.k8s.policy.serviceaccount\":{},\"f:io.kubernetes.pod.namespace\":{}}},\"f:security-labels\":{\".\":{},\"f:k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name\":{},\"f:k8s:io.cilium.k8s.namespace.labels.name\":{},\"f:k8s:io.cilium.k8s.policy.cluster\":{},\"f:k8s:io.cilium.k8s.policy.serviceaccount\":{},\"f:k8s:io.kubernetes.pod.namespace\":{}}} } {cilium-operator-generic Update cilium.io/v2 2026-09-15 03:12:02 +0000 UTC FieldsV1 {\"f:metadata\":{\"f:annotations\":{\".\":{},\"f:io.cilium.heartbeat\":{}}}} }]} map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:local-path-storage k8s:io.cilium.k8s.namespace.labels.name:local-path-storage k8s:io.cilium.k8s.policy.cluster:default k8s:io.cilium.k8s.policy.serviceaccount:local-path-provisioner k8s:io.kubernetes.pod.namespace:local-path-storage]}" subsys=crd-allocator level=info msg="Identity of endpoint changed" containerID=c7f33f8091 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1874 identity=16985 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.102 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-fa877402-4227-4ea8-8ad0-a2974b6f3c16 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c7f33f8091 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1874 identity=16985 ipv4=10.0.0.102 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-fa877402-4227-4ea8-8ad0-a2974b6f3c16 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c7f33f8091 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1874 identity=16985 ipv4=10.0.0.102 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-fa877402-4227-4ea8-8ad0-a2974b6f3c16 subsys=endpoint level=info msg="Successful endpoint creation" containerID=c7f33f8091 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1874 identity=16985 ipv4=10.0.0.102 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-fa877402-4227-4ea8-8ad0-a2974b6f3c16 subsys=daemon level=info msg="Delete endpoint request" containerID=c7f33f8091 endpointID=1874 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-fa877402-4227-4ea8-8ad0-a2974b6f3c16 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=c7f33f8091 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1874 identity=16985 ipv4=10.0.0.102 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-fa877402-4227-4ea8-8ad0-a2974b6f3c16 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.224 9d6ff077-9de0-4e1a-b6c5-208d52072554 default }" containerID=082edc9c3528bfdd023289843bbab9d04ff6d10a23666c0ebe191586e3e279ef datapathConfiguration="&{false false false false false }" interface=lxc5eea1378d104 k8sPodName=openstack/rabbitmq-magnum-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=082edc9c35 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2015 ipv4=10.0.0.224 ipv6= k8sPodName=openstack/rabbitmq-magnum-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=082edc9c35 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2015 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-magnum,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-magnum-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-magnum-server-0" ipv4=10.0.0.224 ipv6= k8sPodName=openstack/rabbitmq-magnum-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-magnum;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-magnum-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-magnum-server-0;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=082edc9c35 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2015 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.224 ipv6= k8sPodName=openstack/rabbitmq-magnum-server-0 line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=082edc9c35 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2015 identity=20533 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-magnum,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-magnum-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-magnum-server-0" ipv4=10.0.0.224 ipv6= k8sPodName=openstack/rabbitmq-magnum-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=082edc9c35 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2015 identity=20533 ipv4=10.0.0.224 ipv6= k8sPodName=openstack/rabbitmq-magnum-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=082edc9c35 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2015 identity=20533 ipv4=10.0.0.224 ipv6= k8sPodName=openstack/rabbitmq-magnum-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=082edc9c35 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2015 identity=20533 ipv4=10.0.0.224 ipv6= k8sPodName=openstack/rabbitmq-magnum-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.134 cf03d3ec-7601-48bc-b110-df001f471ff0 default }" containerID=47d80331075a447be4642b4e47498179a8f245148893bd949fd425ca909c4e57 datapathConfiguration="&{false false false false false }" interface=lxc819b60930713 k8sPodName=orc-system/orc-controller-manager-6cb597b5d4-qfj6j labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=47d8033107 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3119 ipv4=10.0.0.134 ipv6= k8sPodName=orc-system/orc-controller-manager-6cb597b5d4-qfj6j subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=47d8033107 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3119 identityLabels="k8s:control-plane=controller-manager,k8s:io.cilium.k8s.namespace.labels.app.kubernetes.io/managed-by=kustomize,k8s:io.cilium.k8s.namespace.labels.app.kubernetes.io/name=orc,k8s:io.cilium.k8s.namespace.labels.control-plane=controller-manager,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=orc-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=orc-controller-manager,k8s:io.kubernetes.pod.namespace=orc-system" ipv4=10.0.0.134 ipv6= k8sPodName=orc-system/orc-controller-manager-6cb597b5d4-qfj6j subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.app.kubernetes.io/managed-by:kustomize k8s:io.cilium.k8s.namespace.labels.app.kubernetes.io/name:orc k8s:io.cilium.k8s.namespace.labels.control-plane:controller-manager k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:orc-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:control-plane=controller-manager;k8s:io.cilium.k8s.namespace.labels.app.kubernetes.io/managed-by=kustomize;k8s:io.cilium.k8s.namespace.labels.app.kubernetes.io/name=orc;k8s:io.cilium.k8s.namespace.labels.control-plane=controller-manager;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=orc-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=orc-controller-manager;k8s:io.kubernetes.pod.namespace=orc-system;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=47d8033107 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3119 identity=20391 identityLabels="k8s:control-plane=controller-manager,k8s:io.cilium.k8s.namespace.labels.app.kubernetes.io/managed-by=kustomize,k8s:io.cilium.k8s.namespace.labels.app.kubernetes.io/name=orc,k8s:io.cilium.k8s.namespace.labels.control-plane=controller-manager,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=orc-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=orc-controller-manager,k8s:io.kubernetes.pod.namespace=orc-system" ipv4=10.0.0.134 ipv6= k8sPodName=orc-system/orc-controller-manager-6cb597b5d4-qfj6j oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=47d8033107 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3119 identity=20391 ipv4=10.0.0.134 ipv6= k8sPodName=orc-system/orc-controller-manager-6cb597b5d4-qfj6j subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=47d8033107 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3119 identity=20391 ipv4=10.0.0.134 ipv6= k8sPodName=orc-system/orc-controller-manager-6cb597b5d4-qfj6j subsys=endpoint level=info msg="Successful endpoint creation" containerID=47d8033107 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3119 identity=20391 ipv4=10.0.0.134 ipv6= k8sPodName=orc-system/orc-controller-manager-6cb597b5d4-qfj6j subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.173 4b3b8b37-6c5c-4617-a838-8aab577b01b4 default }" containerID=9235a10a046851e85b0f927acbc90d6e55354ec0b357acc617d953468afc67db datapathConfiguration="&{false false false false false }" interface=lxcbbbf5031aecc k8sPodName=capi-system/capi-controller-manager-69f9d56d75-cpphq labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9235a10a04 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=88 ipv4=10.0.0.173 ipv6= k8sPodName=capi-system/capi-controller-manager-69f9d56d75-cpphq subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9235a10a04 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=88 identityLabels="k8s:cluster.x-k8s.io/provider=cluster-api,k8s:control-plane=controller-manager,k8s:io.cilium.k8s.namespace.labels.cluster.x-k8s.io/provider=cluster-api,k8s:io.cilium.k8s.namespace.labels.clusterctl.cluster.x-k8s.io,k8s:io.cilium.k8s.namespace.labels.control-plane=controller-manager,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=capi-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=capi-manager,k8s:io.kubernetes.pod.namespace=capi-system" ipv4=10.0.0.173 ipv6= k8sPodName=capi-system/capi-controller-manager-69f9d56d75-cpphq subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.cluster.x-k8s.io/provider:cluster-api k8s:io.cilium.k8s.namespace.labels.clusterctl.cluster.x-k8s.io: k8s:io.cilium.k8s.namespace.labels.control-plane:controller-manager k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:capi-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:cluster.x-k8s.io/provider=cluster-api;k8s:control-plane=controller-manager;k8s:io.cilium.k8s.namespace.labels.cluster.x-k8s.io/provider=cluster-api;k8s:io.cilium.k8s.namespace.labels.clusterctl.cluster.x-k8s.io=;k8s:io.cilium.k8s.namespace.labels.control-plane=controller-manager;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=capi-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=capi-manager;k8s:io.kubernetes.pod.namespace=capi-system;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9235a10a04 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=88 identity=29739 identityLabels="k8s:cluster.x-k8s.io/provider=cluster-api,k8s:control-plane=controller-manager,k8s:io.cilium.k8s.namespace.labels.cluster.x-k8s.io/provider=cluster-api,k8s:io.cilium.k8s.namespace.labels.clusterctl.cluster.x-k8s.io,k8s:io.cilium.k8s.namespace.labels.control-plane=controller-manager,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=capi-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=capi-manager,k8s:io.kubernetes.pod.namespace=capi-system" ipv4=10.0.0.173 ipv6= k8sPodName=capi-system/capi-controller-manager-69f9d56d75-cpphq oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9235a10a04 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=88 identity=29739 ipv4=10.0.0.173 ipv6= k8sPodName=capi-system/capi-controller-manager-69f9d56d75-cpphq subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=9235a10a04 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=88 identity=29739 ipv4=10.0.0.173 ipv6= k8sPodName=capi-system/capi-controller-manager-69f9d56d75-cpphq subsys=endpoint level=info msg="Successful endpoint creation" containerID=9235a10a04 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=88 identity=29739 ipv4=10.0.0.173 ipv6= k8sPodName=capi-system/capi-controller-manager-69f9d56d75-cpphq subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.169 3393df8e-a4da-4f48-b0a0-029a446b9a08 default }" containerID=de4b62c928957cb4d5e2b8144c8866360b0c3f3b00e1bb68167d16897408ade4 datapathConfiguration="&{false false false false false }" interface=lxc96a2a6a04122 k8sPodName=capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-controller-manager-6f6766ffcc-85mtj labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=de4b62c928 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3764 ipv4=10.0.0.169 ipv6= k8sPodName=capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-controller-manager-6f6766ffcc-85mtj subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=de4b62c928 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3764 identityLabels="k8s:cluster.x-k8s.io/provider=bootstrap-kubeadm,k8s:control-plane=controller-manager,k8s:io.cilium.k8s.namespace.labels.cluster.x-k8s.io/provider=bootstrap-kubeadm,k8s:io.cilium.k8s.namespace.labels.clusterctl.cluster.x-k8s.io,k8s:io.cilium.k8s.namespace.labels.control-plane=controller-manager,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=capi-kubeadm-bootstrap-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=capi-kubeadm-bootstrap-manager,k8s:io.kubernetes.pod.namespace=capi-kubeadm-bootstrap-system" ipv4=10.0.0.169 ipv6= k8sPodName=capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-controller-manager-6f6766ffcc-85mtj subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.cluster.x-k8s.io/provider:bootstrap-kubeadm k8s:io.cilium.k8s.namespace.labels.clusterctl.cluster.x-k8s.io: k8s:io.cilium.k8s.namespace.labels.control-plane:controller-manager k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:capi-kubeadm-bootstrap-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:cluster.x-k8s.io/provider=bootstrap-kubeadm;k8s:control-plane=controller-manager;k8s:io.cilium.k8s.namespace.labels.cluster.x-k8s.io/provider=bootstrap-kubeadm;k8s:io.cilium.k8s.namespace.labels.clusterctl.cluster.x-k8s.io=;k8s:io.cilium.k8s.namespace.labels.control-plane=controller-manager;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=capi-kubeadm-bootstrap-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=capi-kubeadm-bootstrap-manager;k8s:io.kubernetes.pod.namespace=capi-kubeadm-bootstrap-system;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=de4b62c928 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3764 identity=12209 identityLabels="k8s:cluster.x-k8s.io/provider=bootstrap-kubeadm,k8s:control-plane=controller-manager,k8s:io.cilium.k8s.namespace.labels.cluster.x-k8s.io/provider=bootstrap-kubeadm,k8s:io.cilium.k8s.namespace.labels.clusterctl.cluster.x-k8s.io,k8s:io.cilium.k8s.namespace.labels.control-plane=controller-manager,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=capi-kubeadm-bootstrap-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=capi-kubeadm-bootstrap-manager,k8s:io.kubernetes.pod.namespace=capi-kubeadm-bootstrap-system" ipv4=10.0.0.169 ipv6= k8sPodName=capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-controller-manager-6f6766ffcc-85mtj oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=de4b62c928 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3764 identity=12209 ipv4=10.0.0.169 ipv6= k8sPodName=capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-controller-manager-6f6766ffcc-85mtj subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=de4b62c928 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3764 identity=12209 ipv4=10.0.0.169 ipv6= k8sPodName=capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-controller-manager-6f6766ffcc-85mtj subsys=endpoint level=info msg="Successful endpoint creation" containerID=de4b62c928 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3764 identity=12209 ipv4=10.0.0.169 ipv6= k8sPodName=capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-controller-manager-6f6766ffcc-85mtj subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.119 cff39922-9235-4009-9500-5221097be183 default }" containerID=98f9626c224c58108d54ccbe97408a16f7f753f23273c5f6cb8fc98387520546 datapathConfiguration="&{false false false false false }" interface=lxcddae455bc300 k8sPodName=capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-controller-manager-7db57f6cd7-48czs labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=98f9626c22 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1427 ipv4=10.0.0.119 ipv6= k8sPodName=capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-controller-manager-7db57f6cd7-48czs subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=98f9626c22 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1427 identityLabels="k8s:cluster.x-k8s.io/provider=control-plane-kubeadm,k8s:control-plane=controller-manager,k8s:io.cilium.k8s.namespace.labels.cluster.x-k8s.io/provider=control-plane-kubeadm,k8s:io.cilium.k8s.namespace.labels.clusterctl.cluster.x-k8s.io,k8s:io.cilium.k8s.namespace.labels.control-plane=controller-manager,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=capi-kubeadm-control-plane-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=capi-kubeadm-control-plane-manager,k8s:io.kubernetes.pod.namespace=capi-kubeadm-control-plane-system" ipv4=10.0.0.119 ipv6= k8sPodName=capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-controller-manager-7db57f6cd7-48czs subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.cluster.x-k8s.io/provider:control-plane-kubeadm k8s:io.cilium.k8s.namespace.labels.clusterctl.cluster.x-k8s.io: k8s:io.cilium.k8s.namespace.labels.control-plane:controller-manager k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:capi-kubeadm-control-plane-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:cluster.x-k8s.io/provider=control-plane-kubeadm;k8s:control-plane=controller-manager;k8s:io.cilium.k8s.namespace.labels.cluster.x-k8s.io/provider=control-plane-kubeadm;k8s:io.cilium.k8s.namespace.labels.clusterctl.cluster.x-k8s.io=;k8s:io.cilium.k8s.namespace.labels.control-plane=controller-manager;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=capi-kubeadm-control-plane-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=capi-kubeadm-control-plane-manager;k8s:io.kubernetes.pod.namespace=capi-kubeadm-control-plane-system;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=98f9626c22 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1427 identity=5903 identityLabels="k8s:cluster.x-k8s.io/provider=control-plane-kubeadm,k8s:control-plane=controller-manager,k8s:io.cilium.k8s.namespace.labels.cluster.x-k8s.io/provider=control-plane-kubeadm,k8s:io.cilium.k8s.namespace.labels.clusterctl.cluster.x-k8s.io,k8s:io.cilium.k8s.namespace.labels.control-plane=controller-manager,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=capi-kubeadm-control-plane-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=capi-kubeadm-control-plane-manager,k8s:io.kubernetes.pod.namespace=capi-kubeadm-control-plane-system" ipv4=10.0.0.119 ipv6= k8sPodName=capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-controller-manager-7db57f6cd7-48czs oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=98f9626c22 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1427 identity=5903 ipv4=10.0.0.119 ipv6= k8sPodName=capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-controller-manager-7db57f6cd7-48czs subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=98f9626c22 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1427 identity=5903 ipv4=10.0.0.119 ipv6= k8sPodName=capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-controller-manager-7db57f6cd7-48czs subsys=endpoint level=info msg="Successful endpoint creation" containerID=98f9626c22 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1427 identity=5903 ipv4=10.0.0.119 ipv6= k8sPodName=capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-controller-manager-7db57f6cd7-48czs subsys=daemon level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.130 6df284b0-c031-4391-ac47-363fcbded2ce default }" containerID=25629e68764f130ac9caf364a1fc051aec411df2f5b3573fae123f4ff4ac463e datapathConfiguration="&{false false false false false }" interface=lxc7838b204f402 k8sPodName=capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-controller-manager-67b8b974d6-54stm labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=25629e6876 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=716 ipv4=10.0.0.130 ipv6= k8sPodName=capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-controller-manager-67b8b974d6-54stm subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=25629e6876 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=716 identityLabels="k8s:cluster.x-k8s.io/provider=bootstrap-kubeadm,k8s:control-plane=controller-manager,k8s:io.cilium.k8s.namespace.labels.cluster.x-k8s.io/provider=bootstrap-kubeadm,k8s:io.cilium.k8s.namespace.labels.clusterctl.cluster.x-k8s.io,k8s:io.cilium.k8s.namespace.labels.control-plane=controller-manager,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=capi-kubeadm-bootstrap-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=capi-kubeadm-bootstrap-manager,k8s:io.kubernetes.pod.namespace=capi-kubeadm-bootstrap-system" ipv4=10.0.0.130 ipv6= k8sPodName=capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-controller-manager-67b8b974d6-54stm subsys=endpoint level=info msg="Identity of endpoint changed" containerID=25629e6876 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=716 identity=12209 identityLabels="k8s:cluster.x-k8s.io/provider=bootstrap-kubeadm,k8s:control-plane=controller-manager,k8s:io.cilium.k8s.namespace.labels.cluster.x-k8s.io/provider=bootstrap-kubeadm,k8s:io.cilium.k8s.namespace.labels.clusterctl.cluster.x-k8s.io,k8s:io.cilium.k8s.namespace.labels.control-plane=controller-manager,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=capi-kubeadm-bootstrap-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=capi-kubeadm-bootstrap-manager,k8s:io.kubernetes.pod.namespace=capi-kubeadm-bootstrap-system" ipv4=10.0.0.130 ipv6= k8sPodName=capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-controller-manager-67b8b974d6-54stm oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=25629e6876 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=716 identity=12209 ipv4=10.0.0.130 ipv6= k8sPodName=capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-controller-manager-67b8b974d6-54stm subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.75 96a84f6e-bd8f-474e-be03-b38d78a70f78 default }" containerID=4c0c869cabdc4a35347690ab1a6dac30ed83d08cd60b963e4cd7e3f315d5a6c4 datapathConfiguration="&{false false false false false }" interface=lxc75a4688c4a95 k8sPodName=capo-system/capo-controller-manager-8c5df4f-smfnl labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4c0c869cab datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2759 ipv4=10.0.0.75 ipv6= k8sPodName=capo-system/capo-controller-manager-8c5df4f-smfnl subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4c0c869cab datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2759 identityLabels="k8s:cluster.x-k8s.io/provider=infrastructure-openstack,k8s:control-plane=capo-controller-manager,k8s:io.cilium.k8s.namespace.labels.cluster.x-k8s.io/provider=infrastructure-openstack,k8s:io.cilium.k8s.namespace.labels.clusterctl.cluster.x-k8s.io,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=capo-system,k8s:io.cilium.k8s.namespace.labels.pod-security.kubernetes.io/audit=restricted,k8s:io.cilium.k8s.namespace.labels.pod-security.kubernetes.io/enforce=restricted,k8s:io.cilium.k8s.namespace.labels.pod-security.kubernetes.io/warn=restricted,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=capo-manager,k8s:io.kubernetes.pod.namespace=capo-system" ipv4=10.0.0.75 ipv6= k8sPodName=capo-system/capo-controller-manager-8c5df4f-smfnl subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.cluster.x-k8s.io/provider:infrastructure-openstack k8s:io.cilium.k8s.namespace.labels.clusterctl.cluster.x-k8s.io: k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:capo-system k8s:io.cilium.k8s.namespace.labels.pod-security.kubernetes.io/audit:restricted k8s:io.cilium.k8s.namespace.labels.pod-security.kubernetes.io/enforce:restricted k8s:io.cilium.k8s.namespace.labels.pod-security.kubernetes.io/warn:restricted]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:cluster.x-k8s.io/provider=infrastructure-openstack;k8s:control-plane=capo-controller-manager;k8s:io.cilium.k8s.namespace.labels.cluster.x-k8s.io/provider=infrastructure-openstack;k8s:io.cilium.k8s.namespace.labels.clusterctl.cluster.x-k8s.io=;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=capo-system;k8s:io.cilium.k8s.namespace.labels.pod-security.kubernetes.io/audit=restricted;k8s:io.cilium.k8s.namespace.labels.pod-security.kubernetes.io/enforce=restricted;k8s:io.cilium.k8s.namespace.labels.pod-security.kubernetes.io/warn=restricted;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=capo-manager;k8s:io.kubernetes.pod.namespace=capo-system;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=4c0c869cab datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2759 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.75 ipv6= k8sPodName=capo-system/capo-controller-manager-8c5df4f-smfnl line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=4c0c869cab datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2759 identity=46342 identityLabels="k8s:cluster.x-k8s.io/provider=infrastructure-openstack,k8s:control-plane=capo-controller-manager,k8s:io.cilium.k8s.namespace.labels.cluster.x-k8s.io/provider=infrastructure-openstack,k8s:io.cilium.k8s.namespace.labels.clusterctl.cluster.x-k8s.io,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=capo-system,k8s:io.cilium.k8s.namespace.labels.pod-security.kubernetes.io/audit=restricted,k8s:io.cilium.k8s.namespace.labels.pod-security.kubernetes.io/enforce=restricted,k8s:io.cilium.k8s.namespace.labels.pod-security.kubernetes.io/warn=restricted,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=capo-manager,k8s:io.kubernetes.pod.namespace=capo-system" ipv4=10.0.0.75 ipv6= k8sPodName=capo-system/capo-controller-manager-8c5df4f-smfnl oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4c0c869cab datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2759 identity=46342 ipv4=10.0.0.75 ipv6= k8sPodName=capo-system/capo-controller-manager-8c5df4f-smfnl subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=25629e6876 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=716 identity=12209 ipv4=10.0.0.130 ipv6= k8sPodName=capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-controller-manager-67b8b974d6-54stm subsys=endpoint level=info msg="Successful endpoint creation" containerID=25629e6876 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=716 identity=12209 ipv4=10.0.0.130 ipv6= k8sPodName=capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-controller-manager-67b8b974d6-54stm subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=4c0c869cab datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2759 identity=46342 ipv4=10.0.0.75 ipv6= k8sPodName=capo-system/capo-controller-manager-8c5df4f-smfnl subsys=endpoint level=info msg="Successful endpoint creation" containerID=4c0c869cab datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2759 identity=46342 ipv4=10.0.0.75 ipv6= k8sPodName=capo-system/capo-controller-manager-8c5df4f-smfnl subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.14 34d70b33-2248-427a-9e63-9ef5163fa6ff default }" containerID=4dbe46df26caf83bbe168ae8d6972a59d6125155191b83e1df57ad51653d4507 datapathConfiguration="&{false false false false false }" interface=lxc7388dfe08621 k8sPodName=capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-controller-manager-6b6ccbf6b8-z8pxb labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4dbe46df26 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=268 ipv4=10.0.0.14 ipv6= k8sPodName=capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-controller-manager-6b6ccbf6b8-z8pxb subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4dbe46df26 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=268 identityLabels="k8s:cluster.x-k8s.io/provider=control-plane-kubeadm,k8s:control-plane=controller-manager,k8s:io.cilium.k8s.namespace.labels.cluster.x-k8s.io/provider=control-plane-kubeadm,k8s:io.cilium.k8s.namespace.labels.clusterctl.cluster.x-k8s.io,k8s:io.cilium.k8s.namespace.labels.control-plane=controller-manager,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=capi-kubeadm-control-plane-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=capi-kubeadm-control-plane-manager,k8s:io.kubernetes.pod.namespace=capi-kubeadm-control-plane-system" ipv4=10.0.0.14 ipv6= k8sPodName=capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-controller-manager-6b6ccbf6b8-z8pxb subsys=endpoint level=info msg="Identity of endpoint changed" containerID=4dbe46df26 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=268 identity=5903 identityLabels="k8s:cluster.x-k8s.io/provider=control-plane-kubeadm,k8s:control-plane=controller-manager,k8s:io.cilium.k8s.namespace.labels.cluster.x-k8s.io/provider=control-plane-kubeadm,k8s:io.cilium.k8s.namespace.labels.clusterctl.cluster.x-k8s.io,k8s:io.cilium.k8s.namespace.labels.control-plane=controller-manager,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=capi-kubeadm-control-plane-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=capi-kubeadm-control-plane-manager,k8s:io.kubernetes.pod.namespace=capi-kubeadm-control-plane-system" ipv4=10.0.0.14 ipv6= k8sPodName=capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-controller-manager-6b6ccbf6b8-z8pxb oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4dbe46df26 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=268 identity=5903 ipv4=10.0.0.14 ipv6= k8sPodName=capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-controller-manager-6b6ccbf6b8-z8pxb subsys=endpoint level=info msg="Delete endpoint request" containerID=de4b62c928 endpointID=3764 k8sNamespace=capi-kubeadm-bootstrap-system k8sPodName=capi-kubeadm-bootstrap-controller-manager-6f6766ffcc-85mtj subsys=daemon level=info msg="Releasing key" key="[k8s:cluster.x-k8s.io/provider=bootstrap-kubeadm k8s:control-plane=controller-manager k8s:io.cilium.k8s.namespace.labels.cluster.x-k8s.io/provider=bootstrap-kubeadm k8s:io.cilium.k8s.namespace.labels.clusterctl.cluster.x-k8s.io k8s:io.cilium.k8s.namespace.labels.control-plane=controller-manager k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=capi-kubeadm-bootstrap-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=capi-kubeadm-bootstrap-manager k8s:io.kubernetes.pod.namespace=capi-kubeadm-bootstrap-system]" subsys=allocator level=info msg="Removed endpoint" containerID=de4b62c928 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3764 identity=12209 ipv4=10.0.0.169 ipv6= k8sPodName=capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-controller-manager-6f6766ffcc-85mtj subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=4dbe46df26 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=268 identity=5903 ipv4=10.0.0.14 ipv6= k8sPodName=capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-controller-manager-6b6ccbf6b8-z8pxb subsys=endpoint level=info msg="Successful endpoint creation" containerID=4dbe46df26 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=268 identity=5903 ipv4=10.0.0.14 ipv6= k8sPodName=capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-controller-manager-6b6ccbf6b8-z8pxb subsys=daemon level=info msg="Delete endpoint request" containerID=98f9626c22 endpointID=1427 k8sNamespace=capi-kubeadm-control-plane-system k8sPodName=capi-kubeadm-control-plane-controller-manager-7db57f6cd7-48czs subsys=daemon level=info msg="Releasing key" key="[k8s:cluster.x-k8s.io/provider=control-plane-kubeadm k8s:control-plane=controller-manager k8s:io.cilium.k8s.namespace.labels.cluster.x-k8s.io/provider=control-plane-kubeadm k8s:io.cilium.k8s.namespace.labels.clusterctl.cluster.x-k8s.io k8s:io.cilium.k8s.namespace.labels.control-plane=controller-manager k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=capi-kubeadm-control-plane-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=capi-kubeadm-control-plane-manager k8s:io.kubernetes.pod.namespace=capi-kubeadm-control-plane-system]" subsys=allocator level=info msg="Removed endpoint" containerID=98f9626c22 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1427 identity=5903 ipv4=10.0.0.119 ipv6= k8sPodName=capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-controller-manager-7db57f6cd7-48czs subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.21 9a199c6c-81a7-4ec9-831b-f60e0c574740 default }" containerID=0741be6ffd2212f8f161c1131dd31475418e6abe8570439d095eecc0b6de4e8e datapathConfiguration="&{false false false false false }" interface=lxc8cb3352004d3 k8sPodName=capi-system/capi-controller-manager-5647546676-shc7s labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0741be6ffd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3844 ipv4=10.0.0.21 ipv6= k8sPodName=capi-system/capi-controller-manager-5647546676-shc7s subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0741be6ffd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3844 identityLabels="k8s:cluster.x-k8s.io/provider=cluster-api,k8s:control-plane=controller-manager,k8s:io.cilium.k8s.namespace.labels.cluster.x-k8s.io/provider=cluster-api,k8s:io.cilium.k8s.namespace.labels.clusterctl.cluster.x-k8s.io,k8s:io.cilium.k8s.namespace.labels.control-plane=controller-manager,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=capi-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=capi-manager,k8s:io.kubernetes.pod.namespace=capi-system" ipv4=10.0.0.21 ipv6= k8sPodName=capi-system/capi-controller-manager-5647546676-shc7s subsys=endpoint level=info msg="Identity of endpoint changed" containerID=0741be6ffd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3844 identity=29739 identityLabels="k8s:cluster.x-k8s.io/provider=cluster-api,k8s:control-plane=controller-manager,k8s:io.cilium.k8s.namespace.labels.cluster.x-k8s.io/provider=cluster-api,k8s:io.cilium.k8s.namespace.labels.clusterctl.cluster.x-k8s.io,k8s:io.cilium.k8s.namespace.labels.control-plane=controller-manager,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=capi-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=capi-manager,k8s:io.kubernetes.pod.namespace=capi-system" ipv4=10.0.0.21 ipv6= k8sPodName=capi-system/capi-controller-manager-5647546676-shc7s oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0741be6ffd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3844 identity=29739 ipv4=10.0.0.21 ipv6= k8sPodName=capi-system/capi-controller-manager-5647546676-shc7s subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=0741be6ffd datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3844 identity=29739 ipv4=10.0.0.21 ipv6= k8sPodName=capi-system/capi-controller-manager-5647546676-shc7s subsys=endpoint level=info msg="Successful endpoint creation" containerID=0741be6ffd datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3844 identity=29739 ipv4=10.0.0.21 ipv6= k8sPodName=capi-system/capi-controller-manager-5647546676-shc7s subsys=daemon level=info msg="Delete endpoint request" containerID=9235a10a04 endpointID=88 k8sNamespace=capi-system k8sPodName=capi-controller-manager-69f9d56d75-cpphq subsys=daemon level=info msg="Releasing key" key="[k8s:cluster.x-k8s.io/provider=cluster-api k8s:control-plane=controller-manager k8s:io.cilium.k8s.namespace.labels.cluster.x-k8s.io/provider=cluster-api k8s:io.cilium.k8s.namespace.labels.clusterctl.cluster.x-k8s.io k8s:io.cilium.k8s.namespace.labels.control-plane=controller-manager k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=capi-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=capi-manager k8s:io.kubernetes.pod.namespace=capi-system]" subsys=allocator level=info msg="Removed endpoint" containerID=9235a10a04 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=88 identity=29739 ipv4=10.0.0.173 ipv6= k8sPodName=capi-system/capi-controller-manager-69f9d56d75-cpphq subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.30 43dd6d58-0344-4c93-ae36-378b3a5d4e7b default }" containerID=521475fa67c867d123edee54d70a3c9a9a2f4ddec924d50531a97540ff8001da datapathConfiguration="&{false false false false false }" interface=lxcd9d0d5e27b35 k8sPodName=capo-system/capo-controller-manager-6f649456cd-8kgn5 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=521475fa67 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=507 ipv4=10.0.0.30 ipv6= k8sPodName=capo-system/capo-controller-manager-6f649456cd-8kgn5 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=521475fa67 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=507 identityLabels="k8s:cluster.x-k8s.io/provider=infrastructure-openstack,k8s:control-plane=capo-controller-manager,k8s:io.cilium.k8s.namespace.labels.cluster.x-k8s.io/provider=infrastructure-openstack,k8s:io.cilium.k8s.namespace.labels.clusterctl.cluster.x-k8s.io,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=capo-system,k8s:io.cilium.k8s.namespace.labels.pod-security.kubernetes.io/audit=restricted,k8s:io.cilium.k8s.namespace.labels.pod-security.kubernetes.io/enforce=restricted,k8s:io.cilium.k8s.namespace.labels.pod-security.kubernetes.io/warn=restricted,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=capo-manager,k8s:io.kubernetes.pod.namespace=capo-system" ipv4=10.0.0.30 ipv6= k8sPodName=capo-system/capo-controller-manager-6f649456cd-8kgn5 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=521475fa67 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=507 identity=46342 identityLabels="k8s:cluster.x-k8s.io/provider=infrastructure-openstack,k8s:control-plane=capo-controller-manager,k8s:io.cilium.k8s.namespace.labels.cluster.x-k8s.io/provider=infrastructure-openstack,k8s:io.cilium.k8s.namespace.labels.clusterctl.cluster.x-k8s.io,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=capo-system,k8s:io.cilium.k8s.namespace.labels.pod-security.kubernetes.io/audit=restricted,k8s:io.cilium.k8s.namespace.labels.pod-security.kubernetes.io/enforce=restricted,k8s:io.cilium.k8s.namespace.labels.pod-security.kubernetes.io/warn=restricted,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=capo-manager,k8s:io.kubernetes.pod.namespace=capo-system" ipv4=10.0.0.30 ipv6= k8sPodName=capo-system/capo-controller-manager-6f649456cd-8kgn5 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=521475fa67 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=507 identity=46342 ipv4=10.0.0.30 ipv6= k8sPodName=capo-system/capo-controller-manager-6f649456cd-8kgn5 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=521475fa67 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=507 identity=46342 ipv4=10.0.0.30 ipv6= k8sPodName=capo-system/capo-controller-manager-6f649456cd-8kgn5 subsys=endpoint level=info msg="Successful endpoint creation" containerID=521475fa67 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=507 identity=46342 ipv4=10.0.0.30 ipv6= k8sPodName=capo-system/capo-controller-manager-6f649456cd-8kgn5 subsys=daemon level=info msg="Delete endpoint request" containerID=4c0c869cab endpointID=2759 k8sNamespace=capo-system k8sPodName=capo-controller-manager-8c5df4f-smfnl subsys=daemon level=info msg="Releasing key" key="[k8s:cluster.x-k8s.io/provider=infrastructure-openstack k8s:control-plane=capo-controller-manager k8s:io.cilium.k8s.namespace.labels.cluster.x-k8s.io/provider=infrastructure-openstack k8s:io.cilium.k8s.namespace.labels.clusterctl.cluster.x-k8s.io k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=capo-system k8s:io.cilium.k8s.namespace.labels.pod-security.kubernetes.io/audit=restricted k8s:io.cilium.k8s.namespace.labels.pod-security.kubernetes.io/enforce=restricted k8s:io.cilium.k8s.namespace.labels.pod-security.kubernetes.io/warn=restricted k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=capo-manager k8s:io.kubernetes.pod.namespace=capo-system]" subsys=allocator level=info msg="Removed endpoint" containerID=4c0c869cab datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2759 identity=46342 ipv4=10.0.0.75 ipv6= k8sPodName=capo-system/capo-controller-manager-8c5df4f-smfnl subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.237 7effab09-cbfe-4ac0-b950-0dc7a4448ac4 default }" containerID=7e30f06a9a44018a72853a53b6e50a2bd2e21899f83ccb0d114110e92892932a datapathConfiguration="&{false false false false false }" interface=lxc4acd9b4fbf4c k8sPodName=capo-system/capo-controller-manager-56cf844ccd-4pb9x labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7e30f06a9a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3836 ipv4=10.0.0.237 ipv6= k8sPodName=capo-system/capo-controller-manager-56cf844ccd-4pb9x subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7e30f06a9a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3836 identityLabels="k8s:cluster.x-k8s.io/provider=infrastructure-openstack,k8s:control-plane=capo-controller-manager,k8s:io.cilium.k8s.namespace.labels.cluster.x-k8s.io/provider=infrastructure-openstack,k8s:io.cilium.k8s.namespace.labels.clusterctl.cluster.x-k8s.io,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=capo-system,k8s:io.cilium.k8s.namespace.labels.pod-security.kubernetes.io/audit=restricted,k8s:io.cilium.k8s.namespace.labels.pod-security.kubernetes.io/enforce=restricted,k8s:io.cilium.k8s.namespace.labels.pod-security.kubernetes.io/warn=restricted,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=capo-manager,k8s:io.kubernetes.pod.namespace=capo-system" ipv4=10.0.0.237 ipv6= k8sPodName=capo-system/capo-controller-manager-56cf844ccd-4pb9x subsys=endpoint level=info msg="Identity of endpoint changed" containerID=7e30f06a9a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3836 identity=46342 identityLabels="k8s:cluster.x-k8s.io/provider=infrastructure-openstack,k8s:control-plane=capo-controller-manager,k8s:io.cilium.k8s.namespace.labels.cluster.x-k8s.io/provider=infrastructure-openstack,k8s:io.cilium.k8s.namespace.labels.clusterctl.cluster.x-k8s.io,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=capo-system,k8s:io.cilium.k8s.namespace.labels.pod-security.kubernetes.io/audit=restricted,k8s:io.cilium.k8s.namespace.labels.pod-security.kubernetes.io/enforce=restricted,k8s:io.cilium.k8s.namespace.labels.pod-security.kubernetes.io/warn=restricted,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=capo-manager,k8s:io.kubernetes.pod.namespace=capo-system" ipv4=10.0.0.237 ipv6= k8sPodName=capo-system/capo-controller-manager-56cf844ccd-4pb9x oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7e30f06a9a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3836 identity=46342 ipv4=10.0.0.237 ipv6= k8sPodName=capo-system/capo-controller-manager-56cf844ccd-4pb9x subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=7e30f06a9a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3836 identity=46342 ipv4=10.0.0.237 ipv6= k8sPodName=capo-system/capo-controller-manager-56cf844ccd-4pb9x subsys=endpoint level=info msg="Successful endpoint creation" containerID=7e30f06a9a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3836 identity=46342 ipv4=10.0.0.237 ipv6= k8sPodName=capo-system/capo-controller-manager-56cf844ccd-4pb9x subsys=daemon level=info msg="Delete endpoint request" containerID=521475fa67 endpointID=507 k8sNamespace=capo-system k8sPodName=capo-controller-manager-6f649456cd-8kgn5 subsys=daemon level=info msg="Releasing key" key="[k8s:cluster.x-k8s.io/provider=infrastructure-openstack k8s:control-plane=capo-controller-manager k8s:io.cilium.k8s.namespace.labels.cluster.x-k8s.io/provider=infrastructure-openstack k8s:io.cilium.k8s.namespace.labels.clusterctl.cluster.x-k8s.io k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=capo-system k8s:io.cilium.k8s.namespace.labels.pod-security.kubernetes.io/audit=restricted k8s:io.cilium.k8s.namespace.labels.pod-security.kubernetes.io/enforce=restricted k8s:io.cilium.k8s.namespace.labels.pod-security.kubernetes.io/warn=restricted k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=capo-manager k8s:io.kubernetes.pod.namespace=capo-system]" subsys=allocator level=info msg="Removed endpoint" containerID=521475fa67 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=507 identity=46342 ipv4=10.0.0.30 ipv6= k8sPodName=capo-system/capo-controller-manager-6f649456cd-8kgn5 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.125 8ab0e717-5ba8-41bf-93e7-aed732b0d432 default }" containerID=e2307df2b34247a4e2983ab61d212db6a316190759250e8338ed1c4e80df478a datapathConfiguration="&{false false false false false }" interface=lxceafa359c39cc k8sPodName=openstack/magnum-api-84787f6df5-4gpln labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e2307df2b3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2779 ipv4=10.0.0.125 ipv6= k8sPodName=openstack/magnum-api-84787f6df5-4gpln subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e2307df2b3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2779 identityLabels="k8s:application=magnum,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=magnum-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=magnum" ipv4=10.0.0.125 ipv6= k8sPodName=openstack/magnum-api-84787f6df5-4gpln subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=magnum;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=magnum-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=magnum;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e2307df2b3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2779 identity=26510 identityLabels="k8s:application=magnum,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=magnum-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=magnum" ipv4=10.0.0.125 ipv6= k8sPodName=openstack/magnum-api-84787f6df5-4gpln oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e2307df2b3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2779 identity=26510 ipv4=10.0.0.125 ipv6= k8sPodName=openstack/magnum-api-84787f6df5-4gpln subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.77 3b6328e4-50f2-4851-b738-89357297cffd default }" containerID=8a25713d0703a31be1490842f20ba5ce4e303717278a09d3fb4728b2f84d7a24 datapathConfiguration="&{false false false false false }" interface=lxc5f17c9ca37a5 k8sPodName=openstack/magnum-conductor-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8a25713d07 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1292 ipv4=10.0.0.77 ipv6= k8sPodName=openstack/magnum-conductor-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8a25713d07 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1292 identityLabels="k8s:application=magnum,k8s:apps.kubernetes.io/pod-index=0,k8s:component=conductor,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=magnum-conductor,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=magnum,k8s:statefulset.kubernetes.io/pod-name=magnum-conductor-0" ipv4=10.0.0.77 ipv6= k8sPodName=openstack/magnum-conductor-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=magnum;k8s:apps.kubernetes.io/pod-index=0;k8s:component=conductor;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=magnum-conductor;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=magnum;k8s:statefulset.kubernetes.io/pod-name=magnum-conductor-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8a25713d07 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1292 identity=16894 identityLabels="k8s:application=magnum,k8s:apps.kubernetes.io/pod-index=0,k8s:component=conductor,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=magnum-conductor,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=magnum,k8s:statefulset.kubernetes.io/pod-name=magnum-conductor-0" ipv4=10.0.0.77 ipv6= k8sPodName=openstack/magnum-conductor-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8a25713d07 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1292 identity=16894 ipv4=10.0.0.77 ipv6= k8sPodName=openstack/magnum-conductor-0 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.39 159db60a-4dc5-4d35-b8bc-0048fb64b232 default }" containerID=f9f9c0c3415398b980ca19ae6e9a6cbeb3200b9ec387f7458992c5641b61a729 datapathConfiguration="&{false false false false false }" interface=lxcc834ea9512bc k8sPodName=openstack/magnum-db-init-mfj8l labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f9f9c0c341 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=363 ipv4=10.0.0.39 ipv6= k8sPodName=openstack/magnum-db-init-mfj8l subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f9f9c0c341 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=363 identityLabels="k8s:application=magnum,k8s:batch.kubernetes.io/controller-uid=ac6221a4-af3b-43d8-895d-9bd3fb01078b,k8s:batch.kubernetes.io/job-name=magnum-db-init,k8s:component=db-init,k8s:controller-uid=ac6221a4-af3b-43d8-895d-9bd3fb01078b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=magnum-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=magnum-db-init,k8s:release_group=magnum" ipv4=10.0.0.39 ipv6= k8sPodName=openstack/magnum-db-init-mfj8l subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=magnum;k8s:batch.kubernetes.io/controller-uid=ac6221a4-af3b-43d8-895d-9bd3fb01078b;k8s:batch.kubernetes.io/job-name=magnum-db-init;k8s:component=db-init;k8s:controller-uid=ac6221a4-af3b-43d8-895d-9bd3fb01078b;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=magnum-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=magnum-db-init;k8s:release_group=magnum;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f9f9c0c341 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=363 identity=20114 identityLabels="k8s:application=magnum,k8s:batch.kubernetes.io/controller-uid=ac6221a4-af3b-43d8-895d-9bd3fb01078b,k8s:batch.kubernetes.io/job-name=magnum-db-init,k8s:component=db-init,k8s:controller-uid=ac6221a4-af3b-43d8-895d-9bd3fb01078b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=magnum-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=magnum-db-init,k8s:release_group=magnum" ipv4=10.0.0.39 ipv6= k8sPodName=openstack/magnum-db-init-mfj8l oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f9f9c0c341 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=363 identity=20114 ipv4=10.0.0.39 ipv6= k8sPodName=openstack/magnum-db-init-mfj8l subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e2307df2b3 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2779 identity=26510 ipv4=10.0.0.125 ipv6= k8sPodName=openstack/magnum-api-84787f6df5-4gpln subsys=endpoint level=info msg="Successful endpoint creation" containerID=e2307df2b3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2779 identity=26510 ipv4=10.0.0.125 ipv6= k8sPodName=openstack/magnum-api-84787f6df5-4gpln subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=8a25713d07 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1292 identity=16894 ipv4=10.0.0.77 ipv6= k8sPodName=openstack/magnum-conductor-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=8a25713d07 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1292 identity=16894 ipv4=10.0.0.77 ipv6= k8sPodName=openstack/magnum-conductor-0 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=f9f9c0c341 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=363 identity=20114 ipv4=10.0.0.39 ipv6= k8sPodName=openstack/magnum-db-init-mfj8l subsys=endpoint level=info msg="Successful endpoint creation" containerID=f9f9c0c341 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=363 identity=20114 ipv4=10.0.0.39 ipv6= k8sPodName=openstack/magnum-db-init-mfj8l subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=f9f9c0c341 endpointID=363 k8sNamespace=openstack k8sPodName=magnum-db-init-mfj8l subsys=daemon level=info msg="Releasing key" key="[k8s:application=magnum k8s:batch.kubernetes.io/controller-uid=ac6221a4-af3b-43d8-895d-9bd3fb01078b k8s:batch.kubernetes.io/job-name=magnum-db-init k8s:component=db-init k8s:controller-uid=ac6221a4-af3b-43d8-895d-9bd3fb01078b k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=magnum-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=magnum-db-init k8s:release_group=magnum]" subsys=allocator level=info msg="Removed endpoint" containerID=f9f9c0c341 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=363 identity=20114 ipv4=10.0.0.39 ipv6= k8sPodName=openstack/magnum-db-init-mfj8l subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.62 c36b7b36-c73d-41fc-877c-45014aa25d33 default }" containerID=abee3c3600d878ff7ea81cc2a9209685fcadd43ba19c6dfdc2a3ef881a09a8d9 datapathConfiguration="&{false false false false false }" interface=lxc42b7d3386ee5 k8sPodName=openstack/magnum-db-sync-4kx8g labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=abee3c3600 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1915 ipv4=10.0.0.62 ipv6= k8sPodName=openstack/magnum-db-sync-4kx8g subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=abee3c3600 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1915 identityLabels="k8s:application=magnum,k8s:batch.kubernetes.io/controller-uid=c6ce55fe-b8bc-454b-a7bf-ef2ee70bba71,k8s:batch.kubernetes.io/job-name=magnum-db-sync,k8s:component=db-sync,k8s:controller-uid=c6ce55fe-b8bc-454b-a7bf-ef2ee70bba71,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=magnum-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=magnum-db-sync,k8s:release_group=magnum" ipv4=10.0.0.62 ipv6= k8sPodName=openstack/magnum-db-sync-4kx8g subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=magnum;k8s:batch.kubernetes.io/controller-uid=c6ce55fe-b8bc-454b-a7bf-ef2ee70bba71;k8s:batch.kubernetes.io/job-name=magnum-db-sync;k8s:component=db-sync;k8s:controller-uid=c6ce55fe-b8bc-454b-a7bf-ef2ee70bba71;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=magnum-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=magnum-db-sync;k8s:release_group=magnum;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=abee3c3600 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1915 identity=14395 identityLabels="k8s:application=magnum,k8s:batch.kubernetes.io/controller-uid=c6ce55fe-b8bc-454b-a7bf-ef2ee70bba71,k8s:batch.kubernetes.io/job-name=magnum-db-sync,k8s:component=db-sync,k8s:controller-uid=c6ce55fe-b8bc-454b-a7bf-ef2ee70bba71,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=magnum-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=magnum-db-sync,k8s:release_group=magnum" ipv4=10.0.0.62 ipv6= k8sPodName=openstack/magnum-db-sync-4kx8g oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=abee3c3600 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1915 identity=14395 ipv4=10.0.0.62 ipv6= k8sPodName=openstack/magnum-db-sync-4kx8g subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=abee3c3600 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1915 identity=14395 ipv4=10.0.0.62 ipv6= k8sPodName=openstack/magnum-db-sync-4kx8g subsys=endpoint level=info msg="Successful endpoint creation" containerID=abee3c3600 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1915 identity=14395 ipv4=10.0.0.62 ipv6= k8sPodName=openstack/magnum-db-sync-4kx8g subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.179 be2a85f1-a760-4ed4-bb71-b4acb520f479 default }" containerID=1b82f892b5a78fd4eaf415bbc551d3b1e0565240ca9bd2ef936716b64682f8fe datapathConfiguration="&{false false false false false }" interface=lxcb94c4e463980 k8sPodName=openstack/heat-engine-cleaner-29824040-ptd6s labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1b82f892b5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1961 ipv4=10.0.0.179 ipv6= k8sPodName=openstack/heat-engine-cleaner-29824040-ptd6s subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1b82f892b5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1961 identityLabels="k8s:application=heat,k8s:batch.kubernetes.io/controller-uid=a9d6ccdd-9fc6-410b-804e-6baa47b9a8b5,k8s:batch.kubernetes.io/job-name=heat-engine-cleaner-29824040,k8s:component=engine-cleaner,k8s:controller-uid=a9d6ccdd-9fc6-410b-804e-6baa47b9a8b5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=heat-engine-cleaner,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=heat-engine-cleaner-29824040,k8s:release_group=heat" ipv4=10.0.0.179 ipv6= k8sPodName=openstack/heat-engine-cleaner-29824040-ptd6s subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=heat;k8s:batch.kubernetes.io/controller-uid=a9d6ccdd-9fc6-410b-804e-6baa47b9a8b5;k8s:batch.kubernetes.io/job-name=heat-engine-cleaner-29824040;k8s:component=engine-cleaner;k8s:controller-uid=a9d6ccdd-9fc6-410b-804e-6baa47b9a8b5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=heat-engine-cleaner;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=heat-engine-cleaner-29824040;k8s:release_group=heat;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1b82f892b5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1961 identity=53666 identityLabels="k8s:application=heat,k8s:batch.kubernetes.io/controller-uid=a9d6ccdd-9fc6-410b-804e-6baa47b9a8b5,k8s:batch.kubernetes.io/job-name=heat-engine-cleaner-29824040,k8s:component=engine-cleaner,k8s:controller-uid=a9d6ccdd-9fc6-410b-804e-6baa47b9a8b5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=heat-engine-cleaner,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=heat-engine-cleaner-29824040,k8s:release_group=heat" ipv4=10.0.0.179 ipv6= k8sPodName=openstack/heat-engine-cleaner-29824040-ptd6s oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1b82f892b5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1961 identity=53666 ipv4=10.0.0.179 ipv6= k8sPodName=openstack/heat-engine-cleaner-29824040-ptd6s subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=1b82f892b5 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1961 identity=53666 ipv4=10.0.0.179 ipv6= k8sPodName=openstack/heat-engine-cleaner-29824040-ptd6s subsys=endpoint level=info msg="Successful endpoint creation" containerID=1b82f892b5 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1961 identity=53666 ipv4=10.0.0.179 ipv6= k8sPodName=openstack/heat-engine-cleaner-29824040-ptd6s subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=1b82f892b5 endpointID=1961 k8sNamespace=openstack k8sPodName=heat-engine-cleaner-29824040-ptd6s subsys=daemon level=info msg="Releasing key" key="[k8s:application=heat k8s:batch.kubernetes.io/controller-uid=a9d6ccdd-9fc6-410b-804e-6baa47b9a8b5 k8s:batch.kubernetes.io/job-name=heat-engine-cleaner-29824040 k8s:component=engine-cleaner k8s:controller-uid=a9d6ccdd-9fc6-410b-804e-6baa47b9a8b5 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=heat-engine-cleaner k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=heat-engine-cleaner-29824040 k8s:release_group=heat]" subsys=allocator level=info msg="Removed endpoint" containerID=1b82f892b5 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1961 identity=53666 ipv4=10.0.0.179 ipv6= k8sPodName=openstack/heat-engine-cleaner-29824040-ptd6s subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.185 11c97255-bcf8-42da-a9d0-b911879171ef default }" containerID=11b012c60ff3297fdca31603c52f9577467df521a6318cafeace82f3a0403d1a datapathConfiguration="&{false false false false false }" interface=lxc40b35a3e7dc7 k8sPodName=openstack/heat-engine-cleaner-29824045-l8j94 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=11b012c60f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2996 ipv4=10.0.0.185 ipv6= k8sPodName=openstack/heat-engine-cleaner-29824045-l8j94 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=11b012c60f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2996 identityLabels="k8s:application=heat,k8s:batch.kubernetes.io/controller-uid=2124c16e-dcdc-4759-be85-0e4a17e3ab4e,k8s:batch.kubernetes.io/job-name=heat-engine-cleaner-29824045,k8s:component=engine-cleaner,k8s:controller-uid=2124c16e-dcdc-4759-be85-0e4a17e3ab4e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=heat-engine-cleaner,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=heat-engine-cleaner-29824045,k8s:release_group=heat" ipv4=10.0.0.185 ipv6= k8sPodName=openstack/heat-engine-cleaner-29824045-l8j94 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=heat;k8s:batch.kubernetes.io/controller-uid=2124c16e-dcdc-4759-be85-0e4a17e3ab4e;k8s:batch.kubernetes.io/job-name=heat-engine-cleaner-29824045;k8s:component=engine-cleaner;k8s:controller-uid=2124c16e-dcdc-4759-be85-0e4a17e3ab4e;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=heat-engine-cleaner;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=heat-engine-cleaner-29824045;k8s:release_group=heat;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=11b012c60f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2996 identity=13685 identityLabels="k8s:application=heat,k8s:batch.kubernetes.io/controller-uid=2124c16e-dcdc-4759-be85-0e4a17e3ab4e,k8s:batch.kubernetes.io/job-name=heat-engine-cleaner-29824045,k8s:component=engine-cleaner,k8s:controller-uid=2124c16e-dcdc-4759-be85-0e4a17e3ab4e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=heat-engine-cleaner,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=heat-engine-cleaner-29824045,k8s:release_group=heat" ipv4=10.0.0.185 ipv6= k8sPodName=openstack/heat-engine-cleaner-29824045-l8j94 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=11b012c60f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2996 identity=13685 ipv4=10.0.0.185 ipv6= k8sPodName=openstack/heat-engine-cleaner-29824045-l8j94 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=11b012c60f datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2996 identity=13685 ipv4=10.0.0.185 ipv6= k8sPodName=openstack/heat-engine-cleaner-29824045-l8j94 subsys=endpoint level=info msg="Successful endpoint creation" containerID=11b012c60f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2996 identity=13685 ipv4=10.0.0.185 ipv6= k8sPodName=openstack/heat-engine-cleaner-29824045-l8j94 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=11b012c60f endpointID=2996 k8sNamespace=openstack k8sPodName=heat-engine-cleaner-29824045-l8j94 subsys=daemon level=info msg="Releasing key" key="[k8s:application=heat k8s:batch.kubernetes.io/controller-uid=2124c16e-dcdc-4759-be85-0e4a17e3ab4e k8s:batch.kubernetes.io/job-name=heat-engine-cleaner-29824045 k8s:component=engine-cleaner k8s:controller-uid=2124c16e-dcdc-4759-be85-0e4a17e3ab4e k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=heat-engine-cleaner k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=heat-engine-cleaner-29824045 k8s:release_group=heat]" subsys=allocator level=info msg="Removed endpoint" containerID=11b012c60f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2996 identity=13685 ipv4=10.0.0.185 ipv6= k8sPodName=openstack/heat-engine-cleaner-29824045-l8j94 subsys=endpoint